knot-devel-2.6.9-2.el7>t  DH`p[j/5,d@8Ҝ3l갍 8F2$o'\67#<]0@6$ѽkcJʘk3.>ƋixBj?HHEe@{WЌR wl\LM݄>ffb!*o3?weu7 T{NSClv%?48Ίl|L,umڸ6'ڗ9 NVxrA[A\θ:@ i7\Յ ޟb\9c G:瞑IS2z'ouSaSչu mi>b`BW;ouZ~4Vw]=͏}.8y&׏Pqf/ͪbB{knd^RwWQ?Uadfbbb2f3a3d4f6c88c037ef273d0ff450f92f50F[j/5,dD$Drt˚fLgA`S3혟_;"XۆEε1TR UN7t. - Q*K" ]I\.×%ѵ^lrhnrj'!vȘC!YN}VJ.wj*2&DjPC./FgIc~ҍpO9zaHڂx =@g_6D4m?=溗E3GT -Nߊ5SAnh1xZǎ>0IpHfM"\It6?9 yk8A{o(;RAllo)kMR~m6~ir,{M;p^xTE@o| (@bu"*S)|~ :stG\ fR⥊0RP)`FR>iL$ S[4>:?d   M  6MS\RR HR R 4R R PRR2RR0   (8 9 :% Gx\RHyRIzRX{@Y{X\{R]|R^ bdefltRuRvdwRxRyL Cknot-devel2.6.92.el7Development header files for the Knot DNS librariesThe package contains development header files for the Knot DNS libraries included in knot-libs package.[{Jbuildvm-ppc64-12.ppc.fedoraproject.org+Fedora ProjectFedora ProjectGPLv3Fedora ProjectSystem Environment/Daemonshttp://www.knot-dns.czlinuxppc64 cg2 z"BE ^N 3 <a[= p %d-H:&W\  sz G FC* =M  ;" )~A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{[{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.so.5.0.0libknot.so.7.0.0libzscanner.so.1.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-2.6.9-2.el7.src.rpmknot-develknot-devel(ppc-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(ppc-64)libdnssec.so.5()(64bit)libknot.so.7()(64bit)libzscanner.so.1()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.6.9-2.el73.32.6.93.0.4-14.6.0-14.0-15.2-14.11.3[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQR2.6.9-2.el72.6.9-2.el72.6.92.6.92.6.92.6.9 dnssecbinary.hcrypto.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hlist.hnsec.hrandom.hsign.htsig.hversion.hknotmodule.hlibknotattribute.hbinary.hcodes.hconsts.hcontrolcontrol.hcookiesalg-fnv64.hclient.hserver.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypeaaaa.hdnskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt-cookie.hopt.hrdname.hrrsig.hsoa.htsig.htxt.htsig-op.htsig.hversion.hyparseryparser.hypformat.hypschema.hyptrafo.hzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/dnssec//usr/include/knot//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/cookies//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/rrtype//usr/include/libknot/yparser//usr/include/zscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mcpu=power7 -mtune=power7cpioxz2ppc64-redhat-linux-gnudirectoryC source, ASCII textLaTeX document, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,[3%] b2u jӫ`(|;fLs cK0 \W6v)>c6[䘡T] @Q0Z.!;P/wOwjnx!@BlTt$6,(%r[dZGxP${3#YHp4|QA ޏacDΗx+ $ ᤃr58pB`!jMP\Hݭ]x)a/11/Q6[$KSOJ*BʲӉ ٬I\m8kI!̀JL<ݛC?}>d .%6tcS. /@s2(MƜjn̜5 o"%5q R F_=-.qhhU(RK)KAU˜~SfyT5̒]zNOޙT x|q#i#&?xcfa0z@ 'IQ]SNgIz(VavxlOĚv/OD:~FIFꄦ,>8o"SDM<P)'l h#2YPm=;!\[;^:`ylᵷb^Ԯ} aט u1"N.OO[VdyJ0@ޕz=GnAz> ߬pR!>K7IEi[x)aP?OXl_NmF "yë }fH̩XIhyIP@ۋ5lgjO!;ncHpNPJf$t°)Ton^&*{ nH"_hi:sZ58u7@F 5h l0gRA DXD4_]f^CovǾ7f5#SֱA 86Ո )[9.$emHq9|E8P 0W֖,21Iрrjobj޳hq5ȩ+J(x@ [ެ! o1‰\s?,BM>B!#hF/ZTIHO{q+ȴnߡ?(ʘ.~3o99 Oc> O^J-6T4HLZ®g~qRoUyKަNXs%HxH|Ky06,A7 6<n4SኈXbF" ?Oރ 'VC˯ɉΰ?2WM +\iߵ 1XP]0 ^Y#x`ߣmJ 2xC:+İWScE|3|*Lbm @! u 8"w#Ve*S֋ Iլ4S1A?&+e~6smUO'YDN<6Qf^WZd~]M5' Ϊ*cX&@f2$N^.[qgE=Cm C*M0g9; }l4OOc'czJ,eùRRwK1 C¿GBm hHy7jcvD?c: Q#*v 2+pOW,Q>b /x}NߜuG(F&h*@Dס~Ex%1پsuhN| N1g.4OOB8?Ny~R`hjZZ{.MLR>AK1eՄΰJQxrݥGf!L`pʄ)PG NBwck"<Fq٘[>: eS+/O99]Vo`[^Y\|vȈtkœ&%Ne(pl kGU>,&6zJPA[[œ1FCa6R+6c`&;a&CigA $XaB Q0{rdV]ɉё? Gvuҥf"Y{-sx@f~0k65V ʾOɸʴX jz<+Sۡ֍f_UV̎qw_$L?3roq웏QC{ b;H ς\+MtU,V{,ngH~ޑ748\i!!k6]n㠫3FW۠-U`"[{mCp7e?gJ}x65ZKq1UrLluXOO6.Cٕ?ּO9#a2U n܀ZDJR r3a;trx6,V9*37/u9 7CQA%kM^XBs!WgWq!L##UH]ӱE@)XA4JYR|`PBI=lww ~pzFe$ J٦WjBмwLky bGk- $wE 0)Z`zy)M$-](+:Y\zpIE SDz @\-όFR^jp '6i0,p<;c(tT.d&Ƽ1 8M?Q\C$a5ۆ՝<$<P2ȎTfXTn(es5Eؾ U Ui1⾛O f֖qW@ e(~CIЧr6`3^^+AA>rNSV#gҙ7> t̘>Ql֋Z4*k a:UQG6c#TB |P0@nOO?e_hĩE:7bis;'d-l#"q~%k#-~sfMXFim*"5Ru)se|9]N*J"!"L⹍\RBr}h3ǔن7 >)>Fa6]Iz""K{0 €0znX^ z((b&ޫ8wBЬ"ޙZǮO vvw j⽁Tłݑ`!E48]/p|~>Y&R|1s"}9P_dh_CI3oT*NKA mKQ%Bu 6a*{_keJ.G59f MGHL9 C! ApR Q64lN36p@7;Uc;^s8D^-Li!?s7V%H_N:&8SVl>f.6j<%oҫd0x`7h10)lxi 7o-0b"馡?ذgMVaaOT>^j2,98vw4W(F^7k̅@`hd=rkˣ )tt) r_]TMRN.!ЪE5^TQ|sK86ΫƲ~<{LJ= _ԸdՆg⒉' ˰[6 o1N!^'-LY5C@F ):EY}u_..y;l=(B i pmv_ʯ_$Vb|JkV ~& 9v5^Y'\Y-I3 |c'ʹ4Vr#vQ8m.Qo0]ⴼ8~Zse̢AdajiGDߜiaOΑٍOHfc9DSG e:8rmK҆8T2#B{rm̚TFPZJ6[;*~h%r^'ZĬO8-əzu+!~oԋ+n SIEƯs-(Hd_=.bl;sG>~ޏ})e4,s gZu!~YIS vcms $\P7'^ѐ{T1VI rQ'ep sl%4]x?K~ U.uX4^Leƞrn"[7DN$Z P3bWx5)VQ~?Їˉ\:y_p_,Gx80;[;r,wsn/6D)ǣY0ޠ`P/D~6%Jà3>l'I(%|ނvbb5Yi^%>K'u'SEE_* $rd;,$;,ist$3QICr&6R1} P]Okh!ZâjRHҿ-0*Wr8^wD؝-,ܠ@̿*h 1iEbF e?&NKOe1l 47ž ?/ڑyݥr5v19&K\ }8H;{Y}[Fs"P,(c*RYM|KgR'.V3]< )y0@YhIUV巪XʓbO.EzZI8dtsԽya{c{ӝ! 9G]@t|-Kۄt + 2u׹`2Xu5;ĸmJ uFn0sR|\o[!UwxKxRś¦OFHRZbF#ÚS;|41NQ]!;ChA6\'Qv^nvDl6}H\gHF/kT!1rDca 9y@*60JT2Sgƀ(S5EKޝ^# !7hFsټ-Wz]O?H2b=3f'Nzo]ZC:4dY @5wqrNi11՟Dz8C>/ 0!6Ӆ~g!&h8#V`n?0J*_2yuTldЛx€>\ˠ^,30Ҍ TXT,gSaL Mv{l:{b 9YP%q^\ x5qh) 4Mr- u&E0.W 0)-J[I9|"%wc,1\ I]9({| St9|B3 ֶj94x&з`=y?ӕ0`Vb/~= 菻W. n~O,=I-%7qRt`I^i9S&A=_B:).i QP⏨BZN0g~OM0.[ x}"\7-$LWf]cҩ"J+R.2m; RG žy⮠GDgx|%Z&pfX$J$9VY}Weѻ1e״wʅ2 \b&ruNȵPW_)[)(Pꖃ|!jc L Eaӡ9-zhk2BƘ:BSIoONsz aeݒ=gշF \HFT$(="e(D4كLޔUa| EiNY*bL V؇.dS`=.A,wD̋Ề{;1jvB.HOvB+U^"O͊Uy8&bxBs4GGBmx-ј.FrC9<%ߔ B⃏Ig8'S@fWA*s_np<pCtzf:Rjo.'@#viy$?Z#\bE\o13f3-^Aґ]B opr nC9x?q<+Y|;E$ԧ!Xc2{zf, +$'Gtj5X|jdz\_tۥcBAEqcN3.59VD_d:|xxw8T}YȯlNP bf<_s1e/D:FӈnpB{"?5+]3yuII_*TVH'#R߿/E4D8'M.]c<}cv ܮ987 p{aѮ*!S/m9%a36E[InC 9vla CM^nZEplp/ʸ<%/CD 4dqT=Qd]7wKf/ryju2S#qȠqLmk 'APBԮ\)ΑWIϋ9I&@ ۃXk.N:vNhIL5ӛ Ewt?3<h)Oq̐Q.E l7KL**v&VʲTr ܐ-ۤFfmR^dAiP VQSY=u=I:&C(ݶ{U#eNk|0MQ\ sߢ‘(/p8pyƒ^%t EP[+ fD (rJdt$uݓ[+X ̫: [8q˾l}ωDgoGL;_mVʝ[!*qjk=Q K%ބIkB%7Q4c`1ߎe9O`PC)hRMvI|󲒋ȩtCm`m1%3‘o}0"y_%\P '"TY߁W_~nae4cEv̷NȒf~1F3E?B^0( 7ԍbЭ]-p j0:BܚCIPqB~-q?HJ  6t`v0i_9zcոا1bVusCL1i.$Оgo5'1Ěaz9dn;Hj3*2܂ݜ]+i&:W ~ŭw 婀 HJ5$RYU\`JR'Wd1ɔ#Җʨ zp]cV̞TL#PVE@Ͳ*b .1 TвoJjY5d1{<֔$V]KNR] /, d!n|z}99sŗ6ךEa2(Zo#3`8F; |*j1֮gsX!0D-3<y4-i-t{7ML`nps]n Brm Rbٝp5K~x>PX]4aiGT{zĀ| myФNAWXMMTxzU@ٽ<DtQ&*ߌ~fNOc'U$470X°`ĉggʒIFZ^5&4kE*z酈|HaW*xj(w%.A/ XSYEXOVP|獍N[.l1xf6m9E$śM7R7 pt )0kN~D uͱ@m_R.7J&$ݓpص2hUap館Q+>xUP-iIdu%<iJ1SO\|q`lRY6·Xo & XqlFz1ޤ['/`㌶G 2y4Va: T׵?u UyoޥmqGI`ЩZI {LRv`hbK}.$vGuX:h""-t^Zw3hN9gz,UL2jl ؙ/ #&e@Kynx`?7e2Ye8˼٢o7CzsZaRK[:A;)͌f>E1m 2Nyd}kl|P5‘[0~ڊS`EZOO.zYDWuk^lu\_Ӑ*n3yF'51gx.]2*uUP̔#G &Ԇ=xyꙛ,!̗i7z=ixt?:<(6kו[*PTB8y6:[<|gE@3~HtXä|הAkqĀ=+`ٝޘs[<]Ҧ\yٚIYmܱ} H}tfHq#&kN:'Fu^& jEstF:3aGN@soϲa{W! pE͝@%ݸ[||16(!_pL ;k[ZDBPD=lY^dg 5n-2~j5yd=w8K`@D&Rr"C'k[S?Aٴ#[Wf?NIMɵ?O)Gl8VU}ҋ[Oԏk@s(7ϱX0qxS'd\pl+H3YA}>P05I)S0 C"R`6W(D^A6fj\$`Ph*>/J԰φWI%8@BŒis[mM)q4 C\9Ұ.|f9J7ӒNO*[A";M;(^z}ȮznȾXt5|c|(B품*{`9SWꈙ/@/,vj{l=$Kx?Bl AHE/Eq]q P TjK!VLW FbjW =9l[+NW./U|^9/ѓj'7 sAJ <{0)#QPU :Hka~fC{3b`ܯ BRdbj$L574KXkb4)@pkf<43!vQn~& wH&<@, D躨`ڏ%Zu ,cᄛrF'KO@sY7LiJ{TʁME,ڣd~S~<&TK˜o߀+:QuHP?_ߒ=`rxˋًY TFC9r uevub$3ʨFsHWtL4ڿYjqyg<)HJ-7:SOʰ$: OKQ)7Vγ= uN4y0w(@gP" [p-3o;2"DSZP3Q1pqyFxd%B貹<48[@}Rm9Yj a<雗dj} A;GB9mMT"_RP hߓ˫aP_mRc70ݩ'6՗Ȓ|p#qQf..]\L,%]v=vA)4R _ >>M%LHG_l@Q2M.rR8 R=woR(MW^U[8,4DWP;m@+T,4Q>%>8q*D&S9|-Nj )/*҄ ^AeO۷CUAk¶ϑIѧm AF]Ҟ5㙰u 3}IzJ6fMfsѰQA+&D+j$2k*qF#?taoT#]}Hvex2++ё{"Wk߆ $'y=/MkaKG^~`%UIs3R{WSpx(2R4f)CހMLC86O+xVzat}[*MDꭍlP ى^t +zPZ9EIdN)REU#UKS`6̲,?$X`H:E_}6vt)0SO4b'oB[b, 4~|!X<ш0nY{{uC)|R~QWޅ{ɘ.٣{%31ytuhgx`x$ȥ|fY>`*+<3ל򣡢1ޓ;6\dx/GoS>6+2Ϟz;'KS~N6vd!Z%4:4Hl0ЍmH{R$qg`< =c9BΓ7rWORaYR#9':U_[{8w2Bc ^X9<^٬߾D_TiDnޙٚ~H\m_ aWح8d`̹DsYAJOy381=%l( DPcB;-m?tEtqaD$جEfBppP0)dڄ+&CPUEY7 (J>PRE6Eu~2!};`zr1vDžv>j]lnv'hߞj<, |̖p3(pt N@$ }2Q}ht4aCYx9$Y`c5Be5;-R*&U2aהzb(keozl/۠9"Il8!tR= Q~q;/27~ֵSל٠zI׽nXΗUFS*1ֿa^9?Ǿ Xբ)hp: @6;b0on$nlO⬔bt?S"# gv7[ q/Nk0&A[ٔ9//W \ kl;ZN5 Hq?G`ZV$Ն"8HQo;}I J0x* g.z) *4WbQ6&b!Lah6ʬJ Dhn+8ӭ>k^O27fi:vDt/ft;uhAo+6[kK'jRp 8%]+&i&DƮ⯓x"μJeT}FSh)}fzOj#"TppH!{Ѹk43Ki9ۀWH=K5Nu+@ztKPgJF7_SB<0M ORD 3=1~;r.LB/ʞ"JSxBPC.8y\_>鱖 j Ɇ|ۃ6DӛfsOH]O'KFsx愷w3~./ S -DBDƈ5Y;ٵCt9(jj35 P\ 1S43G\f3a0C&:Dǥ0E%S?c镎2U1~VAJڔ 2Jsȯ"F.)\#9kMQkj-d2hpjB-zsp~UFp'L:dDȦFҮFHG>Ba,k$c_wz?#Ȕ;R l6HXH/j(z8wQQfU:f^]|]7 Yg2hԅ1uj3|KW𛬓ߤޅ$i !g$-: r ȘЪYұ5z+,j9cCYd1;|DK%'ddޑ/p^HE*뒪AW 0LvvH&34쓡cҠ <$EgIP $}@*2ʬʡ$5Z!w;'ֹm=ӫIipdƣe9gQSg06-* R(a C8o$l=}d+,qژp/|2Wb$tIfb Ӂ@8'IF^%R1sZz9*K/H^9/5v E::.d|ux=gF*H&qO|8tLJ+h[T{명4LXy=ݟ*}okٖCE}BEI^CN2L6}2Cv N]m<"tUųrҰEBRTDE>T$nk=lw+>^ 4ԥUntDKoa颀 `W\Yʙ)qt[N+/_d'-6&/B}-KNZO=qK.<9LYdzzQP,JoVfHLfNFRbi x JmT\ТƔad/Е} Mqm5e9 oS;hƯ+U1N:y0s#FEƤ핧YoL_eVxhD <+ô_j\6o|}m>z|0+PaBGٔK]Ϧ$L'֒Y9Fs(ڎtGP#Зw$ [{5ͯ'm_ ZW[ )֐_2H] /ގ5TVc%ylvK%XAGK g) TmMcb"Bsj@3 GOC?=r}!Y 7GͿE *zͲcz38F9ೃ^ۏ?+ON)=7g%T9LNu+>~h}xݑ6E8KnNFHea02@GZ鷤7 p5c _a4r@An+qȸnVY,<`eqHb^F;LGZ[^? lL ~8.o=D 6 PP. jٙoa$]_ t-mg@hn!HQ.eDbkļÇ>pkAggT^EN8dYou:̿[3 *0@ H$w ?&JZ"DRU4I]?(e$0#1>4QZT7~k&n:3?DuU@^P)RRB^,Mn&=P#]ơwƬ^j!#  ڍc7fJyTL9iR$DQ]]O{:b͸~W2hTeSfz]# V\^+y?4lFk;wba̮݀xFe;: vVFsN.36 wG{&MS%ϵP΍8!<-!Qou*@NrX7d<1Rqs8 9|M.`K` }{ 7 TZ'OPJx.}Gr~]V{lgQkiy؉$aᮆJ@gPxXWX[W6dxB y1H͞X,| [.= SiPiu$5C1GDK^qBuN;!iwzT!&Nh 9>  &]5/-7ga=\Gf%*nόIbK}4D3hDX[lS:jD 7ao$xD whlp`aFU67cn~(PH qR6^Hbcgx=KC2[TCOH%t'p/SE}Q)H n =: B5˪:K%>`{l$W|tfT/1RFQؾRFYsQĎCQK'a,6pZ骶?7•}qu}M^T /V UFSWb3FYN`P'ӵө?ΛJ6wg[` 2KkSc `:2/2eǥ]?7ʙ[48Cr@W!ɝcEh4.'Wie:jf/rp;ȗv*#[W~wNZ̈BABLzMUiV\&aFSw[M#3% Ɨ(.%Ws0Vg@̿i#)?#sV+O/~&QɠP JX1FJWj\ij(P1IUkZ g ds\""=q̄Q})%:P] )SoZ4ȏc*IDڀ`h)da%zx2WQT6mMV,'wT g(z])}dңzO<,! X4\\_'"#H`I$_$.x;! <Ȫ郅\AMdj$EO˔e722|ATp L1XyJrj j|Ae|qm]?rַP<Mbk?cJЋ T/qĸ3PLd0*ڎ;_Vy6*Sک5P0߭rC*=^@ /9Jk&@J&A72RXvo` t%RrSZmㆷ1#+b1kU_ZQ#l,!- WRC7L`[kB[(ɼ*̑}ۏ"tYY|BK&p`'FoݕW r+=2zdPqhYC 0N񉵉9y,!Nu@0xuM$*q D7E9rR_ [!|9nY\/O#&: ;$_ H nEߴ\gO GPK&? _hܙ'Xv#sK[`Fv$xtW;#sW]mo2V_)O/@i7<"Kr$ {m tK0hm92ɗDL~B_)Xoo@K$A]+42v#%w;@NdUC.g3y"K)4,xL/ܓiUXc5釃 c >yw29)\Z"2qR\Q\}ebϙ5RMYb)y(ǝn8vЅZ^ fɏ䈰ۙo{C qCѿe=6aSeMP>xX`t ,8n!O;G"NbFe&: cѨ*ׄv+gJCﵤQֹt}{UWa+VMTc;׮[5Ats&y}3:= >hDDؙ۬ vTYqY>='n7ކoUl,W!\,]ʲ;6zrM4䃬"h$ zNL1WGABJx+TY秢=ͻj+d{*r(Р=߄(ı px@Jw |G! hr#y<s bn/t63 {]^!ohܴΏL( .(2Xu!9:{(so̯Ǡ$Qlq=@WƋs?U9l-%iEf}A@ɧt?b"z tDlpkIã!"M 1M=HDj~Ke@ra}ˉ$׃%"CJA+2mF8f B%T_r'*IEiVl2.U߽Cϸ>H+;B_1x0N<]`B!\4"FVx2tc75Pw]cS-vJϽs͍NGB:̈́S;`*vg|] ubl)hfȘMž`|O6%NC+dzX 9Cv $I+*< >['eoM9^)\3|oreWkrl2rшp2h5FK)=*i2V61]V (ͼ]ҝJ mrt:,ȣe\a\Mu~A^FL5~!j_@Kk9w'UӸnߥym94c@hUs0 FD![ g-%N$D;'1+7$/ ouPIz`y+MH %|AoϘYA!nd'X)E- i\D$db]BHxERkiȾ_7Ŏx8k~F}6E5d M潣/ᠮj=s59[RJʗ!\1-Z?5p}f%2a]82:msH*͈4΁f?İeQI!I M'{Yol.t1{;#H3ut@5vo )\jR+{wĒ]}T)+ W'Qtp?O.ܞ6LjXo"TmŠI W~)^o:֥W_t->X"/-fm}RqpIckjl,Ur,9lg- XomWa[:tWƞЉ1IMciWuҕ8Z%Եm$gKFVMqv3q͆Rl]K7{'VT9uG~޶7E>蹷O*"yց C}ZiSXVdn&B(nD+9!śSﴞynJl oW;x$E;y|TkַÖ@;b I=$3(=\jFIc߸ OD72N?-Kz19+v^"wd5N;/#X)2cPɿsmy@ք 5ZOu:= i1WG7H#̗%H~$'H]n /lxC@it[򬺅-_3-ҽ'd,)d'?g8E @' ["%(~j%"AǠZ{ХLMڤ3_ Xsn\X5o.J0qa/\30Leq[ɖO]?tוeS8Okw?2l}oF"2O~.xa|K@sjO>Y[ [p lX5O3?cQ,tשM3JuJq{ל 7a;ҧr㙪Z=J?פ\dghH؉@|g9vbyAc*쑏Ik/Ұݐ5d?X}?f`03kE/!iÃto+ʖu %2Jl5DKx9-KVrq=-y|T" '>{,!wD؜ Ě%ۢz?Swt}7Nb+5 % hNTłx2[W3x%^FڂGW8Ǐ2B,Y U y'17cq]ԒA0S1*/ap0Οe<-Na]Q,|GJUuq6!_ dL}i9&:xX$jI? |f ^K_HX`FXy ^$־*C?JNe-Hv$!i C%<|$ӗN9@;TUw7Yϣ=TLރb#Bd֖\ =֟Z^I!AΧjA5JtP<"YO}wXC? 8٬U2qaYkG[3Q#Ʈ7bI)i:s]ǫU0,1|TCi+Cy(etoj e?9HO}[7}-͑S#m`2WHkufS2!ީpap7~{)j"\>T kH#z]b5~dlx'rv7 Pc+ᅒPVCHxT 椵߁Hk)7YbJxxC0)59l2 _+!~D5uן)H:y׈3d^0dEHc,PjϹoPzDېƥhoԦ/1_Hr:+RcŽI5)Μs $~pX@ |i9'(«I-eb0i|ܺa]zgS-אb[ܧ 䬪XhpJ,lHeNf4WRtM|iq&vFbh8HЎ:-#8P&K -3~OQB{R:)Ϧv6xtƐ^:PhT @:2G+P"5?K'A!w=W@,nX9n:\=bH.tLF#0|58Tׯ"{荴Tn%57lWV*{'Ssl0I4.uhRW'1TmcELӿqbԃ90G*ӹ-sִQd'&N=Nm-, V samy XۧA^FGL$>Esee꭬w+ x|."wCQ"nt8ydF 1+{:/jK bRdO1y[ϱ9#e i5VjV-`']N^TE Ɂ9vQ9%~{$gZ!g&\ 1T1xDΥBf]Drpy@}Ez:Q;!K2dlX*7S_lr4kfSMGKU̧=jGҕ3t1чr.s@*Zf׽2q;ojn3@2@;b_ݚOp)5#܊A▚qeܻ׌ P#m"La4jvw-?&oC&+ogqKzz1ad 4wHBRA$!GU%YtυjpTGTAK@/w\vcM 7|Mȵ?sIș;KZRD'dM,ϲ:/̮xE[<x㢌3&!Wb Qc >QYywl~"Dj@cHx9k +f/*%Wo2h-GTy77#uJpu&ePS33(9_Ǐ \pr/~X 99"q6'YG=Qc tsxj sd[l'FAa6^ojSM%Sa0Ю3ó$uR$;ZN+.Sr%e 2Ov1g Ipm sy}?@NÇo\YЯV |gʲ,wt7c^2Goϰȩ{y2 L[:~d/902pz誒ϐxA?1roBQ7x 3VWRͪ-1^wȼ8 X2Bap 7|Zr7%I  m{LBE {9ꯊ$#d !=x8RT )ʏN/7^(?WBjaA3&qꀷ8rO2o!,1 R;_`4| q.N-[vԾfLNoy%am߱5 =KAq%&5~]+HK*6=px 3N\7  >ſe֬&k͇K441ֵ@OQwx]Aꠠ(C7[dJl^HYފĈtNM D.ףג9A  <1m~pĆFFSbQK臊݉SN @|US/5J2mk@I:q#6tĨ[i ąC֘}FI෸M䌓=s_Tn<(LG\5&j,uҖԫ=LIR}XDt_lH`N0԰D9cBqO3Dx* WB%YwA-"@ۓN2h\6/b3~whL(A.k(n'! Syc!Q75j+TNqMq;`gϲ3CQ |W';V{MRſOWy[d.bDD}Xuy%ܯěgost$ 7lV^橫g< J~nks ۮyX&l~*ۧ1w|^eMeG:F.}#QÍv*9<̱\̙7\P!-fK$5| M{>_; ?}??c6Ph?<cdNXS?ptmcLj9mMl˕a}`@ m5wzrN8ĉYIt+ W;l9}4vCu55 50)ՕyVx6b*<";۸/F,Q XZwN-J>R{"dLHw'jd7Gy:R/\ntvrb}cK=ؤrM l*VQ ϗajٷ1gח{ྚ?)hSZ _EkyX`׼ M$)\4悕r:yE=Emgk_g#nUЌ\g{@KzuqI(]ѷӅs.R]Y)mnTMBLCCs! lm;y'bd&nL,)կoT!}'^h#9U\ZtАJI+9DU4:Mʎy4ܴ>/?V+<*YXDW[P>hV}0mQYyKubagMSlԈ ʜϽ1P9/ 2n+Tri5[dѶ>Ž&3~+)S[PѓE=5ԓ6nnvQZb_Aʲ;gx$ߎY۽rf#}|8|KFYOg`#79R4y؋h|e3Pl3aXNk G^\NA=O+[ZWL_KFQCd1` o"OM M ֦XmceX9#tиZ*5N?h#}HpeOg7l[h0XQsew>#C_|04. Nu\&0s{%3lJ"7)z:.ԶT#rik7pUlOFtdavyX:w2=)S{}VMա)1^0}*6 j$dVә̅Te_w# Xe%CݢѺTi@:ͳu9ԳoWkdtJ*<Csg$sAM .jv"QI;Mȯ Kv^Ncoqcu8|b !r4dڥFY"It~_6\LٸJiw;JA?0(̝;(~"`ml@4&?]н|Y+Xtqw,^&QEDǬ_멳<5 c JZBIU蟟v.Jk>EbEp$@]Uܵfqm[.Bõq)mt>:Ij@B.y97rnE="ݓ( M< hoI /xHǰCVDz$}Z> _|B߈xnH)~Ѿsq]ș6 pm7 4?5PZ"ñTTP.9pdw&X)w\*XlU,>s@d<v`_C=m檱]k< pK/i|y;q5y)!V3R#lL_GWgELt^lRPVmlNsd7 nw=CɸP/R媮;=*}@pOZY?ho6*-\ļi't?j6B%Oz]tܵϪ[,SA31t;~,lR>>7o9aAm:0Z2;f R}#u>~Y$xj‘n~JïPU 3mBqǜA#?t>3LGk ąػr"ݠBb$RF';n{"UA t֕' rr i{Sw'dGPC. '!߫U%'J- Z28n«IHʰr;G%MQf1dԾ HSBb_H?0^Zܺ˼Oh& T*B=W[:[ZJ$toƄ~"G˧_6\^^9u Jr#WZ]gw4j|8oіF(iX;LnOaw>`UvbM㌕DwruUj4糨Cʺ] T,^"͚:PeKIZh~ @}Hb \<µ*9~дR3⊗n9fƗ‡s3E 5ti˙}KD$̼#TBoAQz5v7lNaugWK]!UW==]xr(옦BTS T[췌ɰzlf{I?;I~<) ~ȸ0?J* ~T)JIS"C7z |,9vt%t3(¾Mƥ2c/Jμ2rpo^Xs^H)AmsXZ1{ ]NS. cDj+7&rlmg,}KP-m&9cV˦D0Kzx p ]D:Qy#]&ax/@8j8gWptǙTw5~;@OPSR%Pno{. N´sBm1,+g/,Y]L aLƔ2,f%" xڮ&1G-*(IӊGӭ : !X fͦk,V+ Z~,ң*BRnkXqP>xת?H7dJpUԴHհ?uPۻ=I.x돟s9W:bS!'t/Vx6m!eP):%j,W.*)|SB:f?k&;;ʤ pv4F0ΰU`[~~Rl k< Vlџ|1@'e"w'Qajy~hZ5'mtbca KA0}_XJRa)~+!x4R(ܒ(me\zY6RS\V W&Y3 tCl-m{RY(+P6琙B%\CҼlt5%%rPvcQG?S^G ?s2SC02;AVa 3x$eorZ)b] N/@Pۘs g.QQV8ʘ;]n vg4/o @(Rm#=Τ,BiW$we&*nA8V h }V!63-uN m6oM[4ऀ h nvq9Ām/,^MA`?r4'ߒ&AF俉HIț޻ns4"— {g$ r _٣ FPEVO[Y?xŽJ5P -ٸw8ғaG)pg[)ӷ]`j]WA¢ ~w8k'L(bJiTWN+ ?\ep8!ӮS1oStkdKx;qY!dEdaۙ]YCH(_9?.ެGiwm|`* ]9ɏE= y339U&%\hIMeʯ=Kd.o^㉦ " w&"Z{F4s4kR`۲q^o_گm *%~R`NUS2wbGmm u1j/ɓqiGr(sЗT`nO7 X4HjkrjМ|~F0!JF*sx.5ܟ50$dčG2ג=YpXru% CVgFWƌc{: t5Iг❱)> hMkaqa%y^*@Zp^{=1{bdir)By1 P&h_ۖY[]7Tu?Dh\⯈&5,f\zQ[$KӺɋ4 ǒULFT '{^.)g]ww \ƹ3t˙k˛ԉaH5DzIqUdqmQdOt4;Qұ f}"?>x2wѹ0 ˷Jmӽ"sHǗ~4z秗 1ûLȘqI)/U-߁Q=!$ٸlrHf֌CddlBK~Sֆ8nt'? uXjO'OƺiN;&zeC63\Cve |{]^z{m͎8e+8- ûV9f)J+5Āņd Xtؚuˆwq& ڞ°8kɼIlL+{1u(l0VӥC4ˢ4"74v{l/$b56,-l/鴌UG.HDW}azL_^uN{UTTVg.Iv_>.ђ!d WH)t8ם?+qO k%b_JnZKqXݿKw/&&\)?JӾ՟ o"㛓@̣NJny$ xpV$ 8/P {Ʃ.Q_IY$ !#ZGÎRd(>zP"jEƻOi:d-+67} !}Glu_޴)ߕL#aBex0NMKdj[ a9bCw Du[YHYaBw/]J"'*$=~'L .%EvMZ`b:| -WkϺiĺ>q4a4*qj/EML3v۞*S,-c]}Ow#KJ3 t2MPw٪O(>}EJj ѭ0ha;N ґې:\`7C2eU x>,p[Q6P_FPK44}ZCpk_yeCs0ʡdLgӛQFcf$5&$G+6#7ngɈ[Wӝ0\w:zw{sĩ6'&R`d~c=&@-kMsOۺJ0bx~CP*8bPs4QRr R~$G]~0XӓT ſ`Ă["BBυg%Kn tPژQlc$J[фcFĻi8i6@VLmIf(c*P N?H)'mw싆UX3H…BR)l?*zW-[ҌF$VN sǩ@P@v+K_v! `igT}nS͛vK=)x=k.uei %&p$JIp<3+z coG$?9SMNk0Te\V^>O1&uG@-Tj;T'VT,>J\OV6ZVy5}RJPGje]~|oUܓ]\pf^b-:]Y\E]ƃW#ĥY!f"^xxS+D 8W="Zɢ0Nݝ۷.\~,%;iJI?F6| ML֨—}a^>-5[闲vӮG":6i!A@+V /acD}?OCZ&Z=w8e~ŏӍQi4GU !޵' IkOOO55l(7&!34ܲ2JjF1몕jZČQ(ITT9V$Ы#p9aC|vE]_ܔӼ|K͂jF$qhj`D)^_(ćÊ9bZeZw(ţwJ6!K L6iuʝ>{y+(JQ_8kjx.ܹ.$a}Cڡ4luOj *%uTlҒZa+8.~d K0Z MO4F/ۣ뜑̼9R}6Frd, ǓZ G5lJfDS2!/zҚeG߰ӕgڍItѢ,z1;s܈xY>M/X(Y ю5?+qXB⋞u=ɭݱ$` ndHʹ (ĭk$?L/N/oIQث3X*Z\cŭg9$>dJk:p+;4&PvVF`Nn5Ìc$8m3s=z4:w[]O#@d(x;~}d#D NXQDn.i.CW_@!YI*VZH!?>C⟊Ca2u<=i A#~|*=\ ~"ݶ[n+r=s8\lGJq hP466qwOEGGfڛE _ Qt }`D=MCWRwzyh|/R/C4? ȴ+.Y=t'Y]*SdoHlά؄۪@w Hh*+(TuN|O1=CfE5\3t;zbQJ9(r16HMy9a"xDr؞[z_/WEYn`ߡʣvl):oxLB) b WV/\%8FIc?qƩ(#'kR<Ǯ~)Q677i{&'~ugM;Fƒ(t09}ȮbT2[PBGOOFK558/,&'<,&!<MUt!Hr[lpִa. "ܸ_PRjeArRH>KuwԮw8mAseUSӨIVuoB`}oKx](I}vř j_:g:/-esV,jp&b_P@0+XjOkL̑y F%V oQl'H̷%A#( ;/qW]>Pjr3iF|ֿ8fdF3Vo;F)v?}*TQ@+jdtR5ZkY^IaAQ l}G\Y_6Lϔ"3=&ϥ8e}M&;%IpZdߩM~=4p=yz5d)vhXOB?QlUsPme6Kf"@Iޫ‰M/fi"EJ4vL^\9HK^_A j $8o\/lXTQ h9yq.U"mxX k]{;XCNH8".&"u"E%7-)q_J^ 7\Z̅XYOjֻ7+&}Eꮌ[$"vn&tD^g 9JܣnȒAh=XGHIX\ˮem?; W3%p)OVR>z!ܰcXVyd_^̕~U6n?JxVBjTe`ԣLO|fǩ7$ɡxcNGeKF$fAB lt`xt2Q #jL8π~h[%6mAaG%Q# wL.]u"+x^ھ1$È(q"c覿3e,C4г"tD) ˚$0y ڒF uP_c4LsoܝC^ H9ٞk=(R6VȐVȉik-U g-:=D|GYms@?TM:qTA=[roY08M룿OSZ)!Ȱmq:0N]gG JDA!wKBxS>@,ANwe<6Pr>~Z*ȷu|0LvEui􄺎> w_RH\  Q[={Y@Evm8]?%6np|%jNY #h?;m:p9\1n /cqR9Kvuc1@UynUYHPKN댚\,零ps}Mj2@ev[q fpm$8 !^Aٹ@GD(p*[&@L#Z s 8H4BK׮Q,o&LqM/W/ ݚljhwPٛAGxf8_ʤi73D{2};̘DSYK5f2?'h5O=?P1|])HkgN'.upz@7Q׋ӟNB\`#y˛NUz-j rڍ!ZMi|d+A4ղcT얇/d>n vX 5g '|tjB \邧i}FeEb:>o `^uctozF1vY=g'hD ,x8ֽ`e[ؕI1@h)2*~\L, zc.A A[D6ydBɘqw_*jg^ZKP1y9]{?oҴهh:jZx auq3G4}Y~^/vPAw 3yªk8$)c9.Cz&o.p&o@8FF^um@3rhjLt@ƄOً.RN* Ty_^'EʫgOlot hh.LGtd]1Xgx.% ÑaEwfsԐEEDr6B0q-~Xr$ك{ }mwt|i4;t*Z纒g&ʟj0TOgZ뒁94BuNGU’MVJR&xoFpr{U )WH(Ojvd i6!J?gUʊH1;l)uG' ٕ$v@SvLl]sF/e:i}p#Ncmvi& H pOD,%}è^; O椐Ƅ tn  y?M f^*i0d!ד<"SDQR.İz2b2bGzI;hмf:5SOi/ K/{zX&*b3EU[/H@SSj"zb6>z>08U"w58ٝ(OV`~vg" v`cm僿Ii cOqw<%7r߀>bF7T@(rxcKWv!J4y*dV3۬dIyLLd6@ U e )qk c(G;nXEfqh$s<L9ž?JDkvHIu*F"2c˿}j]n r(:kq)b/ZvvNtZ!a8ဵZJHW#0K&7S~Ev> ҒSyduᬽI43kyC3a|fϷ9.["A#qU\Ssā`'7+i< vD|egڮQ:/Aq&k㐫psM;!-4 D>!̾Aܜ}&BN+Il&X!x^b+ǯ:OJQpӏ_UQp신 H x =)\~ida*Y(xz&dZ>'Ӟh7"[ޛ=0Iw>KJ'8h&>EbyPF rqG@NMW(02 OLv U*}ͫve$៤52Y*B 0s[{BkLe";4" vyT"V[~܆J %h!Oҝ1]nZ:.YUG(aa`KP5B楮OJ5EvQ 73QXsCl`~ K;r iO]xwJ4UU7MA^84!\>MaݑxFAPG4_ MA I?ۻfd%♅GPDxZ HW>KH+} )ߜ Պ9t=VgLި(B(4utxbqgn.'P5}4xM !UfK7= $N5(ZyDϡ݅Jƍo":R6 EMUWAbέ1@ ןe9.sV'p\ƈ.V&j Љ VjPۍE3FZ`~pêsD]fM$n#F߰ /51E+VV r: pL\ZAR&a9n#+^ +$Ŵ9 5Q0&hvw Z ^6V&?Gu~ug Ҽ:M"b ˎbMq3k5e:DR`wsˉ|6|aᶩ ,djE|XlZ5 ☌gk c5+Ġїk(n_}p,7)} Zʏ^ QG5;(_*3T2c6V`0csn4Y|.۹)Qkh79,8$ll50^o~W] Ir'%49q;cdf>6r!o`rgy8/1tC8"!2ݟ$Z cRρ7sqW#l(l #gH B뇪\0"d rEE& r*jL]Kas H#%DƛgbA|G}c9;]ULa YZ