knot-devel-3.2.11-1.el7> 6 6`d63!}|J^>j/5,de? j/5,d 2B$4d)Ɉd Vsty tYS+?JKc!Ck'iIYu16z|e>2u:gWl Ԭ;^njף%NlQ;3 aȴD,W^K=Eϗ,J: ՈJ;CmRLl&g* nBs0M|TqEq- Rb23ac2c5600a7d664e265fe639f6e7783ebda4b8`3!}|J^>j/5,de? j/5,dk3V3@u5M 8 쵕œYgnR.WbAc(O7DB- P$&;|mt?bF@S P{q14P>dP-Ϧ}o>&Us|5$JGISZ6jU\ف<<!_oG2\rfۄ͏ /A5B2,@70zb'>˖W<}.|s3ė'qaPݚ]wā"|@%w6rwSiPA\"Nq5IW=zHl4畘hF4O' Rߓͻ5ɶ@39~^]rWЗy_ o ZcX/PiTʬ8P)BA1Z|l"V_E6"3S6%=\(9Î3ZI#C/zjrGO#78 IڃIAKXιB8NGg?uyw{y(>:?d   N &2JPXWW bW W lW W WWWVpW< h  a ( 8 I9!I:/IGWHWI`WXY\W]dW^hbd}efltWuWvXwWxWyL Cknot-devel3.2.111.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.e?tbuildvm-x86-22.iad2.fedoraproject.orgpFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R +. ^, J 0'(69K< - tgj M }FX kr  L >#"2 9,'A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?:e?9e?9e?9e?:e?:e?:e?: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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.11-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.11-1.el73.33.2.113.0.4-14.6.0-14.0-15.2-14.11.3e?eRd\@d}dd.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.11-1Jakub Ružička - 3.2.10-1Jakub Ružička - 3.2.9-1Jakub Ružička - 3.2.8-1Jakub Ružička - 3.2.7-1Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.11- Update to 3.2.10- Update to 3.2.9- Update to 3.2.8- Update to 3.2.7- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.11-1.el73.2.11-1.el73.2.113.2.113.2.113.2.11  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,'] b2u jӫ`(y/˱]68,!}c&+.]޼G ;/Ҡa ]+O UB?pe3u*ZKUaNoч gh)Z`5o$$T6n54Do_5?tI? >)^#9~E623 8 dbH&3zq DyЌ761)s| zhlwkO!ǴA gip祦K~i+ :ֳ3K}+{QQMK} =o)PNeKuP5)v78hYnq#c؞_B}tD}%9`>1E@]ӮF`/byb6$)jD!E[Tewb%%AsسYu>DG9` Ϣk ؊޹RИQG !K ?#Xpԕ}_fZ*U z $q!Lh=2m5Hw'/%4XY Y9S,>hmiaI.J"S~[K3*P.OL7^d+'Ǜ.7g|vVϫ#L wcwYݗfг7r҅,{?(C3N{ȺF)0Nxdie+1ňKG$Rx)OˤU-ps ,qcȿީuvk<_={o8tSb`|%(Յ]]iDZ^ӸF焑#^<96_wHԕd]瑁p~.CW$0aIgA79:vi fiPJԓn;HEXݜ"j1br`ݬg=۝NTU+E0!D-MR?%~YQO$Puo*蹛k*iđ"aWu8*rZ9.:rC\t"\H#,^02Mu uڹ.)0enWX: N4=.s?SۼPRb5AE$ ;')L,ϯr=*WaRiK+-g}a;Ok"!^ӠAq@r*<{pe1к5$wUr:d|QQX6Ob 5NEp*ɉLxڠe47?Y͊;{:`" G }^ ,H<3㗅7Vtd4c b+ he͓PxCYeM芖`p|.IR$q6+y!tÌ;{O\@|X)Gazp8⟹M s6&:C'IG'pIN6?2i{]4cp0M:󵭻>^o!杝5N O>Ҙ+"OV--kgn#`QBz }5Xr%%^=8RSHGĎ~$<=ֻU=)E:g XaņN']B?ܲNcAꄒb_Si,#h6%`! NjwQ"/W9ʼb=xqXL\j:$smx(8j͞B\ɠg ;ZD2Scny#[UX)aGi[!:T| ,KލxJbtnK;>{& !2Ĩ[R_#N׵P .+zɗ+DO ,4UA7xQCҋQ&K/-K٧;vS1n&֦uG5 bԜo]E W 3gge6E,M \"R2Ҏ1*3rۇ֡Z!)1*4d #va "^lM,^H&PYXv]t%ﰗO /_`xpse?G D΃$ rp8iշt 7r@! 􀼼Z3v(cGtM Ӽ(xoy|Z_߱ 6إw}%[OW nNE 4#)%KZ^C佡p(b7 ՙmPCӁ+U%(&Hej ~}DAH*{Pp o;* U4]#ܨ%=BQzM;x 5+/ћʙG_-$fϲhFI(lX+ -AQTRJM7o)`[A<˥Nu+V x. 7;=a@S_k92 o6u ON:lnV>].AQ|pôW 1 Ozʟ ++TsEjCL,T#*zfoK.;7BFN V1(qDT /[==;Pgt g:>cN/rR¢_2ӗ|_`ژd? "_<$\}BFi5wnaTN;58:}\E؉S "*4 {f Sa;\i]H2=mf420##:nFqR!N+\~\3L%CIzM0"Ք,Rmpv4EjUN4rhISnd9EWCYNŎ\[nP(_.9;!&h0F o;cͦ=(e WL+}-?ʊvڻ^%?ؒ,PD)Zk^􆛄9?_`xhmupYusRVu6ۭY~ ;Ù h.D S8 n4,M&O(]et0Sz*<o.^vq 擰8zaL+x5i}?ݐ%5޲(8© ! 1!^x"&A|LTs#O;OR~E,TEGNxDy +@*P bHp?:&b)q |Un]a⛜0n+V bE0nO^x0z ^ JY&mz&d4XU .f5VV7{ 4➚ P^kznFfLybU_F%3xr82_A^ߟOݛ'U`o=ؓrg<s"+jRI4$HAkG 6xC>qZ(=(9mK"55Vt"W{"*_ Aڤm"C-{ aag~[CKwf6c>^p7. :ϲ׃Mj~~trj[zW̋&R7]_Ea)w8fWvAeoPB.HRm!5]TZGf UF%Jf#mt d_"Dr% j1&VX.˖ 7V{"<؛',%xr얯RTwΆo dgm C/ۧYM?I0AsrȬ}ac yWX\L;iJ(Pl+*}n%.~bLWotZ5QGcƊu]|>>p:@gNB{I | &d rOܖFi@f*b;N{vqfeTͫ(䅪T*/"$,Z̥ C;i_B"cOإ9pFiΗH:[iw输01Fp!e]!?զPV.oUiTxljҊĝJ+tyXeD.ur7N,B?~$& 3>HHUg+diP2ok\n.+{~422Knc ^L`(7bs2i瓙wha`T!=NsZ<gٺߋWc *-E$4`2=Xf">S\M {вt,q O )D34%2e6]!9x2WPPqH ٱm)>¸{l+3[inobXM/i옚qtⳗ.2K*|?U|n~A;!HYP6uPTNS $^ (gz-pK5r~d>eS,9*i $~[ KA,,ff;9{=ʐaq=bԾ#Z>(_,5&2Xk;.3\ U;I/BYn)9;kb e:61 2Zi,n%hk9J/h zB2<(.i!9v%z ]>/:im(1qe=G禓(j/WPEwx4wG};{gOy=#ަ+,[ȑbMaBMN3ῲɾ2f Է WGN-8 k+8ð1iv&9\T7J*]:Fͯz%(D~1gBz:K#$v R5g}V{⢉DF^wqDYB梏J~|+y} ϕ$Q>sq-m˪~> bWdoc:m?Fx_wI{[(%ɕ`}Ji(Z~}{ }1tŹ/Ùf\:&ߨw~5`߭ G{y9H&X.澻$&˽}6dB^-@gw!žW]D7-R>ďc @sW#|2!blo5~%Mr..|E/F}U*-"BU `Z3<v!ٰ̹̄ٝ$[m0Eyf=h]4{'z='F  e[+WZ-΅).9A̎eR+ \׿#?II19[?N*^h:$S<7q{W1ozN_$k{m{%ߏ.6T3+H;S&`̼9(nZBMEIqcTWQQ%,׾d&CӸsV5z+0әkHߓ>*rBcW"oW%o˞v-t5$HbEvJeco"97|TvUAdGlfT phY݁ ~hYb:V#^\#ŸZJoV|ʬσ$3.n5~xcbK1Tu: a}j2*iqꎄ_n:n΁pk,ОߺgMʔ9^ȵ=)//enH^'@A}: o8N+kC58Fa`*d#FE+j* ex{<? |~Hfe> bcC[@ffl<M/n3 $2IS&*;ނ5̾,2d+0[rv!R׀3v$L 1-!%3%K|‹@P5cXe3]SQ&ܾpWfpƨf# S\^4*II`z1mƐPFT9OIZ<knο!>M΁e^a$:/|Q UN`\= ݸ|8q{`Hь@Wbz+K*Ef>'^V}WYbP&/`i[}z\ Y[3Lљ/`{GE3#.S]L hQb. _r4ƓG6*Żx`?NyŢxRdb_jYYtr֒>D;SgkuN}#X:K]at̂mpg︤f'(MUw{^}&KvZ7b`oV^_CDP>OԎ/krHu4-gܲhY8<\}Q5CʢC|J .c9m?q[,,T [#-IKhPoI{xahnR_;*lt-=س'sx2I_}y{Vujؑ NY$ĜLUғU#F_7#_ ջMmSm"+{hUPȇS}dZUGhD) B=yT3zNc,M,2E(NŚd#st`.g0PH{vWǫM=NZ|n=]k'QUd+ d!⺹m+R۵qТL~;&|e_;JH_J%>tG2dػ _axh>P(8)ۦ1a$VH0 w#yq"{]&RYB#TRȗ5Qh}G'~R5e!w9s_ش[Mw ck iKa,4F;Z*VP5}MV51cB@v5v?S6d&Li"9#`5Jr o˖<4tTC[q=Bŷ-oZίT7,^ybZjI$yhQs݇j؀?]TE䁆R!z H$NNfk|V%Nnz !o$T7Dϒe8lJ&ţ p7>lP$iv وD1(OHǿ.~ }_LcdAlCC#ʿqNM>'+C+#ASieu',<eTik)`۠Ť໡Wį@z 򸀵0R' w:- Ey$}ʹb4sc*waKٰ÷6~rv8In/?N UaNnBz="j'VʷRFe=3O&mIlH{¨#wuڇ:ʤ%rY|gKO'L3tmGCpr<'{xO:GIQ,22Uh"H8τ4xw lad1RYV\nG'6I}aGݭ9ɑx#kESz %\!A6*qSgxKNJ] dCiMZ`xб͙o8z;Rnrk>d@'܉d9[D\ruE+|xI':؀z s^->F#\LHaM2Dp^ k?wf 醟Ʀ˙J X;j=̊T)UrhhW!cj)+b:!J*JmX 63I+U{PJ|>!IAB57C9:I(6Ɗb$a^bu uK#Brj9Țz<3TKn!ݨ$?$4]B)A@LYͳ;A_fuiahM3{OXDky Ko\?2KdȰD#$>%ktOaZdh*qڈ[bw<ղyL5xBEzq qހy1M4IJWa4u }89֡ȼpQa#ΗSə80VDp%Vn($z{P21*+|3ub5v́TSс 0}^3vQqsg8E^S , _ Sc2n^89mi mXeT3L鬧8h;Zؓ3j34R<54 ё(Wޤ{Td⟖^3N}"IGsFgQ\) l1NLq¡)D]'PV:e/wBD|tDE0+˨59M;42weF.7QM]:զ7Q()FN[҆t [9IQ)}NkFFm}z#nu_,]Q@6Z_E.N¤g| &xR _pDm^yK9QQk~$|E @/eܕ }ҙрT`45MZNCb%^Bc&gFQ41ya>\-*Ѝm4 fQ*Z=K^;.{^hzP"< }ښ.W8+}TOcSK,MOϗi% r401XXz5abNEBߛPskrw`PV6$Վ%ȹ<Ml"HkQ H12U֖Ez+^nf=Lw]RMy35R9D]h6%,׭R4p"DWPi<;yl:n@a.fsp%cK_3k3:Pս`x("ia%!yTdMዹ|Xx;Yk(ҋ%C`yӵ%՝L6^orUE(q"fO!"&T4kH/ys7`8 - ( ju !i&O(݉]mrR݃lƯn-OGpB:BO? !>RzkDLy<$r%Y)=T,2!C !.t^!5YK̜?]%ˌ`R@9;MBU68c`CƌaE(^pFayPޠvtuP$?njaIȖu3PJ* 7ϝ(z~d8QTq6 I1Sо iJrgMٚHWnǰ(ΜuDNSySžݒ׺ -);9 ÎZU *#/K2/5|:oE"Pxd7mswnX~jp2ZhE UxI4=J ̶wW#@gZhtec~D ءBe#q]6q6L*gmEtAnRbcȧtFqziu#qEZZbR[0aFN,˫Ellpd(gFXwL(δ@ʘ1bN[{D*dc SJo|Q]=[%|JBDۥNv}!I(jOu "”ӜPApGb4˼ ucMwnaQ}XٓTR9 ڬXJ[sVNQtJBפlȬ2kCz Wj^B &q[u+J wgRכj}Y#ę6q/@ޜ38)hAb t@@Q! j[(./dniŶ!DS<8bd\>O@ -Iҡ 7ݜ9}%69Bg?2>4F qP7Y Sjw]⻊E7쭳E9p?S! Pʔk><>*6پԭ]z]E#{YjvRlr*Gc5P#=Z0%^諒z'5 'C{kc')eiJKM-&\(8˫4>UÒaީ6LBK'4[)&N0DV 6˩([H\*XRT掐;~ZQwY P d;r5 )9nE '0 Z$}'JBLK"L`d_N ^PɄ(H {k~9U>P!h_J Ǫg H9` tjnE12,] F {, d/UXYdfZ/OPҞ@hcyvw-36kJ >Ԟ2ԢɧO:%6;~@bwq1I_Uh#{?M$~ɴn#I#Qhq˭~G<1MX9*LXt՝C)CR,h]5cvgxz ?6"c1 K})W x9nh<*ѹ{ {1 3m{V/Wgwiwr]\βVښة@Q +ih|9`m}bxJk12͹Y-(PڹUõDDµbh*0)u 2A\9&QGTBIkM+[:4hCtoS~?7'IgB(Ͽ/z'Q E!Aw('w1yw23M^_\\WUyYŻl:T^ ?'%T' Q Ű:F@)Up7EG}f5˾dཷ7A'hbݖĚzuh%OqƳ_KbIM B3qgbOiV`xjH:RjUkPX\MiЙ 8OkUϋcoe>0Pf 1}*2 ;TM7GbM:OKa`8F!ǐλЪ.KIrt>H$(${rmdk/>,`)#)87'񆊿vŌZ,e?I5u U۾4`e[Wt;Gߐe,"Z=ͥ%Ic@4Z6{#tIi$m1$Vϛ =3]C{&_CO1%C* R* ϻ?oM/Jn[?m_e/m/UCSѴ |C̦^=[+cly{PNuIMd(]%=r?oǴÙhU^,v;_]SimV.łjQ;P?Қ{#+vZÂbt螊P.x'gi*^` WGG=~)ӶMq^MRL<}:Dʲ6zgӔ (u&ZUv* oL#hmJ9I ^6#NPĶ08[X2Drq.pq9S{Wd$/ YG*a{ 8 >XĪao7M4pmm='_Rkͽg+/L`y1?gk^ܚ0!9^Z'8{;8+5 Of+8kdO]$TSJ59eCDK+gL(L9,pR9FՃh7/@* z=&YɷzI\u Y{MwۙRl9́nm ك^ qz6<CAZ9]KJy8tcm;//!g I8y%"2u@9cVs^ 6 YL #/ +>SZCi 4g4Pz8 Lf)R K4KB"=;#dU<_QR%v|5Bs=pޖ ÝKz[UU_i{E 7m8] zo=Ij3 Sqi_IX] [:ū!V`:YZQ& iH|=,YSՀ Hg}e䇉p~;c0ƩCT"ƭ_FpZ JZ19 yChc!=7;ne!,MPQŸD7 xVjw/s9M-9hQ$#.vY|Iu~,"#"9T DPWK(+Wjrgx P1e^'o~l܄Ǣ :GcIC]Y#pnWV[l3_< " &9+9prjL,Z%S³P4eSB/(p?G{zWԭB1. q=)O":Yc1k<|Hߵ}}ؠԚ0ijs%Dzt/{c  E_s31ճx/kd8[Zm/wi>IR`l}g 3t n[9vBMRcH^ՖUS^ۃr9JM| ~CuENO@1s, 7DpRp&9iȞ]/)34zP_)AA*}:o2UΛyd{ ~LoQ@Nb9wr]-VÿjE Q@dBJXN׉2W)PEsݧr=l1FF0zDˋ܅i8Ȇj@Fv{j'I=N֭$bv V8Cpt}cIx'W"Dd9PÄ4}Cr|m$\Rz@-?7#yGkr]{jκ#Cnfb(uwCc7Rnfh}_v"_Lђ[H&9k+>9B|& `6✵KZƈ'8,&;'x7GOP˸J7#t_I^cM/~+1Rqjlg$!-ܱ f؋Md"܈rgH<-y\!%+dӡͷh=) h ξ<5Mݐ?'|dP٥f. `*twtKHf=βU͞|F6 QOAl!^04ϧK~E`P#Nzikgj}C H`z|o 6{̦k 1<fB4K fn@HAϔ%O7g[hHaA]P>＇weLkAA?YIs뎤g(k'L6?bThk ٟGIh]Jl r\wueC2h$c zm>&.Yz09+V`fHIKzFA憕{3sFӔW4H2M5ԯ xV @Bt1e|]S &ƾq>#2/$~Y0J0tt5rT%dkD/ھrދ"ZC\+R' aWg kfys*` \o|S$v߽t/"yR,DkR SՋ-f2e@KMT+g7ș^Tq^ =HJe?qw#Sx&vRh,.Unbv bڨ3o&dǭY-F5W^P1(fALF0x ဪ;w<4kG"p%R?e% cǻ}՚O c!Vȟ<@0a-v4,%9E~Pb~OQ*^)~F[&FBZ Fd@5})8 @&&#C`p4<EG|M|fF\,\JA8A=sci}|#Ve{z5]Q\-*WJț(c_jcgTYSSQ{ڕ ^w%%V޲IocSi8DwuFsњ{y4*wb 8b L4jV>aNƹHic@ȗx[ FLA\vLT89pS͗5n_Umx 53Mª^Ss")iqRc.y({VZW [%S*bban ,BY8rG|/Mhe>~^ě"PF:ej^Kޘ# T̼e lQX@@"^#}zz;뢝>Yr`vsBD\p%'=H({đJ Zs.3> 1q`Fե')pW & F"HN&KW-+ :5Ś=B+ sbZ'ēu+umvN:/,FKijV-(RNlf-ќBԨOش/,U8AV 'PΞfaux`@&H 8Y(ωȦ:gAx/d76놻OҟڂO5ac2{Զv%Vs[!EMpE`Xx~mRh}POAW}0p*x&ٸ۰ZV:.ndSXVtrf%+rt`n{ɦ^{z[+](Ng}]~ K`ķqKG3#|UX:iFF4~W !/[F&5(;> L*㧕'"FlܓkRQ^ P9XTTjUM\{?"?z:)8E˨Zx[EBb!yКїڈ+-)N >~0 *% ˆc4!g٠JtӝB蛭*"vﶬ+C'?wZb%/_Ҕ̬e70ZjBI*ݨH/0 tG^`)hUZP:Vvڃ/0cΨpGC #UO}rߣw ꎰN\mR7 䗩MǷ39~@h=m/UyV+, u~Ʀb=ъBdq\ }9T2xR~L"]dHgmgdlw-2Z1ĚCRSvE1U3LrygF)ڵ*?n7?\ƌomR 'TsvLZJ%ݨ2H*׋^5S&;~d_ (fFK2E96A!y<ҁ-Itx0zlH eMZ5T꧵>[2ISlɡYv8\kt/) VJX+E@c1) 8˱R?Pf2~jv#DJǝB/f2Si\NW~h2 WlǷ6K ݱ߈k1љigxGf%%AR֡^R+'m uȿw{;sӑWJ{1_0Zh?Jʈi E("):M` O!-_hV&#zrx{(*-A + nV"> n qbh]D'k: s'KxQև qVAc-_ {6Hى+aS1j2#.! &sdZ8W )/ݵp7ǖ KktFR69czNPi(&+z^@q.疝%HgmzEgMfp-̣ܔj_+,mY<{+0Zb;I N zcAYx%C"U;wYg`-N\}󩢡"^'bK+ }Z fĴ(I<o48*h^uNe墚ZR?gvM֤INQ R ֎K.\7^o/QF=|-Lk`Yz U_5B& ԉVEMyZm"1)%|% = ^%ȑks_ëE9ży~,RH]ۙt# 0G^fk>52 ʋTU2|P"Fjhkl 6:@9eAR<™-j[ JD"+qtE΅)l+.ɽn-3VxMB۩r(]前a IT׈k4!<~<@)b.р*u'zHZ$*pɑGi]腹P%(9VwY_?eֹWѺO`pLj b]DXpB<> jTKZv{] !J#oB%E$(1rېO@zo8E(,u7X-`qI9>B]]ώۓ~/q*f Vcuk)AWz-.puMʥrqJ[Ej@pu-KJzKS]2rgqe =pܝ%m֫2WI QLdͱ"}NS Kfb8v R~<"%m3rAV,eA2f%ek[͏cwg; .ӥrW+. waSq d?z6s;P6+(.{xXUs LkeR'/ˇQ> Z:t3\El%Ԫ q7}Ѡ=ႉt#vE|c]wBڡ ds/ Վ.Quaxܝ|kNE\Zw;It3wQeK|^UF4eS)DrJvaS?n,QeVmjOW%1IK<,zΌ#>7}R3¾AGJ{0qyBN2azE*ԴRhCn3<>R$]{l`iRl#f2L1djSba{n$.|׭FþYSRX%Ŧ7NýjsYlL?`OudUTWv%I!|koR*lַgw9Ncr{nO&0D-Ks/XdȘu?ԗ!x]Κ[!Vo7 39,#0,DE]bbmf7 )LJq' !bzygG&ZR Aţp0sԧ*ԉ_g#zu%׋ߐKu쌏^AU[p8#JϺY=>p,VſWE2Yk8=wLx e9ZYMntz֎m]?+!?=RӞ6Yl4UuzKm '\IY:0J.9H0=9 $soe\‰]*WߙYi|/Ce:X! al;W cX%3@oȹ!q{ŔL%0% K*|K㕎 \:yxAqG_؏ijDMAQV*tCz3y&2"9e1pLj =odd۾Ctc5D}yiª~M+|47FeM#].B[TBbDd0 ͋ZFv(IC "A`PujZ6|PT5M4lF:Ƶ2@>{~T(a0 I+MDM%i | Hk2Y~ .*wrg큚gJ7%'“JNK X~?Ω d ^Mh<*찌X׸ & Q@-Qu5g?0XIT}r|6ngH1Ҍq4Î"1=Yɂ`;ԷdՀH&`'Pg-ŵ@VσD(_wG"_6(߸L[JrG\LfF%$Kӈ&}yO(|#֧n  I/(G9kD,j85V҈}"8aa B)5q:{0ُd \M/0 )܄2;dz^ 8ׯnj2Hue{<rP k&#% [nXD{^J?:Dnw e$׺G\8׉t$h9Q츅_šE=;`*؆Y Hqyfy=qTq^mʻYPoۜ'e֏u@l 6Z@Fr0~W#]c[֊hqMw`Kwcm|m,x۞nXPCGzDqD`ZXƫZSx{9c;"C팆dC6]`'$ג ky^@"X?7^T/݈J;]UOy?{ Wz}M,פXB W.Yfy4@UX r~3mQщ(-\C)K[V!d1}aك(iֳxWJyyZ 1)+56 "S^IN̠h &Y}&A60uHQ iLjL+I1I•Zs5O|nK>5gn<U@]O8MƖVǸF(+ dKX ]F+_mr3$T\6OG*99I?c":6p- B,7  )րregpj)ÞfnyZ2tC1Ǵ/D |s, `Pvwd:< klNiؖcF⌫5!X0r+uFUS[IL֎?+ ˜K8^I9%6yMAM7<+,{Ckm95nY@h #`jre9%,r}0<5^JmV$2<]fqCMZ)ّ72#}J^|DM<> pXƏ'PB<X7&Rqu!ifIva(C7(xAڞ̰ z:tc^9OVQbK`I觟j,{uCp9sn ٵ^,Ʃ?J4$'hCprz΍c|OXڣ`tY(^B"Ao)|%gKH72ӒZjKEd;@"7-8oL8Œn`=ا3=$m c?Cj58 u!%CƐ <@ל!' .zo:3uu"BAA:?&DFt, ,"4Q؃=1͖y[<R\p$`M%J rgA2T0u Mմ XYAoX >툆zl2 3HK2zFX=i59AU SK1A'z$7Ѥ}ND6N T-hh;+2Tg,$wnG]e|>#UװƌU+jWxP rvaW,,%GV.;׆Dx$OV62{T畎du륺肧m.@ pXٓ FdL&A%ii&q|rn-OUoRxt%MQ}[(sdQ%!i RZ{NN 6 FVO̭bt@'ts'f`_Ɉ-竎vWZK/%YcU$vag?_/Q~T*~T!6oe DO${˸hqo >>Uc?WmJp=D 7iiy ''*wU`?E^|5]v 'xI۳ˑ:~"OG ^r5pGAdG²>VNڳ5kuzKN0)ƪs Z7 oʼnrRj |b5KeRrD'ԜޗEN(CL?M ƴ/11h?27UǠ%D]ҍ5/>B i+` QoD԰S# ؛Kڐ[OȸEG:EuI~s^ge!mrѾ[ZI x,nS(cc~EǞeOE(Q]}4'W5UWO _$( ~P?Am;#ljپIxknPԊZ!=Pa䊸>d> 3Cy"%z#):vj6\E)V%g.d%7ٕ"m5I21n`b|2&kwWLSPa j Y~z{@2{d+ꑵ p:/Q juT_$G=e5lEa*c߲C=&uv2uۜJuy^ =FR swkۃ~p}+nǜW3c$O"2| c]_t3P2+`jUz||n1Q%1@ʎl lll"mԌ~ ƚm iuTJY|iWy|ô G-lɆy?Vda?wdTٸWx$P,v#I"ᔆ!nxUW"T L`R1䚔z=HlCwkl{Im:R$YȈ(#TruSͅ~H[ifo{+^3_Sll+ߚ Dψ|E\-p1jL`N/$f1(XD΁@[x?J'\W5Ǽ.a˓418ҿExR!|*[ >vm^aLThV*SD"{޳3g?b]-hG;fؼS;w,Jz9 ȟ CF{[)xB,b [ߑS58cJejTm_kKmO1ǐiaҾޛ=™42<zL!ku1>bj:. \l81@ۗm`bjt-HW_}(DܶU!QQQⷴMº/;U;'s 'c XنZPN5ZXkL{2=oA.7 mWr2̤ '5lk6O4^,cɲBtpx}Y`Ek,¤vY"0:V29y<AHy 2c^;M=4K'IaHo`.ȑ(KvV^Iq6$Ť#!AtWCK!+:.""Aˌ9r ީ޴=;+Rp/G\hݮy` 6s|o͗F]l"Ȭ5ҝLY3}v¯0 ݔYHg/:KA#iqݴޱ@CiD͊qa^JLZ݋G$ J̩vuqw9A.W׻a5 {` _BmH)mO}+c|e"!`lQw"Z}MFPa I0Ct5.׭"Dk&YNJjrꀁYIBL<V8]ntZ]iVOپ?)ɗdgDgw#^c? ٿCWG=\pXMX{8"ұ|NnSYN=:Iܿe"FE[X$-*B.hZ҂@š  Ƨ>Cb҉T n`REՄ{ mQ,p4'sJ,غHەjtM-Brlvk$`f'i宮C6eQDGC SPq{vH\/$uȈR32Tq'S|/rnJFL0T׾4\ 5;@Q{LGٴD(J_=y*O| -K@SNô*CgBKѮY0*05(C3h{bQ-|I,<Ph&!|BHȍ'ߞ~\iSi8rtڜ[kcgwƜe>*8rO?.sM|Bf~?Cʌ^$1aR }BlBmXT};ovܗ<%MLd;&i;՝=Ϭ8ooʋ#bM߆Mn~铒Bk({k]MCg{*Eoa ~L-d=]=ӾnAZT|~?xd-2Q֦q WY'Nw55[E'XR9T(l4NgH(430ve"HH5]eo_C3}hg&yV[=/ @PV4pJ'a>SN#|d1'G39huSG1g]PFEl"Y6k9֥$r i>; Y?9T B޿k DAZ Ui.ٸYlqdQefLE[ FQ}6Tvޣ*fmmH ;1M-}VSG$1c̊K nME|8׉jl:uJBLytm^ó2LIB!؞(M*I>o[`R7}xH{P1"ۈ}se)RccO˱ԧ1ٖ]5܆tvQ sW?E\.%L!ƚa+xv\:,dx@Ԛ+1l-zn ?ܿo"^\2CԞ.C:H_J1'nܱ qK`xϜ%''7a#k^5K d?`"_=f~ǫQ\?pQw>"r1rD[q\=C }RGc UXq}?QVIے^ :@C磫:G#Hl%m!Eh%d\UɋeJҕ骼zfw5PFٻU n$ !5 pQ7[j&[2E!YvHi&G|^F% -(sJ".ßjA%<^ %?j&mCn8=TbVMUjH*K, MWrۮ"5ؠATs:. <.!7cQQO[}Cz߹gMWWe\MC0Tg2 112:3Gms: mB^ ؙ-΀=]Zd+ JM&2.k9G*tM`pC0Ny^XEs rë7| %1d7:C:}[ru:|x\<^rnW`Tzm]:[sпMfl SGDBDQ^n.e8Rsa/m_\\vPĸS,tzʹ<|j7x*ۺ$ + ΋~U 9r+=ZhC*SxiFH}5)eơuyڽVF[m;7ԟ]rjhwED5\ҦF ߟ-iVj={F EzZ. C|XGffhAű+lbf;Ӕ?W_u OǯfxRHHmRY\2#$0+;`v2H\4/61@+}^suyY-tEɹ3N_4ОW[ןK4(yK2;Icpbߝ$\b<XE,5?Hg5^a\]~$lN Ff%ޥj TΟZBg'f>T\sBH ^@5&1[xΉƅ5/S5WIJ` VuBB%ڜWxޮG8^W1-xs҉[?plgaEz.%/zFۨj=iyitR^͐*R[X,WwZ4Q,=B ͏I^3Uf+FN/4K_BO"5*C_Qf|D6gǪJWmLKT MIŎgp|Q)gv}n+=Jj}ͻfLg{J^K`GpwzfwJGm?E6B /k+$Bz6A{E,hٷSJm{i/v?u{xaOm (QP2r]sX3!ŀAs7uRnߠ~QFDD" {K-]axKڷ򋑬$pAz11<{%V9c =a$îRiSݴXbCRfzȀ[CVVeRwO49.#h UC/vLvdi(&/|$q"d45eĎ+1ӧcyivn5sp `UMg_=YƠ .' $ KW:nravhs*1A?b9$"/=TkxR 떉9eas=IBTmyM$_5]M2U=z4CeZr;] mad˒ d:i^`Q7e2Vi;L1VNri(yNL[s .!HC;!0*-=cj=c☰ȷpŽOl5D,: QǞcC݆ͥ'HlkڱJ!-D1':R~IG|eȐ,_#YjwSvA} f{II5SOTwiO˭XpZU%s4Mi 3PrU Uz&k"N1Iؽ *to\m8: Is $ȴP!pEgȦZfSx]zz:-Wz΂y&V# c ZBъ弚Wq}? [H3JK{K ~r7x 1t-V`Ѫuִo&:$] 5x 3"\Ǚ<\`c`"Ai`JW- ,(w\)%yAhJ $q͖mKZ? FDX(9(⹵oNg$K&<˰ (o0g$iʢ} ĽO6*Ŷ\Uo-٥okLQZKwO&#/ɹ eZ#!S0kMXfc09=&/nbj&+Ce) /Cn*x~A|›j uX-g "i$tyVcZn :4;rGSQ,T Oֹw55?$E(lydG<FH)c9$"W[Zw{ЬȫĀ2{2fM=l T|Q{`Unv9,Erb/Yy((ĔngkbKZwFςvIÅh1 8_;r;18~clL̃?b0J"[In# x\K*GX :1v/.pf`rcvL74=>l c,ԳvTׁ#HdXk/Ԅ E4c o >9idylB8x'ř_PDFt[(H$73_,0t`za WsEH e)qzAI1u?mH[.X Q7K>HdM1k1FǠPBHw84zX?DxU[m_ d#bZVM׉&p']Qo{Y N\H0ZO$@> ]ŏBSg}MWx?C#g═;@EG9޾oa" cLA\<e&Ws *(ҡ칚LNiJފWc8Gs|nB_2' i#=hs vgJp?',?Svhin&dz WSvw:bҁ-3,%IKLZiP7\-y T KƐRJZ[$RR,IDs9IrAA MPwi3AyKgҴW~L~ɻM:OI-(vYcgnF)}N,ggY"2 NWʻxy?I$O%H[WGA{h˗U6,wjUӀڜCiy nsԲO/gB0sfƱul꣠!P 73gG Dѣ_E\Y$V:_;soq+cm:q$'O%FѝK?>X/M " 6 jnm/jT;ciZQ ⇋ Nmf Qt"=|gQ2;pc~eAQ@e֠3N{%y5zthS򺚖QTFy~|4 ܲjJ\-{2C<tiMd:Xj-0\R..Gb"0 tRd-ٞ%cE/%V{wXIi%eLh75 Ïvπbы}Z,\U*5 *4 t\J BtR/a%>;F)a@KI3B QQSNCL]]Qk7 /PoJgSz4_0G|VۦbBW&LG0!/puaKZ6.I9ZƦl`ڼqrTEyNW641OL;Z{yA^)NqA bX'I+J۸i^kGXjC!:o_B_7qKһ71dk#\@5 F3=@@=J R‚kh|FD2363\ 3+5Ov-3 ?VP%9#nyga?G&sCED?dkwΥC~ٻu5o, ~-K*[:F&s &]5UM⬻['&{6uĬ_hԬ8v=X^a'$g=yG 5~u|R#86VBΓ xui|ahcn[uj>c0oSRjeχɢHVn.%\~RMq6Cٔ~==]0bs L{B-v6wBS N{uu4vٽ4\A΄jsQ'gi0 h1)-L> ,XgE1$URDvYk,!B⩜Ɋ+ThqddbiCL1wdÇzI V2pZ ځ4F$Z"-gJ+ɡu%`Z ^'u3k΋-o\lR[:&Ëa.MNrRB;0l4wJ~jTRoO?moN3f xrHGhiY1*6 v\~zw¥*V]y` Q߁ 1imsWΥola54;&Vg?{iB(<nkAchyJ=1 V,Y _ CPN!x_Qkm~'e[)ߪ9|'Q*rvَ1|.*C*G{28\ ?^oo^X=(u%dqI]^.*x$2RRN8f[jI)Nkmj,LdAzeJz $aE ,x[ RPo^Q*ZF%*;Rf.dҘ0 | xYR՝O%wt]4b1?;h TM4U lL1plX=4~ [wwҳ{ưH-0Y9H/dO7kߌm/SU`J'"̲tSYSdA -P@|mۙIvsk"=!S7\Feq[X#DU 1zX '"@}X|+lVu,@U" 8-u&OQMѩ 9a@ϳu`P?4?3ݱw]F٩Ŷ \潙@E =8 jmxFh'}'3ӓrയ2︁dE\̚ϡ59G7P7[3>&*}28c) Eh\a&]CϙzHthwD'^.{+&ȅW{)"*9M+:9ߚ0I…KyMv9ะH<}[l 5!o ,O(줏%zMDUk(9 pּf]@XDD-ִSZm+ظz\+i>v,*Ds98}0!}Z9UQ-@Wm:ݍxzT^Ckǎ5#Htx-hW ;f|ANjg>|W49vCy7swd_*@K)Ѽeq8OV,xj-BCͥ*l{?NhtXYW[;.fwsh b8;׻>*[oczFzgǍ0%|IKaZچ!=m1&;_JE2S ߭ ./^yLxtO 7> gti'ʶPʸ['\N('A-m4~2W]Xl`pi)iJrl:i Js4DW12;7Ol urc̀WzE5]~@(CWD ܀LsFĆ%%KR1SHj ~s~XO RPfu}@ >Ӑu=9n MYjH >\WTAqPBzETq="4ksz=0'y vS6ߞшNK) Puj&֫![e(KMtO؋qoE1/ Ĕ%FZ b{6u.S҇wj1\1錜{opWD¬E+;DaWH7ǛYEymb~Z[t;)d-<%+8]NX]jtSy |؟s_3kL (1/KˑiYt0A+[S$Ш#{WAN;dCq29(=g RIpDl|b]%@dnzPvZ) 3in*AՉxng?7a| 1e{ᄛl;k (Ӱ7O{z^\:wCұER)õ=wQ)G)*IPz'yYҮn@R&U~23 zSS 9ή ǹɦC~[WaPbEMkJj~ G2MS= ]83dW=`S*~1Kj-CWkK[v^aYy`9lk@2H5¶L|WFM" q5t9/WxX5BcBx/.C@jʐ-̯\U- P+_Vp"U~:p"?@8VR9,$ǒ% hc}Hi?Nr"j N-H56jϷ(ӀNE}F^Nkx(JWNZE>9pJAtB,T)͚ZC$L_]̒].95,Olnt~j2x2?ʚٶx*? RGMZc}h,مLjC|Myk8{IB.|}R{.#{!tA8iKdklwQH]{( *'7VTGёY#17?;,QQK" m=n22cv+*a(lqu]h[֎ޛ/N-#c[,ӳZ KQN$6DVBo/2JY^W%64RH[ǀF@Rܽnb>ces \F&CsL(i;t:$:r_'.*g5-KERr8  rݵPbrߖk(Fj֣ggJ ;2[Ɗ e?' )1L9x[cP6#mnZ'YϵDC-+L) сj){Q{ g07Gm>ypIįM^SΎ\cŶDGMĨ f> VʌIœp6w:oef|RYo,'nn*Ŭ />ު'0AőƯUSTQܒbYխ5qZkhHV0ɾ/S^nQCQKV Zt !d1#¿NY 4yfݔS 1qŬ"cɔ(- lX4+9#meǐ4vh23ѩBdJ٨xa<}*84JnwѺqxv>Ccۘ7 YZ