knot-devel-3.2.6-1.el7> 6 6`d63!}|J^>j/5,dd/ ! j/5,dwp>?! l3C o;`+r`sHBצ-~oG5<,,YnGqGxvV=΋gf(1b> WR~ Ѝyg lb5)-BQ|5bLIuG[9V[zd# )yw\7+IYZP7`v M|DIGWf4I["`@YH_ ت QV RX/2YS$6-!j/5,dd/ ! j/5,dcpd \=*Q& 7C2嗊D"娩HK&΄/x\zޅF@GjkfYH{1T;VW;sZj?sh^$Ah"$PX"Ey=sߘ;5PF@r$6ϩ ˓Wڔ.>5Ɖ:eQ9ۢ(^ ,Z&E9FkaD ƤXn~hPnz\A?:iBN–I?UR\趣Toku|6!XH 5>zfp j|E %wQшyڽЈ:뚕e|ZhPZwWz<.O.ÇXCFLF,ȻpxGW|zy 'n\V`pOI{> `p񸶛aT)؅EHc7Ml{Fn:eU'ό:8|R[mɎ`΁֠1rqךD^N$N q>:H?8d   M &2JPXWW bW W lW W WWWVpW< h  a ( 8 D9!D:.DG@WHWIWXPYh\W]W^bHd eflt0WuWvw$WxWy Cknot-devel3.2.61.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.d/buildvm-x86-05.iad2.fedoraproject.orgoFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R +. ^, J 0'(69K< - tgj M }FX kr  L >#"2 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤d/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/nd/md/md/md/nd/nd/nd/n2e4254af54c053f35290cb46ed8acd81e9057446b2d71ef8b911103c6999cd42b4fbe48c632018c0e15b531c25797c3b380cb0ec35f0a597a1f1c94008220b58f676aed7ec38307f1d7282f86ec4f894dd4875c2429109cab92b9621525966da759f07a1c22a4825047d93059c1b52328484334b7f8594b3511234325224fbd8bc13139bb264cedbb87f2c05521f7485d1933527c92e8a7a212c6f8ef2464203dbf9aaff8cea91313f84aa0debeb5dec8320826f796327da580a004cc05b2a3bfc9daa3a1ec734614ff5b96508ce9194e3138c6cf36df83f5a44a57504ee0e498e9c208cedc89ed277c48b97086e1455d2534705619218a1229e97234bfb0b9ec9669c39509cf8f5605eed37c08124192b60ed878e4f8707fb7689e1c1c1eba292ea22cde12acc55b67f797071c03119cac1d0ecacb187646052b5ec9bf692e8f6cdd36b572a22aea68204f86f208c5f2a052cccfe73a5430b0dc4dbe6a9db0bb9fa74795774ffc71a964f8b7132997957fc0ff8ea37b1f21d1f49c112b28d74dbc4c85e9a17c5712cfb676499f0ce467e72b96b61e969048ec42cd43bca7e79919f3837757036c1766ffddfe13b4756a180dd56c94acd798fed6d1d35454f28c3e7b2c6cc75abeb22f94d2eb7162ccfaefa2a224dfd135c8186472796d057e997271bf4b74ba743499e53c8347382933e0cecb1777398d7196d99ce08949b9b7d3c4103bfb975bb72df32b83b0f1454b68af76d0a322e6012bdfe33e314ea56ff55880afcd6f267f2ac36d63e7d21c4c05a94671242c2b98265dc033f97ea795b7921a44e2b33ac2ef7bae994da7c194bd6fd08ccfc1226ab933a457721679ab3895ae700bc36c8bf8e84cc135c7e61013c262a8588c495818ff6beb95cedd867af608031639b271fecd0b35ab0054e67bace684a983d9c96599ea7ac28049709e7cc98c3de9f322e232b419b010057a85ae809040bfd1d4f7980d352ae3a6573aeabfe39a9aab4f6bcdbf0693805d8fbdd906c78ab0e955f39e7eea5977a041757fd765e25974c4b01ba40214d4cab0626fc506a1ad7a0e8577b3aef19a92568794f2687228985fef92941424d5d68998b941d1cc640079e10ddf99a12bfc29094502ae508d76d35c66c49a3bbbfab63062a405223724bc545d67b41de48e28debc18f8ece4ba5df6c8fb7ba9c9a01c6388227a98d272a9ff77ed4ecb84c0b0735f3bcfa495922d93011ba453068adef1477636bb5e4cb2ceafe13fb046615ea1ee38730477013bbf9c8983c5985e5e14aed6b22854ec16f781184aa6b3d097191d36950be3a402aac76dcf9f532c6dfbb60228158cd280701096ce5420acbbf966173cb85aa9ea97c10e7674a09c0c7ee88988c66f4f9b30c01100333d484a554f47b5e1b3c0d5a226d9720bb3cbf391fee27b1a70850972b4469ce0948db81b62373ec7b7f48dc28d3b26cacca029b46cfe7d4815c72d5253618e526d5f9a68f1993f6d90e0428b4585ca5be835eeceab21017198d81b3819c40046ea8ea5eb2ac45cb096b58ff9108a2fe6a99fe698f42c2a22c0b896a9cbb9cdf4b70b434245ed008a00c55b022308f1e325cdd2ccd6476828068ee18c484d9aa5d85a9d55ee1bcd8a6c512fbaab8e00b5a31d025c978aecbda25a32caccf45d637996c0f486d76c5da8c5c6407e14415a2cf13573fa7c7b42f7249d1ac676295832fa4390f7d47cb792987b55dd1101f734ff7b706063f29dedeb43e96643e1bfc9537ff1cded7df7fe32ed047aabdbfbc878e4a090daddf8cbcf961b104eef29eee38fe1e919f28aaf436f2016c2dde4533a78e136e9ea526fb1e246c51feb8cc8cf570e77e888ab0bc525b95a0e058411ab8f82c16ed18021427d2107c4a2a3b1e82423284635714ee1a820a82bc17197d1334667b6b06ef1258a93c21649c8a8b4b91b4063489f544e810bc10ffcf7834cef2549c53a9b6b81cdb937c0bd08f121aba302841a71120e7dd3194c3f3e51dd2b2db50acaa6e0adf5a10b15d83dfcc30161dcdbfe3e0ec3bcd4ecd1b35415214c84ec3728b93cde1d58ef253337548c27d48246cdfa95df787ca6e01968b1165e23e9f213a3e8092e3d55141db8a229a257e33b5b78d6e416ca902cf8a68b2a28e1e3e89a775b91a6df6110fd6a82ec30fecd5f27716fb25bd2f32491a381a61b4864685d60c8d14c3ee0e1e6b27e0aa14448e342f11453b42f4e81202318e81f820e8fce142fff6b646119148bf78d1f8f228c157bc2fb5908df7065f9a59f5618906612165603a3e48f02b05fbcd16d484dc095525cf47421ac58917ea5c09e68bacb516577967c3a2ffd12022371430ab2a2e74d275401c78b36c467a06a1e2ced136266ed33508ea1410b305442980bd50a6e6bfd1a35417aa5c74316e52f1ba5304d8a799a054e935110765fc0e926c5496ab912b4c7e7406a3aef76fd0faa559bfe6f95482d423e0777793c329621af1ff50cf8ab6545706c7d872a2f5dec3ec487482c97d53ef647c45ac407c04b6fafbaf42aafeda061486f3a0cd57ee6661cbb3472354758d8f194182e0e372d1c5b0c964f5b0e272006722d7b9cea85bc01a4a7b2691463264f07587df641035aaa6a5870d90d84331a9b978d33fc2cb86371f720552cccd4afe314f6f732631003298e74a56c98121799d00246d344841cb4a4e1cb60499185a8bf7068c0421e33dab3a30ae46a8ccd14e3e4e3438f3167de92fb6d2f04ee6418c41366edbec6cb1a64da831dd7dcf418ec4a546820b816a6dd26d37658b52c1c856604b27f9bcc05a01059d5fda2147bdaf3264bc8355a3e6b0490b7070a727c033d439d537ac1bc5636d5fdb8a6cc17007197f83ca431b327084bca54022011cb92d30053268cbe50c1a671b6dbcaa63b0b4fddb4ddd9c9d0e25a25bd07a36147c4055d7495e9907dc46930b276cf7b2ec1c5c2b3032312fc404f217416a54005443f8b198f4650054f59842a247de965fd8883792388e3a6cc74c05dcdda579d46b8dcbf76c7f5cb1ac8982be3a2d0c294d411b0f13f4fda39ec1c710b1f62c1554b1126ccd66a4efca7cf0df416162334dee66eb6565daa2f5019b88bc1ac8e27e0200a8f4e09cb986c02b8266560dd047501dbbbadce11fc5e1664c55d97b63a7374173bdf53ba472424b2b7499ff2f297d4a168193e8c03513d5676030d6f3c9351a4e056eb6782ff29c5cdea681b11f12443f5a899b9914e14b15209351e3e73475771823dced145c9a4275a38b7c7716cc8e2d72594b6b43b33467dabc4ee95elibdnssec.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.6-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.6-1.el73.33.2.63.0.4-14.6.0-14.0-15.2-14.11.3d.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.6-1.el73.2.6-1.el73.2.63.2.63.2.63.2.6  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,] b2u jӫ`(y/(]Ӣ 4y]dӆ.)v 7$,~#^L7#Q^ }K[/o97u9BkbѬVl1$Vj8)uJEUxciJ BOnZo~?s~I~Tκ,3Nu9Y}|X~cKu ?# o.p6i!|Ye );66~3jqҾe(6<9Q1$Gt{zYe6l:_lfntґ7}1[bNY&A^79qihנjP2$[tPmcLH G=,b!ءB: j1~;8Ҝ>#}9H9AФϝ-ԭ։qFQme~ʣVj#}2tP]Kh.]mj={;Jw lƯѩO-ljw[Ctk_`(Y8T~!)yzпuvwѨCy,-Z̙A*Iny˫6 9fYa ]P[3::vp|!fqy:شU< Cr((*2zwϿ{߫Y Ͽ, ].iDEEjN KnwRpXz]uvL~ j9 #\؂7M \)oz&Oq`n} Ԟ!ܩψ)hަH$hRs2%Bb){p0g#e,)Ű0IGe23~&*ytI}z \mنjeQ'nZH?g49\q)V3Cɏ"sK `Op6*hiT2&خ`*\b} |j, n|i׿\c}Wd29O)#-CoggA0kp.~^ 8TMxKĐ?iMq/+PjӊjJOѱqn~͂߭"7B#^?{@Vjmd(N-ihrhVkWPμ)@ $}qN>CC$@D9&\ ?OA4/-@&{eAA}="V2=47eML2(~$йHl vgIg6^kK+52@D-7xC0+IRUS6A?tG'YRT7}*. 8.Ĉbü*xF5eeh5&S28/qP.H>|06| ULcPMdCc9bPhHq)[ϼ~L\$Xe[yt~(9-1^v ;̳,+Afcw1/^j9b:4zY^jhm0ưH26 lF/0ş? -ma@dQځu-R^3so)3-冗jT\zJ[=\&gc#5J+mim0Qvotcdi(`O9'ՒfB2} iYϷ_6A(o2㪟٭;%)1sʡKL[mAܚ G|KMpAR~?Tf_g9xXvVh:1o!8%Jؠ_uK&i V JHد~!ŒgJ~3-$6>3^t! <&Z6wr],u1q*VT=➤;8LjJԺ>}|jGik!2$dN-S,\ fB[Q;tn@|klp& x-&3+5dMr;9ӥKpPlɏT=}VJÆ4F5eښP30h/* jהQ*F%\CJ3x[ 91d$XfLL@#Y5[WzR܍kKba[A݉~-9p N4˗WVj* cQzN{TPUC>eÁVaCe| Lvh[ Htܻ+I⭔|]ꪉgpvo[K_MQU F-Όn_נ2}sYQ$]\7LJ!&|LF/rpn, r#.^ +ťj?TGhO=>jY [,3sȥ;jh 2ȽQ5]؏Wo y/ J5ewm X~SrƊxDzGBA>'FY.w̋{}o&يxL HS8!VjaQ>PnEС,HT.߻fŒ/+h'ZaV NeGl/&%0L%έ \<36,lNX-,zS-=ͺRW}4щBRb70݅,`C=MT1S`2Ӣ7n%%71I^yE r7|-NzڑX_@ƌmv\,cvFƥJu?!A燿`O?.tθ&9-gӢ6>D7D 2@sҎVP y<jЪೇewe" ؖazf6%ݭRxd$  hC'7-pE/ ůCS,A"AN _?JdLI[ps1'v`؝MqMĥiES O*a%%B7>&Tɟh_@QYĥPΜ 7$%T#owBb qYZtHL7W\:1}0{jݹ _%Mce%V஧;?'̮_&*7䩿-PXN؇j']a0&l=#Ub1?9fogiP" q{ꢐ~?}JƮC^C=ЄR= |vcJr8%<bsf ȧ4ŌmʳgG,n)U\zy1&H=@#6w63Ea}֣wm"\˿]Hrs< B\}K.I*-ėϚ$*LWZ3T $4 |3CM%HJK8V@TrS6$AyNec,P!Zt!*};j=245jKnkLaz۴hYм:+0ЁoGviDYgSs~iqUȨsvh?^\^^|Ym3HXn̼Eม $Ԓd+LjpvYBy~@tEv'GF<\YXj.Kǒ!tm| 0O$ H -ɇ׋x(V9](xfBF/Vtz{q`ǯۇGes:]s~$ 8ʷt˖{bS R)o+L)X¾-:ql Vs am5 nԬ{=]`F !\F֦ 8I^L'M3m :i;ORŝrmN$L셊K4謵Xws4f#F~1]*^b/OG!(EftӒ&e); )nDϝ]: NF8 }X⓷;dgr dw:"!Ͽ!\nʾ; X Pa+~NFhڴ0 [,vf#RbRc[L'BM~m LOxq7Oi2˔o^J$_;f@K{[yeI)q։ fPu>t;GlEڠKa^H\I .$0 GRWf;&I/!>_n%.*M78% IOϞTb\aHr4vBC!J.jn#j>NJtIo@_MM0e@{_I [ETx~ĒwRENݳe݋>S/Z龌 (=:tmb+-oT[?#$e S=2\? ORY CښܢTgӜ>jO=UڪvaL:nqxQKuG('6[kѿ3Yh"[z*sÖK’Sͬ/$B,;>ԩC&]L1A|Ț:7̭ R龸/(-% ]m&Vx{>N`g'>z.F^ʰcfR*^ª:S.\w8qU]^|1#qg+$(v۪/Ls3VsudG$ƕUfh3fabzٴԋ륑G2svxhwt01:mK^ͳ2.W a OSb5);Cf {v,7i}\qn+T|)N]TJ43,>HA?i!9Wl Uj*Q!ÚlAI,LBLBBZ(*v]YMge- Erz h}"GoHTdDt͢r c[lNW~*)N_o&0Ѵ.ȥ*MJΚw|'=V^Se#9?"Gu~/bW6֓޿#S`[w'XF}+hwt>~n\n~[-~bjH;*rc2:4&鄘 `r}Vo̸!CQxA!\h/5aԧ ⯺RathxźyQS3/=FzZZ}:žOD5ʫMJ4 j0HшWހ`Hl)Oezs-$7DCH䫨ctY%MnHmeJTAҽ~~-]c&'4TIg…5Nd;\2Fs汜|U&Ɉu s QkZ#/!vi'uHw\偭RB/":?Y[% Ӝ2{2>uk,G\׾b KBv `Rϝ{B [5_a: ~ !!Gǟ>!h"de]JdV-`~G@!|Ӗj9}SέqBTǜ?tc2w@mn" peݻMv+hDG<ěs#笏k{!ҐM 7A9 VIH@% Q㾇;Hp~`pWap42$qA4&bBk5ɝ]^$◱ၐH %g?m?aj6']Ƀ8xٙAv#Ġب2 !iTvw|z"al0qo7@cDIX, yMLs"h[6 O9C"el*P@Foޜad>=߀|&)g72Űڔg[&`G03'_hrp(G(A&WFZKK4`8wR#Xz#eһ#, e.%ċ~jDv$P'Bvit&f 08 lG\n]kM2ն51GčiIY ?DuCQE}T.l\&J:c[2fgTv)fyiɽ@[^ՒLbt?t@RmۇsùsceTsb7Y[4/sN1dg@6eE$>[qu1wyHZZ roCPfx鑊'$`/XΎ^R!p݁M`+cDEBʦEPgps'f'xhx (4c˓u%epV^qoѣ1ѧo[&1+ uKjSHԣFo\KD_-$^`Lm((t?iop!E8}Qi&7Í +u Mȹ@Js'̎<+){䒑|+@WX=:oc5*jP=6^ŲXa ~8n1q!B=!ZA(4b Gu?4œeuo<u/"-]cs\B< H฀PLJ]]i΀q$ (TaDiCC+:scc,~%c4q'3fQB(4# ] v*T"$/%iO0 "h4Q5]s:*z){0ѢoQ!/&j^ `.F LW_k\:.FmS@|.4>ҟ!;FpP^yid[QJ&_11rP(g| ؏_3(3v/he:hj4zJ'cَC7mKE0I} ]2B%%kI?f]Jb8v6TK H׽fTxy7">.›pB-D*pbJ ʸuNx.#UlyX:RI !8m3PD[K?>j- }*(bMThD;{o0Dž^QYm][F*Iݻñx $ҋE`ZDw1t 韭IFq_aVFM=XEz rXv?q)wV9oHތpMid+R9mݶpXöu{fCi[w*>$GARu эXLxwZj -{>*AO:k#d.?$ @!/H''v y1J劻V'/=I XFTfvAIxl2z~¼=k'(5 C_jF,p)+Af gz^LHo?ci77?vGWK` J-ƶceJP#V g~T1 `tH\',잿C,`>d؟B5LKV@gIcit&}'M^Pɿ# a1?:nOb#[sӴנ2 g.wƘZV =LQp-zek2;v pG ݏYa<gu]+aծa*#aPlD A=wKeŔ`Ӟ\goI"ﴟFRt+AЧ 5yQ򎈞(w#{;2AYr!]uX" ;4Y8+yK>jm8Od:}ށTD,]TҌU6hWWa̋~j%z\Z-dٻsn{7}yw|=eQUG@q/=Nhpμ=Pw+y#hO y݈$SoMك.7&YrM{[]b:e?! c't!ܪhhlnj)ZRDVOG{n`w&נ?E3t!*nü( U{v[`w\j|AA?5pk@(߆K#H=Wݺv׬Z4Hf\]VD s?2vdQZO ҟHufjW4mm݌wW n.^k# kWQbZ I\y_+voOndaỌh"&ny=3YhQ=e!I2ݩidS_u6xiT/_9CO@DC)'\2fJ$jݪL-T;GxM`:i:6gAV* j>!Iy:<7X_0maS _"-gLW5|?jUZ' : xAF NX\!ޫ,rNN|5a<\9go;]1 tX]ܫ PUE65M]csJUz[jI'ՍWYFD P@aS6׉Hw]3,u$,Pv˞| Hb&1awq8;}ܬgOmA\r,E qzl;z=PE󄃨4#*2exCrgG߶Ũzx"Cs6KN[U(!&wLӷ^=2QR=j^2fC#MMmQhq/Ofwz=ͭUh]wۉ*AH-ű4U稼T]!2V+P43M>{>=TťoP9ZoZ)2ù*rY,{#JgȲ&X;0sya]P-g-gb⋲FYi2_,NL5ܿw0;y>;'kqyĐ7S <*yolT!/)e4C_Xd}BQ<& g=+ Ζ@ . pL?nkk1Z{dt}nڟJ3Z &73d)y;)s5T%Rq[83C;5ݲ㙐{4@pN!yhkOGB4}*;i54bdk$:v.)zFĘ58QLTz9xiym[?5i1R֌:>Eab}1kѯ zF И Z**˫Iĺלь2; p̭Ah'`mu -눙u{ rW!&<\Y)tqWڳud:C8t൭هڗ/M0{ Sp|Bx]j` uA(KK F&#$uP-0ƓlOj$P4g<%h-7ϝjkiCpM+b󇂲LνpL%D݈V?}nۊt q r3"J*4Χ@T$TLzHP N&rߘ+mZ=# ,4; v:Ȳӕ" +w0fjjc9Kvˣo~=mB*ycWg=N ץr@޽hM'$ڵ'ώ:z2ES-?·pdO8UIXQ@HM( \I8F;żr J"4b>5=~gl@Dh.(`Ë=mUja "3Ӹ}E@+ bDql+ͪ^ǹrcoG&RsI`e<[p]V?I7n^O{GlHzwթ~0P EN8Bs륶2E@r:cXI<(gyje Vصj\&F6 'ca=cўZ%*X-m=^06c{tևDZˣQj/ls \֏1c}_l+?h} `j\C\%u3VqE[ؾpd*PEbC a5q?Qa|)k;&3}h{1lXG~mFW,龝97BASÓE`|Ma+Mu^T tU"1sRAX@r *eKojU4?}%r7.l0&4~j0m;AfZX6d"" O/Z_р+''"c*k| F8Vnhy23Mp6֦u*TLNu`7h" D?n`fx]_Ks3^='%Oi7roķGG|}9_+",,N/IhiX;B.;MQ"}T_#>AA0i/J4 b~B[qh2T:'K}J=)a«N(tz)# H7DP0|-s.w^GZ%%)'B:cN/6Hj?3r=0\l)ccYlY15K$,B4>i~w]x(hhaЈE8=KR`$D?Kh(ևLl"|ָ@MI H[=JHu50eeNNXqN倧_Dbkgf׿=TaXR/pƩ? !T.-"h1aQςM0 Af{BuL^."SPx.c55a;7<IM!9 ! =8ϒ֧1x{F2& nA |ٔVj1۸|b1 &Ҟm%|)6|3Ҫ`#O렂<CsC7ӽt\YMYI+aSaY";&W N ˺#_ v\bfGBKwQ+h~R:)'&7n괿"+/+Ω(Hҋ@[dA>?kuEv]M(51IBwž4f.AN?_ :o7jx0'k>lwM.buQZ7h?a+tK"N6[Owݥ\ psrH:K\ }f/\{.8K]\(E #̵qшY p9(h26h @:/"AIX]FUSLu?'$MyUaR_(`I ?^gV .HiuDC:v7`8JA:iaَ{OMFk9N\%{ht7ET4ĴX(&aȯRsHnhwTL(>7{t"$|ܪnG3țkƱt&MJB xY$ `K~ =($zO%$Bb=V8F쉮:^fc`z& 0%}Ź͙M40߀hWX_w5&,V+pƱc(Nre-|ϒQmSUUp"Tcq#_'#PgO%BI{`潃  PT>,WG|>> uc$1 m D͊MODyFʾ=Ydϱ@C@etHXDzqiW|Ձ[VWo]`ru1Pk3Aa!Pʗ=d"H,Ƞ>Y[-ldI]ϡ+FxP;O[[Lqֵ,@tEέkFkPF2 `0 dhPKp 6xvJ2Eg,LlG_7CgJ71੾hƳxN?Ԩ%Ejq=DG@isa%0ŽYj2α6Er$krZ|,DZl{Mzuz< Nj??UxA - ؞S N΋U/ZpvXEKW0%H(9l*T衇M|G.'gl <cиcy\_?R?9!Y=OjB\w0yt@yBR {~cP]ݚSx}HWһ \.:X ҙ ٔȓJ"zбhs .wDpmXܵN/#En װ$_# Pۂ)eCQ!]zEVv̑H:28/s(Byf"bШ9+,8%n@t3rfxA^[%ڇVbTPu/ŭbM8b!2 : mD=2@z0QZiv_olVk ic~GEx}MFr?wjRqN L1L,bA^^xy.bh5<ٽ0\Vt霒ȾL*.M(צS+IpЊKd?z}y/OZ|Qi0dbuuB_Fmv‡=<"@s0픕6 )ߪ@!["ϒ' [_D=A[!3bD-EWr2JnQ3?(|_A qBN<mpc>i& NVGJ- ͑ *%!|C%ySj_2K\#MNY荃 QS!98g= &5|wXȾc>+:" S (xs i6 6L׾p4;<^Λ`mX [F}i'KÈ'׾58qZJ%1P>8Jޥ΃4}qY-mYaTo37-lˍtrb5h5'}r27Ðα5WHY]%Pc|fCNy$?W1t4$Pyh􁧀ٕDT~Fԧ[C_)^g$u'-w4XETWZ UŌu5:^s' REi$wx]vubmM zs!NjJ߷6,J@.8U%F*aί`cEDp>p\9(xꝬ)!Y} $SY܅[)8^<3%̞:l7lLͶ6)wEL8'u@##vfȬV˶+_|/J3N.Ycrs(P1 xNe23?Rb@-n7F_%&8ڊ/R|L]KoK}+:բ (Ʌf`"׬{G÷8SRV "Jc2K~:O1hAo{SGqMi߹F?#W}TuTA2T>I@ \~A$,u!PW2M@|GʈP,DznԆl݅^'óA5p4V[C\ ķ a|@Api;J ;*^\F5 KBzz("r&k*PfSpU/Pd LU ' xIdܲ‰x1_TmvSQ)slP%JB`vQ7#t􅱲6¹[O&@TK*"lCy޲ 3 ʪt yE5X%EOgNۓ Ϣ]ݫB.BlN*ɀ)}y ]ڀ/AY| 9%F<\(@i_Wɪcy/kf1`?qŅz:jbUr( T}Kz'd>:x ;;D6r-MۯYm[QKxklƾԼ [HW+WuZ#Y{ }Mvݏ䝋kq~v­-˗_=}֗!cꡪM}bs GȔ8'Мjʷxʄfm!}͵+0sǠ DKC/iU=X 0r8U02ݼ9TcEx@ >9Ϛ‘EUT@zA$4ڀmǚhxYx!+}xo{2זZqаݎ!$ _?#̏KU":W|nJLFF=\uVbF"u0ѻYp"@m͵<+`}g@eAsksh{ͻ.T.^Y%OB ,.B4p6ܬƒ.lfUû*`WZ)og-cٯqhehz3c [ɮG;Te%A DrFś-sdsߌ |#_?wFONb QIi$҉ERc%Y2j!jTWݦYL!3fμ\pۂqm供57/-Gp.zݙ_=!&^jPRH-׿v@rٞ:<7܍5sIGZhtb-r6qb{+3 OxS0O8Y*gNZc㚷y?z>!RCbG;8DI/㶵|_vƧ6]0P j9c%1OQ|n]=4S;+`Q/DA7]BF|P5KP"u5*獩\f.BJ *\yŻJUVy1"2g3{]'@iYT[l';Q7Ư%J@yLpCeF]N$>=,&2J;D B6;+'gz#^vfwQ5:kiTyoq='^cĨ!hdbMnkUؔ?usR`уG\C*BU̞iyg*a-9?vf ἿtA _LIя:~{HB,2-835EUId_t ^HPsZ\v%]:_-/dQ3D+/p@A˜ LVEidDA]0wE|ͳ%fc1PW1Or 85r^%(3[ݝhyYqr]a*m3$ ZAO,ݯo.5,`yȩhk 'Y B^k!N4ƨ:%F,^D[m>zӄRCIVf32>=7,O]:=-p9>{)[wc JG5XȤjR7 T3G:Eli\s<,igVB);{.|DeF8ֺ Sl:1:/Pc)JEFNzRC*yW*Ta*|2G8צ@l.,>u;ʿFuU g@FhR$P0p@-s܉݈?ќe;:^~\!jh-c$8KH_0jH"pmKBt\y3E\U{u;󹾾~(RzaM=5.MX0!cy[OQLqwag]fSIEiEh0\X8e淣_ℒwWS(j [mER5PJGρDMġV쳡2CvR:LA} #w 0~[]TTw`Φ|[#t$4鳁O@&xE;2;8e8wsEIxɋeCYEm@#lr=l@0T tRJbJ=<)tbc GB$8-L)#3@||Q>UbM( z|.iڈҎ;uŒc ;g s)GJw@MlD&lϟC#w~YR~#{ReRz*Ѱ*Fq !Y ),{ʬ֎gAmթ7@RZ,PX]Yg*N\%6 0_a*'3W>tF(vٮkӼD(~Lݺ NJgXl<%I Ayg3dLsvY j9Vpˢ?d"&[.ខ;r)5Kܣ|YEaߵ\(Lr%2%_sQ5l/^9hmF$#QO X]O~**ܥƏ7.ukɠ[)@s8%/lrfz`psact23xܵab{I*Oiz[ o͏(jsHY =L"!;Wž൑fXA_&3p3AEck;~f'J|NLMhmgggz?Y<(\kYog4D_B/IUdže-z蹾||OOX%o d54<7.t` bkV60Z_ZS=kd')t#Yٱ;Ք˼hSߜ YV-C4yPg*ҲLU=g6(ȜH˰+zz'SR}( fL0sa<*M?cP88*sA fV*x}M(lvki(F-L]oZ֕ UOw1d ;,dn v5Gv'OXZ}x5Qix{P֊83ˡ?ԓ i9[/2>Z䋏VgMl|ew>Aj'`A)+6p  [ N,C !NMjn EI;`-}oiְj3.jD_ "+ki8 ~dvX0D!}=Cm>~\\@ẖ kC!+"E3t髎lX a8]/R2irD=kPX"m _G]2ԧ^d}?X"XRzdؓŗ3]A(kΦ:Gzq {.G:~eݑ{%֧)xgxc}P 2( R+`?޼L9J+ Ȉ6 oլ-V,ԃȈHOE=زto"'; vd&qSa.z%98l ][ǢRu ~+ >h >gt,{ş4~ZZh')b`OxQZnҁJXz#0TcI_)ĹsJ!<ںCA8!hTrj~{yx_72G596`/&XAP}y5:q afnV=AZ~o/-?ix;$>pwTI`ĕu)E`2ibk\Nӛ ϟ$$?3f p@ 43션kVԃ |\sQ2cä"*;N&B4nYdݰԋ^cF [']ʶL(E"  h-uu҄N[堽4vݥBF!t3dktD2^;ὄ[l>Lpڿ-vyY yxѧۗYdBp\/4{{ZI?xW|{? :A\W6X`ن.XkoC=zx?J=R{>v / і;Jӻb6jhyj>I>}B {ɮv2Sc,Zp*͐wJG;Gy!T]=>5.cyĎ&Qmt4 QzپA~DMv!̔w ]2 ]LfOZ"@w|$.$vCϠ=kJ_J#? VK7؛HDu?0\EagX8a`>&_6N7z;VSY*0"bVh@:SC~`nsͽX_HZ(*Fk7^) :쬡Htcs*~5I%um.Fe'Mبt0( *$/!aׂliwF<}$JYd.lFuNuFjŮhM3DgfqZT.4mA~D5GD!2ʔ4V+SC벹g׏[ j-<թڝ|tĸi4w[vTbP>Jy@1qv1C=laQ׫YR-v2bY'4'.Gwe䥛@}7dD[lHr">>Hq*r"볷.ʜK"|a$n:J~xROyQ%$l ۑ/R" |^`RNyϷ{,A59q#fRs{8*$=~@CK?FDmIIѡ0+xA3{Ajv (/p͕G([e+D65~mӒ x{ mr:/=+ ivD}xe(UG+TC0#vSv 9犯?퀖v h={,? qWHP_M·l gLk&Ŀۻ KO}Z]0er  &lQ݆zs IRGywv->2YoBnZw)ڽFJ,Q[dt7Ct $&S)ǧ-oI3ufоAaB.!AT`6-T*2'@jR[[ziRnMn\"ZvybZ &Vҙy@ GbDcYo1Kě(ka/0sࢼՉw&HfON.KА . _U:c T,SL̍]@0+⃍r,T&6Lt(o$! WM%6D!,jDsJ !@fW^ r|<JN>kR^T獈[&XVhb)7q>~}`Kƭ[vXʨ@߱m䆬g9.赐 ҨE !k{; h{ΟJ~zmf+ƵK~:tAO3?z7> b&,;bЛ(AZ`& ߮:p~tz-Xaʞ7bZca{y;(IRĎCQf[=Ej!d,(5mANkwTddC~S-jtlV-Q4q}*'Ad̪bzE򣨌aĄl&2$X z43FB66I5=u;K8oMM@@&'؀g s`/,QY"Jctn$6{WY 2DoD8W<]7݆33#hWkr6c=-LOjw/nz}[{&Ghe۰.6ÕȆ'u19@6B$"@_rN2wb4X.vw"[xϥA81.00Jw4N^ q]ʚ#6 n6&hAEKxu@E=wsii~.Hzf`qVrBt; LEٶIfJ,ze!t8q&'-^6Aκ1ҍ`l7+U7Bmv\[Ges%@Oc'hΆ$ξw4|rNY<^UD׏F6PUٞj$b ㌃AhN[:i'@6 Ij'?K U F{%G`=$`陠ǣ4=0x;͘߻%#'%h]Nn HB*g< #%wVAZo ,x=8r5_ɲ'Z&-S>)g ebe~=z sIW̳npq'^P"G]Jlroy0k%;P <,"COJT¥epaOMuH6-Bz/h]$`!zekS}07(reF]J*@qV6ؘr5g8˶ +Lb8E9IH ! ^GDk૗-0zX `H;?oLZ ՊѽH?579k$4 i̫ioM*E>4Ye GfH>>FC|#/=-"jk:CD\#._ն ih?Z")(n WH0Am+c6hcWhxxѪUfH5_p,V-)?a*BOM!`AQLiTꟄsmtZ\ļۍ>,y"aˈ \|󹜼0[V]4( r:& PY\gC4#paqpkp Dps61+ֆ)RrqO!ߕP⒬2O 6GoFvIџDVߖp\KɍTjy'rfh;F R3N} y ؞{q~h^Cj=k l-BF~@%@s}$>,lgKI?9fX; 1Np;DjbuLt8y.g`x>/ēE#n>gA?T=t~_)6P a~b#\q>pÈ{h>y*^펫~7ѾߪgɀjZ^jt?12⻻0q؍ /} S[PDgng>p]@{=~G8fJn+0 HmT`54žYC%l_1S-Pi'+婸̇4έUEB( 8*9#T:B,/>-…lCr7u%֦fݍ* M3%iLg϶ bfLG<(!qMAd%MwlI u2,(%ohZJS΃m(ӻ?rr98C(U3/Tnw\ceڍ}^tZ/7Ur(3glO?S~CZSK e`*:꽨C\wStng[YJAeYJҴ%YcΉrw/hF^e)3R98:-U; fQ֔tp;+}HdLu=ͬWJc1a2GQU@@c:Py@I:M3j\f~O.E$BsB*{6leA/\[Q-A$Kܸ!i\L X5I`|Du(*GpDۆ׿ڒ1`SrDv@о{;\5#8D=vDeV>KɆr-؆|Rwj5hFY#5,Z<ϳݰ d21#"'ņb8L "\šzr 7ogT7o/TAhLO]m# KWI>8Th_ [f ۡgY|4:ҎVi4GTs>Mc`4ӄLn/DFnSz^9 4?6ߍ`{K+{# _/P~Cm_1?. >o,|t-bTVikV"VIf @"%ETq.YXul7PjL!W/T~bToW**hM;]ӸٌsB[:GVBJ3*QwY!F5@v-is;4d=޴@nyܦa0~xg$?9 AOUݰBśj?80LsZ8 b;ųOٱ3兗[}O&%xyRd Kud 602g\őcmkz82mztILN˨)Ca: YA`he+1i_wF_X>ReiydE xj ̧%AVy,'"raOVtX4yQR:sxTEWkW(BslƝJc"mҘiuDPH43զva; U]hlQ&;-/`:TrG;0랖X`׀Io>ː z%-UC#8+WSUѱ!{BjEP@oy]Jj >GB b38Ku-m4Ȟu-IPɢCzl@yPXy?oݗF@#NnOܮknvL+XlHf>Org[]4a)T!SuI0WEĎx"26$`Kբ09!~k3AjΖd?# j?U,yۭ"gFIFk}=8 ^m3AS,o!TL(a e ̞=G#5vk)Ґ)ɑC5/>=^lwJCçlݬܵY]UF] MAX sw<ÆFeH謌fu}h_UTW2{@bPL߃jPWMKY< a߃lb'aʖE}-[Wôbߋ2_X"fFj*)DJ=+~*(YS6NҲ]ķkHr_sf=L|y̖I},J~;iZ o[gІRV.=VCs]D5N8M: 3ō#և⯱Lğ]{e cr]qP~W8S| |wѽfv՞`:n[Ia ݩ^Lʦ=vG?s –b"kx^p!i4GC5ʂ,TԜu}C}GQ 0aGٍH5PD`э7wveYp$5"~Mk`}F~ctLHrGRsa!ҪW7evus;?82N(=ݢZb5HS=&oҴ&18pۉQmGV< 2{״1Vg.D2j>=OIBNӆ%븮)IҖ/t(;yRn7%JʤwNB~ R߻"P/3ae.Iipݲg)p nӈwvA1^lʹ>F7e5w4w i~G&U-9zp:}0CA ua\ :o'V "ăhIIv 1@Z.Ѳr$YGfLFsJZ7G!Mq[0NƠ #|:l^8/ZmaU]d^_[ûDݿ >`:jҩӏh,uo]>3 j_oB)_$,!?U+Sr b4N$$ҷkU|c̢gqJ r'tK? * yPOqj58!?]zNw H-`}?6* npt[RBp^go^Mtv {>,zh``\RʶzBĿ=JvHRYe/ 9K㫤"Tg=%{!wOi.9swyaL9ϥKⓕh^Hmblz#nC^RH"Q* xPET qwd{6HBP@l厊NHiX9Y9 Xx+9DOr3?L]]7>WB9=<\G-<-޳gR\C!&}QX'EU{SEiw75f[~ hS[w5pI;Ҷ8oC\}$D\_dF 0d82Ӯ3XT.RtL+M^U'9xElƸqhNcʏ*W7p:Fc~+Y  AڇIzx;\M+b,Y(kDXgJ2VЅjN $'kS ^΂?ԃTB҇EBE~ീ0X$qW& lJu4  Цiñ r~)uK6]C~د'dx"$MմzLa=>jܧȹ2#1-GY7c.;:sLQDV-5,PW8BJ#0 ?[Pzk[2ۊ9[m< 28&E-zX"T[[asMPW:!;1C̯hyv49s|a.d.M:"j݆&x(C.Ba~< 0ɦVj7R5&zkPnI^Fs`QҾDZLÃ[ "3? ɿ>׀NS9F̄_J/EyO寬oF$:\P-J2'dV'(83LtrbXX1UD) `)BhS&ϙ4{<"58 @] ϟg1 xs~]od۶xZ{(Q _%(TC\of $hʕY0Wmϙu~M{ @{ALk̮"U~z'lchxJ3SiˁZr1) ~B#$uzۓiDmDVd ud 9:U+|`n8^gjwpGEl+/@ĭF*[::ˡRaErd(Ƌ[|GX"!e?̀Td=y/n .jyD`7_flC_NkrMDX},?(V(cmYxhRB;^d <} ZLLf>m>Fva - @jR ĚE1!l'+ 3{}!: W@D asI&p 7ҐU,S5w!t)C*B@>CwB;?&m@%,)y ʏ~cb}gqmR"gpw5i=g+1eVh歓^2G=v'rD^ܸȮ?ZF~}։p}U$޴Z[3}u1Cq.,2X)$c'QQcjU}V,Q@p+ ԥŢ⤳  bA0g%tܦKlH4±3 _N6I鮢H> %g*V"#R Yd"NLxYΘ}I"7XH"$v1ѝ;F++qYBm~GKGS! 3Ġ./zbչ TCHm$ p:> _TZWħϠ l1h)zT/x$S '̎)a40C`eA L:I\]>%yθ'S9%3 \B63 _irr[;rdRIi3HLFJ5uv{.wg%⎾NOWCh5q,mՍz<դVФј87#&%/4bZa&)c%TX IͽPwdj! RV\%˝~sVѕ쫼^ vĝS$Ncg&rʐ7GXi1\#UO⠩#^pR#c>ɬjC"I?P6S}Ť*jёXB,1qi%)>1P_7Wu㉺yh?*j?jeXiQAI}}j ̝p*N1 NY=u&AAkUqLFj`4jCGSoC*nF{~JNj+ZΆp`[;HFe;s4aC3vg7o$9ք$_ 'NM%1/J id-?NS) ?adƷdyG8;VGwyoJԘ,[pwVp247,2Nq^fd-#A5R~XߛvU q+1g 8}.rZ FCܐ&HSKӱ!hCz\¤Hs4M_t*Kyk6m@U?JDۥ4@2FT*=Sتa1꫗<2½G?8? ;LI+ wF 5>k:ڠ(;ljՠp@W/l5[\9ޕKcƟf05|HYJQ F=BOz,BekR ؔ9N@Wm$h+?8 N?Ɗ(HwFޛgh9.Ŭ ڨ_p4ZΘTj!u{(zkd-`!fϛIT1¥>r$# mGV|%L"QYяqͺ"lc)hC'A"c4Ce>-4 d,$| ]{3Ԡwpb,jJGH'gGҺD&z#pC8k+Jb):P.u&Z(9-ۯ؛U2qH/cSm1N;XJ/_CFk(ݳ,sy%K_@ I 4S.Mg#ֳ\NPV}^6DeQ0{H)FH1 JsJsn@(k/1m4 }e^6Y=d-d}8$2ђJrF~ ޑ,Ol e#˂{vLQ|fI2hUQ#aӬ=HED[Č_C3P9z%#z)}sN񺀌-JqmEZF}#2Wa7dR1W-1ĉ.O/Ԡ"U.r)qC^zBIhV6qW0jɝD}\4R.>ۥa}*f,nRE'mP}P{kEGö{Kĵ7{<` e,t-DPWѭ# ؇sٚ/Vz/jRygˋE3>~= "^Rޓ7gbMiqs7S!6? xUغ}5?'Γ)ȧceK4m>/GR'rre V?&vVt .F0ivw hLAҷ(#~ Ի-a,5/+2`V8秦 <{G@RE@토3X:E"iA殡;MԽBFy>/r8ml$}mxtoOR=.tå-avx0S#))* ld]-:~_PWuِ Su6ܥJQ[Ke/bZE2<\ex:"#Sij*9?U2-g|FOv܎e5EiOoQaNH \"dBͯ Em pIˠ* `QojST6-ƛIңw<`gS@fRȞ@ =dlɕ2W8 bAeN땠"{IUuOjۛE5guQyY^bzN QNhN ,b2%$8hvMё`/Ң^YGMR)v9Yn*]P~<0M}C (TV*?VV"B46.Re0HY4,n쪠Bݮ~&8hY{ xӏ,_0A@2~!in1JH6u|XY4eMѺ `I)͸gb+lZzɷ|)W jZo:π7Ez8ɝ-q"ɣV~J6wYSf2r֖!ɺdOtcR^㖷;=Syǵ}NursT&V-Z>Äё(H\һ LLn2KG%ne2Ĕ&;(}{,C*b zh1sGn=wlv1]eVmr);?e~YJ+[%ùu: _@0װ+ UԽDܘr!=!Nn>P)go4qDNFZҲW A;M!EC&jv{- 5 AT>8mVg$\Zɤؓ%wTG;h">1tuˠw4؜W`./Cv -O1pd7PI κTQڼ. EY+{n{QeTb{sH/(hi'FNwB2]¿˗$xoЅ6*CV* $BZN{e[,̀^et5`˙/y]DB*l0pTNY0ADCǢ5Eftp@"DW5S.+T`x^>DX\"Vr}ޗ]xfXQ|4:iЬ[KLAT)R*}&CQ4{Rbi7h٠hm*Vc%EGm݇FuNkT.Kе_a'4Qvw4uZpO$f: )РO zT δd圣|~ܾc0-7`Fu4ɻ=Ftv>>haŔ9 8U=Bܔ(z1u8ǔqӴ6T+:!W8"퀉`\L"-1yQBKsQȨݡXԏHhYe4i^&oC0 `RFgT=Õ69Ewz~5ȫ>5"WYmcLlc>T;P8odoBw,gyqW> #CŎ3Rby6RafEYxIrH(o eǍ23'L=@ĻQU N;hTvxtgm 9]"Θ퉰IDTb3_ .!q ,L8`WH:j%g1>*Gh87<-sKJ@1zv:TZq-1ZMds f꺐X# V[UAfnv.U_ȼ/BO1Zf=G ?5>B EQ>V$^Kn'rh0$\fI eϸ*E1ighL*{TD٠5D)Ok|nqqD!xNw|3XvoA2Io-HLvÕwa\B$ ݡNQFxcB%v= _9A`Tu3h7 DYSMw(1PǏvZ qdtoTKc}37/r IUvVF|I`{M ϛ(e^ ࿬fRL  9k){!`QP i{]\5Jx:T5RTuO_ÄzD!2|J?d[fJ-R+M،ol$O8Sr㮯-qKZ6M(ȕFq0%#vz pW91]!/ H\ϋmK!Kmþ" prEguz2w}% 5N۴W'9Ib&'}TȰ~:[gf W gzv:jK]/Z@O?}ԦջH'rUAIYx>oyCh={;gxZQmmoD };H"9zb m=pyvd2u- rzQ=S;2p (TXeaԅڦ6LD: V?CThYFTL#5ؾ<iw} 1eaѰ#Խ鳂h@P_j6WW(|e3hϧ1!hR@ 4.\j+%.@3pTcZ:*?Cv13,-[ FWr;508m7"m,! 5O}>WF6}JO8v?XkguE=$ b], `E[ݚ+d8c~0=q5p$7uh=04k! }ZtF4Y]v:xuApӘЀ)e~'Ko52Ȅ;+'ء2Hm75- Cs= Ӳ!N5ѭ$Lܯr3g<4ΤG\jyҶAٜ?r]o5.",[Bt; 7#p{{:-8Gљl%r7y -Dj9Bj(yJQx%A$޲2ݛfk$I}d\z~m&'7~P["cikڐhvW]r?Y.U3NR"˥v/1i5С~\{ꄂL|+\qJNokS4}ۈίwE4;-SI,=JxаkpGJa[t6l"Pr}W4 6DlxA624`= RajĜX.QWr?,7o-h-~W$Оl[/5VgOPd|12E=8IL^dƬjۣn!]Tp_ɬ4_HԽHʸx[j럀 ~ɫ*ypl} J,SrcZTVcY$ 0ׁ_QH7W]Tڰ}PzɡnqMuiAM"ڈ=8x(n| v8L%JKGіκ4y%PqkL"/Z#dXa5+6m&_4)\G(5pSdY BezpoGq\֝ 7;x{S>j&([ywEdd! JԎי~p\܆/g)FF}'Ҫџfta ӂ/+r|ѩEf| T[%N} WJF-Ԙs|'C\#g}ͷKtZUkfzHzgJ`=vҝJ+,sر.DQbUȃ$ CUPt[P;Sr(̺&˕*Z ^iRsb@5ɬ<v3r(C#L=o|y3~b%<m KzJMz{Ib`HvI-ab=&d} 1 *KxWpkYʛ$*|W+(r˖(J} jI.ڣնh)d.tQUԵL-oE 74ң6eʤYGԝ_t|ϻL a';B+>cL}e=9%rSH?~+ռKQ tNDR9L*sk/`e@w-Ag7%n"E)|nKVT^6Yf}ׯuIB^lsQ tsɓ8u[E݁JCê7+Is ]uyp,: by)>0h-<]WO7XG`+xSJOϫؼ4l+ V_S)%c- NBrgD֏",z6ku7@Ǔ6P͛K1}ٻ|3MGW).MB+Kn&n-()lay?T^ܫZd\^p. l^V%j"Ye [ow$.`/q]V1@]m4)H3nVf,Q}O?jW'Rz\6*VlzNlv{D˷34XNv66pNb$S\U@7kjQ]CEMɶӃE ยeev;"X_*)ō*SUH9Bli~zSc#Y CpD[h៱RlR8"|[,:UBg+s1{1}%mRa7{hχ)!(rJ(ĺma, n.wi&"BIFtzIUVݤ?T` .Q( F\<)YIj-Z2#_<*> GS)+A ˕g&U\RI4jvk9[YC=GC>0vnPB|־]]"bU*yl`N)~R0frH')qlqk֛CO6(0/p[~! Q4Z*D7%[~ GH+KG05m Hn20P"֓/ZbCWu(k&G"MlWyYK+݇,#:{;7_g+YK9@; EO f^CΓĽ+O +yvI(jistr xf2$i =iD0N?|,F,=V0R!he 7oY$l?EEB ;)6\œu9)bB) oc@)Wje׼7Hv in*@9Plyb3:PAwݮA_xļ>O| ;kTC_j3ܓabs}Rcj,kHpNi3vE2VLxBˏ0N/m2Fyocqc%ԬP1 F-<%C[1Rri{.z(%}lVuVG[0pDuǶ YZ