knot-devel-3.2.1-1.el7> 6 6`d63!}|J^>j/5,dch< j/5,d< $㑃wdsu8ii v 5ٜ>B$/HUݸR:kaM ,0cop3+A_}[31zQ x 2]V~yf?+gyi]3*{A  (]"} m&TXHbG3@T@6p 8m/WU].~0`1q})F8Hc̈l ܐu`Iɍeo^bVj/5,dch< j/5,dȭew3M,p*,VuT^c<4F^7bWVXΠHLpX A{3j~Ҟ2Wws*N~/l̩DQ6i`fvB"U0k9򹴬= =sWLEO\X\jN#)t+P~a ! Ccs jy&jV։VG'5O!S)Aw:?d   M &2JPXWW bW W lW W WWWVpW< h  a ( 8 ?9!?:-?GWHWItWXY\W]pW^tbdefltWuWvdwWxWyX Cknot-devel3.2.11.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.cWbuildvm-x86-04.iad2.fedoraproject.orgoIFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R . ^, J 0'(9K< - tgj U }FX kr  L >#"2 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤cWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWPcWP2e4254af54c053f35290cb46ed8acd81e9057446b2d71ef8b911103c6999cd42b4fbe48c632018c0e15b531c25797c3b380cb0ec35f0a597a1f1c94008220b58f676aed7ec38307f1d7282f86ec4f894dd4875c2429109cab92b9621525966da759f07a1c22a4825047d93059c1b52328484334b7f8594b3511234325224fbd8bc13139bb264cedbb87f2c05521f7485d1933527c92e8a7a212c6f8ef2464203dbf9aaff8cea91313f84aa0debeb5dec8320826f796327da580a004cc05b2a3bfc9daa3a1ec734614ff5b96508ce9194e3138c6cf36df83f5a44a57504ee0e498e9c208cedc89ed277c48b97086e1455d2534705619218a1229e97234bfb0b9ec9669c39509cf8f5605eed37c08124192b60ed878e4f8707fb7689e1c1c1eba292ea22cde12acc55b67f797071c03119cac1d0ecacb187646052b5ec9bf692e8f6cdd36b572a22aea68204f86f208c5f2a052cccfe73a5430b0dc4dbe6a9db0bb9fa74795774ffc71a964f8b7132997957fc0ff8ea37b1f21d1f49c112b28d74dbc4c85e9a17c5712cfb676499f0ce467e72b96b61e969048ec42cd43bca7e79919f3837757036c1766ffddfe13b4756a180dd56c94acd798fed6d1d35454f28c3e7b2c6cc75abeb22f94d2eb7162ccfaefa2a224dfd135c8186472796d057e9980f4a8ae22aff38d45ccbfd9ca1f68878a5d927a6f2a269168bb14b91ae969c7d3c4103bfb975bb72df32b83b0f1454b68af76d0a322e6012bdfe33e314ea56ff55880afcd6f267f2ac36d63e7d21c4c05a94671242c2b98265dc033f97ea792fdcb60c04de1480f588d132d0bcc6571978b64f74ee1e0b05b68472b088f1eab3895ae700bc36c8bf8e84cc135c7e61013c262a8588c495818ff6beb95cedd867af608031639b271fecd0b35ab0054e67bace684a983d9c96599ea7ac28049709e7cc98c3de9f322e232b419b010057a85ae809040bfd1d4f7980d352ae3a6573aeabfe39a9aab4f6bcdbf0693805d8fbdd906c78ab0e955f39e7eea5977a041757fd765e25974c4b01ba40214d4cab0626fc506a1ad7a0e8577b3aef19a92568794f2687228985fef92941424d5d68998b941d1cc640079e10ddf99a12bfc29094502ae508d76d35c66c49a3bbbfab63062a405223724bc545d67b41de48e28debc18f8ece4ba5df6c8fb7ba9c9a01c6388227a98d272a9ff77ed4ecb84c0b45c1a06bae79ef63c42672bc930378393ca1581c00d473c52452f2175a51ec44ea1ee38730477013bbf9c8983c5985e5e14aed6b22854ec16f781184aa6b3d097191d36950be3a402aac76dcf9f532c6dfbb60228158cd280701096ce5420acbbf966173cb85aa9ea97c10e7674a09c0c7ee88988c66f4f9b30c01100333d484a554f47b5e1b3c0d5a226d9720bb3cbf391fee27b1a70850972b4469ce0948db81b62373ec7b7f48dc28d3b26cacca029b46cfe7d4815c72d5253618e526d5f9a68f1993f6d90e0428b4585ca5be835eeceab21017198d81b3819c40046ea8ea5eb2ac45cb096b58ff9108a2fe6a99fe698f42c2a22c0b896a9cbb9cdf4b70b434245ed008a00c55b022308f1e325cdd2ccd6476828068ee18c484d9aa5d85a9d55ee1bcd8a6c512fbaab8e00b5a31d025c978aecbda25a32caccf45d637996c0f486d76c5da8c5c6407e14415a2cf13573fa7c7b42f7249d1ac676295832fa4819eaf771ec0e6d899266644885dd3b825b7137307935b3ba7f3af24b8b3536fff1cded7df7fe32ed047aabdbfbc878e4a090daddf8cbcf961b104eef29eee38fe1e919f28aaf436f2016c2dde4533a78e136e9ea526fb1e246c51feb8cc8cf570e77e888ab0bc525b95a0e058411ab8f82c16ed18021427d2107c4a2a3b1e82423284635714ee1a820a82bc17197d1334667b6b06ef1258a93c21649c8a8b4b91b4063489f544e810bc10ffcf7834cef2549c53a9b6b81cdb937c0bd08f121aba302841a71120e7dd3194c3f3e51dd2b2db50acaa6e0adf5a10b15d83dfcc30161dcdbfe3e0ec3bcd4ecd1b35415214c84ec3728b93cde1d58ef253337548c27d48246cdfa95df787ca6e01968b1165e23e9f213a3e8092e3d55141db8a229a257e33b5b78d6e416ca902cf8a68b2a28e1e3e89a775b91a6df6110fd6a82ec30fecd5f27716fb25bd2f32491a381a61b4864685d60c8d14c3ee0e1e6b27e0aa14448e342f11453b42f4e81202318e81f820e8fce142fff6b646119148bf78d1f8f228c157bc2fb5908df7065f9a59f5618906612165603a3e48f02b05fbcd16d484dc095525cf47421ac58917ea5c09e68bacb516577967c3a2ffd12022371430ab2a2e74d275401c78b36c467a06a1e2ced136266ed33508ea1410b305442980bd50a6e6bfd1a35417aa5c74316e52f1ba5304d8a799a054e935110765fc0e926c5496ab912b4c7e7406a3aef76fd0faa559bfe6f95482d423e0777793c329621af1ff50cf8ab6545706c7d872a2f5dec3ec487482c97d53ef647c45ac407c04b6fafbaf42aafeda061486f3a0cd57ee6661cbb3472354758d8f194182e0e372d1c5b0c964f5b0e272006722d7b9cea85bc01a4a7b2691463264f07587df64348d838b9fc3af390639936f5714cff3fdbc1c7cb98a4e3963d2a59e37e237d02631003298e74a56c98121799d00246d344841cb4a4e1cb60499185a8bf7068c0421e33dab3a30ae46a8ccd14e3e4e3438f3167de92fb6d2f04ee6418c41366edbec6cb1a64da831dd7dcf418ec4a546820b816a6dd26d37658b52c1c856604b27f9bcc05a01059d5fda2147bdaf3264bc8355a3e6b0490b7070a727c033d439d537ac1bc5636d5fdb8a6cc17007197f83ca431b327084bca54022011cb92d30053268cbe50c1a671b6dbcaa63b0b4fddb4ddd9c9d0e25a25bd07a36147c4055d7495e9907dc46930b276cf7b2ec1c5c2b3032312fc404f217416a54005443f8b198f4650054f59842a247de965fd8883792388e3a6cc74c05dcdda579d46b8dcbf76c7f5cb1ac8982be3a2d0c294d411b0f13f4fda39ec1c710b1f62c1554b1615ba2f62059309d6ad5683ed7542f241ffb46714f27401e08e27196835c2b4a19987f75f22487017c8ce781bd62d82a359603defa075789253589ca98586eb8511a6b978b1af32d1e2ce20d76f3842e86611d6afa725c7a32762430264b6eedae0d57b8f993312897cbad3bc6ae2e252578854fcc5c76894edfddb96e36ab4259d138a4fd97e652406051c0d1f105bc2ec59a550b9571c9ac1103dba8ee9064libdnssec.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.1-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.1-1.el73.33.2.13.0.4-14.6.0-14.0-15.2-14.11.3c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.1-1.el73.2.1-1.el73.2.13.2.13.2.13.2.1  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,o¯] b2u jӫ`(y.?zC "<3|jgbÏ](r(׹_ʘj U&ՒlfbtQ@-98›#EF5_\qu|#lj{=eMh&  ),^%.**tGžQrT쀱's0Q[&8MqQuhs^ lb@P@%j\Sn.C]!Մ`8^0X+z Om.jؖ_6BB4q.:N iQ0痭=ˉh)b"} QV“eNi^X> r+|~+%6<~Ё= e ԅhWvDK~? \h̒vC>Utkg'k;恵XN|6] -nyQE0`Y!Ki+C'!<PW">pK6M](fiiS*Z\taDf_ς= aNsb樭ebuWĽ7'\7)p`={+?xgv&1hLj;k565gk>W=yy}!E~8K3MmˢK"T}"$OgS~~` i67X@m]q1`PRP۠;NNl.|;A˿+xa=<{BПJ^X @E t_K8iUam]e4x:q}j EX[ L+V=%ua:ڱ˕(6@Y ԁw4Q~گaK= t5mpǘU&we_+Q Ƀ! # d''Yco>(4k& /sbԏ2ΗOWwk|I۴ee:hs-=d7BEGVHE/ `qTU%=MaY}IʽBz/̏ u)Q(_'*)a"9P})ٙFї0NT&DdhN#Nd*JUG]K3FLkv)tPY:jcx 'Y_)uWR xҬX38QB c)fj& &mq!{ e,8}1F$H'.muZMCW50`c^1!gO럠 h(5dxC}$͚먏*r?[ni;tRFϰyk53,XE%{O32*wۛghͅ Vm%-%Lk ]vnU@4ҼH W!9I *KG_ yî={ jÝ pwA6 g[l/ 'Fޓ9x[c=7ю|߈N{imK.)d+s@a*gVsZI4@ܮy+)F m.Ϧ#ҍQ9Wp/eZĜk5IGH&%"q3BSqE{h]e9n^(f>:s\H ju!eK!>N85j guF'_;DJ_03X%MyS9o$cׂ۱o"`~@0 F_0"6KPoU?UQ:qA+8LP=,њ+!zd0s C:->=Qz{xs+dMh|GZ@\eE3 zБI(^I914T"Î ʹ*kvHYSQɆ#ː\_hWh6%3&$2Bί*p%>brDҚ҆c fSQRn)B%: `\J~?чm`Aaσm}`&:KJWv!`Ԭs9Xk]sgC_`7%vMy;!wZ ?_khuh+<`cBvmx'OSXI؁g=>H ̷޷4KK3/0BfIt:&rۖŮ;{%y`袣%^DMCNt#F1K1oKxwP=ZEo5o2޻IwE[grwq,䤓6CǂDT~| )VMYD@OE 8iZ 4RDj^/Aᣥ=S{`Z^=nT Ց-ٸ)uLiW} 7a97Ë\|KԂU9$w|>Mf Hv4'-.3R~4 i+BNO^*Hu aN#^Ab9t0Ξt"@4@OQU!>:hH9'i?i.e{OG=?">P6Ėue*iCi +E#rʋITdh>Bf i!Sp OYUp/1^(o׈s<ۗO×E\N=}إq∩*;m</5O::^X*HX=9ԥz8aLh#?ϡkXcP#$/D9vZvܪ̽tYu}q‰s s*ekf &KA?VHV`h)9A/,~C dH_4|:XT,( ![)\&L#(,W_y; ݚ]siPr5mw=0 ^ؐm1"\Zd]Wjd809kJՒEh7ZmU(1a Vm&hQ rڒˮ1u dԺ:9-qYjb™  ,5],[Mt+w7Ϯ+X!L⇏#6.yka?g]MP\z=-= Ҹifo%5&SV@5ߤl5;xJ|pj))VKg ~,&온gRDƿ-';aG)޻-UMe}NPӸLdA >c B~204Ivr>:]re+BF| 1׋ S>^uf5.'VWgq;pEy"Qޮr>ߞ ^pi1mRT"*%WEP!yإ/֌oY_6V"Ƈ!A xXl]k>N<}KweXCx TҀ9i8,U+$3%0B/TyW߈ӄ?JȻܳ\*~N_04rpIkQ_0ߵ{z^[|1'>DiZ/uHs)V<dKe[; YASZ9M$ l^)i"׹svTAlc5~5.9&$/˺mch,/G+e'Cy+AEơް"`0GZMB ߼``g3@.LnygٚKigʖF{wJ%!8㛉_avnX]8J>-ߎ/\[c&]6Zq$*ӳ/FU͞/$uA(s;u \ y?J$%LWw2͌H_0BEekЦ- 6¥xH8S-?SV}xj _8/DM?(3Mz_Ԗвt}A/{LGkQejh.H,$ ":wzV .7pRijw,5-@G>͓v'f B(* D28L5)򬫆%jWӥ0gH Ydx!%*<֝ƽtM#3M+KƦ?X;&`UW\ im ۢy3#JTpm|y0xP;nCK>Ӄ e_%Vw.` ]yu11E/^$No؛m>;+.U= Oa8Kf ?I A|,A-Kur'z /žckϲaHAlgVͧ՘Լ43NvueycaaK#Rlr˳pݾ7-a?Ԣ}@rk#=ɯI 2\X49~|U(s;6E,,{.NPnBW^udfxBI8cP! tAbf,TfSioH>jWX8)xܯ^egO.0Qud wVE79XH0QV+N'xd<:oZJmhi0oq}w^al-;G/R8N0ME lF8!(sbfpx)H^9 ((m>)5vKR{xs1c|ZF\}֙tYXqTpLi0>VI$[BJD ]7jT =^eP&!T 35'>-礤x'B"|dX qsZl_rQrY&=/*e6AMe۔_E e>\5t3xڮb˺uk6qQl*~"j~jX8r(6ie9wbX\'"zff\a &Eŋ)R {7g0L.c2}{CTmL(KׇA3rord9#&mKe&{Tho;$25|H D6cg"mdIP[Cd^Cn@<=ЛL?S\fː\gD"11 ϐ[h_nd&?l>94X,r1tǑ$޾Nȴ*]*nAozTpCާ N3_B>Hq`\AzlCp້95ȶadZ'T(+V#'̧ojpLI?Բ9 wV;q(|w>sCPlNIvzyqH֑tL/ק.\XיXpR3{&ѽpwۚ5q"O87($@Ly̶hYglkf FzO -PXx|<"5N^ ʷ([9Yܞi}5raZ.T.Gf"13&̓F7I0#sOPC6%gde[l=rZ7k?_@{IM$v]).t)O5g'/ĺh*}+Z iW-vu dCUUN0@b&WhK"ۯ򙫉Oz粰Stǥ9Pݢ(ٌA^l ]SM֐RZzӛ>9{2s2I|+!y]\矛k em6^,ʢqx#ӪByR2]׽A1Q\heE2%lD<% {M[5x?0sEQKxc\la,Ir{.c)a tltjH?4=P{^3X` އ1g uxaWL虶,V<+3P^*Q}#viSe1iˑfHQw&ϩ JU\AT4P~Ms Sުr =t2zuX<.N7 nvT1-ղ3czw/Gz8"jk7ZĜ8veB",aZ9_RPqF^Ī|yRW>U4j%ϙe&ŷ6ٺםa.hKU'2VT=bSN ?&8+\aC(!IDr_z.V{>M<Zn^Y*I}ZJI3& r;-cz@P$@-~#*5j@-%(1AvKgWboq놫 ӌ%>L!$ sĺcT ur| R{`PЩ z.nNZ;"g3u1 8;Rȍ C*˹C :ՃF?˳!*ԈY`\w3ȕ`jf: Oxߛ$B`]d.ojSsontS!)UKXr32<1֍Ofht GӍRQ?Y'{s}-ql\=r Ȥ|PVߋn dc_A $ыU)̷2#s|wQ Â|1`Ȣm8v60fl e3%\7xǮr$_3;f$R=h$!uWՊAY cEA\kpćoJ|oJ}2'El܆9n;#I{QߪԚ|6xɐ=nUv yPpޅښoGUx< ʞjk ) jO7E{P`SofIjtnV!sb\ B:T. :r#.5_:M.ouq2;wDIK5c`Dou0-bW,٧{"b 8:3_3PZ~NlN&؋ #Tͱb:Y=ˮv_{|Dkm<*_As9rԴ ҖeQ4Bk]| zA]Zq\wbu@$qWz~ddvɂyQJz<)M/$]D%/鴠uwd?PK؇Sun>PWQP9DPtwH Kڦ{sJ3OIzDݾU539up^I!sjm5i+ jogl+ Z#_92qZײM3cȲ\"ho\ze68zTڄsU;<- \;&1ܟ[n7Fͣ/w*y&M{pV4 sJ)v\֤iq 7Jqm}Owx%@iHWaJrsb)Ūԛ1ɼ9m!|$2KPv CYLGfoq#SG J{$L5;Ӣ~9-TyK"NlPܒgpjU,9Δ4B8ŞY]E(j3ba+`o#{y2 $Umuiس y𠋯"l劬AxTDj{f0+֪dDzҶĄ9$5dtyU* {{B*^ c'KM{\&xo*ʏ-\ȚwRF3b^TSY/SJgZF%$;/ z ̨$CC;0g `L#9rPo HgAV\hs HBdN?g޾rf>{Oo-NꤡK&=@BI Шv2i:yń oEo'IRiwv`av6^cq/Њxw7d&%rnX:/j28(\/I8ӄק.^U)d/Ω.YG\^yS- ZS35SEZS>9cU8 Vy!m[aLν[psj Zkgi͏zJT,5xx>m|XQòcT!#l lr*H?O)G:{_B ?3~-a,0`Og#l|[wM`ᲆY.o_JT5=03x@ȕ4x䵜)ɮ@=?| m-y}8 mkRJ ΣECih,1A-rߒTnb+-hd<`% mLBQNuˎ#XYtP*t:ܲr5j\Á͞gԕe/ȤxTPvm}Ƿ ,p$/>ֶ)kwҋ|&euvi@Req$E4dЙNf}73ŵ<x[>t9sd{sD\g/fMEqsN6C!\&3%#r+5ƹӅ6c [d58I0 P.^kBS+9cb\Fe+_rb/9j{˶g@^,ULU0UBᢌKBܮ-]$8%n)u潸gPٯ֤.;iy[6\M>db=I]((_fS(s5{tPGA"YcWS9w:|`L!(ToN\o?=&M dBwS[g.tD1"̦ٔQWaRa:+ˮ-XGI8^-瘪+ v_3h? :eX/%lg%3OEE ~M#hrσ-05h /Nz8z_dld4PBȱ.~z-εyCP-yvf [F73}8VDoɵTX Iq~ d M'2rw(M׳:}baŅL'F;&;L"SG$ib^Esiϻ4 mZlBNmkeoa=ycdVH{B.is|>CQd~L-4.>T&fswC#Nl!UE(q-䜡o.3ΧQ(Vɺ2M6Tj4£<,DԾ?Wg2wt޳0Oq8yT&VC_LKm[l hZ7.R P nocfō]n:χ'ZFz-;h|>7F,om v㑏 ك =~k( eHo˴EW[-dn&èuh~[P9݂ Hn .j ]%Fs2mkO ~6 9jqh`K@`$a_Lc4HϪ׸g3GЄ'BU_х v*;gQ5xc%UfIEj"\-d<ACaUG~]9JR<y +i2y#V7?kI%;!X%$JGom0OҚ*Lycro)WI{K~sUI-];WZx9f(I*YWcG] E# }'69":YߗI7 NKd>jf4_vI7,n! n/̗53WkkN G ŚcFL*vzF_%Y;q_9a[}zש1ymEƯCx ^@ŧ0:4m#F]ާcږ`kavgORPo*/b0)>_ ˲ȥ\Lj{ A_LJ[le213\Ex&b "{@Պx#c=Cy!Ctķ,P^a6R*hJ>^3"kQ ΄loT[<{[8&g9s.Ol_`[vSIAdsus:9k!t ͚Ǫr|PtVa8ҞKa|i<~GE%s;d3B[uQ2t.$t3J@]p$<,F'oݒ {=yt+ؕ[wڤ?H(y7퍱s"$fky=И׶25~cT-KwL;]Nw CkRvnVIZBȖ2Wh ܗe 8Qf`.KS0ٲ?`HWR5ߩbpAQ S9luYK vi$ MwrOF|1sDy}d S/'}җƑR_NZ&R߼6!G+k7LU\ ,s&SVvH4ch#3nv9ݔu(Iu|!vΫ)t((f5bKƹmGUEp91cBpԌ͆[18`:}e$.~UF$}G,`n 9n OcBuH]"Klޫy|h,eIע^9u5vtK ?=!7U뉉Vu:.#AɈŬ箴@VgW`'h,s*0hȹank_q0HAq^=J*ȗV.=e ~Fm3 ֲ,gB'#!BpYLZGxR:%v;0h Vz(CK*d30:7 DRP.Jia^Yh_VދFgn.ڭPu}a:&*}$9ҳ.w79 20ܜUp@ 6)$YDbUHyA&Zn~ʄ%lJE4o~g*D4bS[JnB@;U|DyqFusjojUDe~WC!]%w(|MARG=imW ϨAy&9PqΞjٸ"m}/ʘX@dK`Ǩ%;׶ŧMa߬H>ee|bYG/4mJ Fr&g~%v֯9νcq #_18+mW@,!;Ү-u$NçVlj18OK(6I S5> )dkq {Eo'$b&or^=&<¤A"DRI ^ $ǠqCݡ˵Ĺ D@yPn/:_dbxZpe}X&X)̅W$,{W^,A ?~6j' S@-&E y/W#f08tfI?~ihJфIODUF&݆QaF~i%:*Hgz,“>|mǎuM6kN!_+g{ss G:cN1]ʴ܄CI|+*t:]\^foRkz7#"<6Scҟ7.?׷;#Lx{wa[vi*0PxSmb3%|puۉ056}v i/E|A*!VIa|YِÕjV4rYdCʆ-z@ܾFj{0X7 =~r"{VVkiJLتzX- F-nL j 5H@ݢ2VHX34Vc @wf7#^Ԧ_tr9`$dR{XF.Bgo4ÊУH=>*Z3% o3E ?jаrm%@6#sv`s;H1]3soK2Ֆk]ϥO7 0 <'uw|7"4EgT <| GY#4U]7u,[q(C<`*BfbaĄFQW*PƲ_'7(G *̘Pc[nmbq4U0| ]Ѹ)HFʀMEӰL@Jpr58sE| 4J(#|dpK@݌}jeތPF鋄_%f/3")08+9FHh=j(|+Iv\G&Cd`BBD<ƌLp;xzWو9I~$diż`] V%-xء;@DӆIg]Ta1.2n˹]Y1g_i_яZhN=˱W-!V|I#vTeFg`r \ %!({j*#^ش@3Ҫc ^s1~%׽-AT1L%4HHCv*bA_;QU03m4OHi pXEWNU腁_ oj¨IrUZeI֖U8Ȳ|$λh̥{_##&1$ǗR6 X7d Ơ"UُlĊU`o{qtVjaVWK0 L0lS!sSPY/E :I&h'|`]B IM//C("/3 2JlߍdKvJ/M;Oxh2:fp3SҬ$64pD= %%]t3חy 3ˌXKmӯ_еNjl8T"I] ule6F*9[73{T҂M|Vu oǯ`& osT%Ac(yӀbH~kS رN{xen5/|PVӫi`&;(b #AONY=#VI!)Sh0 G3zGs Iȏ;Jec#_2`0/ih&kqD-97 9ݓPH͗#9>pgԱ5v ~oQXڍpKjcɕ6h- J@"s5` N:[YZ/j}$nͲe1u^m>'!ca $bC_$F0mFW<bHQlpyvSXj~D [((ox}_fI'4p͊=ԗ5獮pf+sx-Sx`)_yBC lخVJp*m[[sA4`tV+ݱ,죳Osb3@NZz$' 302_㶞xwbK52JEرidwP̪>ɒbts¼0xBT-ZO+j3(!f4  ˊY'3y;0N`^k}p1?GUﳚ55|/c$W_ȭ_Sa1K7N-u[q}pn1 ޼+ĽQ.qƸ+|O"H(0Wi,lGy, m4 ?oD5)`X ZY 2sfb/W'Zt~)W|(4 OK2ޙ=gAr`b0Ό1fq]w֗I1Sǘ%cʼiTVy;w8GV>-HczKXYJ{հ=Z܎;kڛG->v_D0PE-(@ͼ#8^H|W_ի@[nC$R?pGvn]X)vw;k@"3[pf?fwdorT[O{Gmkp8.O_l2}P"d|ea󬡆Hy z^zNۄvJ*/wDƗ1J>CfZvC`R]~ZkDbev.܉O(Jȃh?%yHWf>m4 l0}0Lޮbv0Ky}3o^ :K緶/RXqeR݈IdϏ^7::{#^*+=@ r3bN,g?Gx'DT}d:;DftQ캚}T{V 5fGcPs>^EgW#'bڕ w)<_گup/M ߕ&x!1U- 1]Lw! Tq*hsУItU\F@5WɒQ[䯮Sbx,7j5H1T{ԯ} Vn z͊Ǔr@;ktDDkͣ̚Zܣ`y771v9d3SЇ0F-x!h.S-~H4Y$סc/񦗮>*pEjDp V*j қVSAg4a{^K[Vf-ExDD`5':U k 4YY TǺo $mvFz@ϥs>:nzjhGDB#?S~ cg`/&UM9x&`7삏S"Obkv;jA!{&X/d* \Tbb`ާ!0N{3r[_m$yxG,U[w(}&'I:@pt m$_Ј(7T'y? v!Sj -sٳ2 qS*vA#_I.AV)a8ͤw] 7igW997tOai&"I3fMBϿkY7 GvCNN31Zѡ=v̟3/ѱT5oBz<:!R QI3uE&Cl/ MW&Gu$ӨY~%>eBeAdA%?'P2=LE4 0 k~7pIg#>sH1(8m2(RtI~T."36&Ǝ+Tސ}0B6^vkQ|sV<"]+i筚?#&Zds?_dm[Src͛ZЇ̲8AvYCb} L7Z[S :l j% TAiП}))V7E{54  t!)7ǘ@4OrG8;}1 EGj7o4^KN{Dc$w>z1ЅLY1Ctcjo&9IKZ)0j vgz \X^~K4]sq]*΍M;)̀$T@;?ϥ2<~چ2gxYB )16I(~ҐXǰ"F$kK]Q$X9ĕL~`𙸩Z}~]3r(ܥݪSVmx_ "'C55H17+]7WV}gLm]9Qؙ4x hEs|~bN1P;klxC[[܇)?1Xȴ1R nsbI%:2ξV.H:Hb{YYHY]XGHPL\Jzz實p\a?=נ/&*ex_"{N:!NU7 ̤fZ&l5ǀkfHR-BGMS0xo} 幅C"~V7Y( ]{Q| xܪMmf%D{Eh8WƠfVj&鍭${GLj{d$4 fLцEj\seCZ/&K-#/oqլ򴐕3#'w V8CIvNIdGLu 0A0ZاrʜlWpٰFw5,&q/ o}@O[w6 Rwٙi̇} ]FY9Urm_$m @NNY;BSs:*oz0tNfA=_ҪB+9BT~#$lhhpnT#|ÐEUpfݼIE1-ƺ|ɮ,h`ΒgDz8[_8\{}d'I#Mg lUv+G6׍MN9i^R B2]4]Yg٬$Trt{Áe¸ַV XTqS8ki1:- fr)/٧8mhC\UVcT8ƺ%^/:S~a@]BM9t%y௪׫{a-_\"SBh/OYn\8')@<?57h@71INBZq.|JڐF's7hHXٿWg»!`ymp'LesZ,(шn6T>cJ\E-4|fQ؂|EC +rLk)ӬqFɄn*#tAԫ]ͬ`^fegxh7nJ*qjw_YJ`JhӶ٧WO0-мκGhՑ:pZqnD??qrŘXo>KX# Psjqs=yK!4mG'oд95AwBq.3E[6%عL@j KZͦ6J Ӡt/]ҚS1P^Lj\Y~Cժ+`4`(KE`,U*=j$(+qpyJ.f&QijY1xLWΧ=B{3vQ$G ǻ;wԾJ0E ((r@9BNo<^02h)%hV3.1N>|{a9IM=Y !D~ =tDf]"PVn#t&*?R0d}"/odnB;6jVstt!VۈwGta-}a&&t ?-JWPM{4] ]=H I2ĭ2׮HŨlk-y9@yxǁ*&eK0デ;pQ{dm-4[> xu b%VKS %`IDߨg;Rg3N`Z *&yًp g f,ҷ)h?)H$}*oВt@<|秧7Lf傏{~QFbȞ:mQedYM,E[%~C>\Z$O=q7tO_t#&)2f1i¥%LqP5VX@W LV蒣GTV= G'DU.VM=|æmQot X?A+|:Tg_vtI۽Pw# t=7?𼧊ku<:f[dj| Īss,Ӫ޺1kcwcU!ȃCMZI&O;^@L\@ '~Jnv(o;1+pT\GtwGs-g@; ӣ(E ɤ ;E4h_[BBEH<{ds}̰G7]ՊX*(upDdq[XYx@\"jL5R7 en{4 58Vbd&)z5ȴ+&hT@l5*I{/ 1FRYe'#VcǴu*;nb Մ*(:ggwvU$,6'd1@>$9 h$ $R~e3 VLaR 3Gͻ0nK\ep*0O³ JCcu0frf0:)?;𴖾qa^[¡4HL<|K6dGg;rJpN'􎖰<Cb[{5ѲMQ.}}l 3:)Rm !Id(X@j9_* }g^1o? S\|Ӎ6_-_/NjZۍ MˌJC;) nd`p:W`a->&aWS,)HeH C h 髺Q,kZ4ҬpI˫%DVӇPÕ6e>̡OF$"d1ֹF($qTpLAF_  Gt¿afbp28WwWOc f=:kLR %FsWל1g|. Frˢ.pe4lovz t5t31a]XO#0%1K``a?c&c[ :|2DU!QvUPLen> GQmLJ髂O<| {es,'N)\qJ[`@s6#>=]`e,wI?27="IM'ˤf0fdwI+s)B_g %iK#kv<ofid3tA oAAggm;Z:m:9oɔo/CF1ұG1JHUx\-e3黇QmK'a/z~v:?HC hA)\)At 6 [Pb\wA[V,ap+y^B^ߓf=1}W3P^~XT'ZoA5^$Afqƣ:c,a,es bđ6,AG 3CgvvG@&uЉ*Pa%q c=U"/eQd쫁fZ1Zicn`HhikpxF ?RY _Oً`DYRm« 1+~6|ҔV,0nбsz9n7T܎žM0ފ=,KwkPtC)c7G r,>˵:JFStFD9 @RgA=vֹ]4/RмC{)h%'+)r+ 틸9fyi U xPC6ܯt qŷъߡz.mubޢ,Ĵ1O' 9KzGDy~S!U4&c/Hˢ)r>蒹y=G ѮYD "VS ^zQj}Mvi%Uta';j0G(o6;>J F~^jF0F Q$ W.5: 4xz )i_l_Uk*ͧ܏ax24 uWh_ QS_3р  u׃paߵU4e1gwn :x!5sl 4ՐW ǖ0sHE)[Uܖ&1~B*JFԡ#(@߾}Ռ'| /z͉46?ȩ!~6%.7 ~GBit*OTt|>W̡ˆ;ibƪ<_r`RR4?TBrLi:A?T $< *d=Ɩ*GSGsݫ =.#U.q Ìb8Q5u5.5;M IRʃ i !blq3qD$ha\ Vv;dr1$7cSN!iL*E"uZQQp/^S6b1VsdpߙjA%ֿ6!h fCs[3WO))SoeȵN H{7N(W13*\֐y7clE1ty YU9̎BxyG, iv&I'L*TUK圄lw#i?R<& *`x, /Y~v=?Pan~O/Jb;2&=:i{S(^]lᢝ}%ʐsbh7e X7keu0瀷}NJ@=-((?L P@lg<,;Wv8RkH ^5Rl?U36To[ڟ@"Θ0cJ0 vTԽ]bN-L`%:&֠XvYa?)%"s ~$آ.l;AZt\wl+`!-OaG Id;$e74R5ӍW(,U&>P2f$]4*Lp:5rWZg;B b軛@T*O;|ZM6y eP+Y ( .ey<ʼjKWr)>\I.lka5]Oh9(w'.W@0-. {pzYˌeqO(W\aX)+Sx-4?.ۙR8dO§FX(:bS׹\\:NL _'-сwX}G j.5 q&ؤ/$B< 76;r|e3]aDPxql"ZDon3U7΍.PIsG@aeu9?Ovzc`fw|Tda6:w,G[D^X>b9獩CW ڞ5a 5>sX᪆V|dxn޻1!FVglɅ&"Lx/䥫)f,> q :?Au J c`:ɖ=k6^!xӕwS|?~ƣIcC,–M%zѮTsxHy ˬ&^,[lJcp` d2*'VνūȊ3 Fp lJ@$ e\Kw\Ю *(g> zHy$7B*MuU9 .biTDQうI=otM#EWeZj6C箙S a-\Y\qXSأ]f3 OV-)s22VpJn `R cQ X\Uc%?g b_{]TUPҥ["Qj$Ե+kosGqX嘃5~knn2jY/.`X$Rz7rXgr#yU p qCu AD;%$uzK#Шz@'GPƜӭyػ "md`(Ó\+G`)T@׺5kJZ+No)v]m<|A)S/|z^+s uvv>Zg |V8fʗ*#2L|Z`ʪ'ҼL/_4!֓#N4qNI'_-i*\ɇ Kwv@Ay"Jk&emͨmה;,ϕV鱓a)Z v-u~'9NUW'Oi]Fa|hL;w˿y֣ Vvua@8IoN_Jf@HAGxlpe |_[X޻IO(]k L"ZI:7Ͱ*u r}r6O48rK7CqVPht^_4\nc&@Slk a!@AUKJEHMR4?jkNaH)ճvݜ LJK[GZr8Bv{6Ca.֩}G,% u9i0\~ۭe Xmu$ݼȳ!j | 㭑]˜8z;DEblo۾B`)ܤA!]b| ZUaѯZvQR4dJcCNJ| L6ise&Ap;DyVF_{uuEOoh25` c+[8diW5JldnԶ*=>znvpb$[ nJh5b`@k7Ѻ7Ey"| )TۑPg[tE9q]qn$ɋPN 2uF6靿~~J8o|Rm<==u˽R7}f<}~ݼ6S6Gm'isBT幜uXAiɾ:fX +9=&v?G΢sOb!D&|ݳռjY /yVܶ?Lkmn>hSZ&^BnE?uGQMd⌆0!g^g:5#§'d'ɸ2):T$NJxUVk~jNvD~)#=6 fp2eeOvnMBczO»b=0e?@UP]kdE LB(?ݖFi\"/x^s28ƨ ._M-}Pھᥣ9;s9nW۩GXʊTYE!i=#{9Ve j=bYfcQVXH%Af{I"g*El1{-"M!*'{жl /W"E[dN.Kez-x֏rԭ6L8w8醱0Jr(/#z<;??oyɄ5b*Wft!D+PI8[RF nA4jg$Xw$Rf f\}r#\Ƭ٤} !˝4H07EÐ A6-yE|[ +\q-/j2hMkV߳X$ZquBg-Bbh![wO!o|.ޖh|uܯx˥Eo{';FZae^{Bi Z8 fg6u^6ǖA.WPU*Q/,p.?xI>HžH6RojB.@c_vW\S[ϣ:Q6W^F..p_ݬy B",b6(0%.("n Dm{@TA`+Xs oE>TFuѴEMle@{?81/M A+/;1>{DZIirryr 2] 5+zeTu - P;Gb [BPS3?t 1Ac`@w> d`tVL Df GoF:AcĬ|H.; 87> rYߌ @IRb&!̶3O ܀ӆd[b3SWZ\5qPbob_R$K:w0Wwin!s~x?X {ZIdcq#Oȿ㍄ 'Xo$vVÒ|y8Һxq%݈k_0Be!ko@kj"[Rx/qm@,q"D`n@iky,B-q9$@:(0*C> m=}|zm:`*s8knIS\l8 Hv"8iF.HL$Es#FH4]beJ^Ջ{Dž2t(flCTrM'0n-n>sϘ_dlؕY _R {]C`P*V$F'G>V9Ey~)snvx:נ X{CW_¸U*孙yI3oƐ'<"(9dcŴ?ўY*'_{ 2d&ЛҞ*9+ɍ0}P$۸D|(^!|-҈ e PRBD\alS\Q%/$Lp\5>~=&o|`Z%\rν lC)cCܼ26 3#up܆QL63)Gcb6yW* S+v#"^d&4/V)4Dd<,H[zh,WeM,ֽ, Wow!#MlG)(mG:A$֗ݧRWKJli,'6BLlrR \L\*5S `41|Aaj~U)mFCbLs 7]n<!`=:X@ܯ7>#bR(Kۜ1TJ7͑].EUM!Fr&LO :@&-{E!!ARズ+m1Ȋпb$ :5+PqnO#"iYCd%mUدK' P&O.ox0y١vZiA>2Jj$2vI]D\7be09An6o"0Rq/6DŽ'-#qRP ɿ /9 5[- R}fПS?ףH S}do(wYnqjm_5epT6y):60wÒĶ5&zCJNznBbi{/}D'G]2ch?˱%Dy'XÏQ". h(+Τ$С$YEuӷQlPg{D3~P|ݟfoWf 1Q|9x4Σ΍L>4 Μw R)[_t7ƫex̝?TϨJkCr7mImK{<᱄=ֵ5Fmfђȳj|y؄u-3v'ɂ=/fM]fVnFe{7խ nqԂV+ WjFM,l0Eug(.F>0\qHʃ1/T5k}PQJ V%G(QBCCG#y` ҅:6L | i /Rj,ڝzr L}{dP d" ft(q ,R1%{עv:x $-IX@la\QV9LQƋ 5rRSY ][A[y0I̟/*Z,nN[LMu4`FQ?"0Xحr.L? rM68 ,IOyU{;((N|y<rnQdK'Gm\ N(%DZ#'g|Ȝ@Vz«XjٷyR -qO~ʫ-Ǚ6zqTy,8# ۴hPP/!\#U1B%G5fve"4(Yt\x_+'ǜ@&3}51\Q#v"X(:Uz O1룃Vǘc_;ķܩPSt}MKȯCKU̽; Jx\q>fykYDKw蠙h]ZXݍK{RIA6(tl'?]RKu 䘨\~b$y?3i^̋|-G>^khw.:4DE0=fx:%!tx4峈-c)EGa};Z~㘓Հؾ)dGS)T]׉BHaٵw໖,\yP &{ԒWbT"-2J3{UŪ(Eb:C\n9#2EW:G %-RAb˞/eiy]y;Z?19k$ɥ^hZE H[W&b?v@% "အP_|@VywHttNτb}·.dߡsJd=+Xd;jV GF?mbIF$ 6W'^uHG~M=~LJpߵ$`+,:Ѣ0 F9>&0wj3a`&m-,Qd1jL-EB;3"(y :dnu? et΅Gז$hOJ,v:koY:t :ݻf[j{E__56/T>mCJ]U~+O~4K2J2un?pke";?=ݔYwˢ0Ef&V9xtg5ězC7ԙ6!Rf CL^7tnaW?`و󱩩c/=;B4Nɕ?˗E"Cru8n椓_v̞B ܞlXtEms \MpϋIҕL1%lsvoRsr\C8W4HP!0 I d_ba3!r!ل oCΈ*P8g,h&gPmqX8RL8Y\ XQC%wkllBW'RYEVr tﻴn#˪)c gHo=ge@m6zw+݁ J3~DHīcAJC4QPJD0 JX9GV"I`.(f3MS7pL]#omlJAZ岞H"fXnu"j-Z^mLA>Q}5C"hU. `)FZ ?vGz@d/z;e Wf:E2Nu3lb ҟl޶D<_`{^%,;Npcؗ<륲ז YZY3d]cӸT {W8\b7J ͭg.wwӲiAq_;'z\]/KH JFX/'+ܐmݒWѿPCQq4BCک2K%[R`!k_,]P_,Pկ{I3>4WT O;&)@T qU|<$;,POO%-zm}-eLz-&G, )pB8'1VZ)S3Ϲry,-A%,䟑c^'F)ߨy3ا;EJJe=p|A\_x؃Y r4PG{~8'5qC [5QyUQY4İim_qe!<]qR@S(S]Xݏ=Bجͭ3(g֗IR!cI#î<54B2RA( ˇ R.|o3yT-ؘmDK5dN8[tB^.^ )s"S-?u{6T9 T9.Y?*p䕣7;!ڐ= ^Aoz]QkNDhf2Q * ~٪~7n,4Z:nWkT)'Glwn! ķ 0KZ 6YxF? ZQGoNO\_P3r̜6a~k}wmto:ԊElR~1`Uҁ8$1+6.*7׆GX\L{4,[uWԠ,dqݷ8}z2{@.KF咔,o>Z<7BRCoaFr.wA{,-'QW~.kُlؼV9m#`Flq=\v5&rxaBiqhZ`ʦ`SH8#+AD:P$^gؗQ *4qZQ_Wu~gF@&L ٞin6Wqv{Q0ᱦ(M= C7LD}^Uͳ0.Jbؠ I->Uu*k  w"̍0)-sU0[6cYiYjF7U7x>b+jf—Cz܅vv܀׮#B8/(572[mjr7TD6+flmډ)R7,^'~ +tOAl߉{UǦޛe;W<|`7p< Wx>ϼ3I[duiT "Ly5S%U QEz:G9rzDu>R|^17mʈuQw=u:J (ɅH.xaK֮F4È388|IәqՓFVȌv\Jk\؄O$GR /Fh* ۛ3x&}Ѱjh0+[f &Bo;r7Қ5 E諔% YI 2>ՈjubZКz[F频iR>>Na},WOa2Ȭ0~D%A+A阖{%k1OEyՉ@&xM^9k* (fA=vBu[B=I7P&C U(Yr.78 nBc׍/G>ޢvwjK.a:@Dy07umg_/0Oǖ+dnW";Xʟ," sܻ/8 wiia V-Af0`CƊXd 5SwNa9);;]8IfuJC)*>nO:v_q`t37`Zp}GpsL"6cagU!o 6pϩ?Q(D,#ʅQuz>8ck<`?#v l有) AZxIk7hP%ȣw}C!JYIxPrEX)Q{O܈?v^䃞}'0_;u~SQ^flT% yvyXA`HrN`l_4T NxB:`/ddR# y⽴ bhIB,iZWp8H5kRZU09ْ!2Ȑܫ11LC5䧁95ppR`*@\đ D[.!ܣhyc5Kv"2B 96`em<!j:_mEs9KNyxGHby^QIҖ0p_f!j mppr Zë&{G/H^X=W)Bdb HX2%z1:0OLT{ iF[=KφR`y )U|o;#^$!4A*z*rIOt87I0khLV~xpq5/'9б;*XZJ8|/<ݡ9(= [Oã?cѡ|0}S=芫`=h!Nz\:*OWbdݶ=: ?<5Ov #q?p9ޡbr\P^{{$i0{/Pl:ȕ  Z`)Q.z+StLȒ`!쇟4,`ܝK'ҮXY|$$U*}fhȸ*K}5rF@!C|yzWxiɤHV\lsY ңON.0|ZǥwtQsyv}<ėH Kߤ9nHlq1oW }$/s@D`04Sl/$*JBY=7n]4,`~ !KUµ?sF}g)4|u*qoc!à|C W㿮K2C.1x;u'E~Y2oɛ~yAs@8_-CRb ApXe=oLnv-(zH`-V0YꧯP =t[:qPR42Gᠵݭ5ULba~vCEK'~/0&S!Hevk/aA%ͻLO+aK*.K RJ/᭭X_@v`'~KX3}?3D@soæf4'Z%ct Rx#C Cr0hHF2Ei]n/L50F{o-v`:d5+[u[wt[>żr ($'͕ܳ,svK& L=_8c8Wp0L)k0- J} Gg[v6EUgr~:fDj=v_sШz$ӝ"OZPcB J{vǠ%߳ܤe,is]0 Hb_{!ъ[<[k g3+:f^3fxFnxp;BuiES5FyOW܉etkN9fUG~%8oz3<̚OO}SӅb=f$O>OacsAL@ƟW65U>_{DT]ٰ$.dwiN 5YFSYF wTLV=>V PGI4;kvx O\^Lniлy& R i}w2Vkayf iNsR$ I_xH},=9N+orT>!מ9N:NZ|Чqwp޷a GEA9C)4FB"θ`8ߨqqi{h򄘡5d7!G~!D0HdPmYrQڛwGR2Vy "QDk3ի-h% 2|~Yj7#hsFRyM<ǀ]~qfkȴ 6_-Ydmpt7Ո"O6+hM ᔪsٳ=:bn-+}gzRʪP ox`?LxX'kl rR^: e^OKJޒKf\7D&%h/1z %OThÊbԔyND-i .~On!MH*^T\# jZb,fULSGXQi)_BܛE/[juT(/:`IBrM_}ױ74,8@_R߫n^"7e1]1ƛs=r%;fg1wKNmʤ7Iˇ, Pֵא}p=FslS6,^"ovJS#H)Z(=~f2'er)NXLqsiW46 UY!GŖ@??Q~RU)ةU՟Cj_HEW&$(J!+T\\|&v-scYh*Ӵ[..M8avuc7Tm#:#H@539pmr'z16 L0C+S[^!ؠղU~s'  "|PV%<Pi`ftMߙQ4:H)|+s0em:sF94rzb2ֶ" 99 db%dSUd˸w3}-UEp 3@i]xa?zʢjr2b3_wɓ衡t {piTiB43Fmfu{mvM.Q+4w !H*@ahb<)zR}(a#_ra9qW;LZᘔ/[*2%,lG1ujAW^cpO8}roI%. o\XY'0_qJt5j8is:"]0̽/ֺM`U9:Lp@FQ>3\@@.aom G']cfxPwn9t,핽ޜ .~(˸zE׬`Rq 9]\-ݚ[\7C68H܄VIJd9pe}G b<{t+C5>]uJ @kjXk<~04co,+3?lѩ'4,>PPa [8ux2:Ym~RJQ[21Ki[C'¥ByK!*rB@neNjtCXp_@-dc`s;OmuL\<@Ǫr%@}< x5{mYf`b_0Ԛ8?ɛ&Xoz_>T|#4^qi:HYxIR d?W_4Գٞ2Q‘&ܛlcP$`W)nv`[i@}[ƃ) N\#K g0O7dzpL~B!KF5Bde3k'}|S5j̭@ҲfWN)6d '̢9H$@?Ք =3*cfK\ ^>\Pgw8c)V og{y%fxTA-P%r^-42_'.+NťBȚD^Z0Δز0xp9wilP};d0޿Q4"EL7+wR`{}o>5pPpt^y ,;C7'ixl ,D*-jvWd>m: D7\XSC84U^~:r9}U2靛n[! \_h'6W 8 )5:. r廨w~rĩYM_Kecҗ"Ζ;J>{J7BY*Y5ۡ92WS{| ^<΄eǜq<jDl{Z֬3T_1\cmj{RUB_{F ӳ_\Uc)c$nm:ge6E?d"~ mHk.;W婩 &#T J1(a^?}r:_`frcsp08쩾?]!FؖQ ojL*bu9g/+)T`*WN$M I7' 1H^$Pħ«E"6Z>|` Nw:=7l,j>#~I S@5Y!2%'2g`ゖʤJlF3H5`3t-+d4W0eue/!9z4G+P>Y蚋VD)$eMSI V-5CkI`gboGz!Z:iAY7wIj gJry'<K/zb=6)<,56Ȭ/ʮz?PB OY끂só#H4"@>πQO'`45'[`vT*k)>1pCbQBM.b]8Gd=>$njpQPiK'S 3#wC~X*'?su)PiR^dS[ͪ \q*nrʼe#jTEDXjlʡ` BրI9,>(3-/@kh-M'x~ YZ