knot-devel-3.2.12-1.el7> 6 6`d63!}|J^>j/5,de.| j/5,dF&'R(+[ 8'Z%Y'r@\aTlD0EHq~k2U'}nǩ' B3 -`܂o~}ͱAbzԮqGD,Bv`)h9ߡ0Vn.B';zLm:OY[S HN;sK% fY` u(fh]A /2~)Y׼]#/Чxk9Lp60Md\uTS Dgm_y +~']E7XbbւTUNOnqNh+{y?het6έD [ݸC i%LL5Ci l7MSS5B˶tR!b[ÄsAV&{tJ7IQ2`& _C%cĠ g꿬l/N%-B|~i}DUD2c4734aaba88a59a35d30284539896d803d1f268`3!}|J^>j/5,de.| j/5,dC]HX9Ut#q״^{an$juH| bʄ. UK +8SEj z[ 3"ŷ |k^O1!z^/$1~Ӷ; W c{kB."SZK~όsB<л11 *ҷK8E d&fc2YE%9]Kᥦ{%*Z,iAl!e d[1ǙlO=. A{C+-:VPhLtrLXT%z-Իj:J`43mɮL/ H"H‹b'-ijW4 ]221hZLMCb pH'Ι\>ƒϜ"NgcSe3O 8:R ,Be& CXU7>cP5'|磟vx)cH '%&"lNKSf?6(l$(1JT̓(>:?d   N &2JPXWW bW W lW W WWWVpW< h  a ( 8 J9!J:/JGWHLWIWXY\PW]W^bdefltWuDWvwWx8Wy Cknot-devel3.2.121.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.ebuildhw-x86-09.iad2.fedoraproject.orgpFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R +. ^, J 0'(69K< - tgj M }FX kr  L >#"2 9,'A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.12-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.12-1.el73.33.2.123.0.4-14.6.0-14.0-15.2-14.11.3ee?eRd\@d}dd.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.12-1Jakub Ružička - 3.2.11-1Jakub Ružička - 3.2.10-1Jakub Ružička - 3.2.9-1Jakub Ružička - 3.2.8-1Jakub Ružička - 3.2.7-1Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.12- Update to 3.2.11- Update to 3.2.10- Update to 3.2.9- Update to 3.2.8- Update to 3.2.7- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.12-1.el73.2.12-1.el73.2.123.2.123.2.123.2.12  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,'] b2u jӫ`(y/`] Eq|]ejAc猞ޕJ]m|Lmv^q(q{1devVrE;(|5OPWW>81 qaR~Ȼ*CLwBvZ>^Z8( :0X/$ =non+^?njI;u;&±m[ea8v@KDxҥ3SreiT!EZT@;/:{R|ٷZEz}Ә֜Ѓh ]9tqX "@a ʐi}{pZ*7Hb##(} O6P Վ N@OBH';ȧswj qzhZH rzO_8|̭?6;Duyy=X_s^+P^5ՑW4<-˿>ie)20~HTM;~{m Pi6ӥbưAȆ&%7GWW/gU܉ge`,kP֯gկN3~~6N6C6 4"z}y_/lV~ƗD8LLˈ3X}Kߊ!g1ZO,#Re],l9c):q;2vDqtBm8U|rsi;ΘeO6DzY'1%{6 . s|+kNPҲ8Aȥ/dVˋ魺0;6/rL) g%x|;JɘS0"jGGdP۟7/5KQO<R%TR+ 9ZJ2m!K.m_Ȕpn4۸abNMloϽkN?ns~P5u6g 4g߸3]|,-g 5<}E9UV; y!"pbNiՕt)xdRѽ#j)fmBơcͱ]g\C"3Kƒq6Bd%*2hԞ.֥.,-+\θDuk\"~Hk&:8**̈́tl7ґ VܩI濟Emq M,:x:GuMֹpBsd-Y@cϓԐpmzNKh62]VXYRqrn msiiP$rtOy9Nߨey6~Dq -K>Yy"sꨝb%Bx22釼Lͱ4ȻD6<Υn*r'T%`ɴ׳>$T#|v␾([ٗlنaj%\.SfiK]Qʏ avSDtPp4zI%߮<VCr(\M'',g)/M sv(tue>V8 1-ll[O.8k-Bi! M+<=N }n %ܚv]R>4YE9}S~ ٻAڐc+v fS‡5LH7-9[P=L~S*'l* =$ѽs/YQ'>;8`>Ay C_ۜC> .NܨwR/`8TEiԘ1DʅawJ=US+P5RHc=tk?ב26T[X寭 {QBlwWH_J]hV 0L5ՊplԊ)˖NK~ApGN Hx=ш;o&,AGMK(2ӷ [}Kb"?k9 Ta)ih3;6b֨B$;9c|0ҍMyBdfo |} u5B@Ycm B{BFVa\okڢތ;M1]SI UgKM?))ɏ,PI=N` y1v'*?L* K jf U7+MRʰb~30Lm8߽KB>tH "z Ĥ/C[R q̌=WXc-jL<C'Ti_OEOmz|aL0w "S -A˭@&Pi8N5|lxcUI*b5ZsOtW?Ȫ4%CMC}(aXBtK5D l__ aph)bUAW1Z4qo6OOAxO}pXawjQ7滋U176V~=]WW$r.euޖ1Qnu%4ʶR Te/#&Bgg Gd3]SՖ-hDk$ܯOkk#@u3bBKȶBYm{ls @\XL^W&' ;n~ /dT̢r[4Yޟ!Ϥq,q+]$S_Ig= yl2}ܦT5E1'rlΙb,"ȧ{+@{za|GШ~Z[baf^J4 EG tAV9‰60)]I҉kkO)qd^IJl %gMÚx&|gCA) {( 9COZA](As ׊n¡'7Q| mo'2?kUpq{‚eJ[ZB{&jw;7K~xO @ o .VOK㊔r~+Z]G}ƶݭF> ptb 5@e*l-l@/N> 2E),DtwRX˦~o:Ll(xI|4Q؎F]j;" N=&'60h6Ѽc60YE^CLCugӣD:5m/_KvUlN>䶍q=-M_ڊ!iҾ,e^ʞ`bsYe΃)"K:~#lSP-|25'߾NY72 jo^\(g<@Ӳ'X@71S (Zd6l%CU/νZ3$qG-+_ _پPToҠ#wW-k;unzD[v{# WG` *0k{B$m]guwJ,єFS:3`CFr$3A*^,e;f^[ ,4Y䳒jpf5Ii>Hm=9h/5)N Drj;=(Eu#Yq R*@T2cZbA9|Y< (fy[Q!V!l jjP>Ǘ΋>U#?2ı[%9Z9GS͙*3er欜N=cڵ14ߖX,ٔhPVoPb@zz ]* : 6fDXrM&$Z;;gUwez}M2ìβ}qo6}w|R6owN5 ]g+m^%VhZM{nMV)Yx".+zU<).фyy0ќBZcT9Ke@W}l=~2Ln@S0817X"aR'wa:tp)_-$Ó$gd²vj8_ CsѠ&x9dʧM6&=OV:_^,IX{-Pحz]E4* 7N0vZR-O0$c吸da.IspZת!bJwn;NHHk)7g~DӒw#΋*0{ ?9e-p̿v>IErU $ZVW΀&ta|u?~Sb1YR50,k4-ڍզ8)RD؀ђ\9®2ЀB/,P4ߎf<)Yi]=(EK=loyEB;X]WJ$025-yAWwNc˺uw@cSt< TܿsRX学`l4:ϩ.ust.Ȱ?SnuI GmX &KR.0rev4VmG'[,!Ͼ緖j {zKb*Ð!zQ(mNI5ӿf|.~XGqyxm (H{b>;jpV7$>w[0!"NjZ|ub9^B}W`M֖&L6ӢDP!ocs5~ni81;DDGJ8- ð@DHajt1hҧ<ㄲZ+^6 /SbgS ct& Xyۄ~bzMՌhq$>I"}F/h,͂Kb]l_x^\93!Qa8k@PmjH'$8 ܽ78b4X[5L  j| rKA /\xy.r{ H!Yf_}߿G#J[cS#*k26Vn꤫ rQԘ6}U cky B Iut2KcptŤ#p]5ѮZ>{@0x)bQoy+ 7 ю[ qKA_ȿ@(,Gn_ Rs.J}ׅ4$=WqK3#Ff^?nHpWy̭_lǜ8!Ӏ"ijdF2uNbC%lbO[UUѳ:64&[;{CsYP8Py9eyyh4NIB밞m~/FK? N(\Au&H￮7}f%rTk:..^R&-E "m }qbc)0?ƽŵR( b/ 4_+|NaRxq6R,n(y Fe2q[{^&o Uoq?v:B[Sl"q5Q=H>c.)>:_Lo=8eO@VF}"U$*ELuv{F\,I޲ >)hu3-1גK ԨS0m1D^+Qd7Wl*&D|NJmXxyenj **`{GfB,tfbB2H)S?THDd]`9̣*ABuwK?>F}Gu})5210GQ$\[Af>QtբXrɚ&W\I|/̩!gmӋ5 } s*^,JrWKiyٚZ!2V;e$^Lva@pO9ϝeĒ{3TVlyEoC!6՝4'|0XhQF'Ű#Ij0m=Q'e&:XAѪOm>kIMl,`8K]z 5e9z[:~O%Blp+CGBw DhQůzR-q?@E\O \pRf+moBXU@#&i뷞 ]$W7jV$)ÁQl#3أ#Δ4|I[|8 EZ$_!2 P{,G1?'_) {w0EF1FGI@6lx:d;qKX1~S.A!b# ngwn5fT'u)DrA vSLƋW1)$4*% U4 i Hi u.T'j a0+{ppeګr/_@6-hIeP^Gîn>0'7Id⊠wZ2 U<yiHXA. fHy Afxhv8y6ܙ~z~aY?hXYCɘ. /`ՄC48pE9BҲ~5 @1|(K`/Yl~&Ϥ{P]{sO 5eU.߹gHGWSUfqhE M@;Ww*iPNn'8&բò Psos߉XBAJ4Ola*9FaiKpfN@r/;lF,.˭G0⾎ 훼 2ŌrT}ޖ.J1>x8WBLasG/pn ';c}ёoX榪ʀEˍd ?I[2mK[b@?^|#qA>❯&c!j?}tpgG.vj^FE2#ԼHNɮ-晩nҷZEZpQ׶,T%l!HcR1kR';VȠ2 %umxٱ̺F)k tLpDhbdkChGTKӼc̈hFы_ڦ2QNn;!+kۤ!PI(Ծገ|-vǰ~)A?rWAI\dA{YB/y7[Z;@I0mp6!}\/pl $ɬՈmb lk(n\5ubgѷ VS^ E_sJcnƵo {['"NÚFf`ܟOg?{~J^W6Yt[s3|/%S\UEwk|Šib$kE/y`nXDQET>>~zH"Y4 H[\W5!n|`s:Z'"g%3n-?LN#5#R:T$hޭY荸H'ݰh6"f XGz~S3麗H.)b:^BZTP`0k8<,ne*g0R*9؆ʛ\E 7czټR22jlD`fFd7)E6F<,#ԦLH=đ-!Tu-H\ Aq*nYWA0 /qma6us'7H ?&OԒmy@`7jc``)H|9a݊VH@Eܶ4dlJ1?QO[⎳%7WIcEwq*Dr=;F?~Zs>[9klA(2n7ɍmtwͥBi1bУi(g ߩհ)@ .Ưp\3K/1wq9Y>i9:{{Näy1 . Wu)!}N~\@Ȟ$gł\*[)#Qof=8W׽,S#y4a=w)֝16уߢjFgs27f$ Lap.Nr`ì`)GK#TKRA.F溟^`Q؀TԤfKЃQs=bHFHz?Ŀ7+76WmmԞgQRo8,ŹvLHf =o 6f뻣\jYD֑dZ.:&of;q|vBv"C:G&&Þb  rKтFo8y;ϹףǨiSb= _Þ_0x8WFr-N7QR#t83@MTWx6b,گ XKD|;`DfOOVn&OF^teAZaNMUOr]'{:_ٟC6Ue5E 7/>ͱH}FDM=c2oȑP!jEdZD> *?[̑B|{ȹx]oS+ ]i 8@[; 9(q3_YނOFwƺ ͨju]&ftuveBnɇbvDkIH:N!oIe8#~Ţ:}#sYm<ō$Ӧz]꼪1g܏..M_% *q2+0VWj-w8K{/KC**T-u%bA{ ^w d2E1g諕 MvX(̅xrC9I)BE!W@ah4B$"<5 a kvRq ;nŢջ)*"wS&sFasٽ0v t1;%cs#+hMc`\9yJk9g-$&X3Uүgb!g@FG>y^ΞL:,ܼ5,Wh=խ!ȡI\q1q@=O+.Hx]V=>Y]` 8-J!nzex>2pEbd20{& !`G)[Jv@bz'zH+7!0+PYB%/~+af1cԷ["z)|TD%WVB \:r=%q[oާ(+W@I}9h,ɗ1gk9bjhAp|>1et:ʶ磐zT-ÂohނB l &Dƽ:Qmۊ ,A2~_'ܹƲ*k27=Cbf : ́x4N`E?:u]S_˛߃DIT'ηN%DZOz&}<5Һ_tE%=R.9,%MRUB1 R@]Aƚ@W{VFeN8Sv /L~桦v('V>pXȫ/]B#% m'z&@VǬMy cӢ"{ԒX`Q! v3;TI/:ۡ3>:>!'NrmxTuKAJ`uXy\-1sPx;HWLk"{C^]MM|*Wx ĪJRa|/ D shoFb[g<7& PUF+!KrU(2z;mɈ2,t5ϻSNoiL(xȗFzy}n |T.Iś݉ܢiX'w]&gnsUcSDܻ_:Fy!Fw|? b2t\sšRmE UQ~2E'"GNC.a%)Rβ^n~/tG{-:@:ȋmm@Pbߓ{"4UŝMXh3*`5Era "0?hUlo^˹=X]%E5պ x?WLނ<GCCvg*%Czvi&10Wً`PqNpԀ(GT˻ƝDڢMI}jf=Ug7,:G?h;OOEiu-=Œ9^yj5TM組%b"֡ߦ#.x N]GoV@Mc7Tlw:\MG_\0ȫrv7W86Db-y!u^oSУ~b{ r ~oi"ny{!*(4XpHҧ#!·\D}-~U'  IR)әF2- Ь˛qȄ 0kCnN);szX$2x7ljv cZӦȃnV8B]fbgWCh/gP+e {_,^2**}|92jHx/*k+7(Y+c qhHUJ殅0z?1mS+n%(HgVf$k᥿o$N gU+ŚoTorU] DIȼ\0'CzJYlݻh|HidejM*a#?#{N~{Grc~^n"spmf[7$f|(hνgd1*Üe-0r}n>_ހxIj5ѷЗeu׼lq /Aj| sf3EO$S/mشvZsq^u[鸍OD#aDುdwaj5?t4 ^VU01.ZXW 4T_bOR?%)eT O#5n]PRܡRA3NZ"L ̽ INvrC"w!;Fea>Q̷/Y :WYd_pcV Uы?\$BAQ%hւ?"l{jv p5xEڥCف^gKJ>byB~(RlSD34TZy:[[.Ÿ3ӓ#;Z T¾8ʙB)_1QooeB;hyR݄ڂY''t(GIӅB27P>U|yBavY"Qo)C6Am3i |݄jҶ̐/}=^uC5EZ]xad\/cNOpJW\|Top&n*n $1YչniX&$_WtS$Kl_ԤzˉՙRk?Ein1SG~o/@ܽUMpL4a i5kLE iZly\t,Ns1+X%ާg^XiFg5D; 4s2|u#AuB PTI7{l ?FK'0a3~eQ/Z˔2 \җG]9`*+*41 q22_B4/ɆBO:?'PrsZĕ/h͚h~J3*R e"Nhx&`84tE&Oyla÷h|Ƙ4YNx2(*Oʩ,_:L=aHe(K @ maŨ؁#H Ҩ'5w $*|${zF@ՊVU3rOxOh]-Zw:I@+҄RB&vPt zG9뛀:3aˬ^v%H S)I/wj!PKO~əi\-U(36K q"Iv{;,_%̟nٵ7t͛ QPu(l*3# Ľ%{SF8i4Io-GJG8Ԏp:A+^T dHO%g vRmAY"/[ $UbuV5L^LS[+˫4@A$G jTWKF)Au, rPtJb4l?wS Ufsd:;fCx1!3_\pMgHQ^W(?sIP` ~ܺp $Z<0M!z+?<꛿: K> -p-yP[MnF%ҲVO!Q"ILRO] c:+"Xddž&k$ѭ+O=PӦΤJ!?jN,^<d0sfj:#3Obw~{Tc+a:iz Au5…ѽԪklIsdu̹ŋpΫ'$O;Uc`SD a.;I3<3 ;v{v58 YȺ7`pˋ;$DaefH[7H%ڣd~Jd+Ff%3AwG HCJɲyFI2JűWJyJx + .ep  b.P ]I sϥHLXJ,WiÓFx2]-v3b1+ &̅ZC7yl&%ïH )M4"{^zyCS-v8NlW7*VZ{KMf%8T9<}ƥq.TpdooF:g< C/?h{;z&@d .~Oz͒"\C҆u,,Bք&ԅ'v?Q"ɥ4\tkpoKH聳+>ЦԴ63ZoY#WAf!fE.$I dC slŎc>~"R/!#~ XkJ]4螡?w(: Ye(QIcVĪܧʐG(>v .l9}~fEidX^<3UzeǗb+I"RffeA[b:!8,DulJ4+\II GŖBˣv`ƬqO`:vY'(p4TOjgN?@Ra'FPM aw~K5jnT~'vzKRj(k%6kئ4Jg*O۪VԬ>O02 {_xg ·ehlR0nQןX{:p =λӕuIJ9ο2H8|Q /6-,_rsdD>7sKkHe8+]! 5iŬ ½o%HPu昮Q`7!dwoC ƃ6 _1ʕlb:w,#M8bFv|8FEk,fȿ`:#ul#N FLQ53Kۚ Kw[AKٿ`7 "ʷRHLo%nO^|V8jߍ=X|#GS̊+-~^>ɻ|/^Y6T#FөFe.L&A;9~.`kFön XɰN/ ;1Nm趉P豉BcIi?}ߒ"4T G>_lT'.pI!c8ߌ3iRh*62[SУ ! C;fߋݨ;ចC4h=x>=f$RGD.IXКu<$u%I6Jf!039VtM7O\~3N@8הv g Uڗ;ڠe]Ů\t)7==@t뙒&+ēX#>z}1;8hwb.p3DV+pyl/L2see+J#ߝS=`wsJ8hFWxˤzp#3:G䌨 Щ,l" scb1<-96S+&4?P*EVbF#>}b*:nF|ZHSniKSq Ma٠^8a1eOKBl*)\iI-XoXDKKOUaЏ:{ŵQY<&Goxu҅suN=o0?gRputxmY9n-cWFE [rRF* 3_0F7OmZܶn,w1q ܿX j6 X1,IA%:4CDlȫ&O+, ٗnfqθo6*oͼ&lH +3U$-&P^\?NY:bJK_6M.xIwM1Z*fCM+IP!mjh[܉""A>ܳ]OCžx7͚Kq7uM wc퉐`l|4st ~Mn$o?}%>L8~OOP$h#0n݅cC )f8I&Osv1{,tsN K-p ٘h4L,ੈ!ޓf 7pA? º@97g f|B$798U#l$2DE(ό~AdwC4cIzBܚ-o*f28RHx_vX`,Ihkk&^a$ӹHthlT2AT;jQ~=P,imTYNS[- J&gðLAɑECR͉#8-KɽA%͕apw~Βt (tJ9}sGU3Ȫ2iYВJm*AiT5ٞ9d|D oHLx0uO;fQ.~ ]p?<0 ůIe`Mp4QicPuw 85lvWAK:Hr׾UΥF@ I[ HwIƊNGi.QRYM]VVԧN Ui wÇe;,d0p<gA#LJ|$tţ^Ͱ vXR*,Zܣ2{?x{jKmj b /`'S&kBg@ ˡ(!Pfqa^T2dBw2mzg;ۤnZ7)2`N|'Njʤ֟g7n?ΜO&F^CqŖOYwyV:L:2P[`w~H’M6дQab cY M$n*퉄  ycw]S ޕPfB}u5cj4l$:YN7pNHc$@EW5뙮=q. 'HRv3WD>U[1~j, ѨF17M&(a&;λG!vb"7 _D&^l3h\CKw7/QTsp( *9yX:&ouPV\qƵ4PkTa[O /_eѱZ*^EIM -h䩃~鵳 l Z>N'a{;r5}u`,l.J~6>7]e6S3 G`jD'ش$\vSλ7(;ydܨ9<$K}m)#{XքE(2艴}STmhm%UŁ:T'78u!3fӳd2v_aI)A)?!vM&No[b|+w+P"ڇ |ҧA{\/%dDQ$Z @b"6va*c0^C ӏRzn8O% &9tu)K|X@hgzCnL`8yUmz`,~Rƪ$@xh!DyزxOX+EQI /v_5[bQ΀-=^7 ZAwq%ܽ'ׁisѱmsI'IIBaz 3[I$ȼƺs/0hkދ靝yrܘ9E;PEX+,r"2q2 +8OFa"H>r+ Ԛ>/)G&ƂؖO%ŦI AFAkwմU7+VLVӥ,7!wEo` Wv)ި()bj2%;qw09FA :+NH]O{_ ǴF *e vUz`oi.i[eَht."?/c]<>J`XC6h+k]j%ꎮBAʌ7Y~8 u83NG'oi0EX>DݘTf+ᦷA$RI!/yiӓ ,166;<p؍ytCm#|;lmt` Ѭe?뻖{ &{ l}&l̙.;9F ;sS+]a_CGEl 4*l9s֖62]*Sp+}hAິlGq).w/~25V ,y7be;݋Rw(L')DZR?, X 9h.'4pmπ) o)H|Y&.+v?`PfU·ۣL ը$}3@܁<[sG- 'Lar9:B*%ݚ{@0157QMFxT7` P0'&@k޲:?!tNAdchf~qV:[ K&"70jllV÷ yRϳo/B]/tZ3ʚ Ʃ߾0PB ˦YX#G@Zixg#r"O. j]%YR Fl3K*N3"#kz{\Ub4M|^yx6+"iZKo'kaղzP)>%|=aEyE z7;"wqj~yUfNJ6Eay K=|jsjˎ![!ץwpԵXNpar3v0՝y-azyKkݢ`+ _P3&BgMk>V;;ue2IEۯ٭=¸nH }`"˃009υIW+C+-8ݫ[Q@c&VBsZ}zn1^vp0i6-h1<Aw曄a׀fhM,1e< BKbR>~vw!qqo]a` "d֢^7a+b($5n&;kӰD_S,9C7 [3=_gV!PQ,uvLYŗS[HV\ ȐX40OzXb=Mj4w)kVVRjdqb}o8P̸<;U!pYOľ` M>N>G1zUcL!?,͇Sy]-ˍ $k\fdnWqn$H1e'@esCm8\jC poe٭?hsK<&mzss%v4 `΃ و(_iS'B C:Sr@(4 fó"TX<>0iKuj|p~Ƥ;Q45>i`}Mjg^S I.ˇV7k@2B.=\`W= n! /[3fYQfV: ޴lo((ZǍOWm !WWg6AWÑS:tOWޙҷ{!j =]‰:ccL$GB&FZA8$+aڞNgq9MK`Qi/&f /¬ѮJ'3zJ{ p^2qS}Up1a\(1zj#JZb2^2pÏQy{;})GܣG#/3"!}}²#y` wB Oۗ DrZ)YW%פAxp<3˛MTʒN #O(*Er0U(,b-!H^ @g]-ز\u=0.S@H)ܲQtu`#pdCSsCH@ p kV; 0kI5gkYh;L;xU[]TBc~7`{B(޳4Đ8 әg9v?` L2҆ie~U 4c\RU ~^w_$cRB+bʲ=?%Q#K7so lwE87YIl(S-}q]:Fcˠ+L\Q:]/ 8qջrwx*pR̀+x1Ҩ©|[boL|x T3EOx1tv#vm^v '>5fp|N`4~.t4zo0q@gMZRwLAШ9s&kO[BxkLu>Oɚh-qKe9jS_v:p9> + ?M[7Ş+l@E ; Y}rRSC_Ͻ}-'iwgf=WIX6q\K)aYl\7BDOTˢ*b#TĀqۙi`HY"x1B~9mAho|F3K#X$"LZT@T7?^$BhMYCу[(RRoX()DXGH޺SQ{aU$zwHvjd Rv"%ktn0}&@q۳wS/sγq& TB@mQWk=r9=Jgl4Gp3( Pfd!uE[߫K;u>T F(I sG#&$u_KE)V\*/Y:9Qxj9Nn.Piu@;Jb43=E+ .MqX h N/@VwDz/eqo_GBhuV? whz1%3{hn)AP ML9Q[ k[׉9qv03ǻwMTQ|mYA=XgX 2OWW:3cV\ !J9 h4te@)|dkJN:EK-;iWqwl; q;%IZ8%:J+)n (!o'͕<\ rjew:CUxt܌O.IiAKMMD|gʴTƪ4?Ȕ=ήCsjEn2kAaJ jq j9?韄Dl`?"Ti3fK9_ThQg3_ւRP'6-5MOVN^4x_iF )A^D B`hhoZV{\ck 65}>Ц 3]*2RrTy J~ƋNъ8cQsl3U[Α{v:}cQ I*&Κ |}0{0.XR~Қ } Ո.S&Rqe Ȋ&#d կ6ZZJgT2 a@nW$XAV*C]B(5(Ƙy5] | Gh1mQ Tv<ȴ|sh^, 0t[<&A:\;}cmvl?j֑ dWYۣ: (MrX37lh4P"mrg4ω}u45S].PoA[),O߶8Anv9K|Mb^?;ֽ٢"h-1rD'RPav02Ւ\AHO39'y[)@9s$VFq%F#lIJ{J##{6y#'!^-y,4^εl-- 8(Gް5f AbD3Pg f" iW`-7 Zk%[FT BE|x@O۝D+6*C1~p/5f/]V;􋻰aɞ ɽ~3 K%!@ꍆPY$q k>!gy c 1\N%a4|Mv0_`R"VIP %V'ஏV­p8^sR CjEQHӲwb"Q6}E9v9uo01N3%I$ZzEy7i?TKUԕ7*rbhOKKĠ\KZ_HO]F<֟|xTԥH@f^@Ck/DN@F:ȅ!-f\cxmfX..jCk*:|]? Ϲb-:&2;Iks] Pۻюj$u34T sFH `c$;[XZ=]RԼ ^Ks!} $6/rju 'M}kGSrț<'V\IDZn"ӀQ3/ل+g.KT<}٨>b(vx]<(-Ǻبe w9Z+0uB?Ϩ3I84zK:? 3&>?9VO3 A䮑6|PȵŞ(q/> [ Bw{yD\v ̗ZkΓ[/mvXnX<}G^ #]!1~m(D&,,=~J)8?IO zKo#" 8ymeXΫؤH8?=N] xz%rLi1i9PnGyZI_g::ei2cg|f`PTb)@>r)pV"]~xh/|c&\ycv[؝&צ׈wTAXqUm ͬC=lF (MJf !VUg6n$}ZGZֈw#,&m$̒eQJޙ/)KjՁiіnP@o3?!WOW)HUjw^e؊<\PrDpx%h>2~^bCVCI?pc?)llx![1J>V㪨N>VQXA暟?[qN)(XjbFh"Q靇UC+e7nDPR=UF*-35P\\Sf aR#W)kVDkJ'4k_U.Y+o1ذݿ)L☲SW (۩,mOk|4VjGp]!=sIh45u#ca".j.br޲9Smrxf_ Z]a@ a=SgF?5#OOE%>nsIb/lC94sq@ ؟"&.43w" èۜAj~m,{ݲʿrU -+S=Kg KE;-NI 7)}ntx?_ԑ:DgFwz>>(R@5'5M[xgܨ]*U7ixMp>$FLJ˥ߖ',6&1 PBGq+?*i7a,EXNfcy~3SoOCszfxk- {f`quGEKS91PnG}05XKb fU{c|?Fq Ú"YXEk__68E}јƜb"QZ :]D@Jq{uv<sEQ& lj(C(p_=hmŦ`p]P3 A_J4u~2iz;`> NdR RS{FTxՄbc*6%Hd&>0pr  e?Q5YRwuPeNЙ%e|8!?rxK rH;Ϩ N Rv>3l jOMC"vWAp8 |(k|aVj1shzR9PYbX9@.#H8TyO-o vLmsԛiESl~\Fu` '7#`bf٤z%0cx2W毽%%}p=Q!(ڜt0vFiAe"9I [J}Jw#9 d cK|Cӹ#|LSiV^o6&A.s8_G4[ <1C05sμ/{cn*V|FaL0 @p7|*P.Wx,b؁C ZFx-6]MIfsg>X6`Ԟړbz4#q|'o$%MR-aAf/5#N'Y/2;߫۟ 46Ehŀ0w?4mv xjM=N"gw2uOkq\Eɋƾ1q(L(+VۮfN)]\{vwtl¯),^2-uϣ 2Q[S imHQYhω+n *;lg1,߰!莭ѢOJb޿| lJS7TQ!t/?3ffS8JrW+L* ThkPﻳ^--NUux=*m8W SÕ],ESC)a$0đ 9=t2TlPd٩P`?h$GYnt8<QyT?^兢[?HĘ1'Leen6,~/ ܛ#C+wA, \=:URij,xێK'GJt EToV?[ CHDKVF"{FgluxD*U&2%A,Ңd$ι+3p%ߎnU49G( ['>ŎU(I0`i?iYC%$,ǾU(cBrGTF28wbaTP\%4pICmEؔahj3Q>w xA=ĭv{X:OX$4{( ۉՂTsOX㔾:g4TZ2鱪!#cZ]Dj"ϔ ȼ\_g`~w"IIJ|6Ӱ:2EVw9{]],q^6~9ʟ[::spt)>9=W~k5R"irl|6be  :z1!Ħ󽀆Ƞv%>AIq2"U@as9MK V9",d쳩@$@)Xu4<.`<j3r[R1*ɹ,"; dMpeGnZ#">i MMJ]"'N;<@Vsqi@>j@65Ƭ:RܭpP9ZL+uR cGV]Ǎ7@bű^J ЊIY& K]YI>7pxĕ:/|Pt8x&lT#Z&Q0.&|oZbaf*Z3pv??jUT,/aD,w )$\"dqR/t -->7NnhiE*>Z?cYCK;6kʼ gzBR/Ӟ&n3diJY|R!  k?mLq%DؼQiغ?4OZm/\FygUloj>i~ Kȫ mKLFTYs15g*'-Z>>ȂKn?v88ix! `p=82-n܍A+m lżq& >_ZdibpX{Ăihs<}f8e-59Ltn0*n5 M*i؂ h! bˌ/ҙޝW -'&j-Ji?E8tRRI#;3mn3/!BRXrkAAʃJ"J']JZ[mk%(JJ,K㟺Ik) 0CD[6 >Sw^zCebGY Om|F*fŐz.XQ`nd+:ٛv]Ƙ :9ILҐ{%*blG3"@֤sw>~/Dx1-9pbklJfz^- 7tJ0%0'6ת4_QQ@ۑ[ - _aGO,BE.,J/+yu]Ŷ&[mq*~ԎFKlU2֤VͭI8nj[SX9UmC3 G1-4CWs1ilsH=JJfܸ1Uo}4dj[| ̳z@2 bQJ,%β?A''g+p oU bYAӃKjW;?CGE : D&ݺ PI#wJZKW_EGeuj3tr ]KPQ~_ o-kڴL`FyVєCZ>"]2MS0Kۤۺץ1ҵ#ik"/$vࢾ͉0q-W<7(} p]6?۫ a/:)b4ho7Z>ͻ]ә.UOܚPyMڃ:GJ 7c^oIZ{ ~%_ɴ->rRl]vnr ! ZCsBMÖ82 $hM[0L!/J}W_Py['l,I4%>HOh&p#`h'u:l o/*uhbO+5Hy2Vd'ϸL8piwh^@PՉ K[6󞽷<~KNx|ԥt2&Y-߄~[:nw6!ًN^>MFnP >qR:?A5l|w  fkޡȮ*cm,q)t"J~[C 0ĒddˋF@*Xu%5S{:!* ,BǢ+n@&TKjgi+/aOѐ:_[Yҧ_[Tn~@ֺ [B(M4F[Z@#YJk|6"ᗞ;`1io;dw%#JcQQ\WSU_WD<A8uy ķB{3iv|)_r/^c4#^ ӐE+Te9Osr.r ҩy\2mL@=oPAaUa.H[SGWYmܻn4hdRQ 잉y~sx흍^b \P*g. ^sV%6qUv")ɼ&aj?̪l16z`[ G)\ s*bV2${;OE "5+g9=bBH(S qQz$ݤr5ZRlם[" QflD3gBX-Dۇ%[ k²N\x۬۬ ĸDHmbhz}gk[ sFxL:ZQ|xK;^&]!c4wM 3 `45^tܐKnO&3_W6?#q\&&[LPeJf"=bŋV"li/szii Ӓ1M֨W 9䞉u b{ɥgҺ ҟzW+m"Q$'S bڇ(#Pe5#mTʙoCQ2}uT3X]ƅd*O{$<`b$j ^sAdxO rݣXڙə)O%.Et)֟k @e؞(:jb_tY⇚^/-1uoW_yKU[Z|2[:A!wM9As 2Lr.ڻ{~0ɺ ەǵZ kq- F= Q {o n2z!eTf˺#/U[qx TQȠlJD[ԖiChS4SC!.dQ(rݴ-sxzcѶL3ݴނ,.*_xL vc*VA|lBKF(c؅kOӕ}ca=IpTQRLDKiABdirXB5F <}Ӵ'.lc[?OB!'4-1溏3A, - g= Nj'#2WSf&ڐCsas9Mi㐨S',(eb%+mLQ ex\&p{i8FSջ$޲0IJ @L4p (iv}zIGQ™zA^=^rv-g3;d>FyكaiTw4TfW0U2ޅ4[뿿|IM0lU>r Պ873Ы$c[L \ ()X#w鄺S9xbhdE֎'SV&avGD>n V%٫bP:krho=н4Q;sEAr%3g" 4~ۜu3:R>eIkN.exW$z!,`<7%[-~QnlśE}ze␧.MPQuwc<$(.8o^(% e087VZQh;Jב FAijdIM$e ɨɃO(.x 6#G՚zpJ]׉.yJ|`C% `|&`{Jpݵ4D8huK QުQۆm'$8ONk/hp6G/lڽ{8qw7X޾q)Ǘ xpA+1n%:ڱ8xiPvkܣk ZwH׎5%'8\1*63'P*<0<"'AOF*)m"I8l.CI>6"bE^L5][.wh%9{R,1)0c,9h{Y=y44|\MkX\! "j^BsPY h5["S)l4n0=d ؖ0& @*vy9v̪aK8,YOːH܁`>H *gcqYİՕ?2pt!& 6-=L_iXNm'4\| v 7GGrZX!Rozyo@3ɠH߷@w 8:ʺeP:5Z~ q`>gE/h& 7% +7ߋ6uH+J5'\vڷ9g${5u}Yv\%)=0SevxQْk$x3U姆) Q!a:@Ad!.&Gѝ "èԸkChb1sG@y@Y '43CI/ ў mMg]5 M[3:Ol%oy|q|≮[ "N-sd<$P4nVo]/ŋ]VM۶I S3Z V=g{P_ ">6LŋuImTǜGlmQ"[7H J_=U4ۜ&vW1 }4F>'"b(9ʈdUth_yy*zG }If&i;wC>`ǥjxG'*RG[ރr`KC@QՋngm2f zi>w|qoU0m|USJOo;vMһ2{ȁ% ѩZ|g2z8Q8m؜@wXm˦f"I'殊7Nx } +-u1$/؏H5YX4~5WRBǨ@m霤=C`pѓyZpJKAo ypf2"ff"J?%TH4G$n&u߃S(|~|<5nb E6+Gڨ4M}7o\d{wCEY_hR yמ]r>f&;"lR`4Q5zFlozbp} U^ޢ[!Dw͋8A\{ho?y< xx[[ r4$Q)WBC'_;[oV,=[B\x0Gs% @8(_"x. l}4X3*D>2FughAA@h݈ +=QzB/ _Keie: +FvMaeLkT#3HS!㤽Il6 e%N$]yk8)i)!:ߠ i H?]U~!!9 EI/Щ#CmSfViԒ/f´uw~G ?'=#{Uk51.ӇL,pdB|ue>SR0*a4uՍZ>3MNי,cφ_y*)^`}I*tpqy+6VQys̺֖kXȘ[]R}-_{RЛT~wg% B^ VO(ٌ}4 1>i6͌;䔀Krha=ӫ E9}8`J _=l] p/w"q'NiźhG`؝I+aH $",ތ{iWApAFx$"9x1! XNN11=.iWaP㤍.XGg=ѨÜL4ꅛ+u3˅J IS=TX+vȋβdZ1kADjJ_X|{HKE2M+\Q総;jb8H>}{@ە騈X$ke~p"lN»5&j(Í_f6V\o 1AOYmSxꫵxTOqmI#Lm(ϕ,AōK3ڔ9j_ !Y$]-$԰Guc|rTamcʍW5aqKKϦ䱣pЂ+d;c:t!HR]j=*F#tV> yȐ5O#ʁKm۳.eIԯK ~4p'ؘ[-}*)\g7~*}lшm~{6]Ħ'R0,D; r,dĝtΏW-]ՄPNb C>--&.ixpqŝcq|*d/!b^g,9 Dr'B3b;#7 O$$-Ofk[H,϶M =6kɿG ߓ.*I2sڷQ/p?2eBW % R8ޠgoDg9 ;kTlZi1)Klo-_^S/{`訑~yW.Uڸ*F Qs]ʝJMH=vs(W)Pjyҽ>(%f]v-{-05o8*Qt&Gnl*9ZYxT1yNț`!&~#K"ٿp!砿 'f՗wڳAT>]]j as@Z%b 'xugR}  uH l NqyRlgRZwW/B똈*W2Ӏ^wN]aERv~1aMb4aou"+HEp`?^l0|2`Ք8Q@q}>sgdTq0_BϮn>= HMdJΪƆ?%]fQvrnz!rd!2N^F\9SDl_, t ~ ay} b$eP!#N #^YW +"w{sBrK0hdb*Ft&/8VHA}b8sl`.hƫ[L B:i\qi,^NGVn o`Oa~}tv\e=c`;dr4)ەiӋU Z3!_\%8cՄcGM]6"!gby+"^DϽSBʩ*`Ul߿Pa=Dp5k)f,Yc<N?] 8{ c,ff*лs$biss!AUTdE`0d QSc3{ {J^Zɵ5U53Yg;:lA))w$'07`PeV)"* {QTztׇ[] !i1^~w "CȈW3^tR}ȗcR!:&]ڌ>xQ#x$%}[˱Ў+ø\Dp_.Va_h]gL~G&#_n|@r1\yJ*aî؇; {gc5H?_J!ܡXngm& NItY;0F,t'?ǃ?F3~QO`Er]Sx)UdHCHd#}F|^X1r9Y~*4wƊm@RV1}R6[nn;ۧc{tLOI>~`EM#4X$Qxy=u(.R*\R/!B2n2\'hБv0brV>WZFl΋Ķ nsG%jh~ rl 4ҶOVu'a5s6+iG{hP$EK\S[PK8u$@ X.v&٬Xپ= k[#z[N'/WNH[T* j-tv(B]z!?t,hm XpkV@70mXXKQAm؟h*dYDE>+*^dfW=ɮR*+>?SG; lI)␈Q~`p>ĄB)Ni_+P&Qc_J^e\J& RXw{FbClgiY}2$ub.bTbPWR(Fj2P1FpW/(^fCf۽N}(C8Ky] q" i]7rZl.g2Hf ;d6huWtQl&.q |6X@r?YG,i<y5*C+ *%: *Ԏ٘!6Z/Xh?ߦ/y!&HB< Z'[v8K!1C7M e ~ ".Rh-n%7T}d6cc8QQ/e[XZ/& KY-?٨F|RF.9 ~ABv qg)O:F$3eky]}4O I Gm@{K>ֈ;ʳPjWj4"`Mk;RNk!3by1[+B[WP$ܥZ ƣ_ 0מa)yl92AJw}Vq:hsHdP,fɌNb̆^ZHJsa[K&QҦ/vY}'ߒQxD",;xĈ-]w䔘g -V]v {&9Tf]Ad+@ Nv9a]JeݞNԚYaG4!v?ؙ/3&Oy6J k* ]3ʖl 0~+J'E&Q&B0cMzwEZXbc)`˳r w!I@Ҡgzn?Ohe2Mj=(^Fs GRj ˊ&U@,!^].1>&xq8YF~&]h|כ]m.&8u9"ƘW?NGh4 #S] a@&&Wԋi)O}w:sA(L`\([+O^íd4S Í-aLk!v(tf ݊_q^a5zli+5{Xh?M:IX)B:h~9/&nC YZ