avahi-0.8-150600.15.9.1 < > , hɱnp9| a 7jQѰl,VCnW`0i[v %:Eҥ00ܩ7{c'DŻ@Lc ,qe )만MZcBE?{zo!!}`T4R,!,`X] Gϣ'*RFDz}-O.\rMrJԼ )9'\11SP6fm7W1_Вar \ȇF#8,D#z
ttWI5NZC7g홢w > I ? x d A & 5 L R Y * 9 9 9
p 9 T 9 '
9
'T 9 (8 9 )V 9 *t * 9 +x + ,< . ( /, 8 /4 G 9 0P G : 5a G = > ? @ B F G 9 H 9 I 9 X Y 4 Z t [ x \ 9 ] d 9 ^ j b * c d S e X f [ l ] u p 9 v T
w 9 x 9 y z ( , 2 t C avahi 0.8 150600.15.9.1 D-Bus Service for Zeroconf and Bonjour Avahi is an implementation of the DNS Service Discovery and Multicast
DNS specifications for Zeroconf Computing. It uses D-Bus for
communication between user applications and a system daemon. The daemon
is used to coordinate application efforts in caching replies, necessary
to minimize the traffic imposed on networks.
The Avahi mDNS responder is now complete with features, implementing
all MUSTs and the majority of the SHOULDs of the mDNS and DNS-SD RFCs.
It passes all tests in the Apple Bonjour conformance test suite. In
addition, it supports some nifty things, like correct mDNS reflection
across LAN segments. hɱnh01-ch3d YSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Daemons https://www.avahi.org/ linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in avahi-dnsconfd.service avahi-daemon.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
# bnc#853845,bnc#851953: do not start by default under
# sysconfig as this breaks vlan,bridge,bonding setups
# in pre to revert old default setting from template.
if test -f /usr/share/fillup-templates/sysconfig.avahi-autoipd -a \
-f etc/sysconfig/avahi ; then
. /usr/share/fillup-templates/sysconfig.avahi-autoipd
if test "X$AVAHI_AUTOIPD_ENABLE" = "Xyes" ; then
sed -i etc/sysconfig/avahi \
-e 's/^\(AVAHI_AUTOIPD_ENABLE\)=.*/\1="no"/'
fi
fi
/usr/sbin/sysusers2shadow avahi.conf <<"EOF" || [ -f /.buildenv ]
u avahi - "User for Avahi" /run/avahi-daemon -
EOF
PNAME=avahi
SUBPNAME=
SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME
# If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR
if [ ! -f $SYSC_TEMPLATE ] ; then
TEMPLATE_DIR=/var/adm/fillup-templates
SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME
fi
SD_NAME=""
if [ -x /bin/fillup ] ; then
if [ -f $SYSC_TEMPLATE ] ; then
echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..."
mkdir -p /etc/sysconfig/$SD_NAME
touch /etc/sysconfig/$SD_NAME$PNAME
/bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE
fi
else
echo "ERROR: fillup not found. This should not happen. Please compare"
echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and"
echo "update by hand."
fi
PNAME=security
SUBPNAME=-checksig
SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME
# If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR
if [ ! -f $SYSC_TEMPLATE ] ; then
TEMPLATE_DIR=/var/adm/fillup-templates
SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME
fi
SD_NAME=""
if [ -x /bin/fillup ] ; then
if [ -f $SYSC_TEMPLATE ] ; then
echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..."
mkdir -p /etc/sysconfig/$SD_NAME
touch /etc/sysconfig/$SD_NAME$PNAME
/bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE
fi
else
echo "ERROR: fillup not found. This should not happen. Please compare"
echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and"
echo "update by hand."
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in avahi-dnsconfd.service avahi-daemon.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable avahi-dnsconfd.service avahi-daemon.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop avahi-dnsconfd.service avahi-daemon.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in avahi-dnsconfd.service avahi-daemon.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart avahi-dnsconfd.service avahi-daemon.service
) || :
fi
fi
a f , l @ H c d 7 I ` v S < v 0 ʶ 3 / ( g ^ A큤큤A A큤A큤AA큤A큤A큤 hɱjhɱihɱihɱihɱkhɱmhɱkhɱihɱihɱihɱkhɱjhɱjhɱlhɱlhɱlhɱlhɱkhɱkhɱkhɱihɱihɱihɱihɱihɱihɱihɱihɱihɱihɱihɱmUzUzUzUzUzUzUz^KUzV[UzUzUzUzUzhɱkhɱmUzhɱjhɱjhɱjhɱjhɱjhɱjhɱj f5ed1c838661a12a292c4a764af0ff0feb8420486570264da833653d40328ff8 1c35a47448cb10975593d5af12a61033f8648af5c60b823bbb1bc2550403e08a d16fca08d5054e14ffa9b0cb919263f4f21db379da4058ea745d3ec467f32afd b9791e1d90981c95ed96270fa85721a5f35abd636b00421cd67b43168d36af24 53aa111dadc10bba319e0346e399c607a80ae6ffcded55f3cd3102c6d71995b0 2b178fbd7f652797257e662136f9759cbf17614400b4359cbe7ae355940dee2d ebcac21cadd59380308ad26b243b3fee736204195eee1ba418f5cfd9ea4ff257 b1314aa08d39df60afebd1d609a98d0d91ad96ed2eb157192fd7f5dc5e3cf1b1 04a7a75c0c2e17ec7e4541f08c3ab85826feb18d44c5bdc4be5c386826a9c08d 880214cc68f4026521747a74c4d5e1e962cc9c1a00dd6f5f37ebf0e2b13ecb54 7564f670726e9aa1f899af0fde403cfc46c195e051e13a24771b904a0cd739e6 aa30465c8573b5cfac75f7581ecf6439eb5923e783dc39ba3569932d66c1dc12 3fd2a26c05bc5f6a9ea121162814f25fa41a750594dfae6bee6a35c63b9390cb 7ea489e95681a97acbef068413dd063802af1ae7ba5ef3adfb3d42566d31a488 0f418e7793eca2129220534413dd48b5f42e746d2a3896d194d5faf9d17e1d99 37d012a9cdbe953e0c32d0042c2a4e692becc276ff0bc14d8c0178cc96e7cd00 cdb6b1f9cda0509e362815fde88074d1151976f9f8bdd3ff30cb80a86c90d631 c4978128db3864abd0470315768c6570509fce3a2a5332fc68832971d5006d2a a7bc05116c4fb6f8194956bc27cebaced4d6362401a1cc9ad5686744d6342680 6ca4d11d21db16bb34964aff545c7d642421c163eeba5560008cd6f097b2f6e8 70e959e3286cb86170d29b6a914902c438414d9b3133e9b1b9cb7b5b80683624 b1e51bf3ff20ab16b8954d8a999f69966dded889d29b75cea25a726b6b9b12dc 8fa63bda2aa3a1a1308564809e060fb8e7b3b2f84e880a6d049b4e63df251ef0 3b4d0bfa7e65c2076cbe3e9b12ca318dbe9ba565124bd8cc356474de877ab194 971185e74e8f8a90d5431453e282843a5bd9a91e813e7bf6104e2bf0a7bb9959 a0bc14aa654401c4ca4b5b2476d1661f1d3269f8892bacf58de7cb801d378241 700436c2f09259fce8e18eaef2352468700535ff21029fd8fffae36ab54474d2 ab3a53c27883074b89e2f85757a713e113f487401dc5adea2650799292ade650 cd73c88eab315a86182348506a4b6973d2f64d592fcf15277bf9bac0492d2ca3 8862399cd898641e8023e40c06a150d531010828ed460f40c03aa0bdf441a89e d80d5f7026ea376b7d1478ae7b802323b8888cbb28a49530593b9cba28545307 f610466dae817259cf6ffbdee97ba826239c6dc52b4d5fccd646e8445521571a ce92f84dc8afc1bdea5a0e66801db4d981b656c894e30ea0ce01ac39c6035dbe e8ceffd40c6ba3a1d5eb43288c19bed68ffc037054248757d4d835169f3203cb 20700c2aec5e57a23cd7d8086ba359c26f8dd9e2ae21ef88adb99e32fb4f2f22 60a516f94e4da95dc65d7f39494d1920a1f64ed59b88579ec5e181b9ed203353 83c63e090cf20cd1bca469dc9f2b549a6972ac99c3ea8a2a5df7c10b4b537579 b39ceb473ddb6f650a711294b0d6e8cc8e648559b9c8e96cb56ac86de7faeba1 a9bdde5616ecdd1e980b44f360600ee8783b1f99b8cc83a2beb163a0a390e861 3f1ff795111273f490e4cbfc049fe3e6cb03199a786334cc08b1f64e4df5d2d6 4df30d5f073f07fb7c0f351d891500e32674b5e045a1ece26e6a8b973d36788c 6662fdb5ab343f70c6b7d415e49d2f276cda50fb49ea37a581fae6c8781e91d1 b900be7ed29e7255e033ffab672d1dec148f1dde873c4dbf2c734a2e610b56b1 f71ac8e077e1a9c66cdc82eb37555abb0546dcb07577115d154cedb2bb332dc4 579a853bc275b0b148fa63d90db0bad2959c5d747c0fb3c20b212a101cde8b56 8e456e1df54194b66364c97b2e380326f53eb8377b1d15d33d094b765e47652e service service @ root root root root root avahi root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root avahi root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root avahi-0.8-150600.15.9.1.src.rpm avahi avahi(x86-64) config(avahi) group(avahi) mDNSResponder user(avahi) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh /bin/sh config(avahi) libavahi-common.so.3()(64bit) libavahi-core.so.7()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.27)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libc.so.6(GLIBC_2.38)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libdaemon.so.0()(64bit) libdbus-1.so.3()(64bit) libdbus-1.so.3(LIBDBUS_1_3)(64bit) libexpat.so.1()(64bit) nss-mdns rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) sysuser-shadow 0.8-150600.15.9.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 3.2 4.14.3 hg=@ftehy@ede_>e]@eReB=e:Te
d5Kd5KcR@cc@c@bmbY^@b!b8b @a@aZ@aav@an@aC1a@``r`~@`+`#`_O@_L@_+_$_"@_^^6^,-^@]^]QT] ;\@\6\/JZZZZZ@Z @Z@Y0Y-^XBW@Wk@Wk@W>@W@V@V$@VZUoT@qzhao@suse.com qzhao@suse.com mgorse@suse.com alynx.zhou@suse.com dimstar@opensuse.org dimstar@opensuse.org dimstar@opensuse.org dimstar@opensuse.org alynx.zhou@suse.com xiaoguang.wang@suse.com lnussel@suse.com bjorn.lie@gmail.com mgorse@suse.com dimstar@opensuse.org kukuk@suse.com jsegitz@suse.com andreas.stieger@gmx.de gmbr3@opensuse.org jengelh@inai.de dmueller@suse.com dmueller@suse.com mgorse@suse.com gmbr3@opensuse.org mgorse@suse.com mgorse@suse.com yfjiang@suse.com dimstar@opensuse.org sbrabec@suse.com yfjiang@suse.com mgorse@suse.com christophe@krop.fr mgorse@suse.com mgorse@suse.com jengelh@inai.de code@bnavigator.de alarrosa@suse.com alarrosa@suse.com jengelh@inai.de mgorse@suse.com dimstar@opensuse.org mgorse@suse.com tchvatal@suse.com kukuk@suse.com dimstar@opensuse.org mliska@suse.cz jengelh@inai.de bjorn.lie@gmail.com matthias.gerstner@suse.com dimstar@opensuse.org jengelh@inai.de mgorse@suse.com tchvatal@suse.com mgorse@suse.com jengelh@inai.de dimstar@opensuse.org dimstar@opensuse.org zaitor@opensuse.org rbrown@suse.com jengelh@inai.de dimstar@opensuse.org dimstar@opensuse.org mgorse@suse.com dimstar@opensuse.org mgorse@suse.com alarrosa@suse.com mgorse@suse.com dimstar@opensuse.org zaitor@opensuse.org mgorse@suse.com dimstar@opensuse.org dimstar@opensuse.org - Add avahi-CVE-2024-52615.patch:
Backport 4e2e1ea from upstream, Resolve fixed source ports for
wide-area DNS queries cause DNS responses be injected.
(CVE-2024-52615, bsc#1233421) - Add avahi-CVE-2024-52616.patch:
Backporting 1dade81c from upstream: Properly randomize query id
of DNS packets.
(CVE-2024-52616, bsc#1233420) - Add avahi-CVE-2023-38471.patch: Extract host name using
avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
services to callbacks (bsc#1226586). - Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
avahi_rdata_parse (bsc#1216853, CVE-2023-38472). - Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format. - avahi-autoipd: drop the post script part migrating the user
owning files in /var/lib/avahi-autoipd: the code was aiding
migrations from SLE<=11/openSUSE<=12.3, which are no longer in
scope for upgrades nowadays. - avahi-autoipd: guard %post chown with -h, to not follow symlinks
(boo#1217398). - avahi-autoipd: only migrate files owned by avahi user if said
user exists: if the user does not exist (fresh installs), then
there is no chance any file is owned by the user (boo#1216730). - Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
byte long (bsc#1215947, CVE-2023-38470). - Add avahi-CVE-2023-38473.patch: derive alternative host name from
its unescaped version (bsc#1216419 CVE-2023-38473). - Don't require sudo. There is no indication it's actually used for
anything. - Use ldconfig_scriptlets macro. - Add avahi-CVE-2023-1981.patch: emit error if requested service
is not found (boo#1210328 CVE-2023-1981). - Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
they are not used, or supported, in a while already. - Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
and avahi-daemon.if-up
Doesn't work since about 9 years and will not be executed on a
fresh default installation anymore - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_avahi-daemon.service.patch
* harden_avahi-dnsconfd.service.patch - avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
(boo#1203092) - Move the dbus-1 system.d file to /usr (bsc#1201345) - Stop requiring "avahi" from "libavahi-devel". The devel package
ought to facilitate building programs with avahi, not run the
whole deamon. - switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls - remove avahi-mono* subspecfiles, they are no longer required
by anything. this makes the spec file slightly more readable. - Replace avahi-0.6.31-systemd-order.patch with
avahi-add-resolv-conf-to-inotify.patch: re-read configuration
when resolv.conf changes, per discussion on the bug
(boo#1194561). - Change to systemd-sysusers - Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
no longer need this given the above patch.
- Add several patches from git:
0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
0006-man-add-missing-bshell.1-symlink.patch
0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745). - Move sftp-ssh and ssh services to the doc directory. They allow
a host's up/down status to be easily discovered and should not
be enabled by default (boo#1179060). - Change %python38_version_nodots to %suse_version which is
compatible with Leap and SLE. See also:
https://github.com/openSUSE/python-rpm-macros/issues/107 - Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
(boo#1191750). - Remove obsolete translation-update-upstream support
(jsc#SLE-21105). - Obsolete the same version of mDNSResponder-lib and mDNSResponder
in baselib.conf and spec. - Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
(boo#1184846 CVE-2021-3502). - Fix libavahi-devel requirements. The devel package installs
libavahi-libevent.so but didn't require the library it's
pointing to. - Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
HUP event in client_work (boo#1184521 CVE-2021-3468).
https://github.com/lathiat/avahi/pull/330 - Update avahi-daemon-check-dns.sh from Debian. Our previous
version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
when invoking avahi-daemon-check-dns.sh (boo#1180827
CVE-2021-26720).
- Add sudo to requires: used to drop privileges. - Drop configure --libexecdir variable as it does not appear
to be used by the source archive. - Build python bindings subpackages for all flavors
* use the python-rpm-macros singlespec system: The macro
%python_subpackages together with %python_subpackage_only
creates the pythonXY-avahi bindings package for all python
flavors on Tumbleweed (currently python36, python38)
* Put the avahi-bookmarks command under updates-alternatives
control to avoid package conflicts between flavors
* outside of build_core, the build continues to use but not
install everything in the primary python3 flavor.
* For distros without multiple python3 flavors and/or older
python-rpm-macros, the status quo is unchanged. - Use sover variables all over the spec file - Update to version 0.8:
+ The Avahi 0.8 release brings a number of new features and bug
fix changes including a backward-compatible addition to the
D-Bus API and the avahi-core API.
+ The existing API is still fully supported however clients
using the new API will not work with older Avahi releases.
The avahi-client library is not affected. See the "API Changes"
section for further details.
+ New Features:
- New options for filtering reflected queries between networks
(reflect-filter)
- New mainloop integration for Qt5 and libevent
- docs/THREADS: Information for multi-threaded avahi-client
apps
- Listen on loopback interfaces by default, allowing local-only
services to be consumed by the local machine
- New D-Bus V2 API and additions to the avahi-core API for
splitting "New" calls into "Prepare" and "Start". See "API
Changes" for more details.
+ Notable Changes:
- avahi-autoipd: Initial IP selection based on MAC previously
ignored first octet - this will cause all hosts to select a
different link-local IP than previous versions based on the
same MAC address
- avahi-daemon: Delay sending results on an object for 10ms in
an attempt to give clients enough time to subscribe to
signals from the new object after receiving it's path in
response so the New call. See "API Changes" for more info
+ Bug Fixes:
- avahi-python: Various Python 3 enhancements including
encoding unicode strings as UTF-8
- avahi-common: avahi_string_list_to_string will now escape
embedded quotes, backslashes and control characters.
- avahi-daemon: Fix a crash when txt records have an empty
value in .xml service files
- avahi-daemon: reflector: do not incorrectly cache responses
on outgoing interfaces. Previously we would incorrectly cache
responses reflected from one interface on the outgoing
interface. These responses were later sent to clients on that
network even if the original client had disappeared and could
cause those clients to have a hostname conflict with
themselves on restart. We no longer incorrectly cache such
traffic.
+ Security Fixes:
- Drop legacy unicast queries from address not on local link
which can lead to UDP traffic amplification attacks
(CVE-2017-6519)
+ API Changes: The avahi-core API and D-Bus API have implemented
a new API where a call to the "New" method can now be split
into a "Prepare" and then "Start" method for some objects. The
previous "New" API is still fully supported and there is no
intention to deprecate it.
This change affects the the following objects:
AsyncAddressResolver, AsyncHostNameResolver,
AsyncServiceResolver, DomainBrowser, RecordBrowser,
ServiceBrowser, ServiceTypeBrowser
This is because the D-Bus implementation in some languages
would only bind to signals of an object after it was created
and had received the new object's path. This led to such
languages missing the initial results sent between the time the
object was created and it had setup a filter to receive it's
signals.
This primarily occured in languages that create dynamic
bindings for D-Bus objects using introspection such as Python.
The avahi-client C api was not affected as it globally binds to
all avahi signals without specifying individual object paths
and still makes use of the V1 API.
The v2 Prepare/Start API is available under the new
org.freedesktop.Avahi.Server2 D-Bus interface and also has
corresponding avahi_s_* calls for users of the embedded
avahi-core library.
The old org.freedesktop.Avahi.Server interface is still
supported and there is no intention to remove this API.
Additionally this problem has also been solved for old clients
by adding a very small 10ms delay before we start sending
results to give the client time to bind to the signals which
should silently fix the issue in most cases without introducing
a noticable or impactful delay.
Clients implementing the new org.freedesktop.Avahi.Server2
D-Bus interface will not work with older Avahi daemons. It is
suggested that clients may wish to either check for and
fallback to the older API version, or continue to use the OLD
API and rely on the 10ms timer to resolve the issue.
- This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
can be used:
* add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
* build-db
- Rebase patch:
* avahi-desktop.patch
- Drop patches already included by upstream:
* avahi-0.7-dbm.patch
* avahi-0.7-encode-strings-as-utf8.patch
* avahi-0.7-python3-bookmarks.patch
* CVE-2018-1000845.patch - Skip the xargs dance and just use find directly. - Pass -print0 to find, to match -r0 being passed to xargs. - Call xargs -r0 instead of just xargs -r: guard against file names
with whitespaces. - When changing ownership of /var/lib/autoipd, only change
ownership of files owned by avahi, to mitigate against
possible exploits (bsc#1154063). - Do not pull in dbus-1-python which is py2 variant but properly
pull in the python3 package - Require shadow instead of pwdutils: pwdutils has been absorbed
and replaced by shadow long ago. - No longer recommend -lang: supplements are in use. - Use %make_build. - Trim descriptions of secondary packages. - Drop gtk2-devel and python-gtk-devel BuildRequires: No longer
build gtk2 support. Following this, pass --disable-gtk to
configure. Drop sub-package libavahi-ui0, no longer built.
- Drop long disabled sub-packages libavahi-qt4-1 and
libavahi-qt4-devel. - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html - Drop -Qt4 variant: Qt4 is EOL. - Remove %if..%endif guards that do not affect the build result.
- Write "D-BUS" per its own name, "D-Bus".
- Replace FIXME PreReq with proper requires as needed.
- Update boilerplate summaries, and remove em dash grammar. - Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream. - Drop the qt3 parts - Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
__pycache__. - Rename %*soname to %*sover to better reflect its use. - Modernize spec file by calling spec-cleaner - Use SPDX3.0 license tags and package COPYING as %license. - Update to version 0.7:
+ The Avahi 0.7 release brings two new features, binary TXT
records in XML service files and the ability to start the
gobject client in a custom context.
+ New Features:
- Add support for binary values in TXT records in XML service
files by specifying
value-format="text|binary-hex|binary-base64". If not
specified, defaults to the normal value of "text" (thus
backwards compatible).
- avahi-gobject: Allow starting the client in a custom
GMainContext by passing context to ga_client_start_in_context
instead of ga_client_start (avahi-gobject minor version has
been incremented).
+ Notable Changes:
- avahi-daemon: Remove all default rlimits from
avahi-daemon.conf, as two main problems happened with firstly
rlimit-nproc causing avahi to fail when started in a
container without user namespaces and secondly because memory
rlimits were causing avahi to crash in some cases. Leave it
up to the init system to impose any modified limits instead.
It is recommend to ship this change in distribution default
config files.
- avahi-common: Fix watch cleanup issue in watch_free
- avahi-discover (python): Updated for Python3 & GTK3
- avahi-autoipd:
. Clear previously set address before binding a new one.
. Fix dhclient hooks to check for avahi-autoipd before
running.
- build: Move default rundir from /var/run to /run as per
modern system setups.
+ Other Changes:
- build:
. Fix the printed value of "Building libavahi-client" in
./configure.
. autogen.sh improved to work when called from another
directory.
. Fix warnings when compiling against musl libc.
- avahi-compat-libdns_sd: Fix incorrect URL in warnings.
- service-type-database: Add new service Types: _ipps._tcp,
_xpra._tcp.
- avahi-dnsconfd: Update manpage with the correct action script
name.
- avahi-gobject:
. Use the correct shared library name in AvahiCore-0.6.gir
. Fix build failing under some locales.
- avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
- Update gentoo init scripts for newer openrc version.
+ Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
don't have to require it. If the machine/container is not managed
by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency. - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Do not suppress errors from avahi-autoipd user creation, but do
suppress getent output.
- Replace $RPM_* shell vars by macros. - Modify user generation (boo#1010384):
+ Use getent to check for existing users/groups, only creating
them if not found.
+ Do not hide output of groupadd/useradd.
+ Do not mask failures: if a user can't be added, we have a
problem. - Drop %insserv_cleanup scriptlets: it's been a while that avahi
did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
in package names by now.
- Drop conditions to only handle systemd services on openSUSE >
12.1; it's been long that we did not ship the sysv scripts
anymore and openSUSE 12.1 is long EOL. - Replace avahi-0.6.31-systemd-order.patch with
avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
on missing resolv.conf if the options that use it are enabled.
https://github.com/lathiat/avahi/pull/63 - Update to version 0.6.32:
+ Don't log warnings about invalid packets, commonly triggered by
Windows 10 systems.
+ Fix issue with bad packet size estimation, causing probes to
continuously be sent when hosting large numbers of services.
+ Fix build on Solaris/SmartOS (filio.h issue).
+ Fix build on FreeBSD (PCAP_D_IN issue).
+ Fix debug output with libdaemon >= 0.14.
+ avahi_server_set_browse_domains now correctly uses the provided
list, instead of re-using the list from the configuration file.
+ Set nl_pid to 0, this will automatically assign the value and
prevent conflicts per netlink(7). (Bug #334).
+ Check for netlink pid=0 (kernel) instead of uid=0, which works
correctly with network & user namespaces.
+ Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
+ Don't fail the build on deprecated GTK/GLIB usage.
+ Gracefully fail if SO_REUSEPORT is not available.
+ Minor Python 3 update for the python ServiceTypeDatabase test
usage of print, should be backwards compatible.
+ avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
+ avahi-unicastdomains.patch
+ avahi-gtk_box_new.patch
+ avahi-fix-mkdir.diff
+ avahi-enable-ipv6.patch
+ avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch. - Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59). - Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file. - Update to GNOME 3.20 Fate#318572 - No longer install sysv services: the systemd services have been
installed for a long time already and are masking the sysv
scripts; those scripts existance only add confusion (boo#959908). - Temp disable 2 old Conflicts that are breaking staging. These can
back in once there is a new release of avahi. - Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
invalid packets (boo#947140 bsc#948277). - Sync up the multiple .spec files. - Add avahi-outdated-URL.patch: Do not redirect users to
, which no
longer exists, but bring them to the more generic blog entry
http://0pointer.de/blog/projects/avahi-compat.html (boo#914298). /bin/sh /bin/sh /bin/sh /bin/sh mDNSResponder h01-ch3d 1758048622
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 : ; < = 0.8-150600.15.9.1 0.8-150600.15.9.1 0.8-150600.15.9.1 107.5 107.5
avahi avahi-daemon.conf avahi-dnsconfd.action hosts services avahi-daemon avahi avahi-daemon.service avahi-daemon.socket avahi-dnsconfd.service avahi.conf avahi service-types.db avahi-daemon avahi-dnsconfd rcavahi-daemon rcavahi-dnsconfd avahi interfaces avahi-discover.ui org.freedesktop.Avahi.AddressResolver.xml org.freedesktop.Avahi.DomainBrowser.xml org.freedesktop.Avahi.EntryGroup.xml org.freedesktop.Avahi.HostNameResolver.xml org.freedesktop.Avahi.RecordBrowser.xml org.freedesktop.Avahi.Server.xml org.freedesktop.Avahi.ServiceBrowser.xml org.freedesktop.Avahi.ServiceResolver.xml org.freedesktop.Avahi.ServiceTypeBrowser.xml org.freedesktop.Avahi.service avahi-dbus.conf avahi API-CHANGES-0.6 AUTHORS COMPAT-LAYERS DBUS-API HACKING INSTALL MALLOC NEWS README TODO avahi-poll.dia overview.dia server-states.dia sftp-ssh.service ssh.service sysconfig.avahi avahi LICENSE avahi-daemon.conf.5.gz avahi.hosts.5.gz avahi.service.5.gz avahi-autoipd.action.8.gz avahi-daemon.8.gz avahi-dnsconfd.8.gz avahi-dnsconfd.action.8.gz /etc/ /etc/avahi/ /run/ /usr/lib/ /usr/lib/systemd/system/ /usr/lib/sysusers.d/ /usr/lib64/ /usr/lib64/avahi/ /usr/sbin/ /usr/share/ /usr/share/avahi/ /usr/share/avahi/interfaces/ /usr/share/dbus-1/interfaces/ /usr/share/dbus-1/system-services/ /usr/share/dbus-1/system.d/ /usr/share/doc/packages/ /usr/share/doc/packages/avahi/ /usr/share/fillup-templates/ /usr/share/licenses/ /usr/share/licenses/avahi/ /usr/share/man/man5/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:40657/SUSE_SLE-15-SP6_Update/42257d9f3f3e9517dec0378fb5d2ec3e-avahi.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux
directory ASCII text POSIX shell script, ASCII text executable cannot open `/home/abuild/rpmbuild/BUILDROOT/avahi-0.8-150600.15.9.1.x86_64/run/avahi-daemon' (No such file or directory) ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=f0991699d45c01889b321e7b6ebaaabc277c354d, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 4.3.0, BuildID[sha1]=9301594f6d6f5a68c9d537b8f9bcc668b4fd29ee, stripped XML 1.0 document, ASCII text exported SGML document, ASCII text diff output, ASCII text UTF-8 Unicode text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R P P R R R R R R R R
R R R R R R R R R R
R R R R R R R R h7ɶ>p*n_ utf-8 82281db54239687bf47910c31739b489b70e948d05c6482211088c6da1b72fde ? p 7zXZ
! t/yP] "k%jS6> ZaTO bLr&H*6rʸ0EVƊm^Sz*pґfxV?fb 5NQw8xʝ
StfuMVo64!><=wdi^*sX0\ Xi . {z^۵
vx'wi 8N{.f+B mhj BObP [7 zJ>{m+@j,i*K?f_W|ʂDMoJ.WB2Ac{x%JKW)٧i3
sAp|W 0>:[
j
@PK&ȓ5m/2Ćjۇ)];
AFc`Z)|0 yq \U_
}D >]hX@!w)"dRƉG$ /ҸU+wYF% X -eg;¿e
iP0¶Q
2nqq
˘pR%+%4I}e!i Cĝ0 pI
8 UPM~ N5Яթ
2>3śPbSK% %chū
4K][rat|p;~-V[]b7paF
$=}Bje/ 4P%"|Rnon }C
)~ Ǖ@q6q RxΆT* HiB S?
"N( .Rգ$Z+X+JN bT-6= iܷs~Y G)$Qt?W$&x})ME8p:
hu9ufR"d1 0_ !@ uZG?*_֢!oiƯ%>2J!|:B {kf W#:H{&æѠVl=(Mkø-hy| @}bثr|8,%Ҿ|'ql
Gh sQo9Xϋ> FvtL߇ׅ0O47g}2/yL\ TvS
+6i%vUȫآZp
Upi1EQ[IבX nW AQd:p܁jQO@Ο@ ֮t|)IGBJ HEP jT %"S_ϜT~מS-w$ܪtIl78q/
RNIFхoyxt(\[D\V÷0R B5;q4 2G˗K4؝Qoc@Wȅ:V|xC%~Ouة cі%hd/5.;NN2@, \qm%X$.
)و,X "Ԕoɲ^5"3
r"Z38$k2hB"7x*IzwS-yg;P Ǣ Dfs bIYddԌ5N\ Bc?!`
IԨ+aG lhn3yxoP"ЧճP
$,D{F/R#"vA^F=" ]+(3Gk`Ɨ~`s 3Z%^)2)cMLy5E}BPl :ԅ ;rb~ E}+FF̶W;`Y
ZC[ '1 dǫe7W: 1q9ݑ`#E LHN@ rі5,u
s _ 8UsHa͞OpH^@HPa96X( avmSjtww|Pd$Ny{澼C\I~ $ {jTtD8 wN(84V{3zfIZќGAh"UjH uwn!ʘymV Q2aX#]4ҘzJ>gQ֦mC 0CR ƔHaKBBQjW( b;(.{O%(̳t '*KH( U#VJC2Bfx/P>@蝓Hvkse# czlR
aY?dRHH.e<8ʫ:*+IS,Lېm şAr-D n]Y
g*ǿ! dӍu`ɿ0,E /Co*4o0j:{1*̗Qw#3 .֗P~zd^FXK;jN93T`%R8}=NH=7@(^kߕ͜M
vO76NK[lDB.;ѹ&Ydey,P)L0#h
dԛahxm@0y'aw g5"0fQm .*"-nK,f]5"0QOʈ E &_zżkCj>$~¯Z>9 9}k j0= 1<;P}ެuEX cJR& "֨=85ꅈ8@)#qHF0= wDz{I QQ>}MDАJ }U(&M |R*/MN蔾-O@K^R~' > w*`tL
^
5_ ԬmmɎɼl' kف~|&ZǿpX6 5ꘄ XevCxGE[nSF@ ]m:#t~1Ϟ2(q) r}ufz++0. qn-j5+ΥNu&X.HYpfT'
'Ѥ]/yl/0p9;hv u*([,&4#A#F#x=?<{j#}N B;rX} ̪vP<73@ E۬EVڭ \bQ=-({f:W17\2k7걫.)Ӑ~[ZyLo1]խM*Wbv1M䆿8Au,G aG&e#E
D= K[:~MR_:3mx~ FzYO,'
ggygֲ #Bɜw6O) {@ Cag!2dUO[ª9ә(o_$y-: THn$l-zE!8ݯS |ݐW &irot j 9 $Vv>ػ0z
٠pJL%SHt+
0um:K*
=K~e H Vb(J2Vv ˵չչ-|<%&tz==nJ%a$)1Qv__ WE?n9XJ7a?ucv -Go&و]VM碑
2"("X-k9>_BNf uj AD>.lePt{w&6!z ߯a^o{}3lSjyeW'j\:PB}zT!H8n2vڌD6tR 9|3R9壖5Gm&9%?WLRªeF % ^sNp Wk~Š/I$! ,l,@y9VpyQ8¡U Zy2p|M8c0c@M{~/Xx+d=TBrC[֯LW0=Y|4iTԾ
tn[3{'&ѧ{? )]ڗqHG潢XWmxJ=^j` 7ָ
ю6jMˀ ^;+X&D E#35d1pURu(h&6GX߆c9N
WĞ! =2i9r/~R'pa~>tDfو|-lsD
@[cS6V_G Z/ݏ+ 8Ǧn{M%ݬ|o4!Rxq!Cj%~"c?0Y˫P niݵQ,ܩyçs4ۼa_Oh]Ҷ# ^ d7Ɂ8MME\P
oQ w Il_o \v1m
O_To/P>i yg}B$Z1bdo^0 +촦 @~aN{JAje YO2 SGo[-e|1Rnљp~cvČ368if( !S&?c@y 1[slm& JF3_k`0 r_GXzȼ*2 o'k/rr+2S.}Kf/0 x1m4p7nmc Z<-5qv.)\p^\LU 5.? yYr\HJn 1SOHB&EzR( sk'l"Rj
ܨY0_Gԇk'YcR@O(,$v0~&pOͥI|1dRbwt 7F$T`0}ш<|^KH fD~ԇ p[6RD|Kc n=iڿXk6]G Y O㚌鄕bBDiة뚆
.͘җ5i'lJ
0q^
Y#T?(V{/o5 "j)f(#0=q-D&%6P & uekc7JL"*B0 G (#")Swg)i+
h oH,3~B'itZM~4{7%Khj)$/ly
Ѳp'17'xyL yPPlJF )W{wF %#1+Fdp( C j#_`<^o JIe,'[$1{~W
̂5* |3# W0ϵ oTpB;?&őHeր u9;nUD;ԗH;J@ F5S
mʾu]Y{O@\xȿ \i"P#++3wfDS\?cT_ ϪsNwCv_R. {;" FH?ެ oFDny 8=Rռ8=^]p;RےFq-^Efy2<][]>vY
|K3<]In˴1a@7kuòB$j5
4x}ǃkNdTKdϝG ?@i:!Rl s^u.N~5<^ n+³0 t4 ۠-+ 3.pp?44$Bc@
n{wvDCSPsyq5h
qriH *D`EO Ϟ>)v䧳/H
F6o '\ гxl9< EQc' 8 Sqxm9 rl;>l:3}qA @c
% t A ְ{s˞F˒E$}PNޖ.o-LpEw͋8=B.wEGg *72%VJ60 |rDMŋI՞ b"
: k潚:]H Xnu%b@GG>:(Mxˑd9$QpS[c__.+PK( BAV'/,#셱~©Sd+KE O+f4UAK gKf a&1N(ʼT '{U&~l:H}jp1`WYWm7۞ ~OP ۦR(%5bG_x,w|ʩr
][@hx.T^L9ּ_Yٻ>yFy
*2s>eW6vꝣ 1d 3ry/c ھ_,5)$;+MYɛX,>sv'r4yBn!X N^=RԺBr2$zXa'ߍURt!B3}RbXѐI6:\ 5 gB${YM`ʂ#
cϹ(f6 <ׇJ[_ oJ :H}>\qTx
e HrP"n-^3ߋϞp+E;\s>&
Zs J? RfIQNqFGmPĘsz
:\9'yp'*Q\}m4!%j1@6W}{U4 ^띬eR:U
uYM3esqB mQ Эˇ2,pc+y(e5;g#;v!Tk@*,߹qF7x$$_ "}[_SW[0UMbC2gJDzT@!de\.BS# VDe3D7W m.ZK \*Uz Rme,E7?mFN"vUARjW0Dur}À|@2:e'
wC$tLިY [ Dqev/D.}-eaM"G͞OȤ\Xh Ϡ QS0jetRnZ\ ""1HLmw&\3YQyS9@V%! rWN fen 1}q[<
@UUZGg0>Y{T|tNwÚ9=! UKm9r$?/p\ Q$coSFa 41U8x P]w
KQ,>
*7a~tp*+V*2gWY좃幷P~^拝7bAx~6hV@vqq0XBh҉7 -bvwD]U 鹍Z3d- @IćNwMma-< !8"%Ai|^(vAk&KlF\ I8 gU rcII&j ۇ*^HwsIC76Gdد<VYQ @ kk~Fof4"x
#zNڨSHSŭ (ȖALVT bG(G8^|
KEVY6
3n>x{2#" jbNqϾg kN2ۯ/6_L*#BCK Q
I7up_#
w
g/cns$^ F`Vߥ: W殄= UJO^ j?7d'u
zjv!p_Gk^U](g\Bq;sɀؕk2DXokzc)Jj2tk)Yd:5:[ΐ3 "*.{Rj"nn5Ê$luW@@a1e?X( b$ 1S"VE9AdH
ĠP N9?d!BvMݖ*K8,n;;
d#ک Ԍ/g
ˋ#gÒG :*.* TvgUh q=yc[d ؓ c'|u.$
:zMyb zݣ_WTVB0Epf j_mF^&o᧳ qg
7ր
EI3 u!I?~W'*`4d]8fa," pxAޯd
Sv D|x bU$V3%4أe!kk&SXP#F[e]\>6"j @^NntG>?t:8x95dJ3ET̀N\?-ﻓO{U ^151( ɀ6
J: ʲC?M7LՏ7;B| mkp
R!o=OtvB2U Ё (|9ؾ{:Awl#A (!C}ř+RиN E :<Ƈ7/ P p q5H:9
E+K;tRˆ#h4blmU}^|U _|=&ټ)Oן*.04c}9 qzD3TRXPuyv <3ʵD:WJpQs+A tLә1ֻo-oH<˳f|PM-v03̓Ư++ ֛ZX)gf̎.P L5zG+Zwq b [ M) *D_$*F)2!NZ(T
VmܜZħCK|ti*g>7_uO"P2`9, ؍w j[<庨X:Ύ& \pSsx.>m1S`
@?MifA8!6^=T $&#tl4iZxfiHR5h ŁKx3]"擁Ѽ q|չh$@)[BtdcH>VE Ӳ3)H\}?UدqA4-y0%욝7A#EHnGyIu(b<?k- !U
QFxp-]SXf
/|ye)ԛk ^^+4&6Z+Kxq0D'4hr &IAۿ qhpa=p g(P ԭeY3?@ˣ4ѥDd0nK<`J;Iߪ5no& NhgUTq3 J"Xֶu)0F& 湵@-W^Q.b\
0C!#!R'ό%NbS2:c_KVzm7/Z7˞f%x 2?Άj
AQ4ch_%FR 7phGuJ~*WPS5D
x仒Ȕ? Yc9(iY@Jޑ/bzIJA) 7^]E<|Y$/ +r@'7u o-]*̸WhZxQ/!b uTe@N3S6^5,P+=8n-Ha@<[Yffw Ǜ!VNߡCB 'n 4pi2z; 6pd^g` lMdQt#QI ^%& xpFAjS'{z}^̀JgY[4>i*|.+ˤ_Q<ؐDA*~ef\-r5 RY t5%ĴYC1&tv(|2FSWIփd1]ڼ M\ #qwhfP
$\#Q`֧5
ɻW3Po˺: ^;U [xp K*K!0sJlEL^p$kcf'LYx1A`^, 8i :=Vڍ폫#*
閟s6yAV Kt.]wr|6Ș{E EU adьʤo/zbXw~yڣ釃}2ZJYM.
O-YhH"'?̻SAuZ#K2}e\u IH O aN) a$K .!rPx6l4%:tV+H/Wpoa`Ϡ l|֒VP!. j]oFBŷIbZIx tشN! ;.h9/3"kdidR %~lA-w
r )H!&$*r"<>%mSe:j@FEAwά/(9
s={u9;_MuP `Q ^w*tX -B8lPFܢ".s & Iαgnhj% {KK Tafho$p7$.^pi]iS~GɷjFBcC(??ܭ
]RȐ%dzn[T[\2Cy Hgjvz6ó5ئDA(P
쯏28A2FcO7G'Rժ;0= 1!gG3]j ƿO}kaaD!:rt Zx^Q "dEVAUJ1 71^w̓k KY ]n{c-!bh#ؚkde+{}fW#Ji{;eX\c>cK zz~A1]:݂8蚽GxNq{$1eybKt3H~[J )Odb [g GnUhBH_H:(TozG #$74ܚIO8, 87D}MVrZ0k(e1IB}u@ba'אgV9SԐIYm+ί%nѫ x-+
E_[\#M$c7:rBYX4Bj N \DŽ~Ū#L-GqLqz"42Z5 qde:v/fGN 7s` '8+ߜp:ݏRû<ܹ81MM#ױ፴>捺2& FMekK LQM4W
p8Zh%Eat4[Mx-5Y'
K8 l=}f˕%_io UWǶJd<蚼Ο6ۤ[ך+z5"$*:LK:)iQPg8uhq܃HxK|ȧ(b0[[1H 8l'2[l4fyk!ʶ;gScޛ@Ãv)IDY+#oƗDa>O:ZB B
5H*[wy7BYjOlShF@ >=oy# Ϯ3#Y/n%АW~͟hFZXl|dʵy~!PbFe>gtiKx
^ ~?E$/W";.
m4:Ϫ
Gpwd"݅h*CڨIQ3+b߳?u]? vaSX ( ʷAxۖT7=4}:˔(]Ή`!ulj+P8{6f" *B1 9_ryU!~e d5"vk7Gbh
GSqO٥5gkcv4 Xx=Ń%=悩2WA*L}H{
}I:bSj8U6|" ~ zS>k`T&\(ʖn;@)溼d
),T4ڐ
FMIdrp\
APX͓ɗhL; pO=DOaiNz *nw?%s B$v[r8s`X7 q*u_|!x!. hZ$Փ.rT
~Ĺ=`W4iD0fP5sOJ
x2R*a9/S&IO _. &|s;+4LGg ~#LO?̎VG!S$$1FmQi ԡmj
YZ