knot-devel-3.2.8-1.el7> 6 6`d63!}|J^>j/5,dd j/5,d[hӍQuߖRsa`?0;Zv^d#8PGf}$U# 1mґdP@igsb;`sT[(=PءV]=xO]u^ls+R2\4jv~L _뒔r~g%Xb!Ƃ;x aã:4NɛjUH0H:Cn P š`bIgERE bsdX/1}_;EdYko֓R^\ `V\8 SBдAGX#c('+H}ei rZzlx>˫cJh XnxT$ pDNqzOY).F6S_g" Eπ!e0HQ$p%)4?.kLHhX`o&>yyhIұaQ %kGm3+m7,v197df95acc091c74ad9d269ab24d03ce351bbe42_3!}|J^>j/5,dd j/5,d,\U9z]KcQĢM1RxK>ڑv^2?cϬP]7l6}?g}5 O9i!{7M`5rm%ԛ\zz_m5N#AQcqc;"Aƺ:%%5K+ hX{EHdk ymͭXi{ |fY͠Uj}r&EᆢTkB⨖f}c% bIS,ޢ?T>Y=Ե8!zq8_Dg7@%O9"gu@KE)tfsUVD$.<0F fQ2FI4$Y~[ByV )Hʉx+t S |L/4h@EZ?S{yY{|P6oU˴DNT"m(lp/uz@ذ,caFe'A*D%N^/>:?d   M &2JPXWW bW W lW W WWWVpW< h  a ( 8 F9!F:.FGWH(WIWXY\$W]W^bdefltWuWvtwWx Wyh Cknot-devel3.2.81.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.dbuildvm-x86-26.iad2.fedoraproject.orgoFedora ProjectFedora ProjectGPL-3.0-or-laterFedora ProjectUnspecifiedhttps://www.knot-dns.czlinuxx86_64I %~ B#R +. ^, J 0'(69K< - tgj M }FX kr  L >#"2 9,%A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤dSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdSdRdSdSdSdSdSdS2e4254af54c053f35290cb46ed8acd81e9057446b2d71ef8b911103c6999cd42b4fbe48c632018c0e15b531c25797c3b380cb0ec35f0a597a1f1c94008220b58f676aed7ec38307f1d7282f86ec4f894dd4875c2429109cab92b9621525966da759f07a1c22a4825047d93059c1b52328484334b7f8594b3511234325224fbd8bc13139bb264cedbb87f2c05521f7485d1933527c92e8a7a212c6f8ef2464203dbf9aaff8cea91313f84aa0debeb5dec8320826f796327da580a004cc05b2a3bfc9daa3a1ec734614ff5b96508ce9194e3138c6cf36df83f5a44a57504ee0e498e9c208cedc89ed277c48b97086e1455d2534705619218a1229e97234bfb0b9ec9669c39509cf8f5605eed37c08124192b60ed878e4f8707fb7689e1c1c1eba292ea22cde12acc55b67f797071c03119cac1d0ecacb187646052b5ec9bf692e8f6cdd36b572a22aea68204f86f208c5f2a052cccfe73a5430b0dc4dbe6a9db0bb9fa74795774ffc71a964f8b7132997957fc0ff8ea37b1f21d1f49c112b28d74dbc4c85e9a17c5712cfb676499f0ce467e72b96b61e969048ec42cd43bca7e79919f3837757036c1766ffddfe13b4756a180dd56c94acd798fed6d1d35454f28c3e7b2c6cc75abeb22f94d2eb7162ccfaefa2a224dfd135c8186472796d057e9408743437a61b3b69a496ae0ec5528a03e86a5d731b91d61dcc9da0b4117f1137d3c4103bfb975bb72df32b83b0f1454b68af76d0a322e6012bdfe33e314ea56ff55880afcd6f267f2ac36d63e7d21c4c05a94671242c2b98265dc033f97ea795b7921a44e2b33ac2ef7bae994da7c194bd6fd08ccfc1226ab933a457721679ab3895ae700bc36c8bf8e84cc135c7e61013c262a8588c495818ff6beb95cedd867af608031639b271fecd0b35ab0054e67bace684a983d9c96599ea7ac28049709e7cc98c3de9f322e232b419b010057a85ae809040bfd1d4f7980d352ae3a6573aeabfe39a9aab4f6bcdbf0693805d8fbdd906c78ab0e955f39e7eea5977a041757fd765e25974c4b01ba40214d4cab0626fc506a1ad7a0e8577b3aef19a92568794f2687228985fef92941424d5d68998b941d1cc640079e10ddf99a12bfc29094502ae508d76d35c66c49a3bbbfab63062a405223724bc545d67b41de48e28debc18f8ece4ba5df6c8fb7ba9c9a01c6388227a98d272a9ff77ed4ecb84c0b0735f3bcfa495922d93011ba453068adef1477636bb5e4cb2ceafe13fb046615ea1ee38730477013bbf9c8983c5985e5e14aed6b22854ec16f781184aa6b3d097191d36950be3a402aac76dcf9f532c6dfbb60228158cd280701096ce5420acbbf966173cb85aa9ea97c10e7674a09c0c7ee88988c66f4f9b30c01100333d484a554f47b5e1b3c0d5a226d9720bb3cbf391fee27b1a70850972b4469ce0948db81b62373ec7b7f48dc28d3b26cacca029b46cfe7d4815c72d5253618e526d5f9a68f1993f6d90e0428b4585ca5be835eeceab21017198d81b3819c40046ea8ea5eb2ac45cb096b58ff9108a2fe6a99fe698f42c2a22c0b896a9cbb9cdf4b70b434245ed008a00c55b022308f1e325cdd2ccd6476828068ee18c484d9aa5d85a9d55ee1bcd8a6c512fbaab8e00b5a31d025c978aecbda25a32caccf45d637996c0f486d76c5da8c5c6407e14415a2cf13573fa7c7b42f7249d1ac676295832fa4390f7d47cb792987b55dd1101f734ff7b706063f29dedeb43e96643e1bfc9537ff1cded7df7fe32ed047aabdbfbc878e4a090daddf8cbcf961b104eef29eee38fe1e919f28aaf436f2016c2dde4533a78e136e9ea526fb1e246c51feb8cc8cf570e77e888ab0bc525b95a0e058411ab8f82c16ed18021427d2107c4a2a3b1e82423284635714ee1a820a82bc17197d1334667b6b06ef1258a93c21649c8a8b4b91b4063489f544e810bc10ffcf7834cef2549c53a9b6b81cdb937c0bd08f121aba302841a71120e7dd3194c3f3e51dd2b2db50acaa6e0adf5a10b15d83dfcc30161dcdbfe3e0ec3bcd4ecd1b35415214c84ec3728b93cde1d58ef253337548c27d48246cdfa95df787ca6e01968b1165e23e9f213a3e8092e3d55141db8a229a257e33b5b78d6e416ca902cf8a68b2a28e1e3e89a775b91a6df6110fd6a82ec30fecd5f27716fb25bd2f32491a381a61b4864685d60c8d14c3ee0e1e6b27e0aa14448e342f11453b42f4e81202318e81f820e8fce142fff6b646119148bf78d1f8f228c157bc2fb5908df7065f9a59f5618906612165603a3e48f02b05fbcd16d484dc095525cf47421ac58917ea5c09e68bacb516577967c3a2ffd12022371430ab2a2e74d275401c78b36c467a06a1e2ced136266ed33508ea1410b305442980bd50a6e6bfd1a35417aa5c74316e52f1ba5304d8a799a054e935110765fc0e926c5496ab912b4c7e7406a3aef76fd0faa559bfe6f95482d423e0777793c329621af1ff50cf8ab6545706c7d872a2f5dec3ec487482c97d53ef647c45ac407c04b6fafbaf42aafeda061486f3a0cd57ee6661cbb3472354758d8f194182e0e372d1c5b0c964f5b0e272006722d7b9cea85bc01a4a7b2691463264f07587df64413777537ea1b729964f96247d966a0e0f3eab781af02cbb125327ff29a9eef32631003298e74a56c98121799d00246d344841cb4a4e1cb60499185a8bf7068c0421e33dab3a30ae46a8ccd14e3e4e3438f3167de92fb6d2f04ee6418c41366edbec6cb1a64da831dd7dcf418ec4a546820b816a6dd26d37658b52c1c856604b27f9bcc05a01059d5fda2147bdaf3264bc8355a3e6b0490b7070a727c033d439d537ac1bc5636d5fdb8a6cc17007197f83ca431b327084bca54022011cb92d30053268cbe50c1a671b6dbcaa63b0b4fddb4ddd9c9d0e25a25bd07a36147c4055d7495e9907dc46930b276cf7b2ec1c5c2b3032312fc404f217416a54005443f8b198f4650054f59842a247de965fd8883792388e3a6cc74c05dcdda579d46b8dcbf76c7f5cb1ac8982be3a2d0c294d411b0f13f4fda39ec1c710b1f62c1554b1b137ed6fe2fc45b8e8c5b2db1641b229b0ca0ab1a2d38edbbd46f429140053551626a05dd8406bbad6fa0d977681b66cdfee499912f64f73bcaafbc264f2605386e5d94ace4b7e49879d3f304019e3942636d9e28e821d701a6abd55c64238f79f3664481659702886f117fea319b33d103523ce50b5261ce4845c5bcb1cfa3b02bbb2d81117fa0728176043319bff35a84754434f38efc6f1d241a8f3ddf56dlibdnssec.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.8-1.el7.src.rpmknot-develknot-devel(x86-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(x86-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.8-1.el73.33.2.83.0.4-14.6.0-14.0-15.2-14.11.3d}dd.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.8-1Jakub Ružička - 3.2.7-1Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.8- Update to 3.2.7- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.8-1.el73.2.8-1.el73.2.83.2.83.2.83.2.8  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,] b2u jӫ`(y/,mr 3H{ ` Scop*snO<8pŝBÐyꔭ3_ | *-|UN\!q{ٖxWik-\9$瀭EٿuDGHKCZ9TT0LŚ6dIfyl֤-6ġPLr |G<6m͋@pS<4{V1r< :Kxr\WTenugd~:z|dtru[ы +}1 lXӾ2GE?7u$e " ԓ;_#+ 6!K(3VægSF AOs ZtmsA{fs~3|;;7 #~r x{R+Y/нi :TczRr A:q`ǹ,[o涚O}y?T y(7]R8&bΏ*s X pYSZsUT^Wj_B$ZFZd~>ȅ kkb#(lz0^ MSAq4JXG騱, 8@]^sw@Sm'0˸2qxD!Y|1"@_ =SL40ű"L  &C'֢Tc`usoaќDJ J X[h B Ѻg 2k~~}Y=2ZcC3XTlZ_-Ȭ_j"ĎVڨs a&LubnPܯz"mcnyҲO2CqdP8+܅ +3̦CG$wSVq_1rzLIZ<7Sоmp <ҷwrcNZdMs5aI0A7n~v]+ #-Q<׸Ԓe{6d%uuq8na#q=;؍i55oQd!1Pѵe/X"7((dɅ'`3Sb_W#UoXֻOn>|)("zeRǯ'G pZ^&WMwL*}2TK|#iD-v+;!d-*9hc9%k&/& wAM; ܳv# U2>~k~uQ7s.:3o&S;GK{?04\f󽄩V I`7 qxGF4dn$Xb:1QecN*;6Dz Xu?h$ӈHt5,WyQi0FHHb/%zzޒW*^#n`%Y(耴_V Иe! y@g>@dS=/)r *&dIl/>A z;1Wzjq4;(2hVW @0X5èI){@LC cxDݖ~Q&X¦ƭ:gZve}[^>tcnrؿf*%##%fȅ ^vAT @ػO6MNu n 萔b,ɦI=\'튖fs& ]߉,:[8z{x$k3`PK9[wP,[556l"c13 }汔<.ʋ& F;Ű#(3%*c!j+\cvSkQCI8s}̬0p̎XRI꧘ctàbA8>Dg̅)I ?} # /mSFD.Adm;Ǡ]To"exm8-yr-R6!I&hݠɴ?n›ôq)-&O COHPDF5P@D[KK \Cp&HG! 9ó.)E* p H,eG 14-NzOfmV4Wk/pLހk~Ny%KOӎ9ebQ^ѥ&'rx%.M`: &99IJx*8#le} 0uSdo`&0&K)KTr=TݓÏ@FAIyt2!{9WV:@/cR%}es"MTL^KUݡ%(rd! 'e%%upBҚ4Ѥ}r.v'΢(Dp9ofbw~qXJыhMbaphQțRu%bt%F;8:}y'Iuዽt1)Bs*-2ԁsi7BU[(1eQw%Đ|vkQpV5wAznM|}nM+ bCm W-{a$5.Nf)y7$՟>/qn"@|_7.td~S75std,oZ>C(dZ$ORO塮QPg [EE]0erF=(`sSƣ\c?wGԻ~%+KZ%[Ô߁YHP; at23nJؽdDChvEU\~`[ Uq_XRa*kFr.}-Ȼ[*R`{O>K/PgٰԤzx?x7m/l7dlR"Xp̳3S?ӢgE: z؃-;JTxl,,,(]I@LP\W|(ta =DIQw\5UOf|~Ȅ OJDEd׃=('.6K6ƚhkɪ:io_lZ}n?hK 4]Dwt0yDԸٿɘ<{4zIuD7;/c#D1~b6i*9$vr&dO>" (=eDk4ȍ V/sbaH6D~"2QR1Iw<~at!d兪|mxؘ[f5p`_ɋ 7gXHB5 >6)(Ǟӄ0t *'C-b?/7m 'HԘ!k}BOR5t`WiGΑC).7uN V$tTӎ0]f6dN{rLX>r'[ J+Gך()JN1.(WݜUth& wF^Mp6=Yr4fd01e_e!,xexyS1iy @FDtAQ0%Eu7YIkg<*~JH Y}xfmƹ{bq#o{>!1$munsNybuHEzJN:br쳣st;)1za͗WbT%6@G0M&t o ""288 DS>Tt h/=eD&We[R_{J&غz HHU}*(?E6-, 'L<_VpxBiZ[Y[G9 LF@֨9W&Ţt&Wכ5/?џ+j%f5)qp^`8u $6{+^vaAzh(\Im#X~Z^Hh?ٜʠfw{DRü~( "f1eόk=':Pgrȯ\Ҋ{4<. pJE|vm{($Sa7"†)&e85=Gٟ2D ff=aAF+9bϭŪ|jdaĀu.t(Vj{CwC_gxHS}Vu.ACTJ#{mUTv`k9:\Dg{rӗ:Z}1`KW⎪U"==HR|:P _C,ݬ m0kڑ;#-wԍOEhHM W|VyKrA8l]w4K"8mHRivM:?#cvϸB7ƦfX"O{~˯H^{aHT׸aF1}zsOz<ґ<B#D9CNU b(w5Q /ra(m.ຈvj(?[Vlo]s@cSЪ{*H{H7|/'al)+ ׮0]͔QLBx78ީ:iqz/࿋T2\1k; R(PB?AAH=o>UvQDJ'aQ5|&|9R1 byܨU],^  ^{hLLb0n#m{V\tȠ"ܬq#m0yKU^g>˚U5g@RV2=, dUb7jYEpIA^iY2І(J)8ajlVy#!PdFT-ç??Oe eQbuX#t+* GYT\Eב nA)Sv2-/G/.٩ۤ<jmHS95ҽ& ;f3+Ƨ=l_?`:)pr Xc =m2t> A'RUid1Gr'e S C ފ8xL7sVVl o`>Zse1T^o#UK9kFR] &VEm:0v u+ rPA 9]<7{bD^?"Y_^>q kOdrB C`o#.}mXOک Ps\e 2ÏpA3ͯϙ)~':f 7ExIgƖGQt:1= ^Ꮀ5=wCZ5f:K L&1OVfLEC>$e&ExA/)EƑ]17~e[d̔dI25.֌Sړͺ3BE">ȶ: j,ifŶw{Nh@3E_"Z9<~;=v hU`h`NR7^۟9ކ/Xa~+(ZL{Wz: oUֆK%+f,L3ͼ弌T%-@TF3=W6=!IE/"r2 "1A7WdMwZlFۧ:@qftF'5q8EȮosRcf 72Fcbpun 4{Rp.K(c6 z_L't5\”!9%R*=A|s NM˯&%\!=հإƒ<28i>2R+f+ISO-$!{T̓MU+Q>ܷOm tZ6֪.r($O>F*RNA5':A7jLh0K&DuLAs_my.̸+M8̔P রrmGx%X'TĬir嵿UiiǻԮ]a%xtme/VPP$7Hفtdl5OblrC3Q1' +zT#"szIem %)|Kj =⤻9c8crDmJLHk6)Ԗo^* fxqQm{yV^;̓#Df2a)Hb1LCW0l: hID޷v>.(.#1p9[O-.u׍ ѣЩy,do5d&юs # 8* ] N9IJ0tܑLuRV Y )R[sN?7cs {#3M(dD<852C3!K, ԥh 4 sxTuiƅ!0рa䃝E΁ *"hZpETg Z}~W>sTx/gXә,YF|d1e~͋bT?*<`[fYGHJ\n` )F`JYY-BZz .10Gop^,߃DA04zO&TBjfzZڹpx2A H:uEN7e\-2Huި]!-;uimzjt`D@Iꥐ?+{TH5/l?^ɩ # mN0Fɮ⛊P{}7J3}6BFWc7V ؘTx5bls`6ң &8uKrd89E`1n5gL| FG`*TWu|[ %5M?*YRqMH nSQY8Q10irS%CŇKwF/.I63-~@S!h1xG?xm~7Φ<1{&kATb@wj2hδ ]2eib> zu>*y4Di7_6-IS~=1+k2 ơ[5&Λ/<X R!7i@K>&n;bn8AT8h4s'5V Wn:䀭ЬLލ"D[ZåBkr]e#ߢ;"ryѠHtKi3(f)9?{kxVt\ PNwy@vZPޱ,qi^#] HDↇ|[T@`ulZH1"j#sNIYHrLY4թ?6 C6h }qؙ\2Vc*`:^^(g%~L-M6Y0:&\GHe Q Y qiYg5c7|u֔NTx8ѻeNU .F*Dkn I,/bPxqT-4F p[IRlLp/Bnw/u|]ҲA&[I\ix]i7c*]v5Fk;)bSMTy! ^ TaI+Ir+./fR 24=ހ{n|d3T-YuC9z7mC6׈ D,> TJ9cq lih*n$DhʒI [hrk>sn8LGݹ9zp,MWx>Hu }}^ۏ)휔p[5?/{.)xܟ ބ+x#3b ;vfEǶ٨#ztb.RK.ZZ̤^y#z,mp%N#sx!=UTcl- \&`lrw{7NM`- /[P6$ES [ajKXGEpu\ d5Jq!~k]f(ֽ>O^L]V.nX=8eo'M1*a:I[@osE gTH)A1i cúȕ8?O8ZuSBf|,}X nv;*pI -dk|3VGϔ t DJ;WY1GXm(CLWbtGu)ob-DMEp;:t88xF3S aHΌrY7ý4 ĵ޷[Vi6EFo !.t{61HT(:h>"98 Rx tYPmhUigi<+4;Nv3 0yޚ0 (/StY2Xvj^o1 =*6XupbA*j/ZҚȖYض. 䃡ϫ K+8npEO#$2+]Qǯ/YPzT!V&F:ek -"WJ3ן@T^gO En vBCyndrt@1 cˡMfnjQ@nUiI 8t=.eswj 2526%*"(,k}( EB$./hX#Tj1ZkB}_~pGPg.cégIcq#kg.S 3-ᠡ/t=Lx\/pg}\m;˻W&5S6q|APj.Ƅ[6LwǏtʙ!ҡ2kE~LʨQIBzf9}TCR^3Tya\2w`|tQ㛚0Ăܢc+FhY&J_N `>H0Z+5_N@mw;I2bnOQIݱ5LG+k߲@`btW| :_SWůw 9N= (st3I@fXdz)zqGST3}e0I v$>k@=#ɤ`34hXYkFfޥ;z uGyUr6ș aȺ~+h*TM _}vL8lN1S,fչ5Τxb.WfCHn,;KN`NPa9e$xzJnzց.|3po-9:ȇ)Zt$+0ġɬg؎<[#DC9ZߑQbćpPҿF6hYɰAz2Dj_ZS!B Š ݓy*C-Atd1Gޏx~pN~h=hpӚ=3bv@ tJ5I51G}чFw!ǯwNL$._H31Q 漆nv,kQ )W@.+yK/*D FN3X3Թ}iYd [2ƎTo;YYmVg{9qJV_{Cۖ0^OP0RZ8۰RMoS4+Xq__r^  vh<8vEo!Y datDѪq,db,4ԆԹK/bD$vȑ{Ž8vczń /@Q G(RZxhh*9 T,UZwzWwHq$Zo`t(]V/B?5לXo۠ZN zy|5xiPHѧ&GΗ)ۨJ ?#WJ#yMc^D3aV"0E0g+N\))5[?1F,R(,݈Z rFr0k+ƸhҾH_jF0.NzŢ 7+ȇ*W9'K,-Y =9 ו;Gߗަ ?,dF0-g9 z+/x6d4ACC]]q|SnnsPVvOر]"%_Jנ)>% MPBP&{x%¨H>e֦>X?*y,*pM1G5ѵ \3$iy^ZlB^v0hJ{Sg >84} %om5&2f*Qip3-z?J/=!v8$QLS\5(7WuÉ`X=|$ . چe;]:-ˈάb廧8#c4ڃGoLu0@ntTs6 ~,8qF 5' >N:MvB hBV9Iw{ /pU$AL#F?^Zb7m$\02GXfJ?Cqs9Y7_N@=hvρ7} ~z8 h4GT'FװQ/͐߬aM-uɜDDP,z&*RtmOc\3 Dz/"8gJ45nISL+N CIeF~vT-i1U_`DkR#1`:YySv; &0 -.zptXv&r (,Mk\%CZtjwN$_#T v[FݛO218;|zf@v/ ỹ2ԬD#yDʋ>􎒬elbV7jY< %b 󘩮}vmEֈ"~U$::{%|Uhx{+29IiTSS6ÕCeGSKY@_')4`>VJ.-LRV(dIn\aS鹘[S\C*1ϤޑFͲG!t ɖڌ40:&QkX{ Dͤ?w A?e2XaEV]WI8G5>/Jdkw\[3(֣TX&CyrhQ[ga},siOEeT$HTcPB-$ 7]/cw'9>&](ɆSֳe?R#1ZRyepxUL+r$ÙjF4S}q&lP#QEM>G]\ :*gKQ[kwi/yXP1Zm\߽-.d>ыr/$1n*aG&wjNq{gu wbOv ^(yn;^Ԁ]&sNr1>FS!~Xw6g²͸UYn9 0n[u6ީfC.X`V'Dndg#"Z7h mr@f'Hppi] ZEi+bKP‹"R^hI-npS9(y^krҨXW1dx]>%Ef(NQҽ$ru>{ ؤFƈuY3)-߷^L4/iN.w΅0~A0 ~i,BsIb[jjns8izdn[|,ع0*3H3|GdCVc/oau/}VV`Mu E1`(hX-qU,{ k(_>\b't'09TVKM,|VH_Ur=ʹuӷtCFQN-`)HVtĄc* 9zޕzbm^v2ǎhU)ⴲ.7L^;9ꕄYSJ\]rzP3мHVjmR{7J6uO֯ulA߇^"!R1\‚.iqܨGh"co@p tvFGXțB{#Hf^kF%K%/ =v BkN~mUKqo&51v3t=j QgM3ܭ%ڃ}(~[Vrv]|qTDfk@X<w/edv *.6Zr%AFnb&Y/-sG,k o̳\'3{t NCERD5D2)W6uf*wtCj#pMZxxu̅LNK^ցn!ʉfLqB/ }Ju8SpJ_$ojA.9>߅Zq=!rvX'?ݞ.D1RsԲӉ_B曵Ԍȯfk⟓6 l;N#|DJ/%&N3"#hj#K1yН9[)4oM,o+E{VYT/=T}uD!YÊxh ;I(p)x04]!np}L ^Od_J 5ݬ]8oѕ0r'Е b&l|~ ƽ/q})sb=@*ZEUOg]C`:QeC Iq)ҋHBmR q<(m/H:o ;(ogJ4s#:U's FD(>VhȱiO``IWRۙs)LCђ3״tO0!]/0Kt/ c:P[j!zhS^ N`4rEvH6ԔĒOTA/8w"MBupgr8e1-%|.8q]#zV/ 0%4.m57a3v$WѶpK/DK$( b^Ut#3Fo@l4&O~iIf+*\!@|9m?.{QkB@hƒ~K7~ݸ&\FHd3]vub Sd<̖o8\\h#b!^RGm趟d# Ȥ:ޞJ s _vVDly}d֘@@RZ ?dI5 -1t \zG}8[$h<␔ٺ3vOpO7 ܴhh_!ΗVZ@sQgUmV,<{2|l[ʣXb|.F& jʳ\Ufؽ59Խ :1%'^8w&&{~j 4eKqvaeKG4=2`gpmK$ͥZP-O}5Ywzݵa[ahKzXgဝSpPikNVW=g߱ oQ:*/$hS?1 %1YI0M  |W.(Lr0d^eeFŀU?|u3ٵX)l8jDE0ug|7WN(žIe(H\6yc~ *1}ڧ5_m[*3vƯ!c1m0sh\vIa>'z*UyLj-Kf؏8dwtHϣ+\sPt '8S%'Tr%YuZᬜC 34k<^ğ.vzkUh-=lM7p^sGQ>s}> 𸷊;|SAP5;vvSU<@`#3l;ʲ׽MEȫ7vƷPG~Iцʤ+0T>c-_T,t?vSn.I.I\UډC1`DCWrH`);`Wɘ%Uq՚%H!> ~1PnoF$=̐7w\9g޳rЋ,H߬} X]D:aзx ]~w=#J)C'NqɽJbnt߽ P^xȵ6Q}aq"mQ(<8AJL #ٱF{m['8~%'MRiXu>oi}7$.W_dt{in/oOZdYK;k3 EH]Nm)ԥiE+S9v%}|*&񧆃iHƊ pyI6C s9&p.nLMd wht`nsYQzիCpQ^Ž5oF D4r:{Zf+Ի it}B"e jS'ғT&y]u4RFJ!z'cD[dqB"7PiƱy蟳ZUV7q|Oy$iFtd83dMVFD;DĪЈSFKKg?6cE6)}2V<\~ll]`O~=ƅb 1A:Ga6sdc#Wp]dM# -=b*'"iB(BtW0q݀ v]ˠg p8nXE΅Љ}c3S˸Uf/67F8UTL6mXǬ>h@@ WW ]M٣`7qݸpaɆ<0GWJGTw:e {~!.EVpkL녅`EUg8F ܼ5s&;NH c_ޮ#KG6#Ԕ"h'X>jG:Ql0( F^slZďKZ!w3UF$DAMjFyn #Y`%B,WbMiLڠxE#S-[X15!68GQRf4 NC#l 1.J759- y5tFEXNq|p@g1pEv_C/HXF꺩,%ew$W-\+5:]7rzZĽAfJ/mOz1cG*%&.` YW wfO&L ?<4J:9Xjn}`e8f3,VssTKV<8HACHU>7)͸zoP 2` #M~,+;W=Og[[nbeITe=Z]릐V!{$K-dy7HnY<`+se>bΕQO:D4#eLy,˰IdcCdY1&aa1T6IyɑA1Pz|F)Q$VlcHU[s4Mo%8ZІ&t:pW> &LFXW`p0a mv̝le8hOA@\(PX"Cቤ`tlW !@A?s,V\Ûm"]#/Kg˱}(/5& u)FK*{iA]<~eZI~}$~5JF i&c5jaN!,{~߭3j^pӔźۦKk4AR@-}ԽE&mfxD72Q"Qz,>D")G+ ÛU I0Q1N,?zZHkJܐ1L0% k}_܅1{!)QN?3D$kT d-N<]T4)Ȋ,~{42Y.[!+ ײ@hƍT=:aU6IM$N㏺3A&&hQ|©Zbt" pFڐ3[ݾ@!Nj=ۉ*800x-]Vg-)DM͖1+̦Nۛ͛@ʋlGe9qb*$Fsn6B7:%#ꐮ:@%r0's)cKR!1b\-5³JBA.i|Ӌ SwJO.vMonS2P3.jq*_{Ѐ@(SJ V_*-sldpPD̙)uuDG:-$Sh+€0Q΃OF2ԗjC rͫ%KxL/RZa`:L@,vg: ƢCNsjs_55qoKwZ :0E<:⤖P Bvi#ʌV~h@pkXnk=-_Qm񅼿aOn6-?F5m8xbP i\/]QY9A$+P:Cۚ%OZ'j:ˁ 8/J@erR6z[9$\Z`̣Ց%,$8LURfvK}A;M4FZ.~>J! t#3i%hv~^O1&]VŌ5JsW|hkHYghƝ27T{Q 1;Q'$U43K1Um~ Fo6U t}Y6H+VmY Sb߶^P*eT"&A`msV66:r}Zi*PAA4'?)g{/\j{ 8(z\w]!7QM ůLZ;ao;ˬ,c:b ZbœӓD9j&=MQ ͮ7i碟 ի <$ YKɊw0uix_ȥCR 3#I,F%5_D])GX)6[dTwK}h>7 e4,S&%a12FEa[)C^ ^%v}4A H¾4S6@x*A PBt$e7sG~bvӺ6{xr -F W`ϚjMI>|b2;2Jky> Cz3(9*,BgBA{GHYG\q ʌwđc??J\vD55bRFȿ웙Q7ԏ sInEWғFN?+CV0[C o T4ʪj7^;nq#譥d;+nRM<.lEh1r"ZC rHy 42;j3ƧCięal@y8v WG]$]Wo[;P銕L (U~}>#CyWV,~o'2`ϖ㫠E%u҃)E;@^aVmC/557B)W<3gYXU1Qk Y=l|qlI/\-]íptZ}lf!5mC (9 cj@ Y plW+NKz/Dej(doYX7$hoM `K<ݸJjuplK]7tymڙILH e($T pR{eS>`^#O,C K{i}[-["+uSpnsE ;S&=G D#E.\[ϴ,k]jl0'R5!nbByaTjy=ŕ9lub3u!- 12ulz̍]C/sG&$^B~ڠ;aH"/uL, p÷ Jݐd*>f)ܭS05,8Bݐl>oG_^L\d+oO#Џ+u;V6 š78PK?$"\>?^Ҷ Xhhj Ɯ2ҁ5$W1/"lnq"oԨbO(5չDtlͭB|V'z(]_8wdU_u`6 N6 +kIOώei#;osi8NSbz9ۀ[ep|iɐȤ3XBM%{˖ pxJ7%}BDoH5YFrZlJǹ-ޱ}Bך2kş}v\7l֪bMtq'jVjI$XT Mk\m,={!}+ACsבL[{0  #kNk-T *)`cIz%pyDĒޝWOb_@yOK{Pa- Th=>t?G8hH?PJIhb,{ Y_Lpps J.W8mPQԈʹ +EP 1Ÿl.]Lh]8彇#$4:)W:_7yZ8 3G:>?o=ZzUcրgM#vIzn r#(܇J4DXЍYoR?Is0OSBE`D0k)E295skate.gT=pkB`#VAgeCkUnzGLBȝym2'1nC1aŔp|NvQ8af[;a}vvo$0N%ta}{XD1xCzx6q{x%q`ֺ0 ]7ue'ţSS ~YNU*hdE?Y:T{HruStHx+ks s>Zh 94( -t0_Yf%LApVɇ_y"HӋك*"N7fJEXŖǛx6HfzXg/CB[؜XB*"u5n%hČm L7 -a̋HTja[w{PM'N>),+pwf¾h!1kıf;mck_RǞ;Jzԡ=+e%P߇ċ~Le$%ߕenNhzVVOK*Z^֑] 9DиJh/J32#vlOBT/F(U[ fPT#*͆ }4Ynmb6)MAd&q^nSҒDNُE^,XPʀԗ8wa,։D̟]YD9.RŵEO]n7?1KXϽJU@購sLѰEK [cl5uu}&a5uLbsp lwV_}jr tjR&Z1U]Ȫh U&*)]vȲp2IƙH S@n>3} 5)%WD|V=U\C,ؗLI9>rqs xU1pJgu|:ndP-72iJ!LwN⺭G^wqu#Ξx `GU_2́6.S`z;+zY!tT'hg!ncakXz׶E׷!k6~dBIkizIa (NjM$i=],giCiZطD8y"7d qd%үm’YMu*" )[WRRwP+y±8v+|Xpcs sw )6|KS '=<@`#O4 R# p.r?3](#pz$a],mJx :uٳ {aYL{^!^3unȼrRd92> ͼwϕ)1֙7qTD |}@߳1ETxCřagm 腟ZT)S%ye3 ^JL/AHm2~A>HmO"?ʥ=yl~b3#-0H[¿[,;0ƍt 5{QŎ@)4@BN%rr64Q5NqD'}cTrjlGwː[T3/"XAc%y?< RJbN(=tMs{UvlzI".͏$)68lB> m5oTFzzPt bhKy%6n(02k˜9iuaxoi=$BvSpr'Z<[o4"5O_!P9*'+<'(k&B~" QkǦk;cYfT.۲Ҟ5}>!$|%`?MC\rNpZTJ`՟ D&k޻x 3EA U&(#G1z" !z63 }snĚ׻N~qC&YvYoSr'&e?>2 ѮAHWn@če8+EMemēLjYIDsah ,TO@d'Nv1Cp5'E}V{8 cPGP-[^-ɕu= p,932헅y߃ʅhiGH*~0,b+H/AC= MmEٕ"AD=7}1چ:εE<}(xw=LO| 偝mA7/F,/5Ձ%VՀ &)GSDBH+-x+oރ3"^QGkܞ!\ShHڢkW*HlûL(l4@!_#ɏ3k*< PAӭ] aX8( b1I* \؇Ulj(JƐ ]7{N,_?A7/ săɞH;)|?F9/<3,|TYz8j`t!¬UR˲+f$qݪu $_BҤh/or J{b3lޗ_8b,8J(/6ˮ8̧GD?GU.ъۆd~EbkQ:Y?kB9l-{ĮքC9*zP[Raߜ@V@UjDoM>WzzBضUw-,ٿ1"J^=[cm B(8a%*RIu1˄9jtLa:=ѡuuE+1*TUT.cVo$iO.Ӗk2cNڅ\?xt^=ե=&Qg3 f[oĤXfr8HD %U 1K| Y\HďD]4Rw6n{e@&w9 5P =Q*(=(Q@ #t@w`Cnm.@i5rGl)ӥD05&V;/x?m$i '<@cЭaco"i2v݆bZ+@m[r~ƚ Lx_Vs?'ġ`̢+%MW%4ެI:H H!hqՖ:kFd }D :egf}$p_'#xI ۦI;kډ5+𸿾[)6oi|}Hkgfφz5i犇ɔ8G0փt+k* w.;R4=z1؝hrf=PitXFQ6=%`@E)[Yc}#=M'եexI#H ]4Hp Q ; I \ ƭMIh!y j.w#@D4U[\˨G/~Lg5D h;i4w7]VWBKЁ'Z76pV`/\OnoX${8UçRQ<mlO(jlsdEt(njm[v=ҥo1Af7wjNwqTU(]`Ol"Ԧy ︌#Z-`,e3 殲T+S)&Sֶx;ݶw#6bZaN豚ɰ,HX? N;Ј?ZfFőaw%﨣e$y~H"}X.C4%uƪe&;,'E'AwN^rsūg IR\z]:O5[FܩX l4X ;vGwٻ =\t~k9_[hClȾXUc%!#R6%0}QQvhQ k,x 1ceEm`sC׿rTHݶmo3Ngjx@Gr)Re WQ9ܼ' HoWbNLlf3L40 <9Ps^X$v_=)ѨZN,jyZ˥A\yml/+\Zu R?>"_fKx?/([KJnuH.A1X ?P8PܺoD _Gq;RqDs%JҎ]u_vf_4jQEFs ?o!U⊓ρLW{ADVEI6u)9Fe-=K%j*r|iQ>t;:mh\JLaӱB j/G;zv8#p{RYFy׵E/OAZj1$fZ $&FSaYx֓y.awV[ sM%SG:m*uQS+g Q<3m6| /Ir(C]w +{ /n.]ESd+wƐ$s<"$eidȻ͒w0n{+AGQ;GW%\p'Bk2TW~BZ9@5l=mKr=A|(w} ZabEX2p S/ gdṼ,(`| bNBSEYS6}iMXrZÉ&I@]H7\zU&G}A_ηLC/7çjWUl%mUV`xXuoda&rWMs #1E:Dtd[@S#;;6J0:W?,B!]1M?"@UE@$k))Ll ~yc^ ]9`kw#ij%j)I([%$eOs_=EgP~Ѐ1. QZ?ˁ[~ 2TOh}=QY@JA ;[U T YTڕ7P-B$8X # fLq#כPN׳LZ؝z(Z2).Ww8aY ip<ݻR,Q>¿D"ykA彴h>/C+tiE%L~ˁ=tb aᾟ,Mz&fx]ɽ.6[-=ԠsNS!eb)ن¸#W IY[Z}GM~j?Cؙ-- [^x?b{zSdD>oI&NuȻly3~&z&Ꙧb} [Xks+M27l'wS<*uQ$ /]_NQ稹rȒX`sq&p᭤kK"R9Yx 9T?eVtI1f*pPP!,BR^5@J! kAڳg0,=2Ef+T[ћ'6wc vY_^o 04yKAF ϵ#bG3GvŜ\z|#9Pĸjf1.H{$X|7fg!^7bh?cCк15$i]g @/]|Y*[H<6DH:^$z&'oV,SUR#&TUϦ;]w0Gߐ+MU.<<Y_x, ~PtԠGr c 8m riF fGhT64[,S ~J@E_s'pze˜~g6gI5T4yL+LSEpo.71iRHU|5sqک?m/DeAk:o / T-GTY/S6YMGN 3|2ESzW)8?T62%1k|gMs,U L0kP#yH_Ls5KlKßf Iq_'pG< Ѐ ̾W5>I}oK`0EsFӵPn݂OHvÅQ?&,pTqI k]& W]&* DB9NLk.@vyD"NH_C?P|fҰ|u#IMg\4S#Jݤ.#T&$ .޵:$krgqwTԥth^\R(7_Cgnȥ(ZϏ}? !ĥԤp PHg5ʻE:89d=X|#} u(&KᎼuKRckduc$X yb3IO?IQVnCX۾ x{8EIR#Ϩn[ kf'޼{iwhu3MB`Bϥ;_|^' vבS}0-M%xi78/6 "I;WHE_ubn2X|`z!1[؊l^ɧtbrH:tYf^A%3( fsvT']^T)zLa+{KFeMK]+Sz~OaYd0(}O L|0m?@4D='fU< ]QZ Ei9VM ▿$@TT ߯lCpuC-/hT -] GygxJ8}i6+.gKw[/-XFFzԼM%5Ӛ^ &hA k/@y(/6:Q|܍32[n"N@^"9Nʉv丷ɥ"qX>&+tme+DjN:ly?T M!)aălSWSy&a.{tx(O%.=0)[ZTGh?hV :7^QdZ%#6P0ɤPBjRj 7f,O`$k2x/yn5Z>|>?P~_ J>bU3Uo%Rrv`OhK p^ NC!$ʘWU 8˂V9픭d֟Uk ;#hs, O2#>g_$_J5ԓP$Gȧ13Rx iqOO>唶˿SNB9k7W+߇PSXAx7 :Bq=EruvtZ az& RE=9ԏ@$Uf!75^fϿ* }pG&f`D0;bIV~dJUTN1Y%CR}O#^>=tcٹHϛP3K,:Nu'0~^roj7R/0i\ ۆhh9}oS䉗) 3iYl/OwƙSe9k^ZA"B i1M9eȗoW^%4a60{0'T/-[V~h6EMsZ"%ׇ5^ïO˧;;31geG)VƇ9)e,W\,wV# ?˘mX0 JZY6/772ΆBiϴނ*ow`#X[l7H3U82CAE{#/s]ˎ,>c-QO;ZX}\Ecx˘lfk'$^Lmڹ Y.DhxyJ0'-xN#&7j׌.UESXkqv)"^iMK]K˲io"8:y{@˸Xo[05/ۦý ^ TC#Z)4R#H8=@0,,q<n;Bh.M+CuvbcQ+B(2M&f"W:*NF2IbH{ WH[QMK|q'! Fɛ |;MD]fxh(Gvdxq~wgS3\? +WcYNV0]O4}hR0}mKJ0΋I"EQdu/&T [kl}mJ\7Xv{5_-{Dcii@Z%dܿ" _T¨:4]d/ !VPS<&,bԅ`ӥr9c&] cNewO=R.Q+DRP/N{V.8ƞGv]ԣ1iZ"M#/F&?TF}Y]~Y4!xI'>Zi.X…~ FO2n{J_ި+ &yᲡճS[Sǽu0šnͼؐ@;󒝋'Q }PQge;A% 8 u$e-pBXن署 ql(ȤcޞN*Eelrg)C$k\D)H^ : g) 3I} s-w39'ٞ\޷SlQ@l:gCLٵ‚fqd@<\4KcUljM_K9.Ow^kjW%!DD\ y_ }䋠ΐ9 |f.qe ^hи쀅Lo`hܽ7 -~,'es}Qԧ2 L32XC9q2ש_VHYS!-b, f_3E5lUHcBDi.qOsƧ7`&%Zx(Oe2qp,dh&M"s0` Zk6qDkKځ hv NUrɽR벆{pWm_!Kf1F8 CxEp-,uh05Vi̠HU5yNbYvchaZZw!'*(uD㴩!BloFqIYŨNl(mf (p1)1p;;SOFF](" +[ozb=Ƥz5꽑1/s9ﾸ>7;9GMKg;IL|hcdXXH_xHWѴz#PLj s㉹x X0fLp \1XL~Ga8Qox$+d:鹛1YV1EK7yz^g2x}sUƂ[+.0F N$?٣C -N ZHAA w1' Uݼ^5چ+p]p~%D9 MGߊ [|LVxQ|Ƅ=zm&^4oLKt `ő-m!rZ"v:ǔ\×sr:CIRJøLJ n4A ƻ$ UC**VJ;ag|2~<I&sq.2riv`gRub'AU&oeR܈-pō vwJw% QBfΩ_^9GЅ8 ~,S*@N()T+T$m}ƻ@gw>"xhgQ6H2z9º#1V VUs\΃6_1',ct x &~ݩq, %2`p?⺾@INgn#k /1m93T<=$7]\l@ZH+^abQl] r f?6dRY Vx9p|וX@/glބ%hIqمɼ1g$d*3i{sPYQ6D(:${ed|I v>7a\_ԗt %T3$7UBha[l,0vؑ٢ePyoӴxih_&DY9r Y'wN yk}:rps NL zvvx_p-(]Ob"11&"h"#JVEd>OjPx?ⲄY-rF0Ji_>_L//vS:MpcOh7+ H{?uckTI9WPД01 &t8ܮC1V8%=zvγtC,$zYY OXkJv[8>e.[[t;- #RLeG|N6}DW4װaD&~{pb[Y? xIŖl7|IB L鶷0+(Fp+>Ҧ}nA>]fxTgٜq쓮wBeλOulwyu>efҚB x(A= 57\y{f8Vw#H2⯺TA/̴P\+nESQOueaPO힓݌WqEB'`28eaCc(^ZA6_rRlA3h?ݔg:X܅-x.{c(us(rIUrbKƷV 0ZttTo~֝"AOY8d@]xq*k<ʬ4?D ]ꘪ< 57ΛA86N+:WґtBVb⩀@O)'HOJ%9w±1r+7w )ZOp\BsMd$ _R)nbv3,,7) \Z@>9wK R!11hwLod#*tPcX5?RX+ 8ʳ S%`vdMfB\qXm,KE\EMHC^昋 mB!` ;ND͕bR[gY\O{4¿tBk3kJ"nKICgkE/Hˑ>hK"(mq$蓩E#p-Kj`\!A n"MvkǬ^SA"F&,#-* eh&;.* b@W"RܿyWSLxrCW$d[N~%+Lmۛm=[DR+OsnFfls )9\S[Yk4aہ8C{4|`8>8.543Q,ȦDTabVѤAJI-yQt<}V_AT:d4v{*ƞͶ/i318DN'"'߲mPDߍ*y=K iO1w"Ȳ*XKsD2e®k*N/TZ H}_o` #0e_ryXIxEܰAC 4be%[x%~Cȼeޥ55EÝߺ˄kPU7*9`έ88x=:y\a|sw: c˒w lH; ysBoA$VM|ΊϠS=^C8%N kөOΧ} NW(3`!VN,igjr 2W.{(6X+9ZELqF*統3cԹ@[8F4[ֳuvѪ*9'aćѪYMMD}_ni6ךB@q6f u݇`a%魱5t p?İ,B/Bx@E>\8E߉VL+lA{] ?+?u %B ILH4la"1XWR :8ETh h - :Rk{̗sQ٤iTYMw&a~+:*Aw-RxL4&#mnB܇(&؏YF ݽ(&XWQ~o W7`.BcS7:A陇`3AI}EH"Ȏ#8$± p?/HDF!+r>A[LHoiAmhq6 *7ep`>Sf3xBc2(hzHCE hHFRuh~~Kv 09U.f^12":\y|iaIm+ֈDinCyJ;Z_b67i- oLyJ;.1jքcgw@Wm8WGK -.o%NRq^@BJ9Ҵ9O{rH ztnŁ`ȗDwaf)R{XGg]BPtx3y(hig3h<u2|`PF n  |HA&(OQAe!D,I2Wuy7R%(8ke Dya*i* ީXx ,VYߌ9H8)E,㘕~t QH [a5-`DzbZ}i%Gs \Uݬ&Y3te+ Z^C Do^Fv%Fwr>5uoLf}$cɒ =g7UQ ݚcSSU4nj{ЩTGwҭ{e?cQĦ'1]Z")t'ڍ]r3<TXn^e(]@Ue/^+k:mM:BaLa+Qݱo}@݅܀u M7|U(GʫvG q$ )/7al[f Ibؘܖw5QoKiZ}[DZZB4ư,i1Y~o/Ob85[DTmpgצjtص UD/9K$A`,*՗'~iUguo)MT 9#2ul[ 1GAV[r &fo)Oé8%+ UH$ ԷMk;'Cdƕ}*GqCa#xw.‘QjNğH,\ Kڈ]OZڌzR"1p!ՍyG?ʿS+ ݏZ<*߶%NVɒ3骀뉬JQ(3*IcM`wq-g+!ti"'cn8J+j}0UB /w6pb.?͏F/o{, wMGLĩi?۱*A3:y.%"P@]a/٩s@J!q'a6+oL~0R_Aapw0꘵)h`FZ! _lY(&yN{!6b)}U c yn>BC 'Y+jP_\9u-(uaj`;/6 4tQe;!q%_W{Ddi[<}Y}iTudI)WʍŮk.W㛥OS'W/+jA>.qDWY$s{6Ah:/B%i0E4>nGSe:=+eU O6f)7dw=gA\Lp8ipK%"pd=*:3qj ˗b'XE:"T;Ūh11,zV:"aWU[AYlv iT<@Mʷ:1Kni踭~*KRxIkJڻ|dC+LZw+'tYwªQ*'$lQ: F Bb4ir{Y2޳{fte=ƺ<(1^vKہvJtHNDk@02S5!Yu;h9Rsҵ3P{_FY^NBͺ.:UA\(8FYA2dIzr- 6I`|%AQRw}4=]KM)QU_ [NHzK 5hq`19s7;ajmw öq6;kb~zjL\܇M%05cxt}T~{ tO\2GˇJ-*K/1sTvJXuog-׀Fp'>_P$g.#ԵsȹmwHv/F:05 swm2ᐿ̣uۼnJK oY5Nnyt!Mg(Km)Dl$ߴ|4/7AqCúd\;sA{`E8 .%喝17-x$.1>0.q~'Uq#z̳"ɯB^BQαœ>G Q!m\Y)LE:]m :ԥ,3:i9yEmQȓ0]:$ 䆞(N總BJ\N<ĺڌRw@9ͦ"MrV ĸ6X}nӢY鹹Hǯ{.}{R(/(ޠu #s8G%6HLfק1dDtX/>FqQIF0t t5mO. f+C#)ݺw^S4F6i;2z';q!RFukFX:vF1J .4.!v7~B0RZ@`9?LT 1/U0^qAdm<*b1nR(7Co>edL&쒸um8!9/ K huP;\CTX4ѹzfݠ2^q߿ Ȓ!KQUzd&=(' sB{ٰ\sLL&id: n{Sv;%ʚ7msOKah |x0f{VGa9Vƍe>5Q:YUTTyK1 O7@nĜKN`uȰZ_.]7Fc,c.t*[R7"Y1h 3,hDz'fL1RC0ݭd˸L]Xp%%) Ȼ4ke<3؆gf28'9 w{YrvtOh);G%ظ$ +/6.֝04 ЍVU+K2/icxZ:$2b0~E` ǃNKbx'Sݮ&81˴|ߕ]پB~;^W <"btY,5gk??^Bi1wZAn=Kܚ7u0YJ R$&\a}"b̛so 6u>)Ĕ \:Wj@%mNc EqU폌Uy09A5RG,_1Ŭ !Iὔf>!pbC1&Df(>tAӎ67W͔bQh(,X œ<߃DPE?+5U~Ti:*MYJ9lmXV9#G[7ïB{J+GCfۊlqI ")" lJGM[H Oq%wvm|Er]fs'`r:Q`N Zep^Lr -[hvC](nBYhiց6S]IeY2< yC} ׫Q Ds,MC(֑Rd:ݩjrDrn Ŏɨ{5MԱFqmLG#\c9By0Fr#"\ܕ{PSߕ3x$x m͕N-"X-at!VLP#iJOtk߇^ۈvc\`+0a֑WTiR2m+EkYOuyW% Sat40PBOe) kE g#/%ejLjk4߳4;kc| g_$l.Gp|#vr] %T_Wd!;m'hXGJ8gRFHK=h ک zve龼<(!t~So{kJ>KjnF//F.TVfޖG>:U P|,L>.14PD6/UR*.ʼn9TX`nPR_'9VIgdS!Xmx O9oSb\%&6pP5RҨҏnƌ*Ild|B T&hy S ]/9a|jǿ&p<# oJ$ ]ؖ-UQ*kNkR=>).ƞM#yX<͵'!_9|ONW!(K+n`FSh4t1Fe{|c{7[PTT0oωghM%] wEm "Bp#-Y$T*k !թb ?=D`.+|+Kec| hQ_i-{jfbX~He}6&fw8lp &[Q^Zx`?Hq&,Ԓ$҇- >ed1+,jƉ/oXLi3fN]Dhd[o匳@T _ΫaEn c7M` L6ᒪ Hqːח<0"o)6m!WNhfʏݮE_VȢ&>_Xƫ9j\&ZjZpwB[`^>~}Zn΢t `"TCP  ~w:v{o~WhuK# ("fC34ŊG}IPYP{AVf+ jfۗG8-z YZ