knot-devel-3.2.10-1.el7> 6 6`d63!}|J^>j/5,deY j/5,d j$k-ύ,fUHw'1+"Q@}RܘYx<>ɏ(DG{\LuȎ{g?~L!Ȭ7MQFL\1ٿQ)Ah| dc?Ou1acQ7_^vJTDſ+h8hXW<6MȀmd}/X=#m-)(ws,Giޅ{3XxŅ3`cbJOϫyCS0/Eqd^߳+Q煡 2 a>U'> (eK9]xbJ>wvS>x UJVDP(k,Nή&=OX)pYǙb d\0a DLQ;B|7?n.XK Qn5җs[Ne = -)q!NIQC50TD{%P_ٻ{9Y"& x2ed3909d476109c97935e58a15b4f1622efc3635`<3!}|J^>j/5,deY j/5,daX u l?ﮇC檻ăH^eK1{:Wț Ϛ(/=bc#v">wyX䔲4fdp?1J!G#YVqP̅4pG4GyR[e"!5ԜC!zB*X? ~xG$M x?-3 !mG{wnb?eD"bQ}I\Kwtys P6A?A>n|q5srez 1| U3B *|ǭ2y&&#%fYs3g[UaW`< ҍ_9dF-:&m7 XtɬD%k/mJyg }>AhnÀlW87c#/77{7m$[5:)i1G`>MSw|mERWJ"ŶS~m#.okõ7ۿ#)W I;ݎч?Z G C/{}ŁAmR$~a\>:l?\d   N &2JPXWW bW W lW W WWWVpW< h  a ( 8 H9!H:/bHG\WHWIWXlY\W]W^bld1e6f9l;tTWuWv wHWxWy 48Cknot-devel3.2.101.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.eUbuildhw-x86-02.iad2.fedoraproject.orgoFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R +. ^, J 0'(69K< - tgj M }FX kr  L >#"2 9,'A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.10-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.10-1.el73.33.2.103.0.4-14.6.0-14.0-15.2-14.11.3eRd\@d}dd.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.10-1Jakub Ružička - 3.2.9-1Jakub Ružička - 3.2.8-1Jakub Ružička - 3.2.7-1Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.10- Update to 3.2.9- Update to 3.2.8- Update to 3.2.7- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.10-1.el73.2.10-1.el73.2.103.2.103.2.103.2.10  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,] b2u jӫ`(y0W@ʔX /KEę&}jCR]g$ f:K —r:γj7CQ͕Zj&} *Ը]5mtzŁA.7דiî趀.vu .cQg[X$T\F]|!uב!` ]\=,ע0BG9O#'ifWfBNR;|A/Q}ͫL-؟ .j!]2m(T\72 "} {MWrbO.B֗*'b E Rp;ÅZ}gm%Y&Qw8Uw 0$`c_}GLG77Rܓ~g4ʽ!OH2CBe(m0lFyT*{ԆW^O??HC{rD*sAz2,6ifg#C{+b~DV %}UjО"sxxRMPpu^4Ü5{qQ✬}X=6G!Ӎ2ԑ%/gc`P3oi\@͹]{Kh#DQ U\'eWr2@+[2ŴYK@c%K;XP d5!,!deֹ|cٟ0Y3Гѩp1EZF8oCE[K)͗8fh I9;[=F4ƀ{{[GH.y,eNjԞHqE[96=4d1&Uݒw2)2轉(]]M䃧&O_Y9(JtAVId;1s?F"Й#~{}1Ն Hw 멧(ɪM. a4ʋy66UO:´"s1^bWE&&,ukGy7 ?Ƽ.D @kG*]tpU.wb]b,cT&R;fu-xM"vi/Aj*^,,Э93X0-!mg6bαVinQPI" |N^n!A.]^W*bf7D UI ) :_r)%yL4 ֧:2IVx  |A6L-] [v{Pb&{8O1sc@ھQ#0BT0'ъA4MxªKm~^5(@LbK+AOK=`x%g4U-c]՝, eT(1aJSšҽfaB_S@^ziꪆ%Р(`zI,vx0C}3~G i$]v7 k@P_xƶ I4Gs|D7pOe<܆ZjI2Rqa+86bl/n0H knq4%oI r>QFR;Q5b &dҲ2Q[Y.)1_ˌv\Ld)Q|TV&̇Wg0V'5JE=G[O(v,+>2R(U.%d& 'o:\qV\È흨7VW?LYs_jdOD~H>C04n}Iҧ;}ʃ#+,*vMkS_Qbab>齇%-tu/$-`84A}igObt5tj1"ST*YU*/AR⬦p`VB@S0S4"Bap1X͹ {%KlxzҊJx-xQ$Y]pt"oy;B!?I`sh-pTH}r+ewZ(?s ;E{,}nS"mMZh^0r5齃}d &4!tJȴ0gd$~llq^l_E@IKM$ i=luͤ ^Dˋ9l4  %.u$#@@ BqO|hditRTIuBtb=k/?H+eW#2 %uv*NP=hp-i~:U'Zة[Г{n H@Y| VȒSK JOz n+f#Hy/|ۛ){j &~"M?-$=TvDb_X$] hZXį};Dz:-;?J_W<)b/c\wCY{Аsw U\ "Yv sSuDPcky@a1^vS햏.? CPy:Ǣ5ŒXqʵ/ i:Q0!N5l)wȇM70 ͗OW9}bnFWaAZ`?S]JGvI `O/MLR>pYJpr4_Ok$,sO_P@% GǞu+-GZ GPEX@B}{GfGUho %໙xyV'ڔ|NppmWN|-,łN F5xtYlJA190Wa|@O ۠BRqc9.~0DvBhΆw-ShaD9q9Ts~Sy-w6ِ6_]mQΑ8g3.5+8\U3<'YB@N SG٬J*G 餤4Fv m6 tw4'`rt'&y[_QesMf|ĘrE u ;|X~6*a˭3JJL+~E]uk:+/y{TX.qS`՚fl'baDvM.S^#hZ!ɽPQ#tz20 #粸F_[rKQ_W f`[z$!7kbA~U\)bx;KG w/p':7sYc !a߉$1`*c3d/w+୅P}#+}Y%Ri~ .flGmo}u!igǼ)o7jǨz`F3^8m.yW(@=#.ȊȊÒqAЦMS5'BZfҽ{KU}Vņ&^_po-nRD"y^R#9Zi-`$,qGeSIܲ5O|8Pxvq1"?ϐwm Tjeْ)F=m`^Cx#<. X+7 3I7\= 6C!5ACX5;APU hk̜6Y Q6o=郌yc|LH34>W +k,=S'7D57 x_xtDu\g@ ~ђZ> n@#<j'1 a=Z32udܜ4F-δ9=-fV!ȁm:>{wy %ւ0_՞m?.շ|v [{FQdyy/ӿa?~kϛ%>:\@hd&jq"5 ɾ@u7LI&-"=29èMb@En8#ƝayYKـ'݇m>C,Xw紱 pH&k#ę+ V3depYrp9Ȇ]NnqY8~תm0I-/n`r;hc6>%0GDK!n=~,X~.K?+J; *ZYx1mPzPJΑM#ƹleLqr j4ڡ=CM#hRa6Qf Ђ#])X-$O^S~(S)c֜"Mv_IhUΰKJ{wVNwKm`R~$q]"U5R 7vG9!#ٱx=JxK=7"YT$ˍ.% LW BoBL.36l[a@ՓphLְ0X!uׇ6.wgVfֲʊ8}aBWPDxw/=Fݘ080 c0,ixYeF/_YgizUJ" @Vip?[Y}D h|yTUwؐzg6;ώIX ?:c}w."CQjV6̼#卲8 O"AJ)h NLoa"߰C]#İL5vb=Dz2YZrӶ^}*esZ-|f鞖qut]>~M )Qϝ^=1n/p0'd4@mԖ}G#9 ue9nm\A{䚳 FqC=,<{eL+< 7Qܺ<;5*Á;s*q9%OݺN9&oa2><̨mN$'at4-Myf4,sX=Q\=HTT<ϙngIԲB05=: /W2YđD.,P5JǼqCa04e)Xl@c6zjtE;!?-TI#eeC fI|$ ڜud\Nz+%[T;XDIVЮ :`ˋ`'z=.HL}!-D^– qk^-C|jHnGO ܋-`W(1dfļ᜞lnwqp3XgܱmdTe̢`M1UPdTgR#+V vٿk# nHK&"|.vLP x&"!VJB4f)̕WvF͒TtUd|ƓO(?Y(ƊKJ ?9M6sbq7u(g4 (6#tRsp3rA@$ Xywp]|M܄ b?BYfG6PͅgR!;9 '\Q[Qfeg\9}<鯇kG]֒wS:ggPAl ʰɶޘqUU>[: PV%gD)UO=&.' X (6)Y ~voyĖ wd$5& h6.7cRUó\j<1den ';-dm:؀@(˪~l؞sevK4U ?8P ЄR&ãpMٖpw*oxh 5/y̘)΂<+9l&퐳ܫ6U&Dt7qRoI^5 : IO?}[/nC{JX#c;9mj`IJɪ}i@8牬]Iy؟Gh*ej36LmO1/>.G( ޔvU3k%JQNy]ڭ_睰m1Ƶ>ɉ˫ lA| Cz~NK䥊UbO̟SoSL=ݺ.o+VgỲ0GRY(=?uv{G8Z;|Yiy2 a"(rcT)Vc3rk);Sq&$=+dť@f^+T)T175쮩Ej$yZu;hČ3``ObPw`kZQ~}4<, :(uS3P;=z`Y4w,;q$0f 8PvA<_ jtEŭ+L5,1YiŭqlgO.QlN"ǥhd ҸaanƆƏ/t F?Šjĕ,;NUm-m,H)fZ]q֒ 2"NWqE U}ļ5d(qGH粺Igǒ , v;-WY{P"#LfA\zY#LMLb7鬆/^&T$\a@bM5iuQH(y+ ?"k| B BA^"̡pwgB<Ӂ6h Fla7: } ZgS.4AAo@"jVV⻧V6njHRH%\%[SF^)[`&`(7 qL D 9Sɓ-!0:ň}g0StF,U"*N #BZ ^)-Wgʢ%P \}5&'Afw43qet4d6C͝pm(M|sE RDDN hByr!M0}tT00S@ػo?ncVl( Kf̫C{J )Ba /4  b 5GҔItIhq s[eWR NxiNT,/^"h&[_\ƸSM%s;Rf!a%ȅ7{jtmS[|B㹍fXKe6v_О1ZiЉKu#G*qTzK4:30yZK+2p\c4#3vZ:xVF:%CYKc {k1Vw"V]4k( 7unzyNkToCdaV(’C0t{ ԴX)'JPf 8(tSSUB6QWYJuܕʈ~?S51b܈.nAKk%OX&Ro7Z㠃U<&.Y! l#ۛViYNr;eGm*oߍE{z%ӭ>di5E\oTVμR/ɴDW\qU*eF;1Z?N}4 Gt'^1R'2p\D!%l _<%o"cW/d(xx=39[뷺 #^}DyȊZHVa-!멢E0vxxgnZ8QPb@!hhpP +Ez4P|. 4VH_dzyp^mMNlkasy0Q|;}q,#?\y]m@}nrĉ෗==pꍐQ9v@Plrtjd41+q=BT9{3h)5*~Py ݊\]@ȹN֣C?x9 ! ře⁨CI;7PF|\:"u!W`*t.3b]4vH;5Pʍv䠮:A"{#Nd/YH}ϕOr3&s㱵P S2r i9I;=LSNx"?i >62+r?ȆqՁ%@z| }w}0T)' 0ax'H,dU2:(kQl91FK>[~ >^l,\!_IGg&Sll]U+0O cRY5{lUUڡ;d #ZG>(棁aE_PO0F5*M;ĴbP_Pgg87|%5yOQbED5;,%c';='[4b]:"y~x9Fb_i(|NyV,y2s}gAlWu>M%Re駒 :TylNM|4n:fRi%"ZSgZ%emdkiv)6wq*F<0iɖRo 곱"mY*ZՖn,bJ˴ LOCl@mԔyح1┳o#Pcnwu<\"cHg9S)d1G5 LJ}hNTG%iT'ܑmD*ӕԌ^{{h5tb=sTÌ(;pN^tniNYoz'½,6U+~/GcB]Y|HJE.5O5ouZ|->^h程;tѨ-[vZZRx&wD1bVc$- s__J/eL7N\q{3>xWҔL͚̓sG5d6RʮM2{|'K2dtsI%qILUwT}1C|2~i*"g'>eGr/[=Fzq)vєܵ!w{24nB *5t1spsL $Lxn9㜉Ge^m$U^P.kHR4-}5~ oճklj/ gbKK6j{]y*l1P/cڴ67sl=H' Yh)b،>o'R3oMC6KbA3hg={HyI=F ŹOC)shRlih5_U3GF`uc8fĻ[DGVԃ68n75 GcxZe")\&B),"dg:ydF0Y՘ܹDtC~Rp7i NrOc/XWVg?;S9~ (}BL'XD]|lItH÷7e^tςjRGg^~䬲2NHaȾq,͛ Pa& }W(3$0OTlmPg &- c ϳFML 禱'7Jkf+3P|O, ;w6yDu;69;zEǺto3y1lɻ7ƕfUpC!K4Pb{jo+ax<`.)C gKJ福#}bL5:Zo\٘"t{ʬa9(ƲyHU}jqE.G1Ac3[s5br CY@=Q-8B].@eTCym{CWc+/+y@i[@>G*nLAllFjxኄ&ċ&T6n0I66kVv/Nj1(}*"/wH7~AZ>2vF2]ŐeR}M)M#Mv]?Q:9Ǫ&ug!8}F{$j>]1:`}3X| ?JU7}ٕRnj3 #B,@lD:\S]-s󄡴8t4yj\DRGo֑䗄5h"v#;5E-êՏI XΖ^RQ|_MpXᠧ[qlOn~@Ds> Pg*gֻX:ɅZI>9ߑg"آfo%;p5I..Gmiа.աm7 ZWͱ,'`:;/0ӪtIRF-daYa6oV>=SZ"H,Yz}<=<]P( 뀑^W+(Rwۉb)=z25|?А971M(Њ@Yr1{E=ʋT.Q(YކBi@Ff4U& yWzRV"PcJǖ>c6r'EO h>Kr.&6"m:Uߣ>=k !Y/ 5Vq"#X E,;,!}zfpA(AQB.)ȏ ' V~3Й ",DBNpʸPfuagcWY)-=Ѻf7T:1Gqs,ˬ} Qv1`?QbL//FE'۷yk x;X۝Lcȸ%M\Ob}{!E[pҏW$X-u,~pǣ[6 ;r%?u,m*p,0{!AQ\POYNS$TFY.-K>vhNP *% S)SH7Uۻ.N zuTtV$MIn|c9 KTX(Z( „dӧ@xb֩/Qx@ q&(i6i$=wBh1PR: Ϟr~FƳ9!P?xb!}gG"obp|<&)Oj,D:i9@5{3ÛXmQobוEKKJ`wLzSIDʲ׏ȸLPS@S#u_v)^> 4.]-v,LM?RҜgprQ\zp>*q,??Q嘬l+7XFGo;F[Y MFd2҉NQ Oɷ&IYsRD };|܇mzAˣoqOs^YAO?ZUmo{!KE/`Ee0eE# `/AT"aLQG$F*,uE ػAvYFewGz}~A$>OvaK ⩄\GwUڅ-b68Fa REMśTJ'`r&9](]M-E]&~Q  b^_X'$D~^5Qq*oKSomo{6aӊ[4ƚ9e.HsCt`N_a=ߵ;&λl|| NH#`?6&AZ #QܥYzTEF$j4Հ-{Dzcޕ CH\eɃEZx,ʞGS W:6<_Ҭ^4AX$Ko_wh0.pa\ v&င`DڧBTQL8?>D~e|99n{n""1^7P\B2^xͼI=e@آǤc,}˲"?v780^5Mhh|i"'×:_jC@lmP&RWd5Х["yxKmX~^V-3@0(ȐVj[ s?pZо(dG$*gwj?UiSDPy wv[SR A1n03қw+tӊ/{LCT`I?㷈;p/]o篝m ws3^ DyHO\f\ ~5\L ] yLFUI~k̟D@Ml 6,X_NJ\K-ȕw`aB$ Mʻ ZgF vGFE%Xžnq,&G-ZCk@ 6(ōzw6_LQNj[(gL듭t5F)#(RxU0%$c$ tiXaOo|J'+HƬgD כAUlta)gs99 R+uEA!ccwCCo (J 655d(d@oɵnZM&rl)eg W 1..BG >IBPh#k ~LvQ)o l̡=Aư) KZn\ OPZTo>Qv ?ME(T)a"XY'vKBE25`ûAe3 mGHbo$5شϵX Uj5Ó~ R[El;;3L rv.^|blymV:)|.k&-NQ?: w45P[,u1,o졎:-; ɧ4žZW& #r?}B\TogS}),[/ɦ]d9cNigl+?\r^JW}?05%NO!ftVB\;o Я7|J~5uRuG V- ܶwޣ^iޡV[DG`%$ەĎy*jN疞2E<01o2Q_8 axOG z|@ jڨV˽`|g;㜄M\}4hq N3 sBM𩐚Hje}..LMa[F HA0睫Lw9>6Ok 7m3|#EM%:/?ݙl);+H#z 7g-/$*(1̝9O+ō.C)ŰJoɏ"ꁹc(Uj>pV2+\l˩N?E^24Xinq?N (Ŋ6ФU<< _0VqJ:v=u=Nh~:nb 6  )sq?MՃ3~ q)6Ң@2Nf0s: nn]ύ ?|-PPHx6S?=E 'W)UY=(HW0a+s1X٧VDO?G1E9vmc]د_Pt2ULrxMft)wyvM50-Cf*;W`,c^qn{ߦZ?e`썒)=ZFWA~U8 GLJNFćMG5 "Y@7+ ^v;ÍH$0Kٙ0|lݶA{Dbe<28y#Q8Q`b *?\jVJɑN;ʋK{kޅu*cdp}Ө@琪&;jF9 kC_5…ve/TY*4AG?M8s S3Q̰GZ| _J"iWoCH9S}4}mENr>~BdZB_g+ƒ\JX(Qmpjlp)~xi KٌOKe A8ASfPte[aM 8(!Uz\43~{bwHdS[žuOO\କAw!WL~WrKd|2\<Mu PIVYrޟ4cVDYuJULl9.A:Sˤ JAk?52&jΔ:6K8/w[ܛ;Kn]u)!4$$*p8\t{"eIHgi /5VFeB<a˳|`O$N4%rW-hRa?xol$OwO^Dm:cj:{pd۷T`0?&Vߝ*ߥ+_0HH &:k"9XLtOk5ɰCod'%uӄh݇nFP(1ZNhZ=y\}2eO k,xܘ;Ѻ9սˠXXNl!Dƿh,5k9x90ˁ ^L;:=Zeg_J*],ZYLIz(>pM6$XgؙA % Kjv 'iB+.td! z~H rkjl!{zŨR~~*w.\'cK[DrI*zfy//cx.[Tq ?qMƨ"j殹6Ah3Xy8-~I q,sU G⹲"l?ՏxV a_GS8yW85~ #rfSKbǡJQy\V./rS"4N ;p ί SW6|F+iK" )2~ZjLc)b3v7 ',o4QPYwhՕKN|4w5Đ4]Ŏ4.G'k3o9N)RSOeHd%qn+V0ȳ%V5:=y q3C#}SygN`t*&ӷh-QWMIB$Y헠pNҵE*-yQfYy7&3f׀@lTq-?"T\_g௟0M>܊bQqi,>^]1P^zߘc_۝b:VSv) LoŃNGW#kMyw]/e< ae|6жwm&K;U>+S<ኲC?LÍ3MEd +qA ?09dw!]bo (t6TXw(8daed yin{2eG9ƞڛCa{O[8Up=[b9SFG}62} TA#?uI@zĔOzvB^}uJdfj ^./V`&vo >ĞDX/ x[5Tچ T]-uWVvF2 x@*j3tidKV ϚnX콳R?M$ꊰ(Tɹ(/x"8[q,Z׵Vc"{ '+k=nQJA M0а+P8wg%=: / 1Y@vM33fֻf2$3EP=D*)*%V4895Ϸ[<8 b:b+zznEDl6=fT82RqO»‚H`h 㪩W;vr0>Ăz'GXЕU{0ONE:w*9.V 5> jB~I8AoLb&AN+rcMx2gr&WCE7׈ʝɖ ɪ^q7-!"-2+ʣqSHS^moQ˱unRn>لpKry8t{1FQeQq݅2kNxk]A#Xo= z[$-E0~::b{S0y9j ֛j[h ȝ2#Lt?SI.w0)+W\U覆UZơ綨 X6aLG2zb=_@-de _9.=9$wZagĬmN R5,ոy§|FQsCoH吃] `M 3M0{ÙTޔJT5_iTކnwk'&2p 6>[EȡY$lD`nuNjn{ peZ_Cߥ`K2GVp _IU"fu y Fz$fylYn`: (̰f;@6OXE!?%>ҶrO{O؂"i߁!.զjLč<*LrǩlMH #Tԯ [B%n&/Čňpi^匽ߨiH^*W]x +#.}]s9V{l?D[Q`<3./~:T@byFElT^&e** *"$u %x YZ,gDҪ`ljbұEŵ5'bU@حՠҘrQ ow@tNs|3$ד*"PM-g cYDeїSWx3*WWm]L=ۊIL~Pf ۋMaPn[Z5_ ύˎ SKj&۟ŒApΞwM_T5_f'}[)f*ՈH2MYZ4|LxsL$B(ƪ!\oB967eiW}H)j~KiZ{=Zݘ,G^a_ĸlf?l^Y"}d" )SJ l뺏@ʮ]gN0S &+IW}\,nWy2;BXTK^7`!.:M,ȣ:3l(.%Ttcz anMl"K= NaF\&[fBSʨ{l9[~V<6.w4pQ@w:MCINBϾ]t&1<jS{ٛJ1lZ /]P֢+['k/$'ϕOWFQi'4"$㧆3_qI8r z@{ ?/h qU:ӋЩ5Xp ZRl>Ph _ {Қ .>3iZ~ѥ9|a %YB3:HҒ_u]?/=6` ,] >;gH$[2KgTnpEF˜L#-EL %ˉ#)lWN"}Aa9ت`WӧgJ+Y~ c,t|n).:lл3/.}I?" :(f!8h}jwG;0vS\iQ\\ڂQi a<Ț]qЧ)Zc"BF' {[f{V,;>eӱn!5F &nWŦꗐq /)737,eDFNJ34/xq{ݙmTar!Om$a dNdG5Xl4eo 0]1"Ad>gص O@(a_aD\ ]Vj8;s>:EbJw9ۙ|=4?U -u %*AAFNL™uEW.>wWÿI`AW G-nC~܏0ƳL֘.J`.]* muh[M,P%fv[A ۗ .|g$hdb2Y\Nc"L`ڳGb7z[ >8p'+"21P4y դ'ڽA47a\˰ƐZRB<t#R&C& DJQgy'~~3Lvu${RZt@ qt: uW<#cF.8N!/O'DͿA֙IWT2gA O%?׉l A Ng]j?}OY5DfA/F {\ S(9>P4ML~DA-EȞ9Nn_l!M2سFKn~:L7P`{1i$!<%ƥF/<@*8?`٣Նe(hy7 @@h .쏠-bnX5,%\$?fɶw54@ sCOx/W)̋DQay\y^C; 4BdYK˻|ߕ&:ϺE}eik\Zdg) $Gfq,ڞ=L#8(t+"}0/s%s!‘em*XbN*v^|?$߯Ӗy97H J]ff}3M< xPAg<Z-j%{U_s}.I}Jצlaxnx4 ǯ-K.n#u@TzIXHwSWLf Tq \Df!JuV1W&S:'Vs{kԔ(&W MĘuCunGq a] !҈yҼ^A} &'W20'jZ5H<.xv!jc@(Di+(NK˶[q{3Kq5s(bifEoc@|`z`4F\ŰWk`Otg.ݔ\2!n (r'WCbpJе]ܟ/$p Ae$Jd0ԉ PT} (yE;V֤W%rKFbIaR3 8-w9}B8s8?+M⊆U9yt|[>E;Yl88ZtKotW [De;q7xbˇ )`MgE]߮JHVo LVQ1>>W!E"}_nXO }gEnrV,?>ލP~u+XUV:_D^mWX2X|_ (^nkpʼ 8RQEvwˤfZ+!e ==9jap5SM_i !l.ѐd:aȯ]ӼDӐ:Pӻ^RP5(̰9`"oN*^ƨ5=dst!t 22UmBެsn-6iXbB0_>y 0ᮺ\ 9Ш @ZtjoeٰHy>C-J4&Xʪ('.hլ:qET&ݯwa;4 ^ꢟ1Vv+9>J^^YnN/* p kkĝ^  d$aʎf.fz{o}5(=H '0~(Y]Ci|ߺPt"vz`DEOEmv*i@j1 R3 7gN]Zбc΁: 2N5q9PϹ>(]N5u-#ph*mbLGgJ fmfL'[`uQbɸ8j',9ޤPGC[]qZ*-RP0c1@\ xVJkag)p^ -yeݢܥ^ = )gj~a ӢV/y h!*ѣ =Bp?sնq;`aˋMR7kΞ<Ȼ2NMdkG.3k޽&?=NnMDTdh(*ΝjQͥ߄f)$mZU>zH\;0} c^g1͞!rmDqr7lh{Q/:AzꃰKEhFqV_&sPϕa"$9vZBMa[dxrH_Sk&5©( %J|[Mzݟ 1DmTT8B2WI9Y'1yFlr]h6Y4l=G~d5i D%7'>˃#Fѧ*&';ODoЁJ([Ԡt]7Bhk8ڟ1ueCF*FF< B (\2J68!k?84hCe\5ICCY-N }+Y'>2p' 53c#aU%G/ қ81L@Щc߻&~ 57ΠT@ tF 9cw ҥz94K?wf^1t:?%z{^$fG]bAF=ab(MM9BJ,M%aߍCxɽ!\DVkAЖ9ĕLj@qBD^L5&.j\q^;.Osrꪧ9V]g)O c eX4F9bՔ* c -j.MυEEI#7 !SP"sT1!SImfq uu 5o1s%߾-Ԃ9V#M5ޤ41%3Ta# &㻊Di0|?yslʯ@6cyǨ><~©-%kOrՈ"4V'I  A2uD.TwVhKs 5_G{9@gP*{6|B٣$B(1b&mlj:=M+%`d㗄Ƙ:Hxk1H9p<ӱ~8h"Sk'QmQ(!f!nL۟Np'{EM}= ؆왳b2ܻ!:zD&W7kU|w,ݻ29 g*;,E.y +RRA\PmvKL?}8x"PsZ;Irv2eJ):0XZf]Jݶ}r7ǰ3 ^*7ЂIwYw{NH$o >j6_$FT9] hhY/CcD5>PQ1kAJ̎=wY& ȯ۰g j„#զeâskȝpj^ghq_m#6acӎB`vX>υ@Wq6O\BOY,7UrF(TZ9n\U),KhapQb!sZ| b*W71g7Я|a˰{xGFZ#BNZÍ쿌xPw[uP"{qS`]2aK'&]]ip1J~ vURC1lYeYc;^?##s~\6F??q@eYB gŧe?awVedPG{JzS~iQ)ޥ{jP>E#`qRwѤv[pN { ZT`ؼRN/x/ԪtW<)iڈqGW׋!إ+JNсOq7t1| qQ)lh]햬ZXE?z-/QR# 4W15v^kfLԟpPw>}W˘ um5G0X甶WpXr5&pfqbUm4nBdTX"݄??)!9A׎ԩ/~dMj PW^Hs@Ė0NC,=$@LD3AF 4p_x/摅9:Qd_rT <-T$]\nM(ʽXn KPa9SEik|BKigO_ppbAH @nQu&mBRd> j1Us ֵ#{Й"L <Y`b!ԓ]7[. y =OoA"J N`Esoua}'YO7݂S 5.i8}7r4'dkhoZocn_%#hzx?Zķc%\qcf@b2'zT"\@QoRp%ֺHjU4Ww!Ba+J| ~||nVWn0u[Y"H;c! gv"}+ eX-MH NhDT0L7jh1>wL2t :||_+4(Gah^ځDs93=kJB8i.=M |[-Wj.^.F~A(~{m RvR^W(/g5ѯfFn8HV=U(kZhlxb IF>뭢 bCs ofcN .\(wRMLR3=APJ^n#qJ0`܆x Q*][*eoev_*mqO2P$Ԙ8,nY*nHswlmQ"BU&40JKӄqo jlcR,RsԶQphͰO}P!W+>ܕOVWmlDׅ1^5&dzjVk%5jO+m̺9|D/f^ ^cU~H:[==e[ e 3TONz%0L, LH=jOoQNMQFb6lphmoQˬRIܕ[(Scwd{ ~'Sypoȅ[t &Blgg6 ][c2E Us$= ɬtQ% sWE:gs)lz [NH)#tf9~}TZ0"(Sa;HY%kXba?G;hc ,5s:cGWx ܅K%?~q,ⶍ\>Y(:*Gl,!$jpW}PnU17u;c6}F?1UMn09TQ2EX2?ZrCfr%Lj>xź%DiYgR`&+|B^)Xd$GhE,)pegܡWu'=nJ6$HRGYxki4yYjekQ$/۟xTm9`^w5CPYьB~io,>UBZRa' gY*r%>eQ ៗ%s60ɋ^ڇm|#ؚ5#!gd{gx#k:9Y/g$?i5X9oS 3F=rvTUΟOH$Y=X֧c6|IvN'`.?;|9gt =osy>G zOڝIYF { Lِ?C=Ƌ6}@vD5Y:j&Ƴ/{w=Ύ+ַpT\UE%ls-,z Vūй"CI@P9I汋އ )Ҙ_X>1PsAFϹKL PYT垳ß]U7H!%r|ڝ:s}0=s b7}p+H%ElLK?l^j͍ o2xTx<%Bc1#nuet*C| ì9Ku<`xUB2:H͛=4vES`yY#`Ca}B|ug8 MqTi_HoBg,dwFbbR.4M۽RF\.YL(xʯc ?MՀedy[` ݾkN֙ R#tOYT;g/:Ĵ-3ŹKŌ|Hy#z$iWop/q|~s.atxn><&`*fc5as!Z҈*vݩ_K<Og7ё]/UFT }Rj/rC$VW<6[kr?O\\_ P[uq>|"՘C3H 0<~w7'1\a\t-LxjQCͼAndG7Y[O*8MGS۳ aūtnPo h(oN}OzEY+fZhv)4$YN)L?S?c\G.Ij-icDoqي!\E-L@3TLqV\*a)+UlO>p*''ԀO߉;"`d;ʌ:)&;C~yXۮ(&"|ΰq!1 0^+LZț.ns]nuJjeGH6SrMGD Y'ί#ʛVvvJA e\|Ҳîk8(7"qBǂ&eqm.Uq'J7Wapv?M3~~OY[ &:x-ܭUT am3TaaX>x*"@O8]K?J j=xXpϰO$YB3Һb=O[qA"af_psf/KV)\vU .x1HyيcrV`P?H]dz|zU5U7$%^_;}Uj0*&ɮή"4ݳ@* .쵎X@_b+.ƼNRf%3{9e Jb⦰:Px)VW-V {5ȟ%Р ZtnUڒ To %-ǧWZ,L|jMh@z@;67YLGnD"jeheAޓph߹$滪FJ{o&;7J #o F{?Zm}}{gƩlmԇ>Fe99}L!xUj*21sE)ֶ܁@`e邚 % u=K.W}"bO:LfMq,Pk-~6$T긺&y*@DJk+mbCׯϵ]Dhp*ysQC-1elQ߳cq+ kbWe^9DVU@>(NN9f)[OU:ȸ4Ogz %b/vED:uǵ"~)%R[o%j/۽PXe~-?_RW򸗻Ul8N+bGwNbG-((&^&,Kz5͍i.g 4ٌ(:A&ϤKdҽԒ|Mt97NRE ([|Žjo'  |C<."0Mz Us)7n4tß0o83DAxDT5lWG21ճ;yNb 3tc0uUAPn$W}t2l  WSIé@؛[-xcŐ6-jjnkeM|..!l{YV!vwô,}@$h^V =H%x>9?{y;]>&ֈ //IễzKXΜd9&9(6 օ/tv:Fx,M0zy_w4pd'٬5 12fۥ׼M['3& Am&J'q"mK:s^d+pITo U%3='2sJxM[G_g5dnFGofPvC,D<шNq5qJppH1@]k%prc"f}r)(6=h}Lo/owin~,#:#'wv,˯kt1qbj Y0NaD>cwհn^݊b=b*3Ǫ9wGw!ڮ^?h2At:´JYKRPAC-yJܤsw57_kC 拡*,~,'Y\z}I ӛp-r7ӈq#l@1iÙeJǸeŠ ÅI Ӄơ,Xc*wY@7B޶^jo:42>^^ `}IZd~ [,[Ep7Miqa w( &:U垼"%H/qJJp戼breFa\FN#R7GbƬۙk-z)sGdD߂0mC+6ካM kE [8sqJO5&2%3] ÚR\ ۖI:WXu=eTb. G"uieĵ: N֞- rGr}$S>lV(!qʦU76;5ߙ XiSM`_L Z ǹ{Opؘ6.4JwǗdB}Bi4ukgDCD6waC!+x5iV1-f-/S*ѺI4 hREGT9H!5Fz>\e=T4A %z[14a9Wpf8չJB*QW?0eGդ2i-l|{(6%R6#5/ɁsF'R Qo(wI#JˠKAnD~=lrXZ[PooA0*a4B뗭"Ӗn*ۋg.wZַ41rNS,.AI$W):i". bR&Vc; P2ՋPt_?5EYn!%fl Z%#hI%f.os7pBH6\1k9  y5s%qw.}ܹ/?'@Xñ W5@@\#W͏} Y f7UV6Xv1qk4߱_iccH\{,A˶,DW'ަoKsciί0RO@uj7[yRh^_JXo!=sHytx&O';ka u !qrJ2t 1lv2 -vPѳEQg +<xTz?tpibRorQ~\ā/ _t SA^uJsscT;+ش.@6,PvyKLWoV\jF6sƺx;;2";qNY2 h6byM<4֙Ic)IjO^ .,B2LGޮv70YTǨ>W${b6IW?x{`p300CyC#ONb3g,qq<@7>Sg-ñ)JV`> ۻJIHEW $TVPt;'`P(P rhl֝+Q޼6z=!FW$3r3}H uF0m5\fa1_QLD'Ԙp;2|qs5.G6.%a *f{)CDz]' Ͽ0W63~rMٿZ#8adVz5ky# Q+9Igω2~'E!U:[3ҩHoˑ. Hrxh!;hs|W2 5bNY?rm_ϴ ;BWf ?'"1ߑD˯[u"8_AGF6mZ*Lwx'>\I;dBS%?wPbޒ.Hxӳ9l;wwF0RY`;ZDw]05Ty :,|] 8 4SD{{G#Bwb^?2ő08T"(\*VKu5T\@*iVQHڤT~^c:T"~t鹁 !p>NWrkDnTG.S &0N,=™?^LE`*'yb$h&IMupޗY 1Ce|/[+E#B =ݶkbxDOe8Փe.(3m-ܟbQD!\2icFBF~bpz/;,BcЊq':l eQ&aoG?6 ُ. P:&wQdž <a5\ۡOhT^:K#ע 9ޞs%Q#3 `02IufFSoɖ(YVڅ/̈ZBt6s4]mSGkX,zHvH#NEXg{^Z ?ƧLʞmaٖ+`!1H6Qt-X rȟŋ-Th_Ї1OKy? RJDE6#7G}dt."L|Y>PD#8EZ/&C%N0`iv-S3չQMӥy'ݒjhfMx wXLa?PeW%-Ip&N7 &Ěma3NR${Y߯( a~M#oH _ 3b"{Bgbr^B0 ε!U#z7/ob9|@oy) @'˲|V8aNDDGy< 0zga(8-WR,2`3GsC f6 p v/'mA/;Qa Bܢ==StI-ۧ/n3(@"K1aW>R^-q­H( T6l=w3貭ۊD`bU^DbyV6AXVG? <|  :#c¼+=~ =tpIbi {ΓE}W>4&u<1JЊ .D[M@.ty5nK; Ae寙? 3e|\'\'Iw}mU=>Ծy'EG-SB yx%{adƱg@9d_ Ȁ֒bfS!)c[#e$ 5O2(-+"Ǣ%B*wܖRȔ|{WFXqD5şg8LQo},Iezeף fnj{r f)ЂlVwǒHP$h5 s3~2QEu$~ r,-4p}>1yHlPb պb`KVoV΄mboƶX:QKFI:m8jJ(p** f&+~Smm1>a0#Oi;?$)Y]74g q |Qw&MtUcH4y=;7C b$|W2`Rl-zQĤ6dxEeA4*>ume 6뛫z{kG`+vC>k!z7hy 1ie}PhOXHm1ŌcG.TJ#儠`X IAS;J%:#G::bo`-q\u84qGz+9FHcc hmRf֭%`Ydbn!HPBOEoRfbaRD2~MJ[ AY/]v)` rK0.U6H -Pj񫀒`7-~sLI+jlpvC  QñbSNV~w꘧3c5cqyToL=[رV E1or"0;ʛ܇ $, =NV7bE%uö'2 lM-cO,Cm#"Uq UCxτOϪ"HW8M"p^A*l< xvfEh׻a$ u `L*hocõ@C|pv?nAY h ^;NHLS{]]+";D);uYzB&tc<w*4@Ow'3k gQe3 Je1+U+YN>Py}<L$q:JڍZOhE%!nPqhx;J%isk M'RrY!tJn ]$qZ[2d>7Ytu{0$8Y\p 3˅NOSﶚQL_@m/[KQ-y&*5JӮt"@c,(#S6V҈pYm8 ڥ٣3K):>\{T|<(o"[ /nyĐ;=0~vAP@`]ъ8,C񑜴41@]atqڠN#n\(~VЪR3@#T+=o[$M~j-1oUl„|:dl'Ri32[oK%NKbBtZEڻ^ZS&V2- Q!7oj-0ʤ]+֏k8h|V1z]֛zWͱmKKwb ~ HkF`E|I|  ZѤY޹wN[ت y ͭ֕\,+QȷrRӦvYA^a[p:I`hO n|nqrَL zafFۀ7jZh?G "fn vE-g6b]O-݅U‚ںOLO)CkA(1(lbF`m 3I4Txs)߰bk -d֢~A}* K;6F;tb7kY8+ȋ&hxYM~`Fduye ~oCC) I?H2ҮNٝͮ Nhɮ 7 n} PMuY7;@ʦ+[pBխF 8Z0H_nݽ[jy&a}waNC6&7+ze ^ٰd"GgEJ쀻'4s$Fu"wB&5X pQ&3l9꺽xCӕk'9+P4c@*؅Yrmm*%)dX(#vؤiv+;K S/rt8*㎦?H!ԋK=0őaZ=`\h3 AS}p8׊D pqGёd +GVԆC$SIf~4JVZn~w)KstT/~QwC`2uEmMtgK>jK’ZNF;Nýu..Xd})DÎ,?ʺ9T@ۃ$ = 6ߙ7W-L*}~>z^G^TDʅ:[TJ/%0}{~s*So$VAT{ 2!zg%7}Xb|x0cȁ m YF.~6aX>Ch\#4D5_9R/C0qw&U,Xg+,E; ($NjˤDhF͍J{{(ʄ[faHfyZ!4j-K5rxYKCc"vMP9_^x!}&ʖA.?6K鵿|Esv.LO4$K~==NN_K\›@.R5AJ<t\gc{l-zC8ozA͕ŏ!K/-D}GƭAHFu:ot2gWleASm lhcAP"w Qc=MD~gAw(zbb'>!U tNdMZb_,ƜRSݥ# x+tbje9j@5/yhwZ_#4,a,P OaٖKV5xF@ͺӶٸ֎H/Az@]rUh]>. @١y͖1z57*Wg$ Pus 2a!*F6~8Z$#`}=:G?:K-כ |Chp'*rZ%ޕ]%x]n*WDK+ARhiSgkYiם9ɇ<)yc:l[rFf'M^3AUz gcTvLe8nZZL`W{ŸF<{=Zlڊ)?YsX0oHGJ4mCp'鍷.XRugulvx~-`-:̉2v_R+@! U҃U.7~@ #Tt.Zl72P#,yW{ҰN\4vqWqIևGQunEDE~'Q]- JAx_CK9x1P3D(-cuj#db> GFz-o@|[-ᧃ-Vt">*XU {riTK]y/<Ms*jPOtDbӰ ={;bbIԺy i|1W&#;})#e*2`7%mC䟭HZgm|XJM/5EptLXG.EK4#8q W.afx@rv+%ht?]C/AIGc̽t.\q H4Pe#>e̠jƌM ;<:Ɲ`Q:`Հ/\#吣f+@^9$eaBtؖys$vVlK^E%곻C>y:=<9^82w*w|xAʠXXp-M皧LhЗqzg ֤:5SĪNI*~,w/|%2<:5?y/t@ԛC[PH0()ֳe::2$q“#+Cd=C p軦]ݪN׺q;6+Ğf*D+:^|>Ea/Ş6+@+UZ^5m]5-d఺ K>ߙ Q-ycaW[iT?VuC(Z릉UW0-ԄHa\R^~;WZfa1jf(f[>^VXugGEȈ;zA (_ XmoZ?`6A/KS)oJ+|Q!!6$ߙ)Cpf,Au:5L ŶY=Nk63@jҢTʓ5SEÊc'EF\yiwLV/ndtO:1ŀ;ngx5# h\>(.lѪw GF tXa8>_7o8`cԶba'})wlPxTA! 3|pl(XT+wz7`Tӯ3jHWCB>u8Z"N hd`c}+vpr2[M7 W>z\rXZ=(YJ2r7Tw/M™$Qٓ& U.f?0sKV1˗3)Y#AD~bZMXG43T`!n%(lX 4]iX0PxsUcp;XXhyɍ~cMމZVDY膄/z7f+b(m2)y}HÔlS4r#űDIyTK'l%.5;&) ƶ mLbg0rv +"Y}b)Rh,gQ5+Z9Tǘwvz$=tXr cܱN!L&piEhFaa"CKQ"fw̌-e"1) 8R6{_k\r.:FfXRvFB|p\Z&9)U9sd` @kCܽwx[S7jQݥ)$:J{p҆v3cCID"I .i]\z ,lmLZOMCBv:Q]^6f’ءm:7IVadNV/#E6sS駐fUOgM7t=h:+y4VN-Z^ٸG-p-+?݆Rh(|QYjX@&'5 9OMD O 'L";K~ىS}ߘA0jiD )Y'P kπ.4/481v.،0&1=x$ E:;J&` zr"wY85[Ko&u.#=/AC5N)ЫBa;y2vmTpXvM ,gNKJ,]~w[h)u J[&ֳqz IbvcfX?yEK]YH)md;P))=d.Ubo_nb-չY %8Jk^4WWDyqCGh+lX$x̻a,*(>WFF+8}Xwuf)!^5C3 /xH ~v$5xF#S,ԁyxAtR\w'_;/X =եe3M.IEi^ 馍& J7]e%03˂J*d#9q|בIK4u0C,!߼n Y2%X1 oLuaﻵt@-"jH0nf}{jzǦA2L[.65`W;SV+9xc04RMn~!؁N7]U((SĚ@w t>XX7YMj31܏-)-<+W*ßkY> ߌcK%8jW>KU bgWTՒ3&a1=lr믤$ n%h|QTRU[-p 0a Ə}vmD{sJndIM?BN1鍻lxGj}^5)Z9[xb fNVì2z j򆊩yQ,Z>Kl28Hx -fՇDt?Δm"k<emT?S ^zQ +*+H6oH3S"R?%Lk4W9j#DXFFZ% z-gBf:G,\}TuW&̷'BRR ć՜t?fefhVU>}ȡN!}9= t}=ccjس^ϓW[zB3ZCB qժiiV'͹ZEOǽI#fV*}6k^/,}IdPXGxY(U2ᇯbH\T}8*Шxx!h W>_`RqE}e"Q*~e#yC2I_gox]s:Z=X0[ԏXs0pA9H~UD(D|FWeCHRh DL"\ 3XS YZ