knot-devel-3.2.7-1.el7> 5 5`d62!}|J^>j/5,dd j/5,d@\Gh~iL/7W]0Zv uӎzi`5~SgZEbZpя#G9[\,NXq}xԉ/RweG/l_ZӓBTRfMV!OIQ`&Qh\`[ѓe?a^$>Wl"[cE]d`y'9pλ d:[q2,~?DvB_I?Rͬ[yz?C!.VL>݋yM;gd|5Pʷ˞9¹a rT1s;&.s(߈{@8"A/0f7 2?rf [7SKKh IOKFH gK^ SOo.ORj/5,dd j/5,dF|]WYfY=ŜB-}SZZXi!ZgeL?.==.x2\9<ar<И>4Ytu(ߌ'R]YbFlNT45ՐﻅQ.?|=c\LX*`NYQ+OKBa&Zp_6[јuLxBC\;Hp-4G9.\(WaDzҠe4'f"pzGxfRb2O4n7U,! }_X).m hzˡ:Nq4fLw([;>u(">UâRṌ9OӁloqi?62A"5ƕ?@3q#%48{S~'7eSո7wBA DUQ^794U]9{ߝ鯧; >vRְD--ǂ-(>:?d   M &2JPXWW bW W lW W WWWVpW< h  a ( 8 E9!E:.EGWHWI@WXY\W]<W^@bdUeZf]l_txWuWv0wlWxWy$ X\Cknot-devel3.2.71.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.dbuildvm-x86-28.iad2.fedoraproject.orgoFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R +. ^, J 0'(69K< - tgj M }FX kr  L >#"2 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤ddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd2e4254af54c053f35290cb46ed8acd81e9057446b2d71ef8b911103c6999cd42b4fbe48c632018c0e15b531c25797c3b380cb0ec35f0a597a1f1c94008220b58f676aed7ec38307f1d7282f86ec4f894dd4875c2429109cab92b9621525966da759f07a1c22a4825047d93059c1b52328484334b7f8594b3511234325224fbd8bc13139bb264cedbb87f2c05521f7485d1933527c92e8a7a212c6f8ef2464203dbf9aaff8cea91313f84aa0debeb5dec8320826f796327da580a004cc05b2a3bfc9daa3a1ec734614ff5b96508ce9194e3138c6cf36df83f5a44a57504ee0e498e9c208cedc89ed277c48b97086e1455d2534705619218a1229e97234bfb0b9ec9669c39509cf8f5605eed37c08124192b60ed878e4f8707fb7689e1c1c1eba292ea22cde12acc55b67f797071c03119cac1d0ecacb187646052b5ec9bf692e8f6cdd36b572a22aea68204f86f208c5f2a052cccfe73a5430b0dc4dbe6a9db0bb9fa74795774ffc71a964f8b7132997957fc0ff8ea37b1f21d1f49c112b28d74dbc4c85e9a17c5712cfb676499f0ce467e72b96b61e969048ec42cd43bca7e79919f3837757036c1766ffddfe13b4756a180dd56c94acd798fed6d1d35454f28c3e7b2c6cc75abeb22f94d2eb7162ccfaefa2a224dfd135c8186472796d057e9655033ed1ff89d2317f0597a19c279ccfceb301f7c61058cc10e245a9bc08dd57d3c4103bfb975bb72df32b83b0f1454b68af76d0a322e6012bdfe33e314ea56ff55880afcd6f267f2ac36d63e7d21c4c05a94671242c2b98265dc033f97ea795b7921a44e2b33ac2ef7bae994da7c194bd6fd08ccfc1226ab933a457721679ab3895ae700bc36c8bf8e84cc135c7e61013c262a8588c495818ff6beb95cedd867af608031639b271fecd0b35ab0054e67bace684a983d9c96599ea7ac28049709e7cc98c3de9f322e232b419b010057a85ae809040bfd1d4f7980d352ae3a6573aeabfe39a9aab4f6bcdbf0693805d8fbdd906c78ab0e955f39e7eea5977a041757fd765e25974c4b01ba40214d4cab0626fc506a1ad7a0e8577b3aef19a92568794f2687228985fef92941424d5d68998b941d1cc640079e10ddf99a12bfc29094502ae508d76d35c66c49a3bbbfab63062a405223724bc545d67b41de48e28debc18f8ece4ba5df6c8fb7ba9c9a01c6388227a98d272a9ff77ed4ecb84c0b0735f3bcfa495922d93011ba453068adef1477636bb5e4cb2ceafe13fb046615ea1ee38730477013bbf9c8983c5985e5e14aed6b22854ec16f781184aa6b3d097191d36950be3a402aac76dcf9f532c6dfbb60228158cd280701096ce5420acbbf966173cb85aa9ea97c10e7674a09c0c7ee88988c66f4f9b30c01100333d484a554f47b5e1b3c0d5a226d9720bb3cbf391fee27b1a70850972b4469ce0948db81b62373ec7b7f48dc28d3b26cacca029b46cfe7d4815c72d5253618e526d5f9a68f1993f6d90e0428b4585ca5be835eeceab21017198d81b3819c40046ea8ea5eb2ac45cb096b58ff9108a2fe6a99fe698f42c2a22c0b896a9cbb9cdf4b70b434245ed008a00c55b022308f1e325cdd2ccd6476828068ee18c484d9aa5d85a9d55ee1bcd8a6c512fbaab8e00b5a31d025c978aecbda25a32caccf45d637996c0f486d76c5da8c5c6407e14415a2cf13573fa7c7b42f7249d1ac676295832fa4390f7d47cb792987b55dd1101f734ff7b706063f29dedeb43e96643e1bfc9537ff1cded7df7fe32ed047aabdbfbc878e4a090daddf8cbcf961b104eef29eee38fe1e919f28aaf436f2016c2dde4533a78e136e9ea526fb1e246c51feb8cc8cf570e77e888ab0bc525b95a0e058411ab8f82c16ed18021427d2107c4a2a3b1e82423284635714ee1a820a82bc17197d1334667b6b06ef1258a93c21649c8a8b4b91b4063489f544e810bc10ffcf7834cef2549c53a9b6b81cdb937c0bd08f121aba302841a71120e7dd3194c3f3e51dd2b2db50acaa6e0adf5a10b15d83dfcc30161dcdbfe3e0ec3bcd4ecd1b35415214c84ec3728b93cde1d58ef253337548c27d48246cdfa95df787ca6e01968b1165e23e9f213a3e8092e3d55141db8a229a257e33b5b78d6e416ca902cf8a68b2a28e1e3e89a775b91a6df6110fd6a82ec30fecd5f27716fb25bd2f32491a381a61b4864685d60c8d14c3ee0e1e6b27e0aa14448e342f11453b42f4e81202318e81f820e8fce142fff6b646119148bf78d1f8f228c157bc2fb5908df7065f9a59f5618906612165603a3e48f02b05fbcd16d484dc095525cf47421ac58917ea5c09e68bacb516577967c3a2ffd12022371430ab2a2e74d275401c78b36c467a06a1e2ced136266ed33508ea1410b305442980bd50a6e6bfd1a35417aa5c74316e52f1ba5304d8a799a054e935110765fc0e926c5496ab912b4c7e7406a3aef76fd0faa559bfe6f95482d423e0777793c329621af1ff50cf8ab6545706c7d872a2f5dec3ec487482c97d53ef647c45ac407c04b6fafbaf42aafeda061486f3a0cd57ee6661cbb3472354758d8f194182e0e372d1c5b0c964f5b0e272006722d7b9cea85bc01a4a7b2691463264f07587df649bc766ced70912c31cf5a5a7b22f78375189b0e002e250b7f08e51aa0b3aab522631003298e74a56c98121799d00246d344841cb4a4e1cb60499185a8bf7068c0421e33dab3a30ae46a8ccd14e3e4e3438f3167de92fb6d2f04ee6418c41366edbec6cb1a64da831dd7dcf418ec4a546820b816a6dd26d37658b52c1c856604b27f9bcc05a01059d5fda2147bdaf3264bc8355a3e6b0490b7070a727c033d439d537ac1bc5636d5fdb8a6cc17007197f83ca431b327084bca54022011cb92d30053268cbe50c1a671b6dbcaa63b0b4fddb4ddd9c9d0e25a25bd07a36147c4055d7495e9907dc46930b276cf7b2ec1c5c2b3032312fc404f217416a54005443f8b198f4650054f59842a247de965fd8883792388e3a6cc74c05dcdda579d46b8dcbf76c7f5cb1ac8982be3a2d0c294d411b0f13f4fda39ec1c710b1f62c1554b117de679b9fa05849e0472cc93c03f589b87c4b6b1f15ac89b5e93fd515493630780d2ec4b869304993e0f0f05c1499f3344dbf881b37519b8619fa5e8818a7ccec0895cea3e260598b57b72b56dbc38cdaebe116c3fed439c3ccdfc3f3a801ef60cb69f1d71096fbad9618b120a6b0c6b5d90cc7a180a9391c1e87be1c0f552d30820510eb82d630709d110241edbc95f0bff12e89a3d1fc06fcb0f5a549af5elibdnssec.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.7-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.7-1.el73.33.2.73.0.4-14.6.0-14.0-15.2-14.11.3dd.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.7-1Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.7- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.7-1.el73.2.7-1.el73.2.73.2.73.2.73.2.7  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,] b2u jӫ`(y/+5Xoz NӔ)S)տ:1K)/.#@ -2=@ E(!_2 =K'l== O?![X [Ol2XC$#E$fǔ%,N)T42H'GDO:g;)2<|EAIV Q҃ :RHtSĐEzq}+4 \K2[VF)SPOa^w&+c9 6kWa?mϱrߢVOJ7?Sa ȰJYS1C%IHWyYX{FtXn1K$Mj43_jp;TPIť4Zލ})wAUXj-QϷwZG Tl}S=64=t%qAz=%NJ\kAYdyNh/Ěm l g#;}j%ҒWWh0Gؙ;4Dg[pɾj#QEuٯdSf!e+ lG삎7ҿ2hEE5/tmcčnrio 񌥴?w=AEtuU=tǜ7a6K ъH%v-j#3UB7˃ެc9rŧ&yk@ ͓DUk-}pHcm\;qybA'Hϧs*uHX{OkusSj)(*ȗUDNkЏd͘c#PL}*?a0ⷈغ1r锃(yGH _KR}&) cJg(o#k¢/8ߑ3FVI5UVI pCdֺŭ䏠vȅٙ` *McNZcmY<.-*>9'!>[:F0iȀ ]{iq=a> nZvgZapX̪0}ƯavE9&)7Uc<\"1x w 8F%fƀ* wڔCO ͮOO٣ҫإoZiF t7Uyv\0?PcO' 뎸B՟Òxqimw\`".Mp˛Ap=nu]cEKE-HF Nȥ=EU8fɈh9M;BDcՄK~ X9Ɏ<4:U][]\i:ޗ94E%E[b>yoQ.7y>.G&ׯä*Ve "[,*eƯ2i.ou٥V˺'b{6{+ J9gƢpe c]`E!ń`r dZD &0ҥ_d \sb1!K3~QzM_-S?ި%\m7@;C:p\sXs`GIG0LC-ϧ׭KH"1Y~4}d`9ߙgڣZ#Sl*C ]T>jbdRe%-n̮ dkoBu .g茚qU%]# EpJP dQC 뉧zcaDЄa>5:?w0,y\%;[MoW^+- #]g_JKDd)h-B\K=-rDX - [ :TAa^6q:EF+yz50ĭS#qL o$ I/B~͗w$"LE$H9)T,pc Žbb-ԛ~HpIA8 rч8>k‰:sxzFbغ[6:DO,N+fWK0!x2K=(/>ôVz72b7vP1EMPRpj`z=,*cڸRd]`k9dwwq$|7&H/}b !}}3;s*ˎDӨpgZ莄w}^ `Zw'6 #S>?Un,{Ɛ{-wY ^476cym+kMRt3I~)0Vlv J% _Ol &aL! ,O$nXf&Ybot^4HӊυsuS,Ϡ |a㼆w#cQtZ(! ?H=6 :;=aº9/H_nzOx{ECbj@xW-6[@bΔ^n&\bCy!{9B Tn($uVo-pCEol%PZb㍊N8|2@'fPAO. thKjvO?N"|Uf#JI_CTksIDˇ2,S `kőI二-1U ܶ_ͼNdL·;|"o|!,Щs DZ5|6/ǫVEXj4^6GiMXtb0AvLPv5'Pm}-3 ҫ]aJ<~N5c"g9qJ!wg taG)GIE$: lTQ YWb2:l i UL?Bh+p6b F y(GK3|̪QmfѝE4]mns1d棵Ԇk#a ̶R0*X ݫSPu\nbx8 ٺ@ o9 >|IངPOHbF"CzbҽY+Yb|_zYF%[33ۈߒZŽv#e-ֵRW˃-7ψl# r"OQH3AVC`9Fp+nڸΟ'PE% #[3Bs@Am$ > F3<]^N;}Xy* U|Z>3%(Pz_!~+vب~PA+gc҇jpOeTl;OSp!mk+_2K\VTXb11S*Pm)"VW(U{O]OwNsRRr}n3B)DijsB bEy6$*䯡Qoa*9d%jxϽ>9!tdns;>ƴGK)6db޸]/:u҂#9oۿ|CTڶ}A5vB[4&#zy})x0߽~){kΥT ڰam v 12L5$uH]ޟ-tګKz䫓E$ h_!46ɎoЍh{O  $Fa 4G:^q',OE.@{θ_(fxj>UQfF ZPY5ˇuGTLUKM0zRZavC7Ih,jbdv݁^EYwcxoi"`eC3ebnlf|[N mpe,g:n>_[n#Xa. 5uaFthTS5ɛu'pIS&Rϝe51mW3i~[1n?Y{k'U+e? S=n_$bgo^3uޠ!\o~gۯ 6FC#J#)wUD{)':hc"Ǯqmihǵ'ݧdbȌ~88|H`G~Agp^X9qz&.\+l/*4D*R_a"$Sx !#X3֦X-lǐ.`aGltݲVw }ypJ"W8.?2ɕRoՊ2/ǯ#!U}Skק͏3MKxE(s5!jY@[1Ua7:XDۦPZf4a*@Su 5 0FR!'g*N&ܾ҃j3j>j?@Վ9qqvkTCv3v#1lJT^Mk7-Wjfl1ݭ03V-{M?0?U{zX'=[k Rۢ#ڠ#aVbszsʇ\ݽPRn>5}OxC.50Aqr1Z`TՇ)z'@>QŭCLgr>tKk+^M~hמzznA̜| ?YShZq7ӑVԓ(QdUp[hwD{gX*ZD"xQh=uXXO^o7LgWJ*PQV> jXJ[_mG3:ZA'jeEY>2 SQrF̪qeҝőmK*1>b$;}Kz'bÅ^c쇦- Az'LFKWcQ=#0Y'hۗY>U8n\Ib)kVāZv?`!R+ZaIK5O!1$<_4 .P>*6>ja4PJ%vEa;wғ LgynkFrӵtSe`]cYHlQcmvk`0I(#9qȓ|!xe&kй* ͟쩹 Quնzʱ E؀&|SF?܄Q r [*Ylф@j˟}K8ʼí?PK:҂ >׹`,ZeB[$)McIS;b u:ʟk}CK|QǽtemY\?tRp1H]=o 6ϫ U &1\kzD{ZR$&\|o}lL;a%Z7$9,BU=.}|P.y̬"U1jMV;KéܷwqQȋ `%uV]E V"5l$o~J܍juGOGF5` 'kkA֗%3m |b &L+ `']TwyE:m%RпVm{|>&B,ߟH^-i8 d<ܭhE?t? Í)ܹm t7wVߣŝ6IdVn id{ܓh}R}CL>|+GX l=3=H^<9ZgRi ҳky7'4%rC̀E[= ߝKȫ<Nft_mc|~i*v OD9dF;rlwh5oc~ܼc1d#"52g3]?zC͋+(Ȃ.9]{bcޟTŠZ(Ci݂f`q{/8As2r4&$n7_.[: r ՗Gk^PR~[->\;|&AKvo܂yZq=:c9rw͢EȆhbXUV"l7.iy[BQ\=KFhM4H~+-#b\#G1 j_E2%5}>% 8n A.n0*nѷ` EErG|G""@UOT AhpisuYnz9M1x-Vie^Ĉj N'LP:Sd.H'86C|Ŏ c]蘕L -6FG-r {a}" 8Cp1S( jRzT1A9Z+dv81,,34KRAkPD:qY 'nuВ]**tBN6kVjxh As~r6-qRn#N^ӾisF_6:&^7];k% n7OOzYgx! <ЋZ"8ܩ` WQ9msaT? ibm! ϥ9/~øTl?Y9U Yoq6VFtd ʗ~0i)_, DؗrXN>Ve? \X rN1/ D(ə@]R$<(K0ϐjZp+e,,_b Jn@mr1 %P #>ʝ!)_-XrزP ':*UR,Bhr`$qgWm|rz %0 [Jby;`϶A} <ঀ劮c~D]},PK  _F},i, e*3ƵC -ݥ(яnDWu,|ja$POUos =voU<$u8II;yXVqS>vVؿyorI†ϑ#F͍.8NWhyp‘ǒoalOtEx BOdүJ`Qc(ĩ|Q9fsR E4PA1OT,Vh8^K>b>P)J[l>qv%³:ǠivP-Ў6&G}1cCqHf_cJF=,ˊzh-5NUɝ}tUWע u=@:NX҇(Ƥ^*_i5@ňʫ.%sR胧 t 03pic'=}@x2TykdqYfTWl3.#a,;]$Tof.)FڊsZ]GcmtF6eKr y?(tU}pKAkX!̰N I)̎oZň)Ml/T.8' vFN̽ J`hu,o!͘ 3ϻGR=^1~in>e+x^'!82UkANjnԤ_ SdS9_6.G CN"rQFeZhR>T;%`N%U`j̞AAK4oܲoUpF4c(B/GUmhjn7Tis8{g$~֍CRzE~w[l8C4Lϑ?q1*K@/F犞w#ʍ`֬cR*/ZC"h{ppv N JMGءpk⿞0l dN@$Y X<k \5Y 9}8iKLzedU)gcAa0n~"}G >U7:j#T\]U|peو~FJHWwfI"Lxq~`rE5Č ܏DtEQlԠZj HiC X G0ѐ(䁀mJziz*cr1Z|8^@A0M1˖6FQ2YsQ? Nv v EdTjWgM*$9T9~]Ǔ,@Wv~*܈wpG&z<>bVR 7Y@ E=1\>pׇ@FR~ 7%ٱ&\>3"TW7kICjܸ("NkFJR݃ws2m |FX6f]9g `*0#U+kof+KnH4|eu+WN'{|P|vi=5WD>:D<)ˆ!}.Oy=)-,l7 C;\fq 0b}oVnk_i<62? c+6p>)P0%ИrڊLukƭd1`!F$4TQܕZ=tZђhZaXf/8Btǂ k˭TKLlK`mt\̆Et,@'@BLҴB`"90kAAXnqF ^_f<+!+üY,uGP:xoXg*ZvabS+-4^@Q['lX[r_JBxiNc59x\سtu{kQ7$[o :S{ꢵiϼNQ:I_: T#w\{ubAx) DHBYd[EIOƭ ;ݫlc(X^E0Ϝ,]4ΫIh_3G+%e3!JuF=*NɬJnK`no!GnNG:>"wP~{˼}e><$A "w V#QNM`u.TPiyۘNuj:42/}b.)ŏŭ<) |3s@&p)** _y8Q/+ply8:k ۓCF!2T ؽPBZ]Y KgW$/1_+Kk-2G XJ++nE&w[I/0kE1+bgc?w7m^;錪nM: SK^plܺz E.4,7K \#ƆگKEуXQﰡ`'{ $De)pC {١%R zE2rݜlX-C)m `VqOֻBM ,M8Ϝ'xvK Sq^K,ZʇWL2]Ag8Kv^_u{ϽKRgQ~<:Tt'`jۀkAGt2u0ך^ѽ!+1jN/tű-U%aX/{{Rv0*o|0#BpO:[;dKN~D$x'8 5Q}KD2p>bx%SShYhڗ>WZ耯8+P(naIj#V v=ZEKJ>-~n>d^5ks!3DO]zWrא^g(6J- FJc&c{8a?;}A |fT 疕7kq\eb*8&BCz_.ςpYV\AoSjЍZ]e#C&aG}!%SOQc2Ņû^kB=|վfz4bR&Y8{!+205b= <@Pl˪uR[&QNw9:NRڅ`,_gUd9-G@uUP@Kr'̯zemsUGr#g` d0}Xڐᯃf %#^+cՈ3N3i֯Fh&Nmf«1|fL )y4|C^K ѭä-aqF>?xБ9kz'|9-歳C,>|NtK_=9ۥĨd$I̟(#`HY<޹cj$1`~2y#|(+vW7qʓh"(zT"S/0T%84Erkon'QqAn9%R@LɻaY3u}h~.慳ᮃ^ ^H35CXlX#TYc y "3 9Eeft/ LS\+TE;iTuPy4ځG1b/5<\Ԫd05@_lF*0bUw&|YU&7Kmwsd%>2*ZDυe)<^a" yT8ӡQ MHJy "Aj(fJJB f)G "r1~KUuiKȢmY89n[1J.J#<4to,UiDG0% i{OlwZ:jfj|ePa& o̥g,:O+,G<.[h6C:|Y mdоq%aX;RkC_ƊU&5>y'G읊+³6h/vީFC;w{q6٩ *{kҰ4<* u%S/mxD@.A}U|ճ{昈o6;t9E @f0&Sg26o[nlZ*'bunFoB@Ă3EQ)@A-62*} }JrIĩt3oU~Z8e/S2X vg_*)5dWV4R*ͪ^%LczU,c{PW-9KL$/ŭЎ͘Η:eϊ[=_nM4+uKDZˉv$؜kLд`q7C\Kb؊T+Lg8_(/!5Ø|X6g#63'Gd<Ǧee]ܮ"$`xI܃S8ȹ*n@JDrrA_e.%vZ\7B[N'$-U 0@i^DORYƓq5p*k1:ŬC }W]ؕ2ر6F)Ji+F\r:cJsO0vccUnj˺oyjIRODDGt6eAsVNrYVg`y~X y=hcM{1S0,$NaoݔvN Ng]$ӨT!X|@2櫉Dy4gO<ٱ/#)H3/BM*7Ztf k[ `ua)̦,NqD x@DF X3T+۳\SJb8 Quo+P}h]xs}z^y}Ęlڇɇ{FCݭ$=;=ҙ89o6E<"nv|,.bZ8O?pxY;K^n O_AwHyb&#V\H`fbVhK ҸYլPQ@3mXV n`xn>g%P6^?ezΌK%xtd@ɍm]p+G-OJP̊ *r6`cjik3P/PYnr$L6J| }o5.`O(Y#3A(f[q |:`tbf3ee4ot}fSxuh0v$P_@Fe w - g;XCܼaq^L$SvL⚘D%M4z&cj}LQ%0SR)xޡ0-1pyJt7b\KwbuW tgf-0I.84) 4Uكc58bҌe/lopJ{ jC79[Xxo<̗ںVhN\6 n=AP+rJKd η> sMq_4*_'Z0Y֠Ժ .5fpjZ@&rƛ76R˨Y5@m= kvf\$ *t fjƶ/ᣰ@zhq̐3 &dl:N.tȠyI%G%ͤG|'̒ ,neV-!OQ]SO^<tМDA&v a^,֍ 8nIմe _^v݊"EuoI,(bvWx/`ٍl-׆ l} Ѕ |dpN2n o[ި I0,fH^ykKdJyYN|lk604ݺOn]Xm :q@8Kah {Ŭz_'7q~JKA`dz<:tY;AN<'ڌ\5wA0E:3^O"a3A68ȁZ³G=,a%=?+1Dt?)n}pG |?x<sey=W|!z2jW! tXx#M9tn@vYvcsG[ItA)co,*p+r?ƒcG1}uXPMPuoa ɘ_-"l0~1B=2&mף+3<Ý5.Fȴl+>ok%8UPU|&^Mk"IESźt{g@A-zǖtSOwZ Do><[VW%NM/ܶVFJӫ" 9M >t”nb< (V|X4f^ y3gkc]dE1ƥAҁ?݋H]NQev59~]Nc`}3/y0dS 8&!u&DfYyd0X?>)T&?0@mceժ / Ut$lЂʌٹc,WX2.=^-`ΫI/v=-QS!OT !_rݦ]qsUQɺIsN1#SsxsߑL`ܦO.m T̊b)c?D^UT=z?1 w'mUW]S!ikf,k3 g⺣7g UpB:h0Dzmv#'>VP#tj:7Y"-FP[N3 aRAUfܜl:E ؄XLzZiRe{j* GC6:v$")N_f)Oaa_v3%(""|i\Ij&_φHY.%5,:;0-'`Hdz*u<12E n|twV̍0AA| 36W̿ǩC5f_Eʠs/ԮҞٓ`ў7M,gn;\H GV4Rwġ@ELQq/.wᛨ1?Mz'!L[u,Mhr:5C,58P#rW !љ} XQ -E&Gъw K IHr$ֈ8j =[ED*nGF[U[%)ODULTDlvxQiy`ɌW%Ptm[C &yTn czH`Q#TQ8ÅSpkH9ֹxxSt\_b= ΒGg=k .3IE`p; tv(=N2޳nA0Ve2mIKnbGgI%6yN,u;u$Dk=GӒPklܬwuc!];Oi~8&]WqYQ!]umF&XvvHV22N"p/CU^&2 xJB*(R(,XGĺ?U_ǼAH9'VYU%/Mtc-YGvg _Aky!ROl™2N͊GG{3!- kl(HG󖞆$3eu@DWCpayKN' Û76foL=zp^V_@֊tH~_#8;}Ea d {MF\)ƽm+LbUL$+>M]ƱǨP[(l82 >A)8E}z,#-7.J3Cdd-:X^)#7 \eg\b7RREy$#Y NwFS'.?JKo*p'C#P]d:m'BKn>FKs}0BJB~8n^: W{VXio~E Rt DR.Nz{x}LGq&9pۅ,iHOݪNtへك.g?_!bijfwjc͋X g xw*%t1!-:UfLr2ʋ-Y8h|.Mv.CSR#NyxK Sȶ쐙2$k -xbA'^@{Cmo2.";Fs y{Ey_җZ؞TU*M+*fZ; "TbYY_D<|Djþ 5O8IjFTepY{NszYY lsXG [Z^¿Oj*Jf4ѐlqB哧l[Gdƾ!_(& ëUh__:n.`zE6:uDC\hUҦv9mks |f'D}w^Hʗ587 Ho+tGyuBaģ~^;n ΀Т;O>ojBTB>ȸAׇ`"bMt]7p G ”P@֨bO{Z40Tzl2wDﳻ˲̤o$ɟuLݨZ\i80ZoQS'!1Rrc]̶=s15-]A/F77Wl YZ'c' zKW0zF9o؏ ~U?4%1u%q `Ζ:H4"4ç t :C} .Q$bp[:@ ޯဪ\M"h՘-Pڎn$#=)D Kp5<9lmHjvjD1vhilZʏ hesVh2 g`9]]S!k.bnGr-P?n.s>8,GV |v'"ɱpxEYUa?Q ()saI]`12vZa˘% (:z0n䂰XN͏E9ewӽfTHl= àK X{YuCHL2q GQD+lTY0H@PqbhTEvVjWht?'6챢[QP|R^pB3|_Ke\mJ\-yH;&P㍙ﱢ,;ֆN*ak{-^ yܲsu1@8Д|o ,x]8Oin?:tsc\[(k)DlSM46mh+-C+0zr-=ym!հG$JYZmHB^Vp`ha5^oJ-BQ9O|t6BW y"v$Mߋ XU>72ԟ+KOAyEȑЙGV5[lv5%lNهC䧜l`ͻz o4_tZ,Uow91VGYo24'STmL{??#civDMCU¡!) ;yH6xFYug hDzeml( 3C*tq|&?<آҺp^ _!ĵ|ߒ|%|ZM08ì=-sX%O5BS%Yh@zwyƲPM;xMs*t&"Q#!#+&@:\\t]36.:RA_ ƢN!%D.u`I2XzoP%]^:Bh-34H[b=N|"Q;q>z"Hn>[2+wlE|^ .kWfR| i9G8CV7wWdUVm@w/Xj6C[A Ī2;x,I"uAҝ@sE$96%I2w `l2p.S}W]}f}ыW1kd=ZE:x2o꼘-H-PɺɆ z;. }샃XZ_(qӳB3}H~4p %XD" QoƔԪ,.w{0ڱM0=v0ϱ# -tM e/A+QN)ӣtF#ַ˾ 8h%v"=a3EJO9}e.b:u4#ot3iGJү{d褿!m*E+aoO.V͋(0IO3SR[nd%}z*ġZ!vmoB UoTCOY!NNQ?,Z⊪nK+x.Ko\6bMz ޒH `m̜:.^lM1 b#r W-t? BI,`ҹ JZ e =ż x&Ăhk塛/`n.V'k m/0$'#x;Rb-W@;nYSw;#a˶P6-:X#hht/"ԫ&VEmuTD-h0uqhJ$ ]  Hk{E-=>oU7hgH؎MajZi _]iﵔ[AeBs.|!p xF-~* ""Ԅ5ph$k"rG:E߰u;HA.dNU bnfbjf$H䒏\x޺zROU3zBp'E׸PP (#$btDVmKE1ݖk#Yѝ_@.}4gĩmڕRdr)K*]ﮊMߨnȏ&ffgH"J#Q1tnPjR\4 8pqs[ mV 5zYgqHgV3,"iE緦Yq?O`F&eάd%;mV~!Mݘ2-TQ?7s8> hEɕW+scGC߼+?**rxCj0l{ h6JN;p ,&Fu*Y~ףR/r9+%< e7on"KU zn8aR6eSvΊ"cǤDBw ItHfFgςsLA)rU}7r'cL+ H?Y^߷%ܡR:f¡D/jf}Ryƺ%ϴjFȸJ6CMc<4/眈%\? x=sUX2I0r<ܩH-2WG6L-QBw'mJDs_~mpk+].B"##v̗;%-<:pRDuG`I?7 ĦTDg+xP¿`ZYԥ_O Vf ]Hɿ10|棜Ɨ>]y(m8Q,!˖\ U ٻĎ `RS+B|up9t]CL@WQ9t~K:4^dp'v1͖&R'OdU<[#ϠP)WQќIZ6T?Wχ|xLu#>ˤ6Gl{xڇ״1Kĩ`u^jR !*ٯP~Јiv_#qS?TNڴT$a=VKGz#oRS.8. Uo*68;Tpi$wI,F- X'%D0u#LZ+x{P_QFo]@y7MQ:dUMK*W*Ip#Yu6ZL)#hNgǬ:ERyo4D6cUHDE$%b{L ~IB}@ȿ qsqf3 ?z%΋uժaq[rN= =2LpANWߔm5`HpLO5:BqYIFZ>tBy|zNF8ks*螒f[䔧F&`K}5'$;FRK9fڹo)Vt\Mc|jS۟Qv͡lH{-4U>8ZDL#~z͸,V?b֛}v{rHVp#8D)*gjOsnݧ҅J\(M;8E6b7Ml:mu=  ,m)8qHId(Cq̝ cEqt7ei~ XcWhQݯUko3!1!_ gה4-ra+;6N.X3A<xZ@ע!w4zKyƫ35:h6YmR$F/I`b}˿PQVðIlM;F\p0-y[ Mm;Fװ6 :H&1ļ?0$b9=dV㲑H>Q?'tiϾYL|얓~[#⽆F\gCs|(w[YW^RI'y^W~2Q sMz99d/pknF~ a uݻcw. 쏖6]Xy.O߹se'* [Šsx{޷ߕ<7]`E:':lecJv5CPKZVsWBTϐQj;|.IF*Gޫ) }Wg\l<żbR4Io?Uj/j 6M zS mclc=VU}IM_3X()>Y:R9Kwa( !N`yQ Q/)nBmaq8!d9sCfdN K}s,rDZ(;. >v4̮>bPGpO~o+媑dEjC.̈́VX0mF3bGHs^pWߍ}tq 9)׏ պMtR5X̮6)B cz50C8t1C6\9odPl+@ꤊ4Ae't."gzΜ 04*58YFwul.&qC=\F*UzJl3AIgRc|5UJ|BFR"rY!O@h!K.Y!@J/tQo8ďG <;1*WQR ëN(,>('AK8; !Wh\tُR;ta|8 _۹]ĴmVŐDRCIUԅ;I~rIbwm2~ȽLmJP/.X]Tk67t05\AyFl> [I!S a'?!o %ʉҪ_TJAEՎsg ,c->T 1t#l-UqA$>QhN#PiYd, qDR,GdkҲ=YDimW/v/m*GMo~hí`DUu 0$iHKSN\ 5TqIss,=ēiqNڞ)I7Sߺ tn@}1vq{Xq~X""K':w(q\ٛ5F!8,YMurt}]` ʘ5滎>k!ߛҧߡhOOR S(,X8skbM~\ |B=Cؙ\N"8<6O:;\ ?#Ы, ƌ%. V;}P Xp-Ma$YZIIZ(|ݶSK".ܒ|71{empי>q0nhtNOvL)(OG%j1a|/'r̘Λ3SS^;,HQ:. &5fd~!X*6tGsn\3^=M1`11x km`.[,9V&$z2ˣgFnK'p"|6H}d\q]*w!9PrР]%eq9gw5(-j-*|DAXA)\D V'< (Pl6.^lm|-9EHdo7 kN@.~bBBP$j DL_"Z"36Llا>wWN1_& 9M|3U(~"VjbuLMUF+nO>;`1 ޠ9Iڐ{)XCY*Nzweu%bm,ħzzͅdUxf9 <yB !Z,}Hgx,Kd]di4e7Ƅgn񸷆]VgYb+IDD2GgAVAɷLӈl":<fcFs)̥E*lSik,ʱGIAD{o,"G4r DBpbD؄-nJXdXJ?v@?9mgM3h2:6z(oSfxrlMh>#\}i#Yf7##GuGo*q1KK,ԓ -e#Cmߝdu-*b7@>Seu^au' ̴~FW3^wSkzM"әvPIuZ5T` 3IfT֝Mc7OZ{_WmJd>;{q"/+H.Ga(E !^WueoݪjeRՎ-z_m|2X a*jG-FJ [>pLTネ|*Ya]^"rɒwQq c\4^XkrÅVVLԯHټ ** \ēEnL_8gK2gFeV@A 1'+ss 8-khT ґlO{gP4<+2`i/6&;m/R']|# 5MZm^5nq2` Ž" YڗS)jW-'j7dR_0_FBuǡ*<ߡb]Й9;52Rwg\W+67W2x BCls!B v.ً\| =2us@ %!Dc)Ws7e-L Ϛ]vF!4#wFŏ=c;9w\R'< 2$\3 [gbI0QsqI= 7 j)B6 <~aPt2eңLvZky_ ڸuyDM $/1mp5ӳQ$&~`g88 (\ܝZNfV LOmlQY(~mk%['p`CԍP$!~(Pb.)pj TX|Iu_E bZwyd|T}}6e )<'P #㜢0PYU!/3sdv/BdR5tm{ԯk~t [T U6dmWMvP<|K9jE<]P3eG~kYh$̪ p,TfS¦{|R2nGm.x< $ OcAy/ڑgaWTrJ29 _1YWkuAy݅_tM7b롩f20OXG h,( ڋ=zNh9Jk;z62F+]s-=;5q)]_C#qI/IΟj}y1ɢcR[Q1>n4,^ȸS~[l|P* 1Wnu`;yю7jXhQ k٤U5ռ1^YQg u.dcIXxo$!06D.ΑPcA6m,K\mX R-_x{'HVo R`O(h Py-#fs%Qa K9!> Oc2S;t\xaE"1x* Vy4 /)߰pwZv~M𦭪:,]lߜNZ<9PRϦ^[= |uvaxQs5\ a8'1zg^?[-p2C1Ds3e;=a.h+ qVG毜Z5UpvEZÁBŞiŐ;SI^̃GoeTхZDZc|%eɼTQJv뇭-U(6uA 5 Ƿ]d,h D-kX FQjŎ鼒S%V0+ŽKcL$x`5 (s)]To2ouݜy.w- tmd& taynZrKh:C?`xrcTPb}0.`SJ do?20۲b-.5GM<#% " s6I-u PC;۷P<M N`@%6k-[!J I h,.ZS?kȩxےnٓzrPS1yE_B<]?06dT +N6*%-4o5ii()|dq=[liBKlɾ~4 ) PC mj;5h>="3`_5Zeg߰j#* Tt[f_'V/d5;]XvPoq{1+#r\ 5tyc=͒ʧ~^rCk.K'rK(D}sR.Bǖ`L5I#!b6js_uqnDҘ\ь08`|ZHquD%@ |%%Lux3U:YWԇqĎ/Z>kQK\t Q-'k0B`̤0jx΍AT{WӚS"e,N'q7iI.Ow4|~\IwO/f16\&ItXQ0NDr*)bϜɡw4pךF:DNk7,v flo $ι(3ƥ  jn -KL6xASzl<%IV,}<ͷ@(Xx;VŝU('fUذ1;pHH[9>ANp=^ov< _ e暝gU3I\ 2@iPba5>.Z:x~%:/|k!WyJ⬲i D+D; Vk~\A14P9"~0hA{tܛ} ˟_+Hs.{(T:{^0\颽Tbp^cZW /`Q n Nios\V#{{eD\Q_RR+`Tgpcr9WW- +pAW޴1wY -pFӉ )P_7gV:-)n{dB^-ѨP>{Fwg&pi-m`DfՅCd):R?NfWe \ҙl<,!o(Puv[K)tٸsDf2҉\>s,Җҭ1ß&g'ST}|x?!h)hZg`?Z'.p+ bU4brHhF|Nܾ~qg3m^cc3K&&%O\']idy$]|4ʛ+*ؓeaz$*knۏW{;srx/ZDS>cv錷UdNu;qGb4i(BoZ|HRTA`Xk1͑CyDb}SOHSQ7JH\EBUpm4dB\YNQ"oDZz==kM+YpSJ.Ս5%5b\K4HHЈ2<3\t̓Y/5kPTKgkawEEF]N5gh*FRN '$D7)#<zUՌ!Û%LC+ \ c<))Cq&Pᣒ Ԗ.Ę0GvcwH溶"ػ}@XPJ77~6 Sl"&i;ln ZUtBzǧG X2r% ?=:@*C^2XPdsA5U.C?Pjm9&ٰlJI}'Iq&bV] gh'h)fYM"{:pHrTIOWYi("?_tÔl#1v=!gau4*V[w{uU/Lc\/;STJ{( .K*] %Zx| I1/+'#JX_ @W~E[zJ@:h>z6ƛ!Tꡑro{;W @3(~r$gn5-OB L `}tϋRkT܄< /wNU*xI4\ZCQiP#KS(A&ltO0Rr6,d4AD6If`h+펍{*`q++ڱ^w-|Z0M⦿`>Km q!!z1W66M+@Q|t6{U0prx:;X9[c{:tD!G ~V~in؈KҎZRF\v<#~ G5'] _-m~+ tKC~J׊oj>M5*60?ʆo${PǢcnn?ˉM,kY{n*~/y=+WQǀ?lvC'ol* TzɖP}&v`8dƈچ P q;)yE$' *o^3%"h@`Dw޽մs?20A8x=K[q1)pd&uQ&=5gC-aMn|2!0C gX Org`}r-uU&PI*LǯA#u^G]f`qCU \m7 :(䋙sVyim9wuol2nx§OɎS1Xv#%~Oʞ956t3Q-ƐWf+̠3oO_#sj'P]ZZ,\T>bU&B Ƙ؊WFWQTHao*O(/@ Sk|h[^\R^tS=eG5`J J1+ =ZC s|˩z͋UJI;!oSg"ЩAgx2aWwA Dݹ#kKK $&ueRw58دzt M- CР 5oGnM e/إ6qx*uYxYefsR/dDwwRj9dts:;t~׆RIYQ007fFȉץ{x6>IY-.: A߄zѯ*Pa3So(ye+z'+ )FOjݐ ;3h`jӶ7T)˭H7FRhjTڄQP p3I@-J,P}uՃSA)Zy!.;Tw;ɷ&[7e s;jҔh*t(͖,dl1&%4vsoe)B:iNHZNk?d]ٝRAp"wQy5'}cuܛ.D_wQbfE*4XC(Ж?g4 X !IJhDkEH‘]o)OmUHGyQ: ;=5&cj^C*t$ܻ8z3nba ȩ1x{᷽i t;ʊfY?"4s[Sh^oסu i V&TԷK\tf# Wr{˯MrQgZgbu4$/??HD!5 ]]PH'z G'鞃T( , j U}N6_U{(@ 櫟 ^^]2;UM`+T̤$NF*/`R2)ڗ/Y(128@iWrըv,x\sS\2{$r+[,YnH}pVM`1 =sry"'s!Xcv3=9^X[\.XSP4k&,r.UB8R&pC*eHt ezك,4Ste(K1eHD6V1W~7t9nD Gxs9şI_dR!ݙ IWq>G@= LYTцQ[v_u\Jl~+!kIO([|G F)sGLA8@UF>DFd(}Bh?Hs ]ś/*_N$Yh7xL܏wv`&fALLDyPe0\<`(%8Ϟ%{X)b)Y.>qsKG5Viڮ@T%mN" M6$ƘB8 AKS^ٗ&8l(%ef=tzv;FWVbxg[-rcbzt|fjs6%HJ}>(V7mAy]CgceS479vT<8݋P|Gn/=Z|$UTٓp UFU,CDM9z-J~1F, Vq*. x, _%a2sTJҢ濌(HB "..ںÀe`[1^Daj9hv|4>\Bi6b%wd_ҍrh_]&$Ig%@{R2WP' NY**bB+:9*O!Nw$ 癍PoGJ"vp/]j3q w;a:z#  G7Q0FU%oE2KěM.2t 8n$)^+Bv Dl<@MT玴-ld͊vjiR@BJI 6&]J U3D{̛Kщ ,<*\XaRiE"J ,Md!kxw}O*OayL# ] R. />A IpoCQ2>m䣄y.z(ͰHgء/KXMy 1R0t'QdwSAd|<G,<84=X|[|*Nv~l( w8DŽA x4KQ)~!@ԘT_j20|OGJsٻ&fp{"j51m5R%Sd4dC 5&d=U@x[]h!)8V b0s."™DŽH+RT(󬉇y[/7f cRXcMّՏbLEE){^6kҐʍa@#JMD7f^X=y%AKA";:9ʀm0$nѦHv_iq 8O#3  gkl6ZƇ}<w߬2^JV_n|#1|ÓX݉)  \R TN;▧Kx]տž$O)b{ w% `8טּ6ZH/|H_|üa}a85<2-IsXm91)Pem#fdrlh~:/_/0;G\61PŷDX_PӼШ*CAT^O_w0 ~:?k$6i) I#\@J1͎1 x%3Uj'O~]$Uژ T1HDНnq^|i*QUnhR~? ,kPaY Tׯg5ۯf\,@ QZjm8R™y30ԕй~q`YV?եw?4TV'(aW7Q´3K:&' r2Ha-2QI1tĥ 9Mi: [AKĊB:T+~f8l۾eҥZ.V&YħI\!Ɯ{|Lu}U\{ђVY'duUCsɒzzσw]SI;aal&%5`t7mR[M>>nmNz`нC9%gCOyiV:OrC*hvQ^)e nWIQ4r@-Tb%dwǜ aAMG!m\^-Gt13^ 1a}„3Dy_ޮ˾o BR}pנcU*@ e^^}GwtpeQu~L[)ظ`m)0 bEJ.~/?B,݉)~5 E^!OS&r1m}j'Ogڒuӛ$qoGI= ՝zj&`?p`sm ۨ@h_^N쾇/:j(/+raBwZDflX9S/_/[C!JCHBD/>(2)͘ȎfKk]bcE7M8En&J1xc~6kj론-Ӻ`lOSNڴG=.^ȳ,_l!&ZD몿oB` կ[s6MɈ$V"MT6`\v8e.xzw,FJbS^"<Ƞl<OoFDȈ(iHZKM\3׈ &gI^}"Lq+y{kG$ <>\.iuU1` k ,w f!EpTjk4B#TOm4ږ"Ր 7ċY>'SHxΰjzMKҊ LPt84ZN0X{PcQhw 6c+}d|ʁpچRT&7 Ruf.JJ1YKv Iq[:p PC]_j 94Twݨe8^`b:i4fJZۍ [͜qUG#OӰ0ϊ04?\⋱\ϔ+8JGul1 t_֐t(ԗ CLsSSnP@цr8-Vyχ6V?ε|bjvT lZFT)0'DJi%U$5v2[vy'c2 x:8zΠ aUlzޙupRfp$K=;~Gš5FR5 `R\H/1D!6i5ȃ=j̖^*D(CUglfMv;zAU %㿷=H:'ʎӈ<^}tm$i7~-@d{nˆwX]4ҕ2f XXF-^ j)ʘp=B>C]=L]7d-~';_{"qhFG7szdz\C.0;)QO5kanM=7> tYt e^)F>jhdƞ 5^9bEK,%9Dp&.P]LmFKm W ;cs2/Nhjurn &O *6pgS6=5 o!ǰآ%Tq+]=,V[=ӈ\1ZF`Z% ЙnscrH:Ձlñ\mӵgC$Z|B)Ey;f.j"ibCM$Xe} r2Y.a~62+Q-.+.H--:(Heޕ>Oxmn:4Zn?yN%NӻDQ%p?WkE9hWMʙd6IcoVȾm wLvͰDmXdX4~)/;˭be }S Bkx.?j١bV"h]PL4œCBÀ5>G'CSCxU?-yػBv{ f)2-M3ޘ'06~OKvWHǟ SW:檙O=P}F{K}.2ETd5>DSqbd@t(-IZX}DSXwu[w39ܥE7`̙c!!e,*OZb2aY3Psx,E^R O: KlIo^@.bκ9!UWqit0~1XuW:ȳȔ3z.zVQlRZf]`KD>1>]wF[4UK*QG墝{VIloV}>dƛ]>sͦh -Rfw8THvҿWC7@[ѕDП,͕RLYCqW3˄)Y%ig'TE4$f&J"'Ǔ`綰tF'RC\ VvaӑښtFg>lt%h9)*;Ks?%xB.s@V#z(?L]Zܝeb2 uL-# )WG,GM?V! kzI= zCőH1ؚcB%rvIݒc{B EOA J:sdCwd7?هjkP/.C^CiU[BՃtO#ͅ"@Lvrj+ԑJ6Iv:=-c 5_27zd:]p2$50~X&K4`5Ƹ\~Ś> -vVKvC[?*UxY' ZKc n_as&%K_}>M$ ZRt@U x#caSǻÜzt>mI8%pOlkRL ՏFH^K_6i|K,CXL Ac^ H74R<'|O*p;qe+ c/G7W*6FT3s#y ͓v/p81͇ BVte.r,ѓn?rhARYXs%COwe``܌@vv:Fo]sN4>SL*/y3mT 7lS6׀+ ]i >UGeHD<쮋%WNnp7$|N>D[yhl8}!#"r{C,ϼO)i$+%ov(y艎) (Rk=;qGF!Sn11Aٌ ƟO ;>%St YZ