knot-devel-3.2.12-1.el7> 6 6`d63!}|J^>j/5,de.~ j/5,d6Կ9ٿl#@=TBS4eI54J겜 VʁP- w.I>WOEn/nyCũt:|54]MQsv ـbFņ 2hՋ2޽;\b12ehba,u<puՊb)uX'N^R@kE7c!TZ=0Zǀ#0 -_KRw9ҦE){`yI9(&^S[kڣC SⳀWrȕ P~YbϸpnMH>ŭ11j~@s[:BEM^  =6Gax蔞̅W&H=bÁEf=^ɯs9xpT&3ehS_ 0OH1l55U~36,:J4ͥ^A*تqzK}sR9)vOP2<j/5,de.~ j/5,d7߲g3k \V'*7-3r&>;:Nx6 w-?" f#"2 9,'A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e e 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.so.9.0.0libknot.so.13.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.2.12-1.el7.src.rpmknot-develknot-devel(ppc-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@@@@ @    /usr/bin/pkg-configknot-libs(ppc-64)libdnssec.so.9()(64bit)libknot.so.13()(64bit)libzscanner.so.4()(64bit)pkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.2.12-1.el73.33.2.123.0.4-14.6.0-14.0-15.2-14.11.3ee?eRd\@d}dd.@cۥcc{h@ca @c*cobjbDF@b@aՈ@a@an@a9@aj@a @a@`t`9@`f@`c`@_H@_@_E@_m_Z@_O@^˳@^U@^^F]}@]ʞ]@]]2@]'$[ @[H@[E@ZnZZZZ}@Zz@Ze@ZNYYYXƉXX@XAXJX-W#WhWWV&@VUUUUa@UG_@T@T@Jakub Ružička - 3.2.12-1Jakub Ružička - 3.2.11-1Jakub Ružička - 3.2.10-1Jakub Ružička - 3.2.9-1Jakub Ružička - 3.2.8-1Jakub Ružička - 3.2.7-1Jakub Ružička - 3.2.6-1Jakub Ružička - 3.2.5-1Jakub Ružička - 3.2.4-1Jakub Ružička - 3.2.3-1Jakub Ružička - 3.2.2-1Jakub Ružička - 3.2.1-1Jakub Ružička - 3.2.0-1Jakub Ružička - 3.1.8-1Jakub Ružička - 3.1.7-1Jakub Ružička - 3.1.6-1Jakub Ružička - 3.1.5-1Jakub Ružička - 3.1.4-1Jakub Ružička - 3.1.3-1Jakub Ružička - 3.1.2-1Jakub Ružička - 3.1.1-1Jakub Ružička 3.1.0-2Jakub Ružička - 3.1.0-1Jakub Ružička - 3.0.8-1Jakub Ružička - 3.0.7-1Jakub Ružička - 3.0.6-1Jakub Ružička 3.0.5-1Jakub Ružička - 3.0.4-1Jakub Ružička - 3.0.3-1Jakub Ružička - 3.0.2-1Jakub Ružička - 3.0.1-1Jakub Ružička 3.0.0-2Jakub Ružička 3.0.0-1Jakub Ružička 2.9.6-1Tomas Krizek - 2.9.5-1Tomas Krizek - 2.9.4-1Tomas Krizek - 2.9.3-1Tomas Krizek - 2.9.2-1Tomas Krizek - 2.9.1-1Tomas Krizek - 2.8.4-1Tomas Krizek - 2.8.3-1Tomas Krizek - 2.8.2-1Tomas Krizek - 2.6.9-1Fedora Release Engineering - 2.6.8-2Tomas Krizek - 2.6.8-1Tomas Krizek - 2.6.7-1Tomas Krizek - 2.6.6-1Iryna Shcherbina - 2.6.5-2Tomas Krizek - 2.6.5-1Igor Gnatenko - 2.6.4-3Fedora Release Engineering - 2.6.4-2Tomas Krizek - 2.6.4-1Petr Špaček - 2.6.1-1Petr Spacek - 2.5.3-1Petr Spacek - 2.5.3-2Petr Spacek - 2.5.3-1Petr Spacek - 2.4.1-2Petr Spacek - 2.4.1-1Fedora Release Engineering - 2.4.0-2Petr Spacek - 2.4.0-1Jan Vcelak - 2.3.3-1Jan Vcelak - 2.3.2-1Jan Vcelak - 2.3.0-3Jan Vcelak - 2.3.0-2Jan Vcelak - 2.3.0-1Jan Vcelak - 1.6.8-1Jan Vcelak 1.6.7-1Jan Vcelak 1.6.6-1Jan Vcelak 1.6.5-1Jan Vcelak 1.6.4-1Fedora Release Engineering - 1.99.1-4Kalev Lember - 1.99.1-3Jan Vcelak 1.99.1-2Jan Vcelak 1.99.1-1- Update to 3.2.12- Update to 3.2.11- Update to 3.2.10- Update to 3.2.9- Update to 3.2.8- Update to 3.2.7- Update to 3.2.6- Update to 3.2.5- Update to 3.2.4 - Use devtoolset-12-gcc on EPEL 7- Update to 3.2.3- Update to 3.2.2- Update to 3.2.1 - Remove patches included upstream - Update Conflicts and move to knot-libs- Update to 3.2.0 - Patch: fix tests on 32-bit platforms - Patch: revert problematic hardening of service file - Patch: revert config improvement to support EL 7 - New knot-dnssecutils subpackage - Debian compat (knot-utils vs knot-dnsutils) - Remove bundled(jquery) version as it differes between distros- Update to 3.1.8- Update to 3.1.7- Update to 3.1.6 - Use _sharedstatedir for home- Update to 3.1.5- Update to 3.1.4- Update to 3.1.3- Update to 3.1.2- Update to 3.1.1 - Enable XDP on ARM and improve XDP config macros - Remove patch included upstream- Introduce a patch to fix tests on ppc64le - Use autosetup macro to apply patches- Update to 3.1.0 - Add missing BuildRequires including new libmnl for kxdpgun - Temporarily disable XDP on ARM until issues are resolved- Update to 3.0.8 - Print failed tests during check- Update to 3.0.7- Update to 3.0.6- Update to 3.0.5 - Properly escape BASE_VERSION macro - Include module dirs in main package- Update to 3.0.4 - Move dnstap module to subpackage - Move geoip module to subpackage - Remove redundant VERSION macro- Update to 3.0.3- Update to 3.0.2- Update to 3.0.1 - Sync packaging from upstream- Rebuild- New major upstream release 3.0.0 - Sync packaging from upstream- Update to 2.9.6- new upstream release 2.9.5- new upstream release 2.9.4- new upstream release 2.9.3- new upstream release 2.9.2- New upstream release 2.9.1 - add EPEL8 compatibility - fix unsafe PGP keyring permissions- new upstream release 2.8.4- new upstream release 2.8.3- rebase to latest upstream version 2.8.2Knot DNS 2.6.9 (2018-08-14) =========================== Improvements: ------------- - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation Bugfixes: --------- - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_RebuildKnot DNS 2.6.8 (2018-07-10) =========================== Features: --------- - New 'import-pkcs11' command in keymgr Improvements: ------------- - Unixtime serial policy mimics Bind – increment if lower #593 Bugfixes: --------- - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy #589Knot DNS 2.6.7 (2018-05-17) =========================== Features: --------- - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) Improvements: ------------- - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination Bugfixes: --------- - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback modeKnot DNS 2.6.6 (2018-04-11) =========================== Features: --------- - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation Improvements: ------------- - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination Bugfixes: --------- - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)- New upstream release 2.6.5 Knot DNS 2.6.5 (2018-02-12) =========================== Features: --------- - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set Improvements: ------------- - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates Bugfixes: --------- - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations - Failed to generate documentation on OpenBSD- Escape macros in %changelog- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild- Added PGP signature verification - Added integration test - New upstream release 2.6.4 Knot DNS 2.6.4 (2018-01-02) =========================== Features: --------- - Module synthrecord allows multiple 'network' specification - New CSK handling support in keymgr Improvements: ------------- - Allowed configuration for infinite zsk lifetime - Increased performance and security of the module synthrecord - Signing changeset is stored into journal even if 'zonefile-load' is whole Bugfixes: --------- - Unintentional zone re-sign during reload if empty NSEC3 salt - Inconsistent zone names in journald structured logs - Malformed outgoing transfer for big zone with TSIG - Some minor DNSSEC-related issues Knot DNS 2.6.3 (2017-11-24) =========================== Bugfixes: --------- - Wrong detection of signing scheme rollover Knot DNS 2.6.2 (2017-11-23) =========================== Features: --------- - CSK algorithm rollover and (KSK, ZSK) <-> CSK rollover support Improvements: ------------- - Allowed explicit configuration for infinite ksk lifetime - Proper error messages instead of unclear error codes in server log - Better support for old compilers Bugfixes: --------- - Unexpected reply for DS query with an owner below a delegation point - Old dependencies in the pkg-config file- New upstream release 2.6.1 Knot DNS 2.6.1 (2017-11-02) =========================== Features: --------- - NSEC3 Opt-Out support in the DNSSEC signing - New CDS/CDNSKEY publish configuration option Improvements: ------------- - Simplified DNSSEC log message with DNSKEY details - +tls-hostname in kdig implies +tls-ca if neither +tls-ca nor +tls-pin is given - New documentation sections for DNSSEC key rollovers and shared keys - Keymgr no longer prints useless algorithm number for generated key - Kdig prints unknown RCODE in a numeric format - Better support for LLVM libFuzzer Bugfixes: --------- - Faulty DNAME semantic check if present in the zone apex and NSEC3 is used - Immediate zone flush not scheduled during the zone load event - Server crashes upon dynamic zone addition if a query module is loaded - Kdig fails to connect over TLS due to SNI is set to server IP address - Possible out-of-bounds memory access at the end of the input - TCP Fast Open enabled by default in kdig breaks TLS connection Knot DNS 2.6.0 (2017-09-29) =========================== Features: --------- - On-slave (inline) signing support - Automatic DNSSEC key algorithm rollover - Ed25519 algorithm support in DNSSEC (requires GnuTLS 3.6.0) - New 'journal-content' and 'zonefile-load' configuration options - keymgr tries to run as user/group set in the configuration - Public-only DNSSEC key import into KASP DB via keymgr - NSEC3 resalt and parent DS query events are persistent in timer DB - New processing state for a response suppression within a query module - Enabled server side TCP Fast Open if supported - TCP Fast Open support in kdig Improvements: ------------- - Better record owner compression if related to the previous rdata dname - NSEC(3) chain is no longer recomputed whole on every update - Remove inconsistent and unnecessary quoting in log files - Avoiding of overlapping key rollovers at a time - More DNSSSEC-related semantic checks - Extended timestamp format in keymgr Bugfixes: --------- - Incorrect journal free space computation causing inefficient space handling - Interface-automatic broken on Linux in the presence of asymmetric routing Knot DNS 2.5.5 (2017-09-29) =========================== Improvements: ------------- - Constant time memory comparison in the TSIG processing - Proper use of the ctype functions - Generated RRSIG records have inception time 90 minutes in the past Bugfixes: --------- - Incorrect online signature for NSEC in the case of a CNAME record - Incorrect timestamps in dnstap records - EDNS Subnet Client validation rejects valid payloads - Module configuration semantic checks are not executed - Kzonecheck segfaults with unusual inputs Knot DNS 2.5.4 (2017-08-31) =========================== Improvements: ------------- - New minimum and maximum refresh interval config options (Thanks to Manabu Sonoda) - New warning when unforced flush with disabled zone file synchronization - New 'dnskey' keymgr command - Linking with libatomic on architectures that require it (Thanks to Pierre-Olivier Mercier) - Removed 'OK' from listing keymgr command outputs - Extended journal and keymgr documentation and logging Bugfixes: --------- - Incorrect handling of specific corner-cases with zone-in-journal - The 'share' keymgr command doesn't work - Server crashes if configured with query-size and reply-size statistics options - Malformed big integer configuration values on some 32-bit platforms - Keymgr uses local time when parsing date inputs - Memory leak in kdig upon IXFR query- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble).- disable dnstap on RHEL (depedencies are missing)- new upstream release WARNING: Automatic upgrade from versions 1.y.z is no longer possible. To migrate, upgrade your packages gradually or use contacts listed on https://www.knot-dns.cz/support/ (if you are in trouble). Knot DNS 2.5.3 (2017-07-14) =========================== Features: --------- - CSK rollover support for Single-Type Signing Scheme Improvements: ------------- - Allowed binding to non-local adresses for TCP (Thanks to Julian Brost!) - New documentation section for manual DNSSEC key algorithm rollover - Initial KSK also generated in the submission state - The 'ds' keymgr command with no parameter uses all KSK keys - New debug mode in kjournalprint - Updated keymgr documentation Bugfixes: --------- - Sometimes missing RRSIG by KSK in submission state. - Minor DNSSEC-related issues Knot DNS 2.5.2 (2017-06-23) =========================== Security: --------- - CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!) Improvements: ------------- - Extended debug logging for TSIG errors - Better error message for unknown module section in the configuration - Module documentation compilation no longer depends on module configuration - Extended policy section configuration semantic checks - Improved python version compatibility in pykeymgr - Extended migration section in the documentation - Improved DNSSEC event timing on 32-bit systems - New KSK rollover start log info message - NULL qtype support in kdig Bugfixes: --------- - Failed to process included configuration - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL - Corner case journal fixes (huge changesets, OpenWRT operation) - Confusing event timestamps in knotc zone-status output - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY - CDS/CDNSKEY RRSIG not updated Knot DNS 2.5.1 (2017-06-07) =========================== Bugfixes: --------- - pykeymgr no longer crash on empty json files in the KASP DB directory - pykeymgr no longer imports keys in the "removed" state - Imported keys in the "removed" state no longer makes knotd to crash - Including an empty configuration directory no longer makes knotd to crash - pykeymgr is distributed and installed to the distribution tarball Knot DNS 2.5.0 (2017-06-05) =========================== Features: --------- - KASP database switched from JSON files to LMDB database - KSK rollover support using CDNSKEY and CDS in the automatic DNSSEC signing - Dynamic module loading support with proper module API - Journal can store full zone contents (not only differences) - Zone freeze/thaw support - Updated knotc zone-status output with optional column filters - New '[no]crypto' option in kdig - New keymgr implementation reflecting KASP database changes - New pykeymgr for JSON-based KASP database migration - Removed obsolete knot1to2 utility Improvements: ------------- - Added libidn2 support to kdig (with libidn fallback) - Maximum timer database switched from configure to the server configuration Knot DNS 2.4.4 (2017-06-05) =========================== Improvements: ------------- - Improved error handling in kjournalprint Bugfixes: --------- - Zone flush not replanned upon unsuccessful flush - Journal inconsistency after deleting deleted zone - Zone events not rescheduled upon server reload (Thanks to Mark Warren) - Unreliable LMDB mapsize detection in kjournalprint - Some minor issues found by AddressSanitizer Knot DNS 2.4.3 (2017-04-11) =========================== Improvements: ------------- - New 'journal-db-mode' optimization configuration option - The default TSIG algorithm for utilities input is HMAC-SHA256 - Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor) - Added some more semantic checks on the knotc configuration operations Bugfixes: --------- - Missing 'zone' keyword in the YAML output - Missing trailing dot in the keymgr DS owner output - Journal logs 'invalid parameter' in several cases - Some minor journal-related problems Knot DNS 2.4.2 (2017-03-23) =========================== Features: --------- - Zscanner can store record comments placed on the same line - Knotc status extension with version, configure, and workers parameters Improvements: ------------- - Significant incoming XFR speed-up in the case of many zones Bugfixes: --------- - Double OPT RR insertion when a global module returns KNOT_STATE_FAIL - User-driven zscanner parsing logic inconsistency - Lower serial at master doesn't trigger any errors - Queries with too long DNAME substitution do not return YXDOMAIN response - Incorrect elapsed time in the DDNS log - Failed to process forwarded DDNS request with TSIG- configuration checking was fixed to be compatible with Knot 2.4.x- new upstream release 2.4.1 replaces old 1.6.x series which is not supported - configuration should be upgraded automatically using knot1to2 tool - make sure you reviewed the new configuration in /etc/knot directory!- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- new upstream release: + fix: False positive semantic-check warning about invalid bitmap in NSEC + fix: Unnecessary SOA queries upon notify with up to date serial + fix: Timers for expired zones are reset on reload + fix: Zone doesn't expire when the server is down + fix: Failed to handle keys with duplicate keytags + fix: Per zone module and global module insconsistency + fix: Obsolete online signing module configuration + fix: Malformed output from kjournalprint + fix: Redundant SO_REUSEPORT activation on the TCP socket + fix: Failed to use higher number of background workers + improvement: Lower memory consumption with qp-trie + improvement: Zone events and zone timers improvements + improvement: Print all zone names in the FQDN format + improvement: Simplified query module interface + improvement: Shared TCP connection between SOA query and transfer + improvement: Response Rate Limiting as a module with statistics support + improvement: Key filters in keymgr + features: New unified LMDB-based zone journal + features: Server statistics support + features: New statistics module for traffic measuring + features: Automatic deletion of retired DNSSEC keys + features: New control logging category- new upstream release: + fix: double free when failed to apply zone journal + fix: zone bootstrap retry interval not preserved upon zone reload + fix: DNSSEC related records not flushed if not signed + fix: false semantic checks warning about incorrect type in NSEC bitmap + fix: memory leak in kzonecheck + improvement: all zone names are fully-qualified in log + features: new kjournalprint utility- new upstream release: + fix: missing glue in some responses + fix: knsupdate prompt printing on non-terminal + fix: configuration policy item names in documentation + fix: segfault on OS X Sierra + fix: incorrect %s expansion for the root zone + fix: refresh not existing slave zone after restart + fix: immediate zone refresh upon restart if refresh already scheduled + fix: early zone transfer after restart if transfer already scheduled + fix: not ignoring empty non-terminal parents during delegation lookup + fix: CD bit clearing in responses + fix: compilation error on GNU/kFreeBSD + fix: server crash after double zone-commit if journal error + improvement: significant speed-up of conf-commit and conf-diff operations + improvement: new EDNS Client Subnet API + improvement: better semantic-checks error messages + improvement: speed-up of knotc if control operation and known socket + improvement: zone purge operation purges also zone timers + feature: print TLS certificate hierarchy in kdig verbose mode + feature: new +subnet alias for +client + feature: new mod-whoami and mod-noudp modules + feature: new zone-purge control command + feature: new log-queries and log-responses options for mod-dnstap + feature: simple modules don't require empty configuration section + feature: new zone journal path configuration option + feature: new timeout configuration option for module dnsproxy- fix post-installation scriptlet (RHBZ #1370939)- endian independent DNS cookies (fixes build on ppc64 and s390x)- new upstream release: + fix: No wildcard expansion below empty non-terminal for NSEC signed zone + fix: Don't ignore non-existing records to be removed in IXFR + fix: Fix kdig IXFR response processing if the transfer content is empty + fix: Avoid multiple loads of the same PKCS #11 module + improvement: Refactored semantic checks and better error messages + improvement: Set TC flag in delegation only if mandatory glue doesn't fit the response + improvement: Separate EDNS(0) payload size configuration for IPv4 and IPv6 + feature: Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- new upstream release: + fix: Transfer of a huge rrset goes into an infinite loop + fix: Huge response over TCP contains useless TC bit instead of SERVFAIL + fix: Failed to build utilities with disabled daemon + fix: Memory leaks during keys removal + fix: Rough TSIG packet reservation causes early truncation + fix: Minor out-of-bounds string termination write in rrset dump + fix: Server crash during stop if failed to open timers DB + fix: Failed to compile on OS X older than Sierra + fix: Poor minimum UDP-max-size configuration check + fix: Failed to receive one-record-per-message IXFR-style AXFR + fix: Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message + improvement: Speed-up of rdata addition into a huge rrset + improvement: Introduce check of minumum timeout for next refresh + improvement: Dnsproxy module can forward all queries without local resolving- new upstream release: + improvement: Log change of the zone serial number after IXFR transfer + improvement: Document operational impact of various RRL settings + improvement: Add support for rate-limit-slip zero + improvement: Add 'timer-db' configuration option- new upstream release: + security fix: out-of-bound read in packet parser for malformed NAPTR record + fix: systemd startup notifications- new upstream release: + fix: don't load expired zones on reload and startup + fix: remove race condition in scheduling causing delaying of events + fix: NSEC proof construction in zones with many delegations + fix: TC flag setting in RRL slipped answers + fix: disable domain name compression for root label + fix: check if executed under systemd before using journald log sink + feature: write persistent timers on server shutdown for better performance + feature: support time unit specification for 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options + feature: add 'request-edns-config' config option- new upstream release: + fix: lost NOTIFY message if received during zone transfer + fix: kdig, record correct dnstap SocketProtocol when retrying over TCP + fix: kdig, hide TSIG section with +noall + fix: do not set AA flag for AXFR/IXFR queries + feature: new configuration format in YAML, binary store im LMDB + feature: DNSSEC, separate library, switch to GnuTLS, new utilities + feature: DNSSEC, basic KASP support (generate initial keys, ZSK rollover) + feature: zone parser, split long TXT/SPF strings into multiple strings + feature: kdig, add generic dump style option (+generic) + feature: try all master servers on failure in multi-master environment + feature: improved remotes and ACLs (multiple addresses, multiple keys) + feature: basic support for zone file patterns (%s to substitute zone name) + improvement: do not write class for SOA record (unified with other RR types) + improvement: do not write master server address into the zone file + documentation: manual pages also in HTML and PDF format- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Rebuilt for nettle soname bump- fix BuildRequires for systemd integration- new upstream pre-release version: + DNSSEC: switch from OpenSSL to GnuTLS + DNSSEC: initial support for KASP - split package into subpackages - add documentation building - restart daemon on updated  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVW3.2.12-1.el73.2.12-1.el73.2.123.2.123.2.123.2.12  knotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.hsvcb.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdpxdp.htcp_iobuf.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/libdnssec//usr/include/libknot//usr/include/libknot/control//usr/include/libknot/db//usr/include/libknot/packet//usr/include/libknot/probe//usr/include/libknot/rrtype//usr/include/libknot/xdp//usr/include/libknot/yparser//usr/include/libzscanner//usr/lib64//usr/lib64/pkgconfig/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mcpu=power8 -mtune=power8cpioxz2ppc64le-redhat-linux-gnudirectoryC source, ASCII textASCII textpkgconfig file RRRPRPRRPRRPRhttps://bugz.fedoraproject.org/knot?`7zXZ !#,'] b2u jӫ`(y/H{xEP˟S$/StPJ[pB2A2uSu֤GcT-j8?]3<Yn(]αX]j9L*ʧylVe6s1 o@ZF\cڀET- BNBnPQϴ\ lB<Z%#:WK v`oa4  m_kpw* s NR?cwCbz=8c$Oʅ)NLI' ȟyWVr% m?VS7!.#wo ~ I 75LJ5JCvM:Ƭ.VYo/EC?f]8%5`oJW!Nc0`iBlwN |/d%_r)eRcB%9Gpb6lM#W$WvyI6k1j._wgAm͂~̍o&o?TʶnH]ɰ{7NWɴDB_ +|=>yneJ,ו9RΔn@Q=gG 'yEkIN6I%M̂jwU T2/UY#"KJ*ʗ6ᆧbCm~KW:F )6Ѽܢ3>gnn!^O_pU?N_&9hQ]#kEx߶-(.i8H, x6Ei&% /='I$'GvվxбKC5%R*2yf \vɁM%qʓ#]uSkdň/nQ?(jm?[ 8$Ԝk6 .F.r盌״g \kϟOO2ft~A}7TWkYOq7_ewj_?{ 1G&53Y6Nf%)<[px2- Wt [,bpnF~=CξpK؆,h0zg۹~L(YЅ^Vy"{7" P2a,6V?$>s}-HGu.xUA{룶[8E]hBeH۸@F _yN؏9+~)H|rV cN4j[wSs={7#7lਈEGw;!Q1 8q }jlr'sBk=u6gMN1+:kp!Oۓ?R==ȭn?4<4 6D⥉ڶOuÑ$s.N5>,0Lt,H,T<3NmWXOmSmrrw> KkDP FTݞ4G aoJ{u{T,6GFrQxi4 J-q$U5'CͰxIU+413OQ.vDNrLMPH"{7\deّXG&ʷsU.5),k6]$g0P<=빦_p7p&=Zn{6餠L=9J=5"Eq#prs`9r%1sB:t  } >N͹;\' ih4/kczˎ1<;D!ۂX5Tn{m3FUIzz3CngD|NJz}7%!PT=Q^|Rlի.dCžvξ=m̭+%"AexXs 7_nZ 4b#F_-c[쀕=sTaP8@6sg֕&3BD^+H@8 '?a}vy `fA:]BUЧUr)8H㸘 ghqM,0/ڴ^ s2*8aTŅ9~aǮM"o , Jb4TXaԅ'1N _ox{ { %*P.3c#t|Kscfz$hmmﭞ0w$ 20} =.Vd&smNFsrK)y@p7%>2;YcFAeLZ D)S$j2XƜ9J{U-.o D/k>sJ| *pd&ߑԩߨ" -@K?4}eW*t( Tyv`'RqT9HFKpW6*%8HHP"xosBE !E|Tds5ܫܩz/ h0ܯď71a0I&'c!} Fɥi4!lI#E^yN靗T7KUߜD4ToN-v3M*mRj RGk|/:޳>Fܴ63#xϋҩ9mi' d&fhK,^F)'2&9,H/I E\?$"ssAiŦ4egsmf EEFϟk}xИo ڪeF ͨg 6?X9uyJMR5e9sU I? Y3G5uK3U`}w) P3g2!kߜJb |%ύ! Gm"{eU 3k$I_]M h!~K0} ͷ3{Կ<ӵdfEiXRp$/ϮGOQ^Tofbo<ꝧϱݙPv}@|KZ\6b]CT]ܺ8B #u[bވ):~y`}/yQyOsmz*=܍>8t¼swVҒXfP31 ܞx f4j>7x&U ++FlmՊ75?|Cc@mIпPGzĨx2h29 H5?o[pYw4b  H;z"H [Xn`F6\1MIMT݅XGR5Ԛ1E7׫b{!m,ѩ`@cAdU9zMثfFF7[JڹeH.(SQI]3ڔ+8V@"UU5m| glU*cj]w&WtP3.CDIrA4dv5IAr}\z~ P;(ĸ/S3Ouն6^r 4ȼHF<>qOپ1 wξ>w" KU{BNyxlc_LkX2FA^Db3I*e W!w.EGMq_>XEEbޙL+׶"hQM #2ƶFi<6%|1`W-m \44u W-2jw܋K#Rc.r2gL8`# vQd ,T8!40zF+Ȝ" =ļ'9ѵwb@+c8ak(%9DIy,BuTz2\XqžeD* )CF 9L@/**#7~1 ֱW.,„]_MJh[(%:t*4:M;kpGer)SIgwLt[{uDTH: H W^m؈t 8R'rӀ'ۧ#6>ʯm!=W"ɭ2|Qtzb;WOu~Q: % 9Q'i s)oI\;|sptJdn>ՄS x(Pax8/PWЭq?έkF´zJpR#jM9h̯:K85H 7 r?zCs`6H&c"uBg o l(H5J!R _~G*xLܥӍtX%ۊ|A$jQ^G?9tKa/OX)7#ǓiޭbuSۢޡz~C}x+?*vDž)PvN=ɪt7 1ڞgxwt|lP!"a! tH2p!{fsgHll?Y>?gd(Mf{N !UEB}0ױ13/RI+ Ķ.Jee+[ +.4kVEd(;,.G m)d_6ƷpH"/ K#[.1Qu}qܞR󲶮ﱏQXC.Ƈë<} k[> 1wtݏ:P}ۻ2(IYiQ{:juO)2Y0nȬ$\%I9)7Գc)3 q͕F}ѽJr1QuZ@9xTND-!I5|c ֭:vA A"1/_!~MaMPTלvN(@VX?Ĺ\@s:(WdN2х`AvWCGjM<B-ݽg$w; l%K>) {m0y ZM嗒l\pܣڦAxQi]c-~$ӌ&](q:5-8cq?Y !@w:+~~ tP?f;B&3υ6ēK$vl++c38^q]dk:2+f>.1S :{9d/[瀝bf3MbOr;bV>!P"!2pXRVp+8m6+9E\X@ smuQ4m+ s~C@ f. :Wc—ꁏ0^)KO, ] rl0INGl"M)7ꉄb΃X

vOm c+0BuJL{̠]6SpE Y(l)"wފjnjS =Jz2E6IzAMu[U3ixX.؆ZDFu[k;8M>hf- V*'AHwjcˋ }Y$8yK1JgKns_%=;lP9)e v²`XRuI] R*zQ26s y i`tgs&c^/"ߙwo[~_-A #RsGӴ ZZ6 }eQNNj8ڈ)`E>&}XzaF[4gڸ]_cl| 0*Tj7uޟO 6#пt _`Dz2c E:Fnζh9^&FY=M_^3J{OSAr=H@&{1W)Jңc8Ҫ)?||mܬ`^RG(ArCCULeKT29#ω'dg4YvYǗ]P-[rt݋wUsÃyjOLn#e(ꥦO?Xbuɛ]{Ã$1Sv 1ZX|R_Fq]9Ruˊ)t} ׫Y]@ ~]<@/~yDp2Z3ca~At|&n C#vЫ[OzkkB-3X XRZ}L  .vvٴ_d! />EpTIg њ]P){GࣈƎb?"4A]ʼnЇ~Y8tCIFp""!ZUz>\\"6dxhRTp [, b Kރr̗GE&)Diϔ"' ʣC<4;1ұ2,LW24IE#$]2þu2q1́&FLf>^Egw< Q*Vz;ڞy@hEǚS+XLcy-O̜_^r:lS6D!3Y1-ͪ: :\îP)b<4@]C_L$z,5fݺ~= hAq 2rΨrFgT@@jI!:N!Nbq ZYP+zl?`l/OrU`8yQchf+RC3:@0uA#h*XRz#M)}JI[{nzb†$R?9ovehתH vtz1p![({?7P9 ꪙMJi[2-c#7j墷xI\߶nn]xlr%!1HҢti`8@v%yXCWnǩP3jF0^jpte2c_' TenPOTD qſ 4" ʭ @o0 2.ez=:Isdv4'G,Q)ZpV',ACO{1wm_%Z,i0G@NhĒ:s$$RO4L\+c!zuwK>2OӿbVozRZQlaTi=\{9m|@YYk!hqE欈:@5Ⳛh]ύw(A|l8-c.i~┏QI-aO@maOG/l7>wܨݪftGINDz#ڝqU>D-QݾJk}7XaIl9N&cxku Z0%4MFFߠlg}\FCN] }:K B9( 5,mk:oy]~1x,qq5gIP>U5\VhDۏ?h_؋Ej/]AG&K/vk1WX.XW! ﱌk(Ng8`9%ǰl;JWr@tϪoSMz~u >0vLF͉kd|gi0 prmEeu;N+dldjwW3e )96hbRٿL+>Yq:X`<+Uz 4_OfNtTHɔ=m6ay` !0|rrshiv`լw"뵎\9D.ŚYT"r([ڎ=Иy2dg C.-.r"i9mzRebR(CQd.eْj?eΩb;/oWahw<Ċ'ڢoaD.dz} O~RM1T YݓEmEvg_Rf!N(f1Și zi(DCF3 (R7N m`A.w/o/ų1զ@P@.n(`N!ti$KGz  T,pL4d0t Δ*O}SOvҤ#-P'~KIK& )am 'l H9ZH"{;fC2@A`ȃu` \ZZ>LU(+مStN2!waq?n`ڑa9D}Lo((  |xsBY yt^o/үp}EǀE5U氕'4 2L`Lˑ(S)[6()CU@_JiU;Fo8GZ/>עŹW_4 ȍh]K Rr9U/EȅW*zp ]4x!xA#tL>+#%|$;Yr޺^{d"V@(<.̓ Ee*i^"2lB>4]$Uɣn!3*;ZN(0L׫]s Shy76XWFi.ECܩ8sa=k 3"S@ózqwMS͢]xAՑz$X _3OFŗӫFyԤ=Tb]Xu]u2B؞IFa:m?;2u֖&JGε/m j S}~CV +9v=Eʰ5VJ/6"j1”lͯISkq;6@8ϥ_Rb{sCbdwT/"Ɯ"f.BcK::TKo 42dfNiz+5JtlRW"zmsD="/[Ä`PwTj͖p2rO/zJ@;9x)xZLAѸ?XeNno7%۬ }T@3=9O?+MSђ'1Oc)y)ӻEU$/T7zvm4.U9gk U[ſSTy\,3 f ux].]aI}k\0vE 1M cIP&=]4M@ Q/pB\;L ;RLZbA!O;%t bgZ)fm7p2&;q^`FpHkO=w}bE@*0 ;K[&l篒i7UbjKzL-SY3:Tk^QIQ1}FPyX c-^D9Y:&["`yK몭BHDꯎI@^ҹx2[''}`(x !G Qp?(b+$oY/÷uԭfXuE](0.ИĥlM+\%=M<Kq^zJp=_ncX~[Lpډ:.'Qڪ.ܺ{?G -ߨ tPF1]&K:7KwER'̷J `JCl3I΀E$)_^E3Y bjӍ^~dd : !UG0.] U4@ Q ~MϥUT*r%ȾG1jL% "w`;;niVFKJtZϘ.d&`npI *|Uc^ғ>h5C+_.luJAo>/^wu~q EB_b5EgCXH/\x|5@Y [JE;:9*~5 ެ Zڽż(EM\ϊ^E5 V}M*2̚ ga®(Vp5Ԡ yi:KSAt(09bhDN0Ϣg48F]S 68ٹE0v?zRGRHÔ߂]8hB"'WZ*KTS},cBW8RnX WurRTwWяE24;@xSJxZ:vzIoIN n]DA< 68k*sBAuO߆y/g#_TMdj7HvѕFL bz}'RG_`7tn UVCLEȁprR޼;е~B@Xܘ*{Bu=ꇣ5j>fM' ,`;FIyG u̇817*ZC[eKu1jy(u0ոF%ey8Eb_5g]PM7 SW TBXѰL.*Cdw8ZM%kԿMwy( O;GS!$7h2#~MB-[ 2ex?ڟVt1.B[f!.c^sE*.ƘkBBCQU⑉QLtțl3ʹ^Tq4z9,>40 yjO Y/Lhy'Q.1|_Ưsʮ('(u?6߬,LKIw"m{FS;6u+*uq*q[~z,<_b!v8s4[e:OY{o5!t5pr6/cXcs҃x@xhQxpn9"Ag`rr:x#vH3D=-Z-'10)Pf^39Y FN'Qh'w=l*TKԧTxXn4e:tnᓝ  en*69J90D֘le F' dDx^Ñ_ӂfK}{Fa|ŀx/2g?V#R$2yLk?nG\'Hze?x> F渻!hH&.d&8;k^Od5H |],D@Fp|*# {1 %FW/Na_T]U_M1[|k:f6M ]? UN2 ,A =%PV8`isD >xK ՞"j|Dt&'BDV(2)e(Bn+B(FA&=|b6mnQ-(sB:?bVz5>4ȥ"k>{3$/28v8[>%27Ws(+!BH wȗ:""ߙ>x{vTTJ { IߍuxwEV1?; wBFhsw?XY?:  ?⹐ެU<{LRȨN.f+ ,em2~!|;a 0kevz1'$zͤ[kDh{BtzAb ؤ{/H^W~GCj<}ݳe/WN!FiȄ KjSASۣG1*:z2v6bap %~uy٘D}xW%c e"ҵF&^eN7ݪR$gSЇ25avj;$aAq}AamIXh~> eALޣ{O 멲U=A;/y"u"8vUAV+\9-fn6XO< kMVE={vuNjT)SX^<`#Zh!3Še !$zu9Tf[/z~(jʦv1g\s0(pR,fm(W4LkHGzə RDU1"\5{o"#?Gxj'UHm֌|6Vi®zV%V,Z񋜇W/Ջ)>ﵔ^'@bpK9ٚb Hl5<tʽd 3%"XJݽqM͐Qc 2Ah7;Ҭnr%d m*4DӽN-ٶA>AlF{j>y{vn{!GKuv 񈐎8 P[.΅@Kٺ1L/׏"2LNf{ʵD$/6Oۿls7@Yn3 m%!dq; --F,j߅ THH47pڶ>l{xO&Kcg⢪r 6 /{E(i  ٝ=ABZF3Q 5ۀYl Ҿ&mi:aw+W?už+ɇ('M sC η4V3/89t헛"I>I?` Ɓ4Xy(9-/F}ڬJ5LZ~ٹGoPh2Qޥpa Xo;LqёLO|.t׉^<$ $G_c gk)`۝aݱqYw^v=e5C"\TZZ XlcYRJӌ'T''ؖ'n+'&uvudeBp6%dk}éUt,ú!tO nn`VR!cjhHI C mZH09gؾ/伌Lp{Su%$@ 'ҤX4YTҷ k,)I $y8rWa'/|D?C|PˋO-$8shG%gag cPWP2[T ӥݻG}St I:} @V޼Uzu4М'\8AEO^S, yALFO|ģL(&;k@G., msF!x>3}ŭ_N&8fbC1= 'r䬀BR~ER:CːֺZP$G[vkcC#<8A^/ay8]7")&%qi#ӭ)BXԷU&qH!c0ӂ1wMp2?=S^F+ΐ2ncFJX q#c\_ )5Y:d5 9Z b@c/ZY#u"@vč?xLͧɰGj$Uvpde-U9 ]2bt3 a:JswRoV0-Lg?Բ9v=:w)y`V#SV*pwhtSd/魎^ABLHkq߱'٥U5J"jr :՜n m kX-rtWJ+=y۽~rJEa o!kXQhbF X0UU vYIE m4Z`T6r#TAؐ_K[&h}p92c,?yZvFE؅,H*:ΘF+I /PXry@`S[?Ugq?[$:XTa KTiZ~<Ŀ7AfBo5ٚa A׍N:ɺIƮ)}Խsוv}jM};0|jaz$|y9aLd;LޏGFd>iU"Bk)%0H&IXHdGyu R^օ$J#M 98l:P( ٔRJ9#-C<] sOkyn &J.5K7!ViM,~7kUL ed-]Ĩ=^&TKI^w21I\.$G+9KqQw)S۳6Z6.)g'1Uu6;ˋT+E^W.ޝ9[x"g lz6T?4 fߥDF(vl z׍aWI\ 4rh0Rf?tUL6wTx #WcVjc: tKWN]76(Z}mV,yTRT!+g4ΐR=~a) 'T@?U@s UPUo7콠 xb=M CcSoӣsitTdF%XG˽H_vn*hf_LhNJvraF e8!\1mCMZ`j4^Y`t[|UòonDu :h)SطGP1|XjGkhe~xCfPr_FtWOzA'?\ ۦ(Q7ܡ8ytq]5y"Lq-UCo̘.:)aJțC(dGeh7"JlLzX{Ƶ О-ؙKzz婔"KNQ `~0¦j+>-6AkM#VKg^d -ǚ95 j PɘNѳ?/WY?sc3@oĽKDԁs1BvKРBeZ,fsS]=I`%䏨.fd  1p 7dM?]!~}^O,u$G;e1W ,;xh bWP<_v%ex5gD|<2iAQM!ّ֙o}`wYX\n:km:/툼H~~7i1EQ& jDyfQڽ͡K @^6Cp>M5oO/+u S\\><کTzMkFۋb~:[=4l֊1(l+ϣO˸u;B4>&ϱOzC[HY-CBb&io pnqa.wRlaAWx_\89~%L4b;TVɿ<5H^s_Be3q" ;Pخ+uU9n'j!8ۡTC$ʭܕXA4N}C.f_]vhF70S$ɺٓ V@j\8D@ L+D@i^jT90>Wq+";`e}yQg͙[Oģ;fAvuhڅaR -|X`kDl: d]rߒ)L0 bU?m|Οl>au aGN%xi;5}2DC+|0#Yۓܪ(eV |+!FQ,}/58t@+2ЗgƨSC?t /cʈq\HZO(s |;B~`텊ɘ()@kNvXp,gY 'ab!rY{w#^oT Bs5Lô)r3=.ΧaԋS:|E0,>XY bwp2L:_+0ֺ K߷;kWBŶk#;2Լ٧b`#gt pO>͒NwPJNXDNF̶ uF2< PPqInU!=V`2_؀Tk 7^ͭa ™#vM#Я<)n.T'{ŦMB _mBGv.IPΊ|p幅>a8ňGXwV3|_Ͽ=ŊP03pƣ9淤(+}GzݓyhQ{A'DqBh6]j5WbjcuLT\BRW^)ڂ't!YLګ";b)\JǜU+rmNTw_S{%rrMP?:A};xMS.i $k0uE=Jn6?rjo,C :|7Fd2O]in&j'tUU%<R {~XRusc TpG%H0,:ّ]B*쀤E_tōWY A{NC~[\] Jн19.NNV YR<ːA{br> *Ҝ7a<r|yQ mɂuDkh=iIRvip\ kbmմgZ(lj#:|IbZW,9:Rc|0 pXԤxpkGVby.ώQRۯ/$Q|*Qؠ7^ PCwHuNE\:#4 ;P(?B^dm(XaͲL[iAPVpEƃ~D]G Ǧ5s(73Ȗ#hj2# ؊(FU=(CI(w񨨷-Kbҩ edؿDW1O1fWӑfG9EP4G>.A;^3lԋhxVH}.;NyE @_T^z;Y!ⳭU8K!D8VtqqꓯR4smȄ(_𩍃哕4vuib_Hߪl,mX-Z'  B@\Yntnt4v̭> VCj3YD( |jѫi@3?鯏+=יW7]x [}ѯ$QpV>ҡh2xVjptү~NT"j\7S$'R}`?NVc>+f 0OЯ]rSrEnD ] D4dLN*ei>.1\{!yf, Ѫ-;V@M"tjA^PĎ6mq:CS*N^UNYSva̭7N&Qo/R!hEs'Q;ϵ~5 |~50j$Lڶcg4^ b 6‡)QY*$"j7,C6{k$vZ;J`FV/^Sɮg$Jܨ_Cs =60pLhu@a-[C;4@ gAu;&W>5ߒ8Yw0ZVb&?j/ X,=LmRxR -*9 -_2XÉuM/U=X}dz* p=G@-mv>HF;%-dflM]qKCR=T3cwEys# gtV>V<yIa!1|HvL%SXҺ}:oWh Jc׊Mn/u%p#42O]IuerRF{=\Fys\y\/\V9./@1km5C:G+|դ錩RjP4~>0ES x>eYwtx&%AduPS" J#NI#0`  v9J#F}UPW%c2v01Ya2 O>Z;=Fe0 ==tI"pH^+ncB*1_:j4\0~_ 2V3b6RrĠ 'YnL׼.}7aDau+jBRY kLuUj^>Sӫ |u5׽d_ 73lӤ,W F sqq.)] 3 $89˼3lko-NSANCS[ֻROr=tO]L $f~3@[ >Y`ՠ!ip0n+IJn-*zQ{;%( =F? P$j;VKђ'//]X#o_ JN C!}0:؛F@coT I(oW.%d$AwM4xځ>e,{պf*t!vl&v4B I`ųPމ3˙O.IOwi̔2Q$egݹEQN_% 4 ?$7TVVkrU\~<82}6ɇ9 z>[p?eƈ>)Jzcda?dn ]a DotYXD9B,Yk~o{`K_vAK,] ɿDT֯c>~IA SR$g ٝGVfFOE5lc%E*3$`[YX鏯+!ívtŃ^LXmm˜byH-B/W͸-2X-Q*{k5iO;1~m0X!\r6gmXyqaFxrʪ\ ) ˢzMłaRK؄ /MNX~}:6YZ]kK"sjcp~*AE>ؗD97 k|MʿZݼ!_9K z6Sg&f<9|8*P+Scs$vQ5p^2Wx[;EzeopG{#~ Rzm6:#]D0q+zx8mj>tT}^XĿcU2!ǼݑCH1pjss{Tg~̺[ޛjWmXᅹKs$ZCҐʡY bo m$D?>k/wr͊Ne j^-TzZ2ʆ ZsUWFN* !\+R<šb8[&LS^#50Hyw4#=*zU:+Ocimj5EgGj#z5M0mRu7$uVWalVstD$ qzV]mvmS~u"\ oj>t2$A=?5XXO( h]YRhW; M XYRq'3jQwaGH:Ԧp rs˨k+uCJ]Q68`Br#MƚGeIyCp,вqb!'TJC MӼaf"׼yraw@I)0^]UGFߑؼrӏݍnb>߈38ziqQ~f'q0&fm1!x"(v cIū$u/9ئi}P͘iHuipv҆+ΕClfn.ݽ97j#/|/{D/իjT&` ܝnktNSPsE(dX'dr@1GҨM&y˙!1ruL.=1lk2WoVTԦ }S i8tguٮ`K`f ^'W`}/j`ܚV]`}7=0p_k o$z<A1\go"Ze)UkWC#rlB3fS:Wn14pyz!iz:+}~ⷋ8H_`ۢ{eLd=30;lNyNwj!v(~o6caS?RC'Vv+jX>K?HZ["_vӿ¥8'5t[9n'u f;C{uu v"=a :7ۈQ ƀ}&r3r'6{p~5H.:[#^Ds6,#5Y~iro28̛r%9UiC~6]LgH@8|A]lnҭNb*WmzGIcl0yϡ>!Bg<tN=z9ᇷϝCt:"#nA?(C[-Ձӥ((H;\]ƴ݅?L5 v:~mSKR OONUFaXAg ?lьFdfZ>}o8(.S'ƋW.NPЋ>Sң Y:5(ujFziI/,,ށxNF*W /˶40WbakUT[ڟV(;2;  t3_eY=.(s-2+|}G?gM ,SkoW?8;c8`v|*O5} S?}-NRNDs>7.5<˖JHPXGlt ?p>l6goD{NUt=RR{NLbH\:"՝Lxq׃ly=cA,Gv  Ej^Z4#<7 @B+C !sst/&.)JSshz[ҏq/سnԨLLa%v9ŐЯr}\b?sT?r8CN`[| A o\SJ&7SC~,B~c ۯzؖǞ#%U2}m<5dsW5!=Ltj"Nv.\^Gh4hs%Q/=!宦 ؒ h<=T`\-ro Mٶϫ9 P9h vxrJjB 5;y1Zd81fΝkE)5tZ&b ? C-`\7ti5ݑ&Biƹsd[h-^iZ w{BEj!f縌[x8Olui6l䮀iaY]\r#M ʔ%K䦻FzEqv2gܯ_8 Toߎ)I 騰V\-沫]ԢeGXkv߸%^:PE^~ ';^CWLn+M5ef>kR2/^6./N"m(e?&waТ{8+`D jj֛r .%'PL!:렃Su͖Tȿš&/Vy%&myY^2}T2fUe 1`'1L6h.AZuJw|4 q71KL&gL;rPPlV=ʭ۟#lܴ!dV ت >Eo%vf0'~p`Mb2u Âv¥SY ݒO/+,Rs92|R~cM@TvKfGL$[Ljdٛ 4x{XάznS| 髹`Ԉ"y#J]2iE? P dTE>F2A lQMkb;KO ;,;- Ku^4;s$^UkŤHj^)"fBJomR-c=ag *,KmbL=& waWҼ@W29P#o ZKϊ77͛, WlN56`&W$_f"~ES0ruwF$F_O2VdkM?_tΥ3u۫ON}W=iލǿ!O}Ml2vF(clD+@ Y|LS{4Mٟed"C+rʊO,9͚["wJӎxoN{ 1z$go(CLH:Qj \s;AzωTmjQl˲9Ƙn~%zLO&{W`OSљ,}GEkܙi {Mĥwm&lx7Jdo"JDž0Zrs+IDXЫ|{C߷c%'/5L"#٧/Э9Fc\t֝E4d-oۤí^-°$xܩDJWo=^XIc>,cmĹiű1|;S!O)yAOp z _BBiq1%S U =Zc+'BDKz2/M"W–d#-%=cnnye+>ɝ76`=aг;R+`׻X븈N*vܝUbэ' ﺺHnьZXF4w|.ܳ73gAB$A Zvez+ATbHې>bė5d[*fЪ n-/zad:v|Js< vxDcafu?`"fM\8Vh>=Uya-|*n{|kZ0E۴d/3곤aw#`9"QҘ  J cjk9mB%~"vz:Rw ٰ;A2j%|BWF3<7>[jg$[I#AkN r_i'g}0D{XŌZDoRKQ}nCHME;lu%t}$YIc}a6$Ԓ*G}) '.l'ݩZtA oSygZ d$h] !L6s<杩~zaN/!3A%5UI{ "4ew*GeLrj^պw$̀*d~U+9"[O%T;JOE 9ZaU%lM&8&SwauL_RZ;>b@%ŏ "Bo63meU~#$M& &(c%~Cl>: g 54Mލ&41Ai9sW2nUxQD9?&>:.'5HXrz*, qi56O39ukW ؄:ݍ8r`xLNޟ~fpIsl!IuK X!-;ms ^Eqz=S{#1mޢQt͢+\yD!xrZ {` `nPl0p}XRdL^ƈ%'R{&,Ƭ]RC y+ջ+!ViQ|PK˼%W.Ƶ*5eq4!P_#c1fL {#ƏЁJT ա6 9">ׅ$Nca3֩NZPj2esEjl~r~& (G{Gʲ_y$xsw>'Bحb0c,h(gpZδYA=SI!nH@gT| D8[-,Ãuq"r.+w z,66ϓ7-S67AtYU珁"c<^=rq Ct3m *>PXq2pI<+dy/&>HN2BHjcd 8 6b5':߼7LZĒ6h'RWfMwezqXroA],&Vȧ9j*]:H(W"_ħg.'vzoz"CF[Y?$@:DlRz=G?ΧQf&j"쐊offo鹧SZI+Մ=EP"]^N i,b05_}|czwk_w?0l*rKhCڍ.MJ:̠ܽiaUY`rapթ;%)n:, (B.8`eiBS@ =OR/0ވd udNɑ m]$9>dnaW-*H -ةEk`X2xk$TH+ C_%q^ba'. <~ [?#PW^%\'[L,WN?U,zp44*E4G>԰2 šR{lhK;6Uh'E!qyQp9vRCq+;Y!`0!xŋxHWѫv*L_T$HP/(ĿIGYWrĄ ".0"OKЯg#"HC<|]s;2CvC-A[AJdq{nlI)PJZus?, [L?S0Z3?6DxW2,$Z ^rPGе#$Es:&d,8>41̰{'0%vzѷ[mݩ(꿅K?<|ïª`= t ,[9ZUAB}Kۺ*\?ˆ=6ii^ꬄmYjU+ʑ*ŚYRn5x傕@'z)034~?{У,4 ^>C^:jD.2v?fT%%@g1 l@n^W9P[MO'x 2h /Y,-\:e ^'~NU]>pQF=2?-S~͊D2Kߔ$#ޯཚqPxٞI'%#O2"_Ν_u 5+{@u{DhɲN#|&@` k* `}~ؗhRo0ws "`s{@eEDΘ*Z;KLJ0"Vn@ ^LQVey]h1 It@ce2樲\~&rH&_U^ePkE^DyR<ɭ,6fSZIe ڨVF- Dx_Hi]5Jz'^Hk$*۵/5\>X.dv<}|u59ۺRb^(xQ ̯wlh-nn^BdCh_ >PIx?Rrb‹`ȌwhP>46gċ_q׃R$PR>s-afgNɏfHt -G̐@JB9Yh8IW#X%Mw:qofGjSug6n ̣tN8Ec`l!4'ji$ -ijjvh C9C|I!ݓ()VՁ u3)q:é&jFUa52EBz!;?kLǶycx=U%^eh8OwٽCh?!s+>z*si#4ꮗ`EՔ7{Xom@<Ьm@&#/9Z5-UQ-+AW!j:7WX1"EFXpDR<ߚXo 7T@bp. 9hNcOCjɢf^ MVu_췢":Y6̀jG_l)LyD6x † G&Tyg^xon$+̆88g@=ov0>P?,J3Ml;CSE̋h˕*Rrh8m{&Ii*(QDօ`>fF c9*$´q8 b%.{0 @AST#?-HfNsC`Z(zȻEgW֟QFuGuS6kSݲ5gc-캉lW.[}5Vp"'3Qˬ.Xa `J2eiz ԽfǙ<: e;=%vv$6EՆ0ϑ`%@2h3-k&Bw5J絘g7{M~~s K5m=xEg 5!{sph\nJZG"Oqi9'qU3 Ӭ~Q|? ddc-?K![v4\"r6m\0ב,3*3ODjNT2r?y ^/kaU~C foX4ze Ed$oU)E2in[<eOE ,.9FB3?7N *a[郎 dQ0>gS(p 5&*Ž> 7eEBR}͸W\!/j RE2Lx]*m)VMDn9SC^k osvDeExK9VW#2NIBWSg NWHw>;zb LC'o- lqux/&"}UC>SNbW`l[17L=Ic>Ơ ;:ilBSaԔr1 PG3:3CPsNB7ѿhVR̩:0FSt GdcڹڍH"4?=퉅vU?6XՐMqVm,$1ꆐ *cTBj jSÉXObik#l؊~:sl$ܹSux׭`E8l{0A&|3LHI:fu)Q9wM ܝiL"BY`hwX ǵʥ.b1aEc^x[]|'eu El7%fPLٸTY/ xߚY-;ojy 3b+ϱvC)|BAiq1^ .5b0z %2ı]I|\Rۦ2ۧ4~( 5b1.V-x_\XHp]*6 Μ  s٥w/HۥMCB8B45tA0(?^Èe|nIjX3O5/$0cagrtUy+bQ7tĻ7u>K*f 2!_!h Xr\ bߒ:Wܷxp~l8Yv2[q^*Eғv,QnE֒4츂Ibeux,+- v:P+{[xc֘h9ˋk~N9Bk^.B⵭4Sъ?_t:WXagifV-p_ϥKʤPCk63ѐiҼF'R\SډwgB-׃M!/0+ Ǩ\ۙi??)z 4\:< LN^9q[ѯ~)a)sJء.j1b!_/禯ipw> &t% t8'_̂^Yσ(""cg쨐UBۯ Pxi$"s씜K U t!eibdk!'4fͅUO_b^a|(Gܧʣozf,LƵǎv=! %rA,W0'>t sDWeǤGQvuCk^*ɓAl޼@(O qtջ/-EgXAK'КXw;ddg@Ė.8Qci wlUS$C󯔤@#8/{XlכH:xcZ]67ZhC¼eA5 xi菿™?ȩ Dyﲜ&TUT [ىFLך$WNYY.H:C'=da?@8#:{ߕ4-np[3GOUgp4c>UZRn-O*~:mENLIL2+Xn$Ii rb{$C;.i+8^>QYdoy]|xj}c|<JChʞTM9W00?x}i$qwؔN=tƗߙd :eymxMj>/Go{<=3?^8ё[STMrА򫾟\%OO UǓ XDP^,$­WR ~%i~ TtiE& M 3V&4jp{A_6Zx:E3t1xCqH[-ä53v$ⵍWd̓}%ZբL$Uu;5臘@޾PZ 99&#lLP:w_1KUQ!6j#>>ǯINv*ˮG,݀RޤSbOhR3Sn8 \BK+޿.l v;, mx"hu3dI뛶 8z $(AغlLisA 5|:9 x\5CwD VK dmdFf e+/1Vime@|7Pw4CmRIv[峷a`(@Ia2!K۷RwOjFc"8V %Pr'k^1s$1BG c`xkˀVABHҜꕦGъa+Zl)a` mgcXU+w_}?7I@Uno!E}Wgz|NM +^jђjJM%Ie5q֏Ea9/tӓ5E1*B^IC5q`_|c^ݬ쿚\{34?Ջ%\#OJAoI9 LJ׺W;jlGm X(N{bot{!AfDAv[ йLZ>_b 4 9T@8APFb~܋L9E~չʄ|VEOtix)5,O1:cY gKYl0RZ"\al?R*2u~6JS0O$KI6fL64-~ߚZY3M |&3[VP`p^i^0Vm d;Qn gWT;cAh)ń6Rއdo򀷅QPXKw=o-|kK@Jgb4xjNƈL@?o}3f!b&oPRЈt.ՏG KN" 0BcEzfp/vgaq=pPe u|ǎEӃ s_Tk)J9H }7M;JL#;D 9e̞@a%E]Z"B;T-Eu, tW>AeΓ' kQw%p?ڍYy ɘUMӮ8Б8 ' Jhĥ~$}MI{;|o0+ʻaUx7ClgǚM+iHakX 9i<ЃWj<$j<Շ LV| k#JLf3Tu6_f?d\6:-z~w[<~Z˔8n{Eq+__V_e&u4o_{jsP:C/d7ImًW#$\!B7zɗ|iլu j%O }r)ajzCKe=^͙џD5ȸ;'mΖU+(G 66ڰ(g)F 9#4fN@^O[5Nq #Cz*?s ˕P#Hù/2˒b6%-vΠ"Qza-.31Æ m?` M,\ߠgA"` tY պi(=+WWe9}ER=#$I#Dv}Ŵ+l׹PylG(_Q:2( _^3m OhW{|\^iluZb=UX7#%}l߰ ۨ~.i*5sJOm}F"ֳV<7=q8;)-C pOlc['[$z?t|+*V}UHcLwg*Ч*چV G s{D (Bjn1~Z* !ubWdȝ]&k_ rqʯK:X3e8]a 8n.|X[l\gz-!+QoPP]ic2 ݠacٺٶkH[3A̎'Zg3t:Ė^?]IF&z2˪ g9\ξPyBkS ڬ'H/7%Ǧ)fOrL(LYc~?av'X8=nB)?!*#L9w `_0-@,lćLGؑ'{v1ԥ~QHL[hьs6"8T1G%)Y%K0\pʴXJ k&VX-UʝPW.aoɵ.B8i-6vֽDN2ZfEsO+jZf;KgWS23PsӐq=ϳ7uT5̔Vm{B94W'r:1p6 #Bn}aǶc4EpYT6LXbj` c |[4y%*Li\]sjŲaǿ%N=({ gpY8iYhWAW[dHIDsS2OG-& 4Cڏoz :D$!氕E>iIYGDo yY.)GZx^O3Fΰr(4b幱*ܥ2Idnӕƛ-qHk%禓X}`KHei ͐1(Dc7:sdgQΤp< e6jK4jfj@Ց:"&Kau'p"@y=zހJynb\=l}1t˺=NP^A5FJ%Cϛб ~RVJW4쯙R6P׵Xe~s4]Oάu'6`n{?e9&&m_Gw?>kBI-n$OI]2O4sy7CJSPlS w_zMX(AB$Cӛ/1_sH]p]8Y ^J`˲ gcѴweM)`Qyrgk)=}s.fv(,2/@s*s M~U}WW,ޅeY bWSbc< u ~M7a*3հ*M5:9fKYbD)mkHgy"'6$O#r V2 '% jNTVmC;؃bA$/)C+_)c!=pg^]k:ޕ*P(JY u5rO8Bk- VtNs@yaEߊ7~7@^[K5|7X(݇aw#Qb0 `~ ߴL L5 ^SS kdMMиwM?]ںhH53;ös1pX  BS{?͍W&y5,Yl̟B 0G=k6JWvb I'J 'О~- K=E+,_8Yr3Voc>[dƙA*=*tws\}EZT}3+S,:\Nccٛ'0.8:xp >md4[BSBVDUߥ8ew mƥ jNjRiˉc]QH[ze4lpy]ڏiߋ$1̂_m S; nstx(2C2Y?s5+ KkF8ΡM"b dZڃwgp"ஓ/,hFcp5#vX"~2R8kUDo'wZC;{y5{S&Iqhc{R%i:4Eh[/1O&n'! zvZ#Cmdztg= )MQx!&uu[c1`[%Oc!IJ)9܅Z$vN. a4i\uXI;֚M ަ9~ds9:r.ɤdAɒ$Xs^ܴt(%tRd/"S).+b~"oo1i[oY7.''4aO}ylj\OxoHٹk&L=ЊZ&Vi5/û sCG x+R8mtlҪɿLSo7>5-Y hʀҏWA[1',@bV ??~-GH_cg7a 6ӏ͂,2  SBQ={ K#K"0X0PJ ++D5t$G !k%52:};eGv&["Faw1-*n(k' M31YUXtx|B ~:I_ȹ:K.zz1+P7]Ccdr@8Ec?e92F_ʓui+U)/tӛQGXDIF8x,e p:%+0T)'H|R>h.32͂xOiLulzaqpd+K7G&۶e^4x,ں}Y봟BAˇO2"WAkO?Ͷrs` Yab}1 qn,WxX韏Z4ױCC⠄8wn{w~s2&ZXE0%?n %SxB(ڏAR\r&l’E5JE$TKp^f;v7?C0 &AǖkN&(pv'E*Nzػ?ZTHĪ` &2BlNnBq1$l۸ ]]ը 0]tR~WW-"69 bɣ'ٙM| @ԡVLXwLy=yN#_9+>R kNwLIk$Jy/e)sy,'@]׍`&XS[u>ؓ9πUSrC 2#OҢ́cCt\CI֗nvS_i7w9p*HanѩmR~oTz0o `8lw!G]my AɇQ ;!&A\q@G=*OȶE. iO^ainʞ&g' skS؞Uc-Jk{{P]L&Ʈ.f-+8#x>u+~++EҰw̜(',FqI| =\ j\2>^7;~_MSK<3/.-߬vB*">V_kV?Y1Y12I;U{ =I|[Ktdt-krN0$M{"W5@,̘6wU@.wۧ/ zi9\n