knot-devel-3.1.8-1.el7> 6 6`d63!}|J^>j/5,dbjo j/5,d _( (a `1A}Jq`8O1dӡF8b<8p}5o&4n8Lgso0B?+%\KX\N+rAKPwĬWL&6Z:秵>w??wK Y$X{X?-R]0(+g;Z0mfל{Jdg2ĩpDAOx|Wr6%5Mb0x&hcIA!/IZC|r` b cLFTЪ@=Ό>&SO-O fGQJ́IcTJ綞rrGy\j0g80*a+o%|Yp„7Usa 1y-N[/OMjqN_![|ab`Aߊ'\ |'v2)ǵE/I[YɌ.Pkd[%ŒiZd"en`NWLҷk|<;[t]250065a1e231531d7267ea447a475c2c8b63c950UX3!}|J^>j/5,dbjo j/5,dsW]h?+ Ԏe. وV{)f@Pp'ozO.155FvJ4w:9K^_zR9N|\R_+U^ e^CrCk>VB.W|gxKhpK.s j;X 8:_^~<1ɗj^o;=$rG-xNh qˠ*ȵ,>p]Igת_ޠt@5+z9ȼ59|E;{!UksX-&!L R ?qvebf6WwJYH~2h.:ee'_W4a{CοeTvZ̓ȅ5sc2 XM1 S{;/YB2R(vdl u f=Ƚ>$F=236fI&Id&toj,"0S b>:`?Pd   M &2JPXTT PT T HT \T T8TTT\   (8=9 =:,:=GTH0TITXY\T]lT^Y bdTeYf\l^txTuTvwTTxTy (,Cknot-devel3.1.81.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.bjbuildvm-x86-10.iad2.fedoraproject.orgRdFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64H %~ B QzR N*- ^4 J 0''KvD , tgj# U  GK}& r L >""7 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.8-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.8()(64bit)libknot.so.12()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.8-1.el73.33.1.83.0.4-14.6.0-14.0-15.2-14.11.3bjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRST3.1.8-1.el73.1.8-1.el73.1.83.1.83.1.83.1.8 knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,߽] b2u jӫ`(٥W+f3a9_ Hvp@8Tw@`=(8dl3V -,[( %cS.7dۃL <NAF/*{ ~N+jK;i+`zQv'a}k&E!gk;k[vdRJh} ٯeNG|\ Riv( V`nD&CȡM\xmhQ:ݯR:b4e[>oe6Ub&?8hqP@Ib$m !֨Z²_֘;^[ Ir f{P׌oR'iOE7 *UMqםt{  %LK XjZP|q"4Gv\9qO<;?'sxXfd鞢嶹)|.ڔ.zq0=Ik:?vXZ[KƑ%}|r 2fM4/٫ꬼ3ϕ|qf -J߷R\7P j{t2W|Y9W*9%XH'J߸MQlw7kJsiL!:B>4.(X҆I>Uz(x" ) ۲\n`rAI9]V\֒{\9es:J)]EBM:&nX[DZgG*;÷/m0S +aGȯ8ץC$hHўQ˷L}|'UN[ 9Uwb !9I!CkBou{6M,hCDItKO@ͽפ^( %HN֍ngVak/]~ޤ<텦/YB'z?Km<*`vr22z ۦ߉ʡSZv N ͛zDΫ\x]LH# ݊礳U߁Owjj)( %O[ ..8O[|>2pcxԩ/ vr X8ؔDYXzWMf.9{4ZL!U΃wk2xr*5I#_ͬ$qaRoyq3#T3A2zr $[R]WT8{jCT[KWC&>R 3& @W/"&T'ז4ʩ,$AOW,3ܷY+oQVC(}7䕙DT~sQ౷^(Cғ< {(`?TP""B5HsMP?dAlO3 *KA{oL-9  ~ < 3ЫPP@zjit[kG|68LQʲMaKzL6WKm,'^eq,^gDOj!x|:NS$kX.Z7c<0l]0Hg Fc!9B"+E v2BENo+o׫<"\d i ],'3e2NK'Y6 d^ǘ2"Dųf/2 g0 Io&{8 bE@|* âZyy}M2X8.DF uFH#?Mm!c%^[#lqwjL!k3~T)jګp|ڈFjEn!5É=ilOnغTLsDl{<Mrx(|SD뿦D0{  RD/Wi{d )"xQ^'P%SQq㱤m58:eYsgST,NiHxch aJ]N)ɮp嵸'yb.yU=%=dt8.u|?U -g (ā9%CP)iܷFԋ}ZV[`0׍2iUp4"Gȝ\iwwV@ˆ(?iSO=.o Hs %c/ݝ:X/]8B.ٙXQNXJ)e>//˙S`e|C d) 334OBv3zJ5TKcB ;EnWضzÍG[p'3'<Ђovf~\Ԛ5W2^eZghPzmRp ۆOV vdRf#.j ^C78icb YNCɍ,=W8U}%0nߪkodM,ڠ lShV VbbvRY$Xj4ۣ~vU&<˹1hSqk'Jš =wG]Q߫M]O5(+w63|U-_>C2 ^ WX {Se\{ Ə(ZW$Ꝁ0_>xGLtK>`S7 T{]Ol}S3{5`<]Nӧ1E(4ZR p".,CF\x:~F UtQx. h 呛-IX<VmP=fESWܰYY6փiG=;LO/X Ն^lJfXڳa GL-덷׼FV$syA7)$?3[T8~])aСR*=T5'!a5&כ/ s~L#^&ʮ|:$Iq1'_ tO2 d:< ^@e+},Tg]xjt_ " _iv6&sא{CG(QHHAY㏒@s۹>li1Z_0@$ĔÁu(8JEw]!tV )L㟮9k)GDA;f:#reYS,%&fTSNڒ|5SQt`U+-_g1E%\5PN+A.B1P8OWd4vQ΋KRcrC6XY0 O^ꝩvX\ӫOR ,+-iB R1vA,9Vd NV3%w@(`1TUtIJ4I3GV,< JA[?Wa1b 1Z Cm\:t g;P!ӑK;DR.[ ]ɮ\\ԫ>c')]|@逍;4f9P7t we[ɿT3hۖibLyVU' mHR10I'@aGC'X1tfpD l=Aӯ1~_?j3sOYX$kҙ%"©]%I/-Ġ (1b_4XA}:/({BJ#e@2/1 ?Μ!D.Uf61uOgh: U 3^(ks(Wc<y  f,pzy0ׅ%Xкڰ6R}l1^CռNkrx>nhj k rpA3I#^UH5Xt]ڿV2U6Jc^.R_vx;'v䴥C K^C=f>ECKr\)pOo3֯Y[1$uE?9Ⱥ0E\`ߓv`mF&]-% IF0 x2e{Eԃ?e<8NWuI@3zn~S>/C Њ]!Q.\(ǔS#,mҺq#07ec|h,y!RpjSۗm݋%,p0(QFT3:fsv8bce^> قǢ}5hb$o7ic AL+7 X=pl<)(>="I5&ƝCa9dPz p;2fqf:DKmf(`.5 "J‰Ҥq 봡5VҍW2yatL>뽪o<=ziYEB^` n57r>NGyLc.'j)v Fl-+gaij 6<9IݫnP"XLvLx1B5R6MDn}N, S@߅jkS߫5fiL4R/~PodC1Cgr2PrwX R:OFT*!Wv\9E 4Ttܾ?Vެiy_(9s9>-[~TZvZp 9)#n&/6-Lb ]s5>Rs_req5(;2*e‡#\Zb+r2̽ |>U>K@V?ds'h=v?F6 hU X|=ʠ\u/4ENZ.e/!F`mBh>nh#2Ji@`ĉ cOT* |widx^?+csD8k.ZCk@%q xlr!\8A_,аPn嶠CYߡƟJC]z͓hn|͓OHʗ4\S2_~1a`c`&E2z9xydL ͱ>weRl]$?MվD9`?sts;5֦)I O'̆E#bk,귀Q31Hȳ+DMΝB3J_RզY50 ƴ.F2x0^ΑtddJ:'-ziAO9}COm 5-ƌrge% j9ȹ'-FUTOּWحth!DH+*(7 o6aۓ d'zrɖrEiJbQ@JݖC#ߛ|J3͝i ؔDTz xèk`R3>5eq>_Bvڰr4Iywtuf'|c?w/i3U5ad0 n%ScwiDTK'0D2v5,<rbO?|˥GJ&z F Aԗ\@)23@3S +7T>pi(^7pZmag#&.9ʓ\p+,1 6gҜw>ؕ+Ilα:Yy7]A=أ\yN΀XaCiWJr=yvdDͦy!iZ W)H7ދ\-4]l&=z9⢰pw-O'f]%s>ouqD1$JwLKeGڼ/ʒV a`6C>}U77rq2|@~=48iqFD={dWЦ"\_]ilaFpBjY=3Hy}󣧨z/%еۉ`U;L+'Ho|JQvugƢjvx22{$=SVQq}B )o1FZxn߅uٰ eLl$# }I3$2*d^XKMΉV~&-;v[DxPG=aS1%c EޝIz\N҄օ[ H[v"^\Hq.0hJ=-A8?[8J {63mW:;\.B;?0ɸ$r:S&C({5­2Fb٩y6pb Vzf,=_WWƢ(]Pb,^3-"j5O&:Q6NPaoyR@?\mUGzsaC-, _NBV#XӾiLnzga$k,֥f6"%@mѡPlIߠim]8D]M %@O)&8o샖̐쵍ծMS"/L)6dH,tڻE^ W:.A⨹)0sm<obNxFDRtB5_Ex,q$}2GxJsDM"NDx+in@''>N_/$^Ͱx~Yc G4֐yCHid*t/;lWdmq=gDۀfyrl@sBs#x?.k׳ v'  $#+6)+X5#Xxzau7[)FPMPf\+rC4O2znn7,y"fĽ%9EKWPY8/v Voqd)| aB!\y;ʼFBKzB4*WCj *_՜B}hY}-d@bTC>+?5O=آ;xgOA-]B?0=>&eSSΏwx^|j6@M" D<(,M{?< lMDFNΟhb/мk2ܻ ۞!q?ja%)_6,՟E&A(h8 ao~Wi&q%'IDCnt{B޾70Mew>BxEvtAla\^T^2 'P` Yw$ __[`ƠV@2߱/ yQ7OG$9\\T5 zqN-ig@I&u/DN 2 Έm\ U9䮘Z 98~k,F UEQ'ڧZ|~ų i)z8.ʛt\v͎dՂ0RVw(}.wִ$,{߳_ˇuS;?P15TC(8 )5|41†i.~ #<ʾтm ğf$=Ϸ/ݎ行r CpfJ7_R3#b^(,Џ~nc|%Tvh;m8FTgdl\j̀GnTiX 9wC9/HGjzy5i=+6h:pmKcL} ${L^A敺6%,% hOIv A%\ar۲qøyib?ꏉ}G&]V<b><bs$i,a`)eE\vn1V?p ӝs(T=9%ਜI-Z(Ϲda SXMms4p”WbDr-W) 2׾x ۛBUO$F{>aĂDL+BѫQm-*miS]z6ܟh:Ybּ5T9!~]{wܔ9ԓ"z疔MP? 9\`2tl5H8Z5mfo `%Z6^OvZv;/&'`."7k6wxj՛=X>2T@J2MSW>a~b\<*7cqi!Lfnf˖h"WGW(!Nj%+ZwZ׾ z7s`[ҎAL+yNLj6-{"KN&fd0~7&$ K:WoOۄtAVV%87%] ny1EI2)٢x3غ#JMqRɠ ,Sgէ5t[@Rגfb{ic" TȔ8qYwfZve\QXq쎌&ؤy+q&uenrkMgZDH S~W=H]?V.-"&Y֞3@ˇm(WL(H-3^/pA8%q9=_ʼn"S>Պ55ɸɫB rQ+ꌟhxG|I_@[9Olg(~,/])Nw HDN:Atl2wJӘwzaC9n {NH H JȥQV nLTԔ~C1G ?%NY E$/PRZx5~HqI7/+83iAR}PLe7D=h&OT2=R[pMf:c^>B)gr/5i_:NS!7+!ω&;  qpjU_nv_{{'0 WTmyK<@(}Uܣs"͞HP{%@TW1$cf 1yλ9`l-\ȴ<9=ڛg/D#kixM3A-wl4 9jv9vl1i .d$Lyi`Uz[ :ʬm!Ag+"?0hXLfb{]&7_B[ 6*%H@ې9}s=x/(`3ȃemr>1 ZPHnś^>&2ҚRp"H B@;w9[":15f7u:fңv =Y ;UJZ\V77H9gPaRdPY>8{])Q߸=iW&{Gc~*u]Jl|~2Z;' p֦4Av]Ht7tø `T)j[%zP(rZt1)=y{%t!U%.C6a3հQz9!_=fvV -¼%V7-4Ʊy5%Di. S C ["s Lu H42=G6Ԋ0]vN ; T^aёyb|R'W5̉NK@x5lD{spY`mjEDE_\ }At_M@)(~M O@!b3yݨ˅֗VѯajoGC@+pY5ǫ%DxNDD`e9(Ї0OMIJr$ƬUO:HH i)LfC9}K\o @˛#JK}|f)3X<߻@4 {ɏ  K4ܜiJ"( : xȯKi_˷-).!YuGr?Ec=$Gϥ qٕUh|nV=7TGt 3.N ω.)Ui`b*C<şL(0įE&z`dv?_^:aKa IWSEkUv)<&k~:';[ivZ-D6Th|z VCܜELA3'8>*6ǜFx1վ6J2Dt!!/Se Y 0 >ZQwSϼ_t͉ۙP#*MI*hRH(7 ؜cZIw ); ]'Kշx0g2\A;6 ;,a++[wI>M "92Ny F7A0=U/-KZ[iU';`_ vPe@ӄ tOX3 `5>'hvƄ>  @. 6]AH*g,u"ǧՍHe`zeT\F<ܧ w-4liNQ {][ZJ㣬AbXp.dQش[|zi*ǻ*=@s}[#xpc7W,n* q9ݙxI>c ʸܓ7G75jPV{zZt˱S\Y~Hċ\D@qQ.?`j_fBNw8_$ MM YyhnY$~˥`1 /x`NZsNTC5V-jDzrvgN2=enئHy?K'+7.+Km@v.RzF,=2a^z(GC6;Kbr~Jlp9{ PRl8-WO-{}PI(y{Y9 $~C[+hG}%.onc򉯏saÊo,5I!xFy&)mh%rL Ȳ q:ºa,({D8Dz,hX\O-0.oٽlni sKXYq9EeW$¥ja( *Ea靟Tɏ°O+t#i]px3aI8m$k#:I׆p 2zh?lu~fJKP±'#L1P 0r%ˈGay{1]J &gm^jh1n"~au!#3_DͿg;Up dM.0E?l.^= qY; ߩUoNUޢX}!$5}_Rzf1(ObKtߢ MN#4Ǔ DCыtvK0|)XEs;j۰8s&q)NzUa p8wY& |o>W'0 غM fA T: ?xm+BQm I1M+yp>N+cP ~^rX_\Ё~HD7mF5w1-p~w-Y &!{COHփ6~i5D53WwS^MV3+-.Jo5*7^s.mi:^; -]]fc3gmIgGtyW딞 S"v,k‹߾.R.3zȱR6ܵO}y[X[$4N#w{]%XW4òGCq#k[ _d̢ǂaoD7L.\d hH4"zA~9sa+!L j0W57ziɞkNpb}jDUFe'|oZI6<kIc,I\ kj[>4.aлƨi"Z}xɭx Mtybh B{P$ qjT]I*G]߽Գ,{rGcz4;PtH*@Ӆ(J67zdkCJζ9/a:XsSݰETJ z$ o)XYKJ mpɸFqӒY-&^~TdKϞFvB}R0.Yz桸#u@1ispoIJa@rG#XL {CIKqEv\0͍-f),q֦#`TGm<<( uB؟dst%R=^lq#Q$.+kO؆f ]Xw@ٻxZ0G}BL4avm&|Cjg/{t=pFA7f({57i;\+jF…?(;+ @fu^<-7qsj~]pV{Opw 5ߗhMuAWix]EeYxyg>Sf'rꥥ2R2vx RvC}OֈHXⳓJ+[- 1/V\^G}k^T *1*ב,[zdp/DXܽzDs"$Тl"ڣ^ER.hB gl (v T SzUڑ.%rј,|&-h(qm}vpv痘@x K;n~øL/Վ+rq:?NS PBlŽ]x(,EuWۢA1hP*YMS7Lz|HO`o -y!92!qMNYT?E`Cθ7gQGdA;mNF5OuYhE!5xo!>j>Naɮ^XHZ8yxkg,`j~YD8{NXYG\ѰR3Tng;ǕzTH#IQ Fqᓁ(jğޱutަ(g÷=ócGM%%S6(+I#眚>ܶ@iKBܐy! wFxxl>)o]?&TF5 -A_ϊ8#ꞌM|6Lы#i$` -ZAAk|lÈfr+ZA/mAoɦMrO9a{^‹FSn Vr $0'+|mAm%0I,ya ЏƢuz ~勺Y%&e=b.ݱSvv(. A;+s 3 p8o]ǖ_нMnK< 9r|mjX6f>{ mq;#Ģ׬rui4Jm=w\I{6qT7O δ^tk5jisH* &ֈAT՟6EӰED/m7oJCP&̊TܖD٤h==sK:Elj|f%t͆N::Ri4tA_7 P%[o*I<1lgUSX|y:7Z>1H!W 5=D8uAIPo ;k2\BeݎW?;f%(jScX[>_gkR 4V(e@n>EL4&ΩZ85Fku"]։r*2,uC_W Z$la6Uhp$L.vČfdrna0\cUjw@zp*)*Z>^X>#.5%pI{8|4\ѩ'LR0ۧ*Nj'f']]ҨoKEeJŕ|*O*`$n׈3_"7< \26 Ry;/:l}9)59>OQӪ#Q*28]M9VƒWQ:i"u.L.ߴԧ}p4Dtuڷ^':F)Sf^ $4ڸ{"Uvdt>FeS`p?(ɒvyDc D)kLzLa- #n5ъL#c>6Eܑh8?#ꖕ99DdCsܓYQȏ<cm<fseX%!yG=:뫋2,6ibڈ,<+_Ւ>AK< |S@(J{ cD n0ޒMb`5v 汼mcZF;&1 ;#pΌCJqynDd,vvZAaw7b8Ɩ{ % xҲ?0{}M9П WbZ E@,wi&/ᑥf.$]aʬ<,iE,h'TOz67˱DdQEASuV2 > P mSv991u}N 3ƲH}jq=dbIJ, zVBd#˱&5{cr-'TP @z n=rRْ,vNk?# TݱZcI[ ۱_0=Y2nD`9GdR$-9~э`j5[=A$BzGa txMd"L?7Toe<aPŬ:1c-J{HիQ7QQOC~e o~ϳ+4yvˠCV۽S&玊>zc :@zCsA 2$w$n}׭Vl^ѓ%.JEqqg;%6U9.G~q#~`W#څ,XoInHLKWh}p=%6GVJy(.3>嵃BAmT&"ܕ11O8R1!Pz֥'PBRVn˅j)lm5aQpIyF {Ԙ8jH%)?uR@¡_ů6r}ta+}}_b`}YͦE.j4ێH=?ݻxkLqUK*Ԥ Cx-$-j s5:'EKiyd*e$8hdV)վRL$l&-PӒHQnk_2ʃTIW9RFCt9Cܟș͡L٬-. )pS^P\)1w+˛)\3-} b[8p,fHH^>T)TndZa0)@}l'fMJ\31P*Ż@8,fry֋V>H6`DUV%E>:,pPEJ@bH<0khI|ī̻'lvJNY1NQj;Mr6o"I/e4lpe/I\ąe֓O궇"DUbl pbqcCP~n7}]~&"'?As4@آ['_-^K,Ԩkcu",6+zLBħfipxxPc^J?z?Rl3=UK]UsM*˛`JL3Ȝ'&bY2`JNuÈ 2UI|վz/hA)`-YV}fuƑxN.5Q,7D˼[+&Dw'kVE<,-HnԞv}E4_ؽ-/ӟIv"aF<[wP^򥥥7-?ӄA)!#K.0YJ2\{P n1b56*kR$hbtxo/*ojgE<d)$đKs(.;rj 8tqJd9g`1BYۜi!'ƘhQ'Ma$X(*о tp4' :D|KNC2 Dum^ Cĺj|Rۉ}YfVZH- eX*k\dO eڮB ;/1n=NDg|C sx*YҼNZcqo=ͼG UI;Hoןه g֌FyG3ĭd/BV[1 Tt*L/JNzm).ERD.Z{s3(|@5ЌvN޼y=P^)7_ܲ(?e6[bs)~^*Ͽ5Ce؇UpWGG`%aN4/|VM'[i!UVw5A ,.j|월0 ;۝Ă$L :Y<Dt'io'vty]ғOdG+ !BgL 8tTrdetڅXM؂FASE`@it} t-#:IUK\-7P6vJls&_e/8y8+WCK C7۱x!.ξ>YkEL-} v;~)wȠ<,%5jrn@ޡ -;56URIj+n Vd{ŰfD{eёj,iq U"z@MN.7l#+VՙRs*FrxO9 HcX`KTkf٬?ZxNB\a$6!LG!ypy-e:gF X&] ʣݴ={'%!457s0es~wA/ћ-)ۓGfy4'1PZ>ɎUJFIő9^m?V[ADfx`o"O'& csoAsfKl<3ʜyYV> ru6b#3tۋkQSUڡ.L+vM9VYB]ߛ$sD"G ҆Szu^GZsw\Ymso}t${(m~l&^V\DQ=MK5@vaXњ+׻trz'koY\lrBuA=#يRȺ|mOmyc?wfHV1W3#IpAE=6ZWޞ봪 LH9Jp, .e8Qy3U7PGJh^3Pl܀n-XOtg| }MͬhC`z DKݶU.|8o-r'NPnjEGp?<:$!XY٫z>yܹ ExQ;o`RL@ :_oΝR2}1 !o]MmڳDD%{ Q=4塄dWrp8KGW9.V[[J ‰t n%c~D} %G왁}{au@ׅzZXtT4=MهO+tyFj_b;!]>Aol!ƌtc"β0yCB].36YlĹpPHlh/ųVZs+'Ly)ѷ2@vN>_-_q'; 2Z.$k"F H jHVq7#(yatksM~"18-Ko,ѝcT?֕/^S\娵!Q&]njiSK( izb[Bz(qU:PY bۧy&L-1iԆVǽޞ#eK9lO!ɉDpeɸi g`Wޔ{sYg_hb9'zNBxXEbP<=Ua%/`1dַQ *? %Cbp؋/lb}2=;HNG9H M}y*A*upQM۝= }ɏ(Qr:kwi^tqQgtZ0!E>,kd8vJW VDZ߼zGJ7Bu(E #x 4Q̎w0X.MMvCշ~BbJ|\=H{ދ(kGe-$`e+tq hw2蒉SRY _Uah`|1RzOFz;QB aޖ\9:E,ѼIw! LV:1AMT=.j P \Znכ!eiܖT6~kk@ю`y s:)<-iXĠRi7ȩ!g!k/w1Ll,\:3̡|3ٸg,dwq糫zӪ-0>>tN9IRB2en@9= ћ E!o&MH]nG$V8>xcƛ\`l~>-[eRA&)S*au ZcGaP>1}%-<P$TfS6-s5SmWhٛ>jROwi6UZuL58L}~LI~ &of7C Ui UbL aP77B$C7<{Xտ`=hڷ_eㄭ`X- 31N@-x6JB\FDƊ4$o4vaیF\ptjm6& iT2bk%(Wp1)Qņifg1+b:()]Bi1?PEY#ˡ0c6W?8tM"֨ ÔtP>Sbۑ 2?h%(1Ʋ3rwKbt}PXL^ɩ+;oUq-#>&zp6ڶ7y2 ι1&MZD9E "U6i?P"ggW& Ff v S U1;3&nE (Ҝ%5x7sϢ>HOpH:sieȩDB"P#sc!4DE|jr[4>yԚӀF]Ȧ#>_ޛZ;gI4t &Pc AHP@s:p5%]^,M%P)l9*~F M'J4AK9:Щt@)J, ?yr{D>K,wwGz}$AG/Y O7p~ {0"?]{>Wil!NdiLK"$ck}\?plMKzǯ/_Sz՟Hj*`X!6]ENh`?e(se<`;4ǷƓa^9_aV go1!#4S"d5f ~ LB0r!Áײ`y:5A">Մ"#w(.ȓ뇕M EYdNQk qROZ`*G- +ypL+͐ R@ x-J҃7aI+-[$ |jH}:NVhQY q\H[~x܁a$*1ua,gu@a5ʈQ hIg/Sܩ/ f;Fk`Kr!乷\KEa΃h*NR:riu2Cqn8暑lD[X)HD- (h͵T͒ͯ0G_EmwnYUgpFz&: {3+Un'ED9GAboE9li^el)k JȕW0$G^GZĦuE4 ]R.+(gxkH@2YQ3bKkAOeKU66D1w*Qisgi!_~&;lbK`?XÌn%0V*& CZmYyѾԆl?M=vz52o$'H)gϦX|/smYbp=CCQi) ],RX&sarGKRgIӭa,FTaE<]^~]7hƻ'_ɠLzwbW?q1y492[-ewiXoq11=5iw< G zp"*kLX 4Iֳ-ǦJh`mD*9hɈ q"!|3iOu50( +65$eQz /oo:I[@J%ZͿh4 Db˪bY7MTw!$z % ~v$';U2邿y̪ jÚ >aЌ!QwSrs͟=(`E4Ήq|R]"Z<퐚1nq+(i[-IRC XcrhC~5/=Ճ$`LْNz-r|PWͽy9Vx7;گ DPvj^gB/'hLW_e{\Q,.D_/ɷ+H#iI22 z`EY֭f0[-i0=$A{whcXV8 iFj`;QOZ@sm :kln.E,C*fS&I/ ]!=줝m[&HUkO$=Y3bG!QY3v~Xml\kKvTZ$*F|@Wuf,+9|,zys ꉑ:2y ahnA'Ir Twú:^g~G8hYA1ܚ.1x1݄#ijN_SZgG_%Q-aƵyVVPTB٦Zf 8{8ϝ G#Y &hxG^* ջ6:l]#$iSLB /NA9 ^&.Av0"SZcV3sɷn@yfkW:?|>ξƮW:YLB{x烦ihfĬr'&]1d)U9-C;G_ڮxlTtgmẋ 0 Oo0,۲g 78}1Uڴ<(ne(S%=xMeQ3!l \Os io&gd/_oglp Db^Xe}Ux{n׍aPGgBzeȷQ¢^` jEL֯2cl@r_+ajNxZo3* u#~2E+stD$%c&!]qk?PMVHii.?K]pzW*rBHq@FmqCzKB,g]\lxNI$rjk["2(CEL/8:1s.SA%GI8v.T3mYsW*ST._(2 S~\/{>4 -VZ އ*i}QANӋlC~U /NR඀fbYD_!nMv ]XFߡO,Üm%vZd8q `GqϣwvOS#4-!XK;]Uy.QV9c]?ކnR^I,$ /%CyxOaoP{* E-aF ݜm.9tⲋe R㔹"A90yL3Y$)[i}gN< [;ږ!pG0& xC[r m{K{£2D>3$J ft7(ŀKʼnҶRc'ږ&$8С39VjIcF]0;L>Nmo JLɭ*d /8vxHM|$`ӱ\#!&e1"0 :Wevb[oCOq4\cuFY\&}jځxW~ɟGo70qq1U~3ӓ J'ͬG[{2~H(- kxy66J:̙2Z~qJG}P`iNn+*k dE7\f* ~{l-$cMQYwFxQ[NCJAf2!kU[&ۇyaX@kLK0ZBd/O%#&p1!Uu$ś vaǮl MLl3Wri +ym3w*+7 e;~6;z/=_NZ-X]l.Ix?{(+tc]ֲyx7o7W~$[sPnW&w2})t`5^xr@y "Osy_FM{tV^x\R.FѦbbWd\AB}OuіA9> [36E" i4!`6!3\r E#Xo8yFm6C@iH- zN{P¤S^qղC EF%1M@iҘْTb 6^j}`8jIqޟ;eQ%g|XyxGQLkbr|<rv n 5`2 {Bja)Y7> &x֕*\b'|}+[_ ͚+9V|CU &/~?-ݺ9On89fR'֊O?9coc k~BRH86Ebu-$= (w4仛}|^ƱVjuM07B1ܢJq?3׫Nkq}s0΢0>aE V&5".c3oy6&ί/nt4,^uijn0,ruQ|xMDYQ! wƇ@;! c;6LHu6жUtO ,%7 <g6J@6dn@\2§Ά{43|LZ|_eh u l ;*j0\X!0 0u-1q!Ze0oqfnNvUjCH)?Pu~R&{''_ gAp(yyǖAh[PPoև3tD@܍'_=36t byQ/<.uS(.1u]x˩bxb"~s 3͡狚vcjvi.*)" %8vXX+&twE'!&|Cy5LK=Fi\оiX5h*7ԎK/YTroEsFs1"X=uvɭ@qeI!0D.PuSCq%B fQa;o`_E,<sGpڨFzAfe ! Y%+\w|>7b  Ԭd2.h"PE6VbW}LtH=^rw,ocK&G^buAy"`?"V-I; f QM,S/^Mg*}c֮.G뾶"/dDT= i!Sx(t >f"rh#DGi{O,2 ?|.ek9VBø pJssqq*.|Awġ4@ÑNV:Qm;ZDZoER0AHK^ CU\'UfW\0oW++=o}+A.&ZA_{ʯ8jE">17(>m N+ۙ\!g^l|v4#.+TLТ`D:ެDR T&W\p:Ȩ ( %zF@,idD}lr">tLX^5ڿ5$վ#OjGdc|^ۼKO&s) bPP*9b\p[R " oP2g#TCLS*-H;=? ]θtn#w=POCN(3uNAe-Y¢^5$|y#ybQ٦a*֘d~Ư퐏iꌋ 8Y\hAyGf@uT To+ c"#9?])Y<^ehGqJq5 J9Ĕ0uY\^ 4ri`wNfI50_{o'ݧMuA nkSYl(2zMLdqr 61*ѹͶ_){OIݱ~i<6I"xI0bƒlh }6qCjG/&ExBÀW +^ t̃2ti8r.l8u& f1ÛnT.X} n^%lwMJ 0+R.!;XMa;2u;5ΊbB؈~0Sk1^&>Oe$s@m鐒 :5Ѽu"H%v2+K~싲Uӂ1 l T0X2$ܾ=0",1"0V믩v5? #_7 \j5$. ];sR0˶'xg+eyMkeݫ ?#88 g+ gu]Lf=Zٞ,P A7yGݞ1/ 4~\{!F ?iM Sk=`Sl+OPd)LVNx)u槽J⺺J:EC2gufA0fnS@CmOCoUa˧W `re^rHYvQ`Q #oK]gai{oVkMt `@qgXHس.S cn`<J;}< > GٶÛ ;$(.c[8FTΠ{8SE0L_Xro*Ӈ%o+vMt§е:>{jEw` R= 1#s=n!d7~c,c^,,e*ʎ2YǡV}%/xg=`1U8GHx)9BNh}ݟYK]<*Q N 0iW2DM̼'Xv#'oCzD1 dslSjdwTPF--vS8I̝^OHR^j**Sbmb 󛂊oLe|[ATֵLr}I,smXEŸu MToJ:^N2b֚SB[ :X$6 ]#y0W|n\T}BO Y)<jx1Mayz߯9 |[`RABl:džgE`Dd,+A6ZLT_sv:t/9}5ݥt Di1^@'5i) q[{K=0X\*~'4Q+/NʁВ6 joga-}1;gDN2{܊ ,'jZl]xxη2dmbnIO0҅Vhߨ9Qԡr/ ~jد2\<<-B#.~I,H,)<"7Uڤz2ړunE $dcwSu ]g&W8<H67 ANN)T*PtUK H k ֑+O KJѯZ Ï!GRáR^zۈX2'rxpfeGG=| $۽af?_7N ;s`p6MQ) izC};;e6#Պ MCs6z=M"-"#!3-p8* EA'bNƱx@-mGb/ӿ?'`CZ\{Blm7]9^"D“f:A u]##9^"r&:izr9+Rhg>}>sI)N97r.Jڪs=z{*.flr~/1\"lfwԁg8M6#aU.?a^8KlG_^SgzM1ŧ=WZNA?O1ZOBD;ߑ"zy[JcMfu;Zݳa#9Feq[\ snY[m $(PLJ0A4ĭnx;82czX%U֝($%4$~cG]6)0퀮h ZzB"Zt9x#V1V)aܟQn͒mUH[m(iVk|^Gw +\@bJQEj/tAuxt~~M$w0d!T4yʌq=BnFy@ovQ[* GKz2n= ?35ݼ#8,>(- 嫈~҄İ)M=Ba8,V1C xQ`=Gk@U)Dž3;@:(#@qTx,3O]ѶRTI5;ZhT/dCMAz/oT`H,sgW8k6 U4̳GF@ mtNݻ~g.iWǦ..ħ4f-*뎙NB]fP_F7P/" *W$Xuǘ{UCa"IHU7Ttx>siLэ~?, 4+\(*yErZ%ñ`c;v%^,K @$r < f=pUX5%aܭ+¨ɗAC˿l<-S~ΪR&NkxzkLR2])YrOw{[Cjm!bA<$NZ (.>h,y)b}͗T w>{{+K9rbDT0l!R TC]Gү.>Ω?)cځ&7%W:F0UTՕ޼f_Sazqjyu8 GjAf\jw]dDl >hlg |U9ܒ+*| 78 £@2h>9yܮ#w^3^ +T(7EOo h\Ha^FX01ICbDd܍_c-\!1~TXuIr999ԁ&d_$B9Hܮz!ܒU"moNdtք"erV sUv\eWQk @w ;Z2 4QyȌG&YC.u0OջTXj_$J^O3vÖT uxn@*T пg'F-v, Y7;Mi ':_*|"g.Zw&m'#"%Um'5D-,'6Et`6)0ʐ$XCZs+3N'}ks/sȯqTpy'l+XؾbX>d+#+Hv̻ƞjg6:s>EdsyGtkr![.*62VfuJvbE7oo>雯ӛ&lk7"d* | !)HkOmU҇dNէY6 ޢo6#|ذNaښ-a&f[ypsqHZ~ ^8 [+AKj]V҄"g/PӋ )>l֎۱"ja8_$ ʛ f7谀,R`:+ M++aܮ~l{1TԾ9r2=zDpI\3%1I֦fkN^NjM~ j"f%A+)7*iC& ^x9 19c]%r hI"6# |g r16igKyg⿴؀t?X>"!g1lhlRhLOuw'[;OXlvTyZDN&iI/ke^)*hxd5lѹ#+o*jlI`[m* ؊YBUOg 񂔟(술{6@7`.nmH9:&GrMSL+o!-XjcȢV2h23C$C_+SA Knգb 2jW}nk P*gsjTtN͖kd$Az?,u 5o|!lD^My8]=qHP:"`kYBURV~h1/Ͱ_. 䁮;i+1_0>M)/:MT}TRCrs 5mIdE dI({wvm5KKf6_QZ8I;q9ebr$`a*e{V/zia!{g&1&o܉nc1! Bv'|s(TS1yϠ|D~ԕpR˭PV'/vFV.(~)S"6d3/gyj A5(l5}Ǟ/E_,XcgB`pگN϶dW}uTij [S}jJ-Ԯ)j74o#͑0qW+ڴ$iZ׽B{YSq|? !>YAZ_u5:կ6.U)H|ɓt/Ͻp^ҳ$%PР8?,VHř1 ]~ُpQ4;yJ}GԶaPHhߓeE~. CF;|L"< 3s./AxqReN;X Kv2mH٭iU2kcŀDKuGjռ`) v؎z .S7EPXLB`Z VId^rGٹEҙp]! z_tc:M>Ci!-v3Uٞwno88 v-Γ |8G#%p0M!k/vtè<+[;hvW(jkX•%k/Ĵ-?>lRHg.Ot+;Bn7Y$U,.6אq٥X99oBbb=}>7aX-qv]> AM&p^CEQ g!x,哜]~j,tF$$6ޡxaox鵆e4% SpZB/! :.ʫoOi E[e|Qk?u1\dpR09Յ7gBtrg/&zVX}$zxG1"d^b]E!9#Blg/U=cG?]W##b 34΁Aʎ==#XcJv=x(NI[V[o yЕ_9ƱׅLPA)G`aZ/Σ5:< ]i@W4ǿ,{tFQ/vfV228^*Cp{kDH5hV#3J2\ = f Tf>Rr'[%PkC~B;rG9F$Zm(oMSWRZVq^74RAI,. |,7.fsj_#

ɶלkn˝pql`dF˞b)[MGɺ,kY8ϔyxV+rd.vD n,AX7 ٔpX. w|Cm=VTk+JڛAeeݸTz>0'Ƈh*#\TŒDW˜"b_cbaѪ۵P盝i!C$ͯшI?xꮇeթ"ql̓Ь~+hy,w~^o?xbK8Sb^z'=l ^l=HC͐cY~,A۔E>¥ 0M.d*g}<>>%Ps+ρe.OcOm6+['3ʀ6\N&dY=HEXV~Gv<t-' _䐎o*{k՚k9&اsi } 1Zs:3ujոGݟΏule@LsW0k_{#ܶd4< $@'Id볓δUP9+t-+l^;f L蕻q/i .P?0?1t`jeo'[-[x]yF , y-mo,$eTLxenYi3,@_fK'3ϥH_*דJTO" |\8(F06f앓?^[hbgQO=IT}b'AI(1AZḒ3؁7 z`WWmSw32-vوvg4  \k;ΈZ477'DX&-r JC^c=zUic ;P郿rfB_߸:GcLZ\_ّY݅aӢ] KA]3ˠpaq916NE(`|Hw4rxGp^MH;A H֑HQ2brpqhAv[~WpSgΦΎ/"LexJBi$j+̀B֬ *m*[3Rӵɗp-OF(L_qf3K~CY:bihch7r]q0oz,u[8}eŀo r< 2vvWXQr+^!*!2EKw􊄧n蚂uv?m b}/]09D;\uzjkCU}3t*Mc'|b[r{~vI <3Μ:P;S\qHeBA$YHZw~k>&i1,X.ȟ[ψpS?}ku҆_VbӳX53zޜ-loh/NXq#'~OsUL ;#FG_;T c?6tMGwR?]! EݾgQ9)a@*a(Mt .ebx@h7J ;=ژc!\Ol9U7(dlDf7ezE uq8H5 6(Q^xߏ+QnF^@/R/ 89+`F3'Z=.&Oݎ^ZT۠>NxCɨٌ\2/ebb 8-ߏ*fP»2P y y!]s7KE(PG چӳc%Mfn)4 pJ_qγ 38pFi!?jKy@Ñt(8UvU7aUb^Z"XqfBO쿮n -i*ҩ}r@IpYr3 /,ݩAb9_7y*qH8{}K}yZS}Hd]0]DPo׼@7o$y7< ^+M"G\m_`̋%ޯG/[n\D*jAe02wdWjWaԂǣ,?%M?8ksH@~颣Jad ?K}sadx$}AgzMjMT tE:B>~20éX^#ZڡjlW#/Nfa4zejҦ+gjh+x5:V4{y༹ϘI>ܽd`EnޤTȶ-EV*aO-#U4յ>c5]Q") S zzh ~;U(DQ_U(%`ؗ{M6DiDy٨z po^JۋC'vP1'bY#{sh: k?p_:vޡB!6 , rŤ'䠘H[4ȶфXG"l1≛:C0B\9?ҘZH7P0U6$Ps^:#|xH>I2<̌ Q0[Hl&@,q92@<[͹ 盁җ3hgz[>g]);#ys^:OFs.f%^mcxӅQDuuUzC *:G\s $C  lR3u@/#zK1 &fq ̐ź>SgؙHz LEWWTF֩ sٲڥ=|!!rvٻ(2->IyyN ߐsp O1/4@ &v!3|szgkWw!Sg-É"mA4Z܃L@04\X:1 pQ'M$@t nѴ|iXsd5#0E2K#Sw(4E跃O6R@3A@[)x:.-Z 6z:vozҀ^c^>8qPqVϑ|:J'!3}<]6/nM:!ϊK%rإ_D&gCj. 8` ~ݙPu̿B75<놧%!ߛֆBsH1t+И}/eB뻘]P,V9wܤY)޷¬ &!NJ s]p 3s 'ji#.dRja I5cT{ $OEEFC_}]3 =w2kΒ;{fg@fw(L6$@{vPPNDb*]ZSW:{nvNNf\sQi,usgbtw Ofqg2D1 ՐZsH4%8AIq~AA[]l3\TT[iK qSd뒻TܻK#gƋ8FjBGc'0`f䇔 x?}sKL.Tmfϻ-( FVݘMWTm_~.vfbu7AQOSSV[|nϿAHg)l;0-#O{2q\h(F‣T['i𩰯:- h\I(kcqA̓VeYLb1. RW/51V[Hśk$yI|BeThCߒ 4jL^c4w}j*aE4 yPfav;S g⫘{́l~ׇ04U[չqwjwtbQ*!^ ӄ(9˔,g YZ