knot-devel-3.2.5-1.el7> 6 6`d63!}|J^>j/5,dc_ j/5,dAթJ?ٟ)ϙ.߯yr6?Bq [=k MJ޷2ľBgX2% >D'ΓAw+CVؖI1KCտEZu0O+wcNXX !Zy BHL1  -5:Hqi0wpC)/;dtP!o/o&knw`4Ɵm0DpwaOds O1TdI;b93SUYLvBAv9& )R:Po5sf!Ouw_ܙ_зR^ٚq O~zk;ZxCnӟ> ubj7`dO19df4e9767fe4ecedf42513339244dc9ba5a20b2^3!}|J^>j/5,dc_ j/5,dvrij!DL=NY6`i8)U&PE愭ZW]5.65`쪚rJ֗ɐ~%J~'͕ɣz,uZ7z|lLMw*[Qf[}e0X6/1`҉[,002\մ*܉:\fxu;g_ซtk"6t!Oen-4Lwet>Cusޯ1Ͱ/*"RMcAa [N͕ @6Dl,T q +s +5陜8@ѾD!Nx"qWr#4sH3, 9(07NHq)~IcSc4 H _zCNij2B8S%*>mƩ> }>:T=)V_?YDbN_u8lI\"Jg(h>:?d   M &2JPXWW bW W lW W WWWVpW< h  a ( 8 C9!C:.XCGWHTWIWXY \PW]W^bdefltWuDWvwWx8Wy Cknot-devel3.2.51.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.cbuildvm-x86-10.iad2.fedoraproject.orgoAFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R . ^, J 0'(9K< - tgj M }FX kr  L >#"2 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.5-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.5-1.el73.33.2.53.0.4-14.6.0-14.0-15.2-14.11.3cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.5-1.el73.2.5-1.el73.2.53.2.53.2.53.2.5  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,g³] b2u jӫ`(y.yVP*כ3 QjvMxd{G>s>mbhd3Yg/]Sy\_v Y M׭Ļ+ȅʙ sYoCaү) _ÎtAX9ˋbT,vtQ$Lwo a_o<$s0ݶ*<5UX88G1?#O Xh/evE7PF+{U7h].Og{6X}?e]M0OVń7^Gf{B$azQSYt6c=)j15-׀nryDѩ.H,KSf`o$n;9+J|l[8e(8T۽qB?.Vzsa[ʚZ,Hѫr@R#Aļn78ժms،zФ?m -Y5  NT8'&ua;“[ e>(S+*%Pv z?[߇y}G nr Q5Xߕ3]wϠ;0V[g(_~r )iЪoźD3"P~jn) N0AK]SJTc^dipEu[LAS)^#;ǰ]=e iޮI BbCkm \)tC'H(lCtHKęJhc  b `d1=jbE[)ClIҧ,HCu3?ENkPI8^L0bH :N{ʃ’#I#D =w2XcDիB3B ޺+jq@beLL\F>Z;^"A@ZmH hȎC6_~e+;sBc&8,µ:2B[DM9ȧ+ܑg]I7f ;07?a(q5L5MD?TI;koThڧ4L ppGm  *|0B8lTY֠Z`]j2GLO1 ݡ0عp{W=T (hM`$}5X n5 kzj [Ú4<6 w"; 5Mߍ!Fe *;G, o(S;u_Db $D̒ssȖyMyM0KKbb k*g$+K@,%}vaA% puxRjL cڮabRJFL#xFo5beDRw.ӿkŅ]_ZJ 1zN9ՠFik]}c5oj*u[N.`8>8P*g;vv& Z[NO'U&'E/i"0 , ][#_t_ҷGP1DZҙQDd{ZzKw%":'46fUKvEJ_>7xextyxLH{̙m9jEx#$SLDX$7,ce)NLmuRz~_"ns`qB7H߰tRԐDą9ߜ8 \dk,~֓Re$Oo.b*QDfb7o{a}vb kN}"9AmaрN,!@EwCD,-cUh&.FhW>$N빷rwLOg(KV1"hP^R)3@TҪVpGByc7CQ'58Aa)x:ȱ!{Q-_NWN&}JVi#vj?%aWi@ʍxa(Ozk SIO$vpe|NTi[88JS$Bt)纪6#:ʠ㪌2eY~=ԂeSFtR-~hFXj2_+3{ɵNz1iװ>7Q$WkM>*h*‚@<+ծ I}L~(^,<@l*(Ky=éнNJZCaH8o`lHh]ӊ*kh`G2XA&='sTm@l̪s=8猨dICsrm{PZ+:b*xΰ-dݎ07A#)Da)E%u7ecn)T%6h̨=k#`&f\!LA(81XN X\oo&5˸2\8kpkZp%g ߉+LgݷD*$&Qל`";=уS(ΤwR_WtЖN2& 953w ~%ބ^E]FVX/+Ycgη}ju:~W~0yhP1]U\3[߫R^P ;/=*_z'5DmPCZ_|XS뇗Ŋe> #l7N_Y:= f \(,Dl/ zw .NKx`%JT~?Cu \D SQ1cMQ)#u= ˔m;W^#.-Wwj%SBCG* Ͱ.~ Hg.opQ%ziA6~K2N٭ a4m"U#Xtk63ro@ 5.@^. paAZ&|hOj x?I;6/0JY S<ΜTITY+MSKcϙ1[b89>U OyK' NײUd:sRK| i jꌹkmsdtZdA&f|\ژ1qLjiŨZW4 tIoxtƿQ$~׮$`&;<8Ti]kN$9`Vt;b.dj2a&dbjz6*7Flrծ~ 1є]L BT)jr.I1܌hq|8iu̕U(BRF|HXO#AkD_ӐBz̭j˱ 1+1>G_nȚUkN^Gye'S+򝑇 ZTkSZ@|bSZ,֘v}daqJ>?Q `21ssFpl^k 2\mVHS%j 8jE9(sd9]1Eጭط }|PNB?-zMk`ҼU7g⪗cHR{y 0sP 6V4c_ڛ_N&aw^en!ganLHXx7ۚKQ\@w 0zR"`p@31dO'2'96~nm "\[m2BzC/Rn3 53W9&jʟXuQƱ{%刹6r>$c>v[ γA{|hu<;rΖ[VNf3uj=Puc0JT:^`:g:+yFs}xOTr86j`V^Tndɭ"'@ݐI?DG U'WX#x(糳JQ$pͲ\ӻ ԙtCǷ3 dd-m.WՁI38ڬщ%Ef `jr@ r+r$T*|vOB싢4R \(O*ˁ,zd?ƽ;'NL[,&ݘΩ,jl%5..bs<0ƯFkBjXJ|ѯ~hay$H2w ì ޗBɂ,&qʈ(~J9eLsI  RN#XIA]T&4C⅙~s<|b֫5CN'I(KJt߉ч<ð,i~UJdov\˕GY*qA2ṉT 0\=Ԧ4#`aB=g9t\pD19 /߀2WԴh)bH)mdoN,';]B _1FKOdw.pk?2hZv.'J`5A+ +7OosO }wb5MDTY.)_LC#rBF~'Ì51k{ܮ_wDz&X?"3ҟظ\Osb}`oI2ò5Sܼ@vJϒİҞ쥮wl n Hv.rue{,1㸕> Ό$3 WRU>.j՝?,-ɹᄖoO )t`&jO(3(Vo rbd&Lb g/۰צidŦVjt_'j<0WE!̺KNNa7gY> JNe*Nn li3"ش HK;61Vُ!w " RѦڗqwnrLk{ӖYa+6Ѱǰ/0 GɯP[#m噁1zk*i8H>۔'~މIv%q=Quk7ÃۉJttːPZ)&Sm*D3Z/qd}^c: tCRb5CQs,kBÝ/K$ ;9E6cF_YJ%=$4UDKN&۴g%6EV˙}U\%9k=FLc^"_[fhɿ#eܱt_g*9Efڼs7Ih{U[`Qb!B ycvл F K4,S~znT^6DrTqjg>wn鱼 <+Naﭤ)|˂DkVpE/ʺC>'lcv`\\q+CՈ^2wkdPq$ZXU(&a[o, >XUiP_d;}pW7s>рmv :L=󙇉s7'Py[w~;#-)lek`h\>n];%I碤3cվleH"+,*s9ֹ"X!cG?GBl Q8ΝPbUʸD ݪ^ag:6Р`샱aۘ^~Fg~=znਝPzgqSe!`PR;bl#/De@̫UA۽ksY *}T_"4PXZeN4w~¡2) |$`0T2fY@9CGcf?"v圄c ͒؀;Xr*. hN 65Y|;(=s.!>+JO \׵]_uD[!eqFaH7HdԽf}'e@agyM|Iݽ7bH ֧ 4Vjuؖ7 UugQmd4.NÇj̺{ޭ߮K^oλ;"zg;̽h{@4cfWm!: L _07YKtB{2ZsNX&7-rMftդ7h#(3m|C?ԭ}z[T$nIN^ͬ3;^k`߶0I[؟FѰ{yE2ӁN^~jk´/6'U-'(רF~cչ WvS[v &1S1q pT/LW "R[d0˾xiA)r,Ο6]K>ߋZ }qc pP!ޚ^Qt{ ;R=+h%A65@V?]>n@0Q_j#)*,^xFROXHxRk"/|ܫ`wxߚaڀSIIa ik(/:?} D)09rg?e8oKZ^.#NOaqT'$*R'[¸ǔQY,A5d4j > ]ہ 8$Ɏ<ڿ(h+RNxx92dr%!Z5AAKb&v4 >W.@&5# !]@2uRٔ=Zh} o( _Ǐ|nQGq>~2תPrcfQ=& ޹b^ BygKfJ蜟*vϹ*ca.l "Poo֢b f)k=-Hr0{B"SRfɣ+J{ NIqU3*ZT["đEӃlbGLZ],rnr\ۇ&v5$OXL:iXARdgF́_Su`8&e0ozL=p +yAMu%CT 90uAXZSeekXT!,MC^v|=$me_ZAp%M_[k mezyc^ &YOV=l,T2 iM 2Y6Ѳe^}fD Դ8p- .fdyA8j@1nJj aS>+$'jY sj r_nV tulFOy!n "זa]RlV[a 2V3M~ID%=,@;z hֳ(t15{2:~^q?=+ lqNh%Ē]r*BIE>#xVEY`d cDqA3ŝJa.^S{^kXtր IlR$m/| -ax6ӯ $9߃)٢QP֊)a gDln5KG&Z(1M[H+Ȉя)yT0`OWTeLp L;GiWRrv̤]x"38Z_U=bg?L]^MX: iE#U{ }"7|M#POӷ:gM ԣFuG?|OY9}I쁁1˘Z3l&R&gK$ ky5͙<85tlul'Ï*Pc2alʈ-GC6MA@A:2ۋG0mwgywQׁƭ$M+`3(ږE'!}"B;#^jSq,|r6wa%LBD6 rہ9 _Œ r=q(uR~Ŧny:ϲ\sF-}hE'B~jc'd[b4g䂗Ibθ"?%ߧ\e1 0ᭇ տLxܿ `HxFӺ;cWbȫuEsT'i)ᬭ@ǣU:XnؙuZ{?+ә ͗m7#td=mA^7ye]Gi=s~3B"yh9㒊 7ZlͻxSZjd~:g}]/zw⭫ޚ.ܳ V\]Swn=@&/ '͊s92jIe5|:eПךyKOٚ<mD4=`A> `z}м]HWŘ *d1o6h>ޡ~# x$xE[`о[Eo/+Da 5*?5gHVqY.tDH9PM5As)gSĀ &25%h5i@eX}{{H 1!@v}ٕ1 %lE&tg7_FH:?Cs-mY[!34hn.I0z){٘&>TxBy`)rS8àBgIb3Ɉާ$SYͮG2*6ʕ NX!jmءHdW|[jH.,-*wɦ}CocٚIH,:·0фcG=d[>xY'mJsC<9עXUajHϦ5-]uM.p8qbU8]e~L 8;eZ'QvП(yP$S~yftmSE8FdAn"o9@~HE{4DėU9/z>z聤Iwq5T?K_Vp-UQb# *n"F/_pۗs3&?ސ˝8'ʊ@nB>k@'d 4I?^Mmj2GA֘^4FXuܓ&f'(`G5+H ٷv?@C4RfD#HfP2ȏ5^]aF1Q]C"犎]S@SQ2WC-ʩ PiŠ\:(>U!څڨdY(RʡCObw5ݎ?nWNzg*{*!\W<1CF }\׆^fftP9(Mq~;͟ mrpCU?8+؃N}̦-pN5N@[ՄvL(BܷגbE peXþ4"ju T4JXk~ NJFZWq]_Wp͜g5:?H옣Qdkc0$`|p.@7 OkzI%EbKei2ev^BGHu _͍E0fIP|Ilz.np vHcKGerC]'@J\>šR}p!6*'i-nĞQÃcOvO>$tAmxژEBd"IQo8'j3;D`:Fq٥eRl/[j=|_'t//} Q}ZN["s薭W^98b[uGQFt9CC?r$ƸE\ZطIO DžW;&w%"0Ǭb}׽d k¹ ea *ti1bf  ҕN )%9xXo6E":`٣<٭!p+6ڞ\'X""NL݋pMo>gDCZD1*"\U8#t''&b1sYxYO*@ԧ#"omqǧ4жnEx';;_#M}RƼϨԾYP Y}cFX2u@(Jp_(u_C)dwD@/y\^Ԁc} & ǁ&]ff2Ykx ߑM:?l*N@%NxݙiGp'CU;]N}KC0F)RY\/ 7O#У*fcJ lv % P31]9v~$skɏcص? \eׁGEF9V`-q3@mю~qBӽi bHsdt! ՜__Yp)XǍ#}1 ƛe{?\]z+}+3&4@{KGbq?AtTJԘL6?|:{l"vd4_rŸ {W)XM{jihlqNJ촘#Y>AgZjj#WnO9尿!;>ʅiS؛9@-G4fDhJ* `*' g pFѻ3DAZe:{)% 밯>ʱo˄=A=ׇp 1 QFϱZA.mPJrX?&<K3qجV[> ?Uuzܣ^kO%)T"ntaVzڢlUGR AȒ?z*}oOk]uk< 2hJqEN:Ş+h IYLcJ4[pm+;]Hy?1V]6J|L lk:abAWC&bެE qV"e6Tryz >[00Q :>6Y|{ `77PyZ+m@y{]h3/LO#DfG0Pq,P%%^iѨ2ցNpg'3xгTJ:cskú߰7xԴMIĒ+tYJA{=H lϓc4&{Հ;&+S#:ϸA?ζq8JK>֣8)P$f2't t'Ɓd4W59b -L )9(-_d|cR=U7"p]@U'[8uնhVfpc5B]m*oSbgnC@?yR;7$CE47E{aq`@+Ⱦ'!in|!tpLJ=LUP_wvfW;@=1d6ma0:[?p| kIR_¤o>;j?BϰcZPY6,0>i ?:3'TxeHRnT1gisֽ% GS;Nu $vѣ;3/x} W35t5Li"&-'iX;ټoJ.$ 0 -gzIYz `X2EI[9 ,~BM/ڳy$5넽b)T8FB.q<(z*Asl߼"gpxƶN}msvhcIJ̦EoMw q}b)6,75]%44 @& q,aE%PK2ie.Jsȷ6mރ Aʜ!ˆA(+sNHΕW7p܀p[AòےaQryMSG&PJЕM"9(aλz#*19~AWUY*)޼'M9Rl#&J2_4)!RNF|HdeĆZ8&U?勚f|U,X&B]sI g Le{%sLSWlaB@|CMICViH;ۦWYb R5wb陳@ 2l\cirM(Tx&';yd(- :ĽsCWUf< Hl>qTA8rVI@ͥ -̏:;6\یŕ/)MLu\20wXN *SnCkA *t޹OE?FqaRbIgL}b݊;b6ohbڹׂd-띓SJ+U\ﴲ؝ws4`7Odt:5[]eK⟆3[x9<~[>L7 6K>fD50GU5Cs3舒}6>h[D&cj%pOmrfюI3^zoQ䓥]VR9g/A@3(6HC_6C1h'ʜ%_eGEr~m z Y`Lw^!MvP}pLiF73bo~"|]7Br>h9ϵ!0*NI%1E>!> a+C:dLO!tDQC 4ypa*/ >:> #Ҿ5/4?ڡaAlwmoKWN ^إ 'n:&%SN}֞ |{v Qx4A8bӦ'|ܫ,.xG)Em[P"()e=k0N93,ٙ#[CPnݳh?VJ|*f),=fY:zAvXxVTh'<*n2(ѩϓLl0)q d9ZcƓJNKZBd^#Khp~f@NRF\@usłl `:imNJOd-wv4*m5RM'B9[tf2)gMas2@o2D@1lGdٟmeK-t,u zP~u:K|݀ȢCAL6ut *о1^ҩtS2cZsj`l RdClt01olt 3xELmHI록x2S[$xi&iq"`}dh)~W39Q)!2N*mNQ ߶ 5nh|(6 <ې |eOԉޒ ؚG4Wm(g]&_ ^l>{N2qߗBNݒ.涮Ap|uغ7j%w#χq.j{<Khmeq Q|UڍOqr?5QJZ)æ3uµhmtxE{ٶBOa0_VZrl{Is-2sNKPO փDžF&bƍ-ܖh)ʄKjsY{~8ڤڬSMpSv= IxAK<W>0*`PdIy2[AF@Cf~L!bV_dv+$g煋覵H]lJB-o5 "xhA+0k.*pGoc뉚D WK@kK2h|h2B5^C+ݏF|.2o*^ l_俓^ȑs I -;h.%zqyRGT{75N3WR]mE=4zR M}l$]yfQ'rxNxNG|R)6gl(r4eilc_?`5cLG̅2"2opEHs)`wFZ :•=-UGG3$JLR<aϦD fL~~О{go?asihvHlU2R5ATr)Gvx~7&*Q*z.T=`S􀱢 ;';c C /#F "ΰ%t '#ru:O6د*ئѷf"Kx%W)pNǰR Y!O_fJ]MZsIU;,2hoϻ웜֕GTmN$W +bS[§l5aU[~5y!@%4|g{-؎b&.@iqMsJPjKϊ'cDa.#TYN?HG(J- aײTϒChr ,BZvIV-YvOxAor<4ȈuVtc$xa?dgD&X9%`-,kLGXdw֖`D\+b1^#z'E*`,D{I.4I^ #:ۅAA߰HYhTdCwfON͒؇XQJ7F,@sho^ˋ=wkykWqYdB=7i'Ob 'T5eFBǁ#܈jo8Hz]=}Ac]Bv:xՏ&re&.w\_>İr̹KƸ/vp.Zf,txFjB* =)wnI,x$]}QtSb&a,τE:K2"Oh?䯚ND\XAlnp}|!{.N'.Å`)pxw)lN =lT S.5nPh(Ş.pdY&d ^X -G- Y>O|rX%K5捼\gSz0:U5O=Ya?|KC=awU@\aJ(0@;쿠vjuw? F QPiu/X[5DˆI9#NUM$\?J+dZ{&aH LXZ?5]|+˗s"#A8BAqU0 ^_Tv\{JHb6e& Bx1egk{m){d5XP[RjsRb^[-sR, ~nJ:zO+r!, zѕ"|n80Uu-aIKr-JYrPj)G,5G>f;4N,2hU-313{ɶZ8/{K'{~".~#x~^anH6ٽO(L8!B=)򈑊i<쓷`n\)}:!(qU"FA,$ʇΦ Va&/AjceSSx3r$Ў|l~|g2&0ME}abe^ Cw ^2ĕqYA|uܪ3U$h5sxN3Ot[c֖c2d(Rv/&ES>H5Έ,A1%*6ocbBЈƧQB!^^d &gVB{!.L"=y.DGnPg9| rՊY.[=g4S:~wɴ}}9Fcj w=>G}%,?tyZФ'}@Ƴ"W~oN:0} )+\ۆ3~!L(߽,؍EbQ8⿦iRuZ>wS?DNù W9Jt/i5rC ^qS`;)]nųwʢ?l}:Ië qkC1Aliǡ#šG`j#oTLwZsٴMnIR!p8aMIcbWr(PfFqWftf P"ٺDTvT{ ;odB'-MKG}T_m`47JPN&)a 1VfuSpQ'fnCa*wO3/|2s۽p_C~& 9wro-KUA>!#QfSܛEhgTM ~5i@l {EOY(Y"7¶}p2:)-B/[vZ|v{F3^@Q6Sc S,'3Б Clo3]_XmoxW37]ם#=g^&[Y=P HW!M -4gڑּfg~I9pIJ1֤[~=x~jpMj{eܓuHnp#AOIpq|'`zsRd.L2 TPpGkdcv[Z;IʔTZ+’PPItoSHgFCf0F,@{Sŷ篹[U#;pNKNuLn$LM;׻WR/*]тn)F4 }r [n}M)jJrncTu0I.7Vq?LѭI.;kYS5ךof % )UwR#f][a43 jNeU ** shE0&Dӣ3^sXz6Bz7Jӕp.'Ev ['mx56aȿM6 u\k?#<elH^^Ⱦ?XEs0j#)(KN[ܡN#8 #KeLSB < &w*= Y2aO9^ WU0kSS_ 'cԧ/:̜'ChRY}+k׈T\Z QJ#"V یcW@ It_=đMYuavzH5 %HacF#ݓsb'Jtk=g.RAM*E1`h8Ke(GQN,E*0ŋJF렁yV^/98tƐtIC%ˍA jvmCǠtsVi*J";%CקP^` .7NS3Ϸ]+Ux +TtCmM0|? M.?3*[b<J2HI@ĩ7xQLZ]iKl0eH;^3P?!CeYQƣ)Z Wxt:w}&;wKK*NfNjbi!O0 !t !D%ed%9,ݮahBtH]$J_SqYDOL+xYx nPyWY>h$ined{{Q\om8ķ {ot8&!-u׾:sj#}UXl u"5ZAq;Ɛ嫮a燽w`M4 tE TkyȜ";p{<%/X|!U t Ŏ)B:7{O Zf1.JNeDzu埤pUFG ~FiJ^@-YeN fvTJVl K\c{=(i=1 O|}Ӯ0f+p&okjcf:'UiB6>"xt;tZvl3ҳH -B4X#byrQWmNvҴkV=6ڒA j^WE Q\h\L7sRQ,>g!+ecOMV8џCAS>I)Oq҄nSZNvu)ȷǡ& ( ֑4 IaʍR+ǫHal;D.Ax *̫ŮҘ*r bGXg%Ds`kBجzX)iO!n(T5#KP3UOH'iTe\T/%r iz,71/XAdhNo-r:<A*yj/ =b0j,NT8=xL[ɎL{[AJemq^/E7X|E~55nu`CC=MI6Pɜ޿#N w-lq3Y)`zy bn]bL'Rk[-3xNu~ {e3pֆeR 7w2d+r,ZT_^96lдM݂lA%sqף4e&jc[IʊG|EoH@n;JC=|2Nԉy MyrrvdS5:3 4]7\,zE܅A.䞳#aXu4X38}Z^D^* y ?D!C/`BFbx"h!MnuYV^X &L>~ @\ro[feP>@ơ]y/5)IK%#+ux5MEeї c(55oe .8N9,$eH.ZD3$ZoO#WE7iMW]\] lvǝ|bz}1ˌx+jtסpd1[ ~2G(JvCP=U[ݹQOm05$Ɗ VsaƓ|*5SH,"b jr@j 4Hy=K@،j+IufhsGAWW5NaĄ F}jFw0+q(4K'1v0h+ VDRH)?Qf6;M0/ ́eA@ujESC$;v(DJ͍wyyZg9*cq-A׀L~T=uAuA2iD3/+.^ƥW5 4,A\[8/wLԳ=I/ e(RoSh5`_aK[ـK$iD=,SP1?7A®o;Ws~۔6 ѿI1P^BZj#ըa^BEs;S:Z7&<1qCEBp6c֘xeC!KI;\Q O٘qb:څ`3W t |; Mi[y*rbзG{ r@`+\w 2fq}y~BŌ27&˹W8OGi\FGofKҠOW~lu93*AYX-e^;zgA pjY0Ckp?VVTbhu{. 515 ݵ`ep ,~^>rvUGtS]BT!a͇j@&Tn= ?*LJgP}(Wp* ǻ*q!t0R㌥vqeպՐ0N  u3OgPFHWx]-;ClwFr"ĺ\&" xRTTu?:4v4IL])Wj6A W܂`u7qN!M.JpB 5+vo14}ȾC8PkvȂs*m`cEe@T)3 Ev αKn/M~`HlI]wr(mE)(/%llz49Gі_ט7wQg|~cJJ\tY$ `nUUq/03U@sCiLۮq&m i5|X0YX[H![C@|4a_:viIkyaCGou!#߼ {viHcN:z0DVFRZKZ ug*>_#0NpF ]&5vp$f=>]VR2EyvErB/ c[<-X W0 *$7cGJfG}/tV ke_/7Pd3=%Lݵ};ĽDf,(sت\4yK^x&-93 pToUi]=3jEv1\j 6@Wqt}[&Sd(YR$đܑx :%qUcH Ai.n*g]uFK`_eIN(bX}6+)'P9@j1tLgEېJU~PmQ "1NA N9݌i{_LW+ +]X+jtܓ%GLEEW'wٯMV(8zPQ#H;g4ZQ \DKמ}c(ɜ-Z>_gFXu2x"89HC9NZNeNf}4ӓg:x X*d_ nQpU L"?? ๼t=QF!c qB#vE w(`Yt49jLky7~Kl\|ݔݮ=>dг<]V 5ezwP@{H95# 8KijTfIn n.Ü\cx]c$Q^,ை7/YZK7FIxqa^Iں0l$IF5W{ ]dzޭ08\,lDob|}`܊Ɯ$ 힀3|Bߡ1r!_62LMQ/ݘa*$o+ :@~6QuF49z0Sl c:x2I=nJ{92i7 ^cSeK\rܤt0l 竞Ҳ.ݨ#j9Ͽc|0]^g-7o!*й:Bu䍤4i$ F_ rBO`d/[Q E&^guuN8H"$'P`|I~؇a1D ի&tkaڠ-S6D!Zaos%$MdtwMa(H3j,'wtc-Cmaxm- D&|&}<ϕec~n<)ۦ51FXY&>NR_$9鴲s淀gb)`Ii9fJ5f^O|sFh8jivtʡ5Dtc6e/J,v PbdF20>:3vɴK ||(HiF/~̋T'Vj%=VVq&qE- +aTbg8H:g2qNGgqt#r!Qb~LJh<#ؐKpp ~}I֝;ȕh ZQⓞgipoԅ>CvT6k'$ZDS؉4ǥ7 IFk4ѭF0sRn zC~V #ҊE١dA~F@+EL|<8o^?g'uNڝ`j͖ZrG7&!e3TSnmI7*jsb&5lԣgG-$ESnP Xupf ,竛h}ŜݱE~9_ڡ01n蹚z$XHw3'jCb5܄KZp1[G0J-umAՍ>Mg0P ^no\e,M[$8:[GLJysji]M( =_oU*RL[L*Og|!x~6dːu*V{o${^m!:\-Fo:>Pl}{&6zѨvaK䐡;qx^{)W-BIwhжaiCh^d 9=g71XEӷN:I;5ͼ#M=p|Q"۟ >й*={THDG7"HE "`K 9z;nFnܴq^9`l3d?C~hX-y.#̊"4^@?! QkVSO5I`7nrM`Mh`+AY;6@wg?pXj rdukl-?)1/"ozν (frd|ӧm uI)^WTo6K#xv`XO{ӛF{3c?ѥ 6|{-hRJɪu#Mf8ȸ!d9tZ6-2Sꥷٖ=T"MěsRP"e'$|#Vc HC6JdMګ6. ʞ*(mBt G"^)a{Wy@ W5>/ S|\Gl4:/3׆ jO^#B% 4F!Yr) @\Sԑh4nU;a/uϬdHhr. s쪤bC@WC#jhmU$talQFTG/Qb6ɯkLDZodFn|܎'q֡KR:'f9pbX=J93ēOQG_{X˟Xd@g~SBUi(}Dݩ]!#J$\'^{{&U鹆LOgDtQ`;P!X ?RYqZ~[wmNX4^u!Tmg'n WZ="?Js"n&YTqAC=@6p *'|Dpj<9n@~kғٽE,/^%ݹ6tتpqm UC0`ljPq;<)q&rhqn~ .,}|il16T_%=w D=IY+JK'iZ'my?K}*qEa}MTn 0;v$?HV"=cۊugKdW4˼>7 FND_GG%6<~ \%}+ְǨ,DW߂k9rqGi`g~ q"ٝ̈kw.gLٖGbAߵ O_NF{L%e$duegwl̶}/r*"@&Yߊ?! / slP4! ݗGu/FM0r;ڼ}2)囷/Hr bNlLG}u`v6PjLɡSA59QEό$eK[o~k\rǕӠ@u^T59=+i   [F1|f#tWOI 6t.ViSbU*i6Tx_rsy:F-ȀEyT,&S- bLGn~u1I|Q|GkJ5$f֪7#O/h{uMM .;](þ:E4O5?)y~hrpIpdjnUkRYQ !y1ճK+h}+J C}pn'G4YƌŞN^"ԹѪMcˁc-rU|NN\ڞ͑U"wI!vxtւ#@籺Mh̽UⱯZn2=O~w) t\ϫB_ tZ8$ur1Q+WQ"<,k_ hݮr4U7>!+mPIGtD3818w ܪ'_Hyw{Ǭ3iȚ]G|u0H! bOZdъcݼBc? xD55?FIzʌH6d~r#{(S)@MogqÖ9"'Y-wטmt==Anr>a*}[2}!lA)xus$. ;I"?گ6=G5ܴ;4d1Q{0p s!xXnXy2EkRFcl7c!5K$Z \iBȀǗ!hQruw:N'G`uTR&5rմ;;^R8K֩X_b ,4=\{d 싪J3R+M*fa,>gj`j-05u| v}@}:}' ֹKVAh}SigT%PzXʅU*K@5vQ;K1f~ 9)ǍIQ lA&;!S<:U8Dּ%Ƣ4@y֣K6?ͨUUa{EnIK :?+4.滼@&6`L}\DjwdUsjd&{pD{Tp+y[1+?{+sryf/+[7B9oWIQ:nucg//{k9L6b9U-)WlR 4gNF =OĎ`GV툲KREA_QSiEISȚbUqd0= _EO}LFN(1-&e IlF|[1UO~|)Uh_@ ѵij]nɓ_cw.ο}M&L(mH "OӜ5MBUVZhӶT|;D8Yg&e:/%KnVl^zy޷3rʯsTn`BhM4压 ?ۨFsCFDFi\(> K&mq" τ1׹w8b曹&*F?+*_u5wrol"Z"x~_~ 2 WذWnWnXjR]3my>GV*4"ONU&DXaؿ17$WJ$VAd1y"%se.e}?O4,4.>~_,,*~Ì.v*󧧺gX REO MN-֜_Hg\iԞL9ؑ=sP*Wi? *l˲CS_GB~lqdXW[S3*[1[MDMH"`MN1+/>$bE5u3"Q`TYU~ ׮czutT"gvʖ\p"]M ~^x5ccM;O-۰)&>;v]/DeV9CgXUG3!L~@Q,] 1ǭn-i̊2L/] X f8|maǠW HNM>evmUOdUf԰-ucXx- i\lI%E74Հm*J:ڴ\T7kSg7h?ܥڦd§܍TMn[8*ٷGVx_X^$ι+,lx,sta%dGbpGuŪM"Enx2ƃsoZwִ',ǹ>&b"۔\FubP'Jkzϙd6i刺 6' /=ǘtLSިbh+0Rz@Po^j9!eW~ F/x}$Er|&Y` h[VcZʅ@*≉~/'C3&y}ÐA>py SߴB#+JLJ*/1mhA/l63Jl7^TL\{E!-Jޭt}F}`B;yjg.( _k ܗ ]ŚՉ$ʿp3n=O9 >}Ħo^`JN+3M#.bf29*fx dnDj)}?[̦3 g4QV^|>s IHP-2;{PM$uBHz{%y!+T6&V@I*X+KB_ȝ/5Xop;χ%{IwS8f}]Ǿ$m(Sn%G0 Uz%C`KSCP,߉VhaL'`%YMLI)[do3ϸ53q`^ >/25W%c8K׺Lo?f\ 2X 9?j/ SIG??L@>샛v*"ש]s4˪˜#?q]Ǜ0:ua4\[$75y/?"KQS͛"ֿQlnug-o#k%N^͕#r_6pCI'kxBSN ͓SwءVZV2 `|]z gg_8Lym|7L_\Y\l֯wz>U6wp(dal7vQD|$e373PKIԪ9_ʹa(>zGިVb<|دџϗΓ,NꑃuXfSQ1uZt`.1t/]QG45n߹-&0[}P7_7JZmi_6w`2 v]w (|~~x\o5djĹJO#W'43o9FntV=& K%=)~ 92ҴM&X7a3+Gh}Y^!YcR9R!qnW$V+S1ڟf{o̠zm`?d}zp+fSՇtAxiPxyЉٞ71) ,mRW3EYӒ+T:/mq$$#*?,kPЗݓ_]br3/0$C>I\!>:߅#Jiq9ƛL;8GhM:aڮ%>N<` 2LeeݍpXd0ΛolH+f(~peu{ȶOX(t[ ݁z{i"BQvEB6,CJZD{Z I0Vgy2BpL5{G-Q2Ernoz8O&U0t[ɭbȂ&ٮF(5ٰeL_O7>e( xw.mp~}FjRjVjaӎ|E+( ab@OO"z]CAٚ&nYsIu.#ZA<~Buכ:ӕ) ]2ՎEJڝ^ \<%L73ÒO7 %/{'{ZbPBXS/_0y5:[>MUXaaqI'9Qߑxpt%7 6+]o˿E>JNؼ$^n CUa,PN+J wPoW]]\ j Uk>wM0I1 k%@Wל'52Gj$W(c0Xd)[]ı[ȐFAI*X3GomFёuwDsRՉ tZ7os޿Xgo@v}9%7J#_]JOP(]o[{[1UD#n Bu:"ҿȧyT3jJM`j*]8B#ZFHO3&x)W6p nWL1)QiܜP1Hh˾䋸#pXsW6&LttM+mj5_btA~86x bXLﵔ^ ŹBPa[_22[27}3X!֎&P="i- woW' c7)&6u|_Eo)] UZf!~.G>blɡ1b=j^ʢZK$Z.6VmWʩHÏ uBF"sjh.U=nf#^`Ԋr^svB rVAy(߁11TV6]|lj,dS _gN-v FG*)5"RTZB2 g ~46ilK%Z+qo (gq.SzH9Y:`yKةF!nvȊiyw^!O/ 70DxGKPl H9ȋ_#|pnޝŊ*b ba+ Ǣse'cԎq~M B_*>6-ќO sRF2cy~S>0^rICUh{0.5zY^o@Ac Q2({}YwNՆTm ڞ\G7)Fo9$*gu$ȐѢ%Ȯ[HP^SO[<ܖ 32 goӦ8<G Nt;Eը%(O/ә@5놡 "=Sb/@!m' Z}qEg{Z6TQ%Ɔ`(Y6x{!LPg UY3,à F 8'h?%caE ǖb[+̤Pʘ*e'J'l9 0@Ge|#&i+~hh,rha[6_ 5:w0w)bO-+j 41o\S;IU퟇T]^VK[07y/}WHl+]Q;qmqVoURHw!wz8&V j,.D*V/wî )u`h(e+9*Bdg ކ /IPP/x7 Q9௣ ׏-69K&tDM3$ا`xz%X WX|u8c>0٭})^>] h+:_$Xnk_`;4I,zۈg|lⷩ`ɹ\=h.n& 7Yg"T^ֹמirnsmH-L!tܡ[$$}(GBzh;utLL٢[@@vOp ~;7C-dO%늌&PudP,{5Ug`͝YCג1 3Q"l`pN{1 ~=5PIpzl0* R1 E(CC%pwjbh-FMNE~V\L皷.}d4ІƝVb)d/j7 ưrWHOt DO?Fry[IFa{~Q7Y~mEWE5,`X(1rC59+!2m7|"үzAaZprLg;Al "*xA kJ䯽WWݗU +zi/*5aez ^sF*Oz#̕OybH{ 5$h9xw^]q q"έy ϴ;!pEj{;݇ZE*LxrPMb8N#b|+ZGcItKz۾ӿDtGE4/3LeؔF`7R x3EKN}w ?1#j/4&V}s'm:P=nv1 jn`8Apt3x 0O-vkmv-b%{Աg@Ns:Fp]Җ?R6}=aɳodpkk4aY|"V0.*B \,Yf:RO@eO2$!`D tSogoy:ΔsG8/L-”Գ^gU8??zⶮzG)Q0aB/G©EX<5Ц,ÊJIٱ=jk#`p;L770|"lifz;܀c *E=G4\'f%JdǸMF몿&WA,- n$O 5 Tm'NlSWM3g)3nnb=ftn Sy9^54Q;B;i$Ҙ=v  B&鋩Q Ö$5^>>%TNgH |Pa402sB8ۨ7#hLGtH)4k\OEbaD ڞqyСu2K`xZD `_8#Y=eV_(!%UI˔\*'~z3m1XС+68j(2GRod@KRv^ ;j 1"-GŌڲ47?%ȋ!ؚ//F5Q$R2ލNdDR7 Q?[B6oZآPֶ4Lj5Yaug-`j G:? L϶2T Bh\m-y%'SrFb J4Bև_ Z{)B 4 )?)!);@KJ]f#}T<ј1Xq˸qs:`1\xvr[׊{K㫗JBQ*`ID$45>ݝRW`"IFG: ':Z{DE2)[FO'5+_QrI3E)c#| %"Bh ``HUsϞ+qƔ0ZF2Ҿ.d7S) eU}:3QgC͎% eF7 D iТdL-y;H]Y1kd%7]Yd8h@zH;O ;]9ftw!KŖ˵4y$ h%кfZ xHŀScN 䣅ZlX.?`:Jti[ 3{|8*? 3yH48/HIjXiƕQL1~,we9\gs`~xqe?R&w ]ϑS)B] +/1,YCRP^hGNoy:i[k41)}o\/|!8bݖ)<!V#^05j7]BEFIbi(C&!}&·kO/QoRfgƹ_;@:_qnea Zhl>g|grKH@+W Q@9pO D2ls*iD9mФ <McT0ݭƵA/>P>Oy"z( աᔥb^J+R]AHU<3:om1 n_B"{se 5qKtqYI^vĜkHϔ.D:]ꔻԺ8"\AyES`{h|8O` qfBB:'5DtęI ҫEB[+2NuGsZ~UF$:c`TT.m_#EA|dЎYi:oJz[6N<@K ӬSYOZB|%vّ^~Jl~D4 Eό;f㼫'3nŔ7xstJH6BҌDZm23g U2ӌdXu)=u8Fhεb(S)(rY>;|@V=Q؉rwClvAHvF$>vCnL\:' WzdΗADx'h |SVHՌn&@&<ҸAC1FtleptwmNn32sry[m*܃o{}>ت,#:x>>b*}ϲŢ"@ ȱ 6nUQnt-7UB4hѦd(v0xJ.HGw9ghz/6ȟ>,7龊cc*Mk5Yl~!og'Ѯz==V~Rͨivn۷ܮc<Ɉ%nX㻮C$mw<6 SM2skJ^BL0Zj@+ 6QxD)Cx-|ǃ\ ّX1rJߟ 'B-fV*q&@~GkiRl,F B5[/~ OC*i&#@YǦr%p!9/-H);AiXNj i1jͨ͏ӧ/#VEQ];:3c,AlCٹÄ2$RZ˿n] +-]lQRHDdX3YglcR]7wAX8\?5!ևZx7%߳V.0pZaw]^U~P5QeBD08 g}4"0"'2nbӨ0͖vx3bFAƱhAf#e|u (Vd<~)KEgjMEZ:E vo-n8JOOTV$g%Bګd^ Hu\ $Mcbq*!j0_cexyL_ WM8 EBġR#\^9ؐ'RUsN t(w+bryG:._\腁KCt(# '/RgZmٖ!F6sWD:2##S %Q@T%m^xsJB+͝;թՍؿx]*(*|)H>pX4}e ~\?y-%Oi,ذc1/;^ K{RM[X:ל{'/&6mK8YF x/Tu[U2 ބ)&y`%kZVl&$ϓ/-h Ttׁ  ja߾Lӷ872x)ʀaDOGL(ŋa[D[tIöfHI.H֐JGd&>&.0-L L969Zv;&0 $y9>24)H͓M u{pgWWhGaHNOXR:;wT ,Cwx8YVM O9jf#H,'ÀWŦ[lO\n|5DHקQ-ŢW{=ʌis*!H/a_,_^f[-AE&7 '1㚍qmPaHE0PfPS z Ȗ>'H+FMȮ%gRcxz-[lfl9s7"\E'#nA%Yz:daM3fҵ76o&MuhU#?`TVoOWwúMƇ]W'a*DRl-E^deWK!`ęCHi=E^QG:aϲՐ5I IoN\xF N.fDۦNh )yyb"Βo"P"e  ް}'}`lmj,{Ɗ< Eqh}y-4-ę݂I*`T۟"=aj睿]amoPiLLA~n@N *,^ ~+W;Y/W08.h4V(铒NWuk(u+* U=5 }E";07~^bƺr42U)Vh6 U"v6f ø@pImG{rG hHoԦ]O*?S'\~j|˵z WYaHƃ]1'O u[zp)1J"q΃`X e.u _<'x?zUxwKhCpd猆3D?효47jM{3w*# YZ