pdns-backend-lua-4.1.1-lp150.2.1 >  A Zk/=„ݝ&MA]<&dSojRY#{?Fr88UŲ&VM =2my3ߢg' f*0H8ζhhBRuTv`$.T :g6ӣeoz5ycD'(bɿѢ]v$7S\'l@yv_!4ѝBɝ$K%[^y A|Wx 9a=Pw_h[Siؒ#rG|ExvN`YvvugnKHd2f>IYKvUTTPzU%?~;8 *h)\T-Xk:~wLoEKپ3C,#"֖3\>p>f?fd # 8  &Jcipt v x |  4(8B9B: BFc:GcLHcPIcTXcXYcd\c]c^cbccdWddedfdldudvdwedxehyelzeeeefCpdns-backend-lua4.1.1lp150.2.1Lua backend for pdnsThe PowerDNS Nameserver is a authoritative-only nameserver. It conforms to contemporary DNS standards documents. This package holds the Lua backend for pdns.Zk lamb57PopenSUSE Leap 15.0openSUSEGPL-2.0https://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://www.powerdns.com/linuxx86_64PZk078b9ac8ee35e7832fba04de478e92c8cef19429dff2ebbe2e5c3dfac09f5bffrootrootpdns-4.1.1-lp150.2.1.src.rpmlibluabackend.so()(64bit)pdns-backend-luapdns-backend-lua(x86-64)@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)liblua5.3.so.5()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)pdnsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.1.13.0.4-14.6.0-14.0-15.2-14.14.1ZЛZZZ@Z@YeYY5Y}@YMYMXDX@X~@Xx@Xx@XN@WW@WJVV8UUv@U>$U8TPTи@Tи@Tи@Tto@Ta@T_W@TR(@TO@TO@TO@T+T+T+T+T+T*@T)IT)IS˯@S@S@SP@R{P-P@Pd?O.@OOOOU@O8@NNNLK#@K#@KJ.Nadam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.devcizek@suse.comwr@rosenauer.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgmichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.comLed michael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.decrrodriguez@opensuse.orgcrrodriguez@opensuse.orgp.drouand@gmail.commrueckert@suse.demrueckert@suse.demrueckert@suse.dejamesp@vicidial.commrueckert@suse.dedimstar@opensuse.orgidonmez@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demhrusecky@suse.czcoolo@suse.comcoolo@suse.commhrusecky@suse.czmhrusecky@suse.czmrueckert@suse.demrueckert@suse.demrueckert@suse.decoolo@novell.com- geoip not available on SLE15 but protobuf support is available.- Update to version 4.1.1: bug-fix only release, with fixes to the LDAP and MySQL backends, the pdnsutil tool, and PDNS internals- Update to version 4.1.0: + Recursor passthrough removal. Migration plans for users of recursor passthrough are in documentation and available at, https://doc.powerdns.com/authoritative/guides/recursion.html + Improved performance: 4x speedup in some scenarios + Crypto API: DNSSEC fully configurable via RESTful API + Database: enhanced reconnection logic solving problems associated with idle disonnection from database servers. + Documentation improvements + Support for TCP Fast Open + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK - pkgconfig(krb5) is now always required for building LDAP backend - pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed- package schema files in ldap subpackage- Update to version 4.0.5: + fixes CVE-2017-15091: Missing check on API operations + Bindbackend: do not corrupt data supplied by other backends in getAllDomains + For create-slave-zone, actually add all slaves, and not only first n times + Check return value for all getTSIGKey calls. + Publish inactive KSK/CSK as CDNSKEY/CDS + Treat requestor’s payload size lower than 512 as equal to 512 + Correctly purge entries from the caches after a transfer + LuaWrapper: Allow embedded NULs in strings received from Lua + Stubresolver: Use only recursor setting if given + mydnsbackend: Add getAllDomains + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace + gpgsql: make statement names actually unique + API: prevent sending nameservers list and zone-level NS in rrsets- Ensure descriptions are neutral. Remove ineffective --with-pic. - Do not ignore errors from useradd. - Trim idempotent %if..%endif around %package.- Added pdns.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322) * upstream support for Botan was dropped in favor of OpenSSL, see https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released- This makes the schema fit storage requirements of various mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch - preset uid and gid in configuration- fixed use of pdns_protobuf- update to 4.0.4 - fixes ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. - send a notification to all slave servers after every dnsupdate for complete list of changes, see https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/- added pdns-4.0.3_allow_dacoverride_in_capset.patch: Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3 backend- use individual libboost-*-devel packages instead of boost-devel- update to 4.0.3 which obsoletes b854d9f.diff- b854d9f.diff: revert upstream change that caused a regression with multiple-backends- update to 4.0.2: The following security issues were fixed: - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-03: Denial of service via the web server (CVE-2016-7072, boo#1018327) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-7073, CVE-2016-7074, boo#1018328) - 2016-05: Crafted zone record can cause a denial of service (CVE-2016-2120, boo#1018329) For complete changelog, see https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- update to 4.0.1 Bug fixes - #4126 Wait for the connection to the carbon server to be established - #4206 Don't try to deallocate empty PG statements - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer) - #4252 Don't include bind files if length <= 2 or > sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-devel- enable sqlite3 support also on sle11- also drop asciidoc and ragel buildrequires: - asciidoc seems unused - ragel is only needed when we patch pdns/dnslabeltext.rl- drop xmlto buildrequires- only enable pkcs11 and zeromq support on distros newer than 11.1/SLE11- convert all conditionals in the spec file to bcond_with(out)- update to version 3.4.0 upgrade notes: http://doc.powerdns.com/html/from3.3.1to3.4.0.html This is a performance, feature, bugfix and conformity update to 3.3.1 and any earlier version. It contains a huge amount of work by various contributors, to whom we are very grateful. For all the details see http://doc.powerdns.com/html/changelog.html#changelog-auth-3.4.0 - use system polarssl on 13.2 and newer new buildrequires polarssl-devel >= 1.1 - enable lmdb backend on 13.2 and newer (new subpackage) new buildrequires: lmdb-devel - enable zeromq backend (new subpackage) new buildrequires: zeromq-devel - enable pkcs11 support new buildrequires: pkgconfig(p11-kit-1) - drop docbook tools from buildrequires - no longer extend the libdir with the pkg_name, configure does that automatically now. - drop remotebackend-http again. it got removed. - refreshed the date/time patch: new name: pdns-3.4.0-no_date_time.patch - drop pdns-3.2_polarssl.patch: no longer needed. the intree copy is integrated into the normal build system. - package newly provided sql files in each subpackage.- fix build in distros that do not have %_tmpfilesdir macro.- Use lua-devel, current versions now support lua 5.2 - Use /run/pdns as _localstatedir in distros with systemd this also requires using --with-socketdir even when no systemd otherwise the path is overriden by the build system. - pdns-no-date-time.patch : Do not use __DATE__ or __TIME__ in source code and/or build system to make build-compare happy.- Use systemd instead of sysvinit for openSUSE > 12.2 - Remove redundant %clean section- forgot to remove the --enable-tools at the top.- only enable the tools on distros newer than sle 11: the boost version seems to be too old.- update to version 3.3.1 Update notes http://doc.powerdns.com/html/from3.3to3.3.1.html - direct-dnskey is no longer experimental, thanks Kees Monshouwer & co for extensive testing (commit e4b36a4). - Handle signals during poll (commit 5dde2c6). - commit 7538e56: Fix zone2{sql,json} exit codes - commit 7593c40: geobackend: fix possible nullptr deref - commit 3506cc6: gpsqlbackend: don't append empty dbname=/user= values to connect string - gpgsql queries were simplified through the use of casting (commit 9a6e39c). - commit a7aa9be: Replace hardcoded make with variable - commit e4fe901: make sure to run PKG_PROG_PKG_CONFIG before the first PKG_* usage - commit 29bf169: fix hmac-md5 TSIG key lookup - commit c4e348b: fix 64+ character TSIG keys - commit 00a7b25: Fix comparison between signed and unsigned by using uint32_t for inception on INCEPTION-EPOCH - commit d3f6432: fix building on os x 10.9, thanks Martijn Bakker. - We now allow building against Lua 5.2 (commit bef3000, commit 2bdd03b, commit 88d9e99). - commit fa1f845: autodetect MySQL 5.5+ connection charset - When misconfigured using 'right' timezones, a bug in (g)libc gmtime breaks our signatures. Fixed in commit e4faf74 by Kees Monshouwer by implementing our own gmtime_r. - When sending SERVFAIL due to a CNAME loop, don't uselessly include the CNAMEs (commit dfd1b82). - Build fixes for platforms with 'weird' types (like s390/s390x): commit c669f7c (details), commit 07b904e and commit 2400764. - Support for += syntax for options, commit 98dd325 and others. - commit f8f29f4: nproxy: Add missing chdir("/") after chroot() - commit 2e6e9ad: fix for "missing" libmysqlclient on RHEL/CentOS based systems - pdnssec check-zone improvements in commit 5205892, commit edb255f, commit 0dde9d0, commit 07ee700, commit 79a3091, commit 08f3452, commit bcf9daf, commit c9a3dd7, commit 6ebfd08, commit fd53bd0, commit 7eaa83a, commit e319467, , - NSEC/NSEC3 fixes in commit 3191709, commit f75293f, commit cd30e94, commit 74baf86, commit 1fa8b2b - The webserver could crash when the ring buffers were resized, fixed in commit 3dfb45f. - commit 213ec4a: add constraints for name to pg schema - commit f104427: make domainmetadata queries case insensitive - commit 78fc378: no label compression for name in TSIG records - commit 15d6ffb: pdnssec now outputs ZSK DNSKEY records if experimental-direct-dnskey support is enabled (renamed to direct-dnskey before release!) - commit ad67d0e: drop cryptopp from static build as libcryptopp.a is broken on Debian 7, which is what we build on - commit 7632dd8: support polarssl 1.3 externally. - Remotebackend was fully updated in various commits. - commit 82def39: SOA-EDIT: fix INCEPTION-INCREMENT handling - commit a3a546c: add innodb-read-committed option to gmysql settings. - commit 9c56e16: actually notice timeout during AXFR retrieve, thanks hkraal - pass V=1 to make calls so we actually see the compiler cmdlines - enable http support for remotebackend. new buildrequires: curl-devel - prepare lmdb backend for 13.2 and newer - remove pdns-3.1_lib_lua.patch, solved differently upstream. - enabled tools building - removed custom hack to build pdns tools- update to version 3.3 This a stability, bugfix and conformity update to 3.2. It improves interoperability with various validators, either through bugfixes or by catering to their needs beyond the specifications. Please follow the upgrate notes on http://doc.powerdns.com/html/from3.2to3.3.html - Removed dnsreplay and ChangeLog as it was removed in the source - Added pdnssec and zone2ldap man pages- update to version 3.2 This is a stability and conformity update to 3.1. It mostly makes our DNSSEC implementation more robust, and improves interoperability with various validators. 3.2 has received very extensive testing on a lot of edge cases, verifying output both against common validators and compared against other authoritative servers. Please follow the upgrate notes on http://doc.powerdns.com/from3.1to3.2.html For the details see: http://rtfm.powerdns.com/changelog.html#changelog-auth-3-2 - dropped qsqlite backend. dropped upstream dropped the sqlite2 support. - fixed building of the sqlite3 backend. - use system botan if possible. - refreshed polarssl patch old name: pdns-3.0.rc1_polarssl.patch new name: pdns-3.2_polarssl.patch- Fix useradd invocation: -o is useless without -u and newer versions of pwdutils/shadowutils fail on this now.- Fix the SLES check so we correctly use sqlite3 for newer distros- set license to GPLv2 Only (bnc#762986)- update to 3.1 Warning: Version 3.1 of the PowerDNS Authoritative Server is a major upgrade if you are coming from 2.9.x. There are also some important changes if you are coming from 3.0. Please refer to Section 1, “From PowerDNS Authoritative Server 2.9.x to 3.0” and Section 2, “From PowerDNS Authoritative Server 3.0 to 3.1” for important information on correct and stable operation, as well as notes on performance and memory use. For the details see: http://rtfm.powerdns.com/changelog.html#changelog-auth-3-1 - added pdns-3.1_lib_lua.patch: instead of using an hardcoded -llua5.1 use the LUA_LIBS variable. - refreshed pdns-3.0.rc1_polarssl.patch - added 2 new subpackages: pdns-backend-mydns pdns-backend-lua (new dependency 5.2 > lua >= 5.1)- use %{_sysconfdir}/init.d/ instead of %{_initddir} to fix build on older distros- update to 3.0.1 This is 3.0 + the fix for CVE-2012-0206 Warning: Version 3.0 of the PowerDNS Authoritative Server is a major upgrade. Please refer to Section 1, “From PowerDNS Authoritative Server 2.9.x to 3.0” for important information on correct and stable operation, as well as notes on performance and memory use. For the details see: http://rtfm.powerdns.com/changelog.html#changelog-auth-3-0-1 - build all binaries with as PIE (bnc#743152)- fixed lua dependency (fixed build on Factory)- patch license to follow spdx.org standard- add libtool as buildrequire to avoid implicit dependency- fixed build on factory- update to 3.0 * main feature is DNSSEC support * for full changelog see http://doc.powerdns.com/changelog.html#changelog-auth-3-0- create /var/run/pdns directory in the init script and package it as ghost.- fix feature guards- add pdns-2.9.22_missing_includes.patch: add missing includes- fix build with gcc 4.4lamb57 15240670844.1.1-lp150.2.14.1.1-lp150.2.1libluabackend.so/usr/lib64/pdns/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.0/standard/5d338834fc675074f03de69b3a678f89-pdnscpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=15a200d3d1e8335dbc43e9ed03780e7796710426, strippedPRRRRR RR R R R RRRR,4H ?W)utf-8d27a38354a58e04332c230d086497a244bfe69f0eee520028e7effff1a6d0fe4? 7zXZ !t/[] crv9u"GZ諍)ywʠ2L0ѠЏWv8BKsZᵶ?KzQg; eܼ'sƦl~I5l[ ٬Il[$I 5VY_E ap [!Eb!bR$[tS* ^*/lҸW\~O!nRzHYlVK=pmE+K4syZ:Zsb߭S2`Gž{bmhtxkR)  yk0Twj\P@B5X8Vׯ jc; ^r;DYT]K+oCl  ,3CuͳLDPv=gF¥]J%K?z龋 NX 's,@%g=PX/Fc|7SLӾ2Suvx, R._kbs`Y Se,`H n߿Vh/H!"_ʇu%pYtRqBP&. oo -zJrDcwA[#;S;4}nD6u62V-F0gSƢԑA 䭨a8C:'>[ڛ̀A.+40UH !ݣgQ ^wGXDYr翖*S1.dQo&gRO]<G_ЌfD%a~zwֲȌ(Ô6;w? 8x wN'eCvr`]A;҄ª+8q_=Ո5 ˶Tx%S]'YB<V2C]r$)wS{6wOk;zjqğwW?Ujb9XX]ܹegn|Y+%@a P>&d85 Մ+߽ա(SIw/k9mj_u%Pcf5KgL;%u}i=ҊUGMi*켶CO/ڹDPGQߞGOsiV|OWCCS.ˢ[͐) a1r$̩Af~WŖ=td$ )ľ4[.ʾʼn zGD}{Z&(Y{ Ѳ!Lz)8=AC\,%8tqA!:3Tc]#Q+2 dJdxadɄtt#x%xюآO̬7-YmN9 uF  F#SWجyKjZsLD6B"jIxOP@qIY f'f\|kNFs^: RxJ6mƔ :.աKۨ!)nߴȬ62R\1qP .;6śnՙ&?B^ָ˓J SX'<,?.ncSmo<4U/ j, L9*FX2 0kYvyԄBhͰۼ۷hT\CRyVlpG?gph KanyKd&d*F?vSna)kC:Ծ q tm$+l1-I`dzt}IfZ.+ᇷU*(5ȶV1̪[E2;n %{) J(&=~ :^j@ώSEN^UFpWL&BW@*F+ `!JBy"?$uD * E0 %w\R,|OT>(LQu L՜ŷWcB9q^g{$C{wMViN :P]U棜X/%n`jbn(eiJޕ‘kD@ 3>Ռ᾵ ؚQ=Z%+, ?lM,:+?l`6pj{/)=rG6d1| a7"$ʞ,kq=<6Q4EYFLt)&s⚅Y{?{WQZ'@ƬFq>/v;Jˊm9p-EISHRm`KWAƁF#;rϝl`gnxQ~Et(&]o|Jvt(JϜ&{Hʿu [̧Gls t6֑1٭ p#ݞu$Z昭VfUzsTq.3B->y4 l CF.0}aʏ= R= y=$;.NMs|J | ku |ݡY_3[hC)_yby/q5)|~,]f'*[s/ל"]B&*GyAl6 }s\AgXX'_-ֱ+_RDsl3cW.$59Q{?Y6-oFT"O&オ4h ˂m{ =&)D-!z[5bxDsߛ:%J#Rҫl;"pI|taC#f6֚k<9zRH鋠ba혇K\LH;WM)P[bv{{%P~1Y;).\ ܡhV<-7wb4L@,'^<btW▜M=b9 !,B r$Q{m[wo0eT+uF,gJez'-L,A{hFpQDopȡr]Q먿$WAwn_ 4PM;f le<=7qZAq{YӉTᔤy:"W 5 {,2vO|KmmU}\gM(rè? 韔;!ZB#j1: N|ÅfpDh"[R ˝wv$ ܦ|9 QY)5D"pR/-( ŀsgaCBo73BDyeI6:,5]]So;,YrgNwU8XB>e8KgƤk3%4뚬ѻMqWwϤi7U\0Xn~vۈfyp"mIu=ܱ/tvٵH B}3wXhG}0^MsԵX 5C1b-eC jʪ:伸,K9 ;[h* nOe1%dAN6b7ӵrEFѸ!Q0LR!U۾eĕcd#Pi,Bv(.f°?5J'3CXV^~@R^C+>571sSsJ ,?6JFhlWעSϖ2*]4jPf+zGb8_Xc}zdd Fs7lN [4գ':DlYoPuРX$*"dƙQk)n*nRK:}Eec53̏ mQ[*>#[t=Kj3& R ;mAL ` ]&\q[$OhI#~Z-&~TKH({p~u@}ӛ>b>9sE .^׏eKE{EV B;ؾWEc`ڄFXc\VBE$% xi*]s9I8`N/y[hǟRY7;#%Jn#;n ='Dr+Kr%8gMv (7!LCZM"?L Tc2p[f|Q]Xe5oTο {3Ԇ`ugf^_釚d/T}rjUl+M1"HhGВ2T'3{(.I[p]y}XH\8|.]?zoc|\ lf& xZ5}"= +Z|cC̬?lݚdgtyo`K1`3]TK~e{62tLMzR:mCQBb|AysKtj2sv"ipnå &M OMw[a]-z-/)DKoqBrg%ӄl#At Y[0~bGOʦ~@9RB RʾCiܠǝ^#~D8#R~q ldorF̽є21_)Ge\}sA!@b$< hv6btʰ^ֻ_d*,QHsR1+2 t<Hq%g)q=FɤFW H"?{ݤ)kj=<(BiuPrq5>j^Q}J}j{drCs1aaS`N 1a쵲*A$v*yeNPgWܾqw]h>ھƺB nB 0s8%GS7LbLq3w YXbQ$'V/DRҒ"쯌7Cי*մ^]cv,Q'X+zF;1x" 0)}rWq92J(!:Yqk!dƃh)aKDz0v]XX͆?ʫ@n`ڮj!H]QaxAƒ P2 4.e94ky*ܦÁrzdyp"KU_ 1A`n -i7š,~WE#@EDѩwσ>.'S IG+u ޲RѰ9?JqiTʥIW43f(FKOߜȆ 2QVT՜e6n|ILJZuŭuEQ}!*˩:UvAh)xx~(izmg;*oDdFr#͜hi1kO՚g_؎n҇U-@wdRb0Zru4i^jx.uүIp/ر@Ul ՞#'OZ軁6]tN_4r %>l/$HypkMO1cYΣ|ѷ i&$CQu::a)li0 ]djVZk-j;+/"ҖtAp~s-j/<3v.^{u㶄mQ'ܟ3!Yz%VF:}Q=͗ $/N3$?"}=?Ÿ4koEFi3 ogj[WX;ybtl c"bQㄓ"q9]q~Fh>ebԞo G+<әD:.Ѯ(GZCbR `ӭM+<s_'3ze\0m?./x3$t95'\POoydW*/BuVY&' *4m3O|XCPb*`dNH` gHCR׻X HΤJhJ$;<<%CBX<`VGhA}q!%&6p瘟/"b@qؑ X+&bƹ=Uc'?ѹ#Z=M7!ZRJgX$ +"чz%GMӛ5=廜`ZhD,y9廳`m@jQOh,e?- G.: ɒSߓ,Q8Ja)>@eK~Ϊ{yR(Ӣ!bR ̼!D/9iDpdWSJ}?pl;M FN#g 's-La/G]/J5lD/.mheO E\Y)H]ZR*c:T`cؓv)~U(vP"khzaS2ߕpO9{FSvqTrb:'$:9x<ݧr $LW(;-}E[x-pLVr)_S¾QoP?JAgKtb -V"lX;unbTݬW4nPw}_ۮuÅfsլm_,Zq#mEM' !76 sC"'G1#  w؄; 9siUqQ/.:2-}NvD_h4SxRCM>K@{@6{_MwCRtVn#" vbJlg$# P6MaS;EޘRe-rfǼ `M%޽$QjtMOΨJ)?9as5*wߛAZM<+b"\Ӂ"ZWxiܐH>gFM/*uATKƅ_@|q>3-(Du׍(LH"vOXɪ:gq}4.:p0FOă_d#R/INڪ$iTTVrk~C_c}}M/>Frյ=E޺3<=3ӑC3&P6|y>rXz4% AsFwu/SQЫ-Ra!J_Ա/TklKBMw&PwɗhBaAu,>L{=,i'F}|Ԕ4޻RRNs&y,J X2u :XR"u(I]yC+.Y8 [^g6k&Q %i†7`ρt IW*zHn2L 23EX1n~X΀*F +w>F~$!CDr*"n73!DØ&ܬSbWc84Owp?Bn݇;q̢yLbxm#B|ȼu/ vӵrQ3p=  {0ѫ㫘}ո"Vo&JGj{gv/C4hC fV:;U3(B?˝qvD(sj5֢/Ow{ C3b(-D bِ;>355@`e)Q)TE?JRG(CHf|C(DPQ/Jčjc/€WQ !hKE4׌x]i?a()huA?0G{G޳i"<^d1m2zXy?U!.8yy>p9pmwO.n ČP/+zIr=X2Wϰ7VcB3?K~-fIUˣQcj> Kwr2p/5M(?TLnͤp-ifDi,rE0 \Ў1dUPDR!S%9X9ꓺ+CbAwb9HJ,3/Sr.̽ǠgktFD]ꃛW5s Rk]eV`ܛ?6^rhM^ {&p2ݴ3 V̴pXEj=k=wXk8'^d]C' 2^ثDǖߤt#20 Uf"LLĵ~Dz8t;wqy9NH5%H̉8W?:da"rA6 _lKtcM. :=n~b?qGk5iH vjU#ԐL9[%C͠SyVX~EذY:۹v$Å.ckBctQlB/iD\(jq}DqW~ -4lPyťc_]aR*NPT6NrYӅOE0p&T"}}{|_+$ 1Կђ0jԴtxÚLNA;X*ZDvLH,V02v9hUIL hQ~B]V lpٸ K(~KW:DN-2m ퟨ Ž ,av\bMAw|vKkegIߙU+zlqxB<E%)r#JFfpE/:!.P6TS 4}XV]IRÚRnW2/Hds぀y/q p x''NI \}JYy)#?tZWlfqodbyk_JjI^hٌ} ue׉ %P P<_1hX̖l9rFT Z冝PE9y]+}4ط|(;kOΕzQ @*-yQidafaҞJpu~.NiUF2H ܛ d?(<n)o= #&LLʡ=T7GU5y6FݦT sxϷXeAƒ&%8iOq=FkRy(iZTYVZt }1S!]j\1)[Eќ0FB}ފ Vžҗ\(m_}MAYXSc 5,A`1x` !^[~f~xjc7l !}2A8n˘V? $TH"K|Atܕ5lXAĺWЏ_5+u. ao5Q~aiS; ּWS0^S"4G=^Fi&bh =[Bljؘi@Xܪ]ZڂpTAC4鶸jHgsrV7CQEXKK@mZ0o$|NDֻ,ekC=w+ 3Ġ̱r{ɺ )A` e'miGeWOƺ#O;r,2U ~PvWh1)Ẃ1{8iTb b Ի-F 8柦W >Vo0bh?Z CBw|x60`mpBrwQ偼D18afd:p|CFo_/Ϳs ]ǦWU,T/* ŃdpMR0Invu[LT@澛e_ A pQ~h7-#St[p-|Rm'Q*L-Ex 6b%zKʐ"=SՊӰ#WPDeD. ,SI]RF| vTj-e&h7 'gNhs5SBza-]D*5"Bbݓ8eo7QrfE+WQSI<@)4XPH,woɓg 2۬p5 wvsDB^1c,yEW^ɠh#|ɥ>Jdغ2yШy 5FRC>19EH}X\r/t2{4hO^1cJ^Bӊ\zZ$m<''ԅ9xb9Ʒ2q Iᛨ2҉{kw@˜y ?G“|E")!K'ZMM4p}L`>K- 3ݸ`OЍiYe- hEMh~5*z;eU&_ HYk9.3K$ Iq>:o r:U猺"O} Ǵsu=e:qZqu403(>͜#K)Ao5N6*q,'%ʰe) 9YK"s7Q" NZr=~B񎇑^:U2<+7ՋL"C9YSD%BhV$GG=ZMu݋R6ݛ_>rG"M+6ah^bbc<3כSL-v϶{*v9xְYa0P3~P$B[0 i+(:& 0fuF!i\%쁑\*cBo(]")Q!C6m`y9z ( a*d4mwhj"ŚYg Z;T?YkV= %ǸaY*!1$b=jN6q়&쵕)0fqg>nIH8-տ+2)6_2oW:4_ߙ%`&Ɔ-`{klaċgzTpĿ\R =˗IĖqR ZRAyMl Jl-$exC+3k72AǾ\Xs(3( 0y 1 p7F8]ke ^H !:tzje wc hEJ># -.bAYK:2'EE <]TGoC5i̻* 9eCq \xF4UH}!ǬSQϑ[[K.Φ?gHH)m3'R98[m{S־m0ŋ2 [Y%рp<[Rfr*!F*/}E܀T ol[JyȢU 6,DE9b WTX06Z|1֝o4gOPdo,e "c>q3_4HRn\u azyS.852L ?fAuӈׅS=6HvB!=}Ae囯 @UqA5>o 10-H$A漊j?LBipW }?)(F`nU;mR* MpR٢HOf:;\hNWH>8 eu68r16P!<[/P殝Tz,e_<D/1HScCJ6,TЯmi.՚y7YOv0ZCe)wa2Q[-@\:дo+774Wг׀Y#.Jy8A6(LaEYyԎo͡{ R:qhթ,rC+YWyJn!sݗ:îrsxQQ"z Qb w7~"| b=Œ؅WJeC"SI`-S;\"Oݸͧ87[<@75mtԥYm9ܞL~[/JкńYa4TAHj]!gNH0v?I5,(VXR?n0_*5 u3RB߳6$ĕ7Ϥ=0:")~ё_ %^U1 8:RtJr}u`٠6+u6B:\V4E Ch1>:[e9iB K}b5[IjV'N wswvj s򜯗΀ӣiU԰7qr}=t*QY#{RWSjxfk8[T[U y5DɦWV#'V&g>  ly 繁n)9`c3QwD7܊3a>I! b3fǍH%[sxY܌u(Za*+"f?Vȍxa;)riq6 _9Ż[k8ɨX <2: [ _+Č 5W09%d" `:Y"Ye~ 0mstZ1> =Zp㨷JܩnqD7Ed~I;߁/@p9c/F#,'5]bb_f93 jfϟBlUqJ/>c)S|9Gc !'>-F|)Sأ.]zaPJ|] (h`GVK6FLίq/W7@ l :z8sOjВH3-\f0鶇0Z\f#òHM@wϓme?NfX=CK(iE.,O? ԡuMNF,͹O{_xatjTxtd̓ g.l](|pbvq8l`*7eW{3ȟϤ8]6>9jf5n8Z١P"ٱ87hCX %Mhf EǪ`zG@֝筒LN^a# Ea^pg R^,͛awi/[PL]SSݲk9,pomY;bZ{.cayV=Y/W{huҎ5FQPㅿXMcLf`T~JP=+Kvelz;A7@~xh\}Vmz&sE.:O?5hETV(s[UݕLZP7MB%C\C]3\v=EjČB_ *AnfMƏ[p۸?OtWWPקLhf7_[uz۱7;H&2KbH 9lQ1Mz8bPF BCj(N!/q/7U z2S@8١hKW 9 ቻJvZ]Jea;F°}@\ YXH^4Y'" +S^ڭ:|7c|uZ/㣴@rb񰜼\$-C㻍@aD?]btD6x?qu,Ah8~w)*;ھ<c'}UGIih У]V$03/`Qͤ!QAjwl>A4CfY;U𡹸ruppB>!G0(]!Rdqّm†ko|PSxQd'()a, Ynay8BO݌cn(XY"Y ezk~00ˍK[ O/ w𑵢 ό|z fAGwHҴ,!I2߽j~ȉHi97o/xe#Vٮw;&a ȢoJ-wUک8}#!D_ihߤ>.tM-Jz ` kG:Vs/?Ye6U$`S%/n <kutWnc`0ib.\ncw@=$l16eи%)}OnVhz2|Dc*&n,v!.^eõIc~ њH;'T=Y(cU^7Oq!'($"]?(W5z~dZG%'h (a=H]]cm0TZexc $ҥZ#X\MhٺblN nan[?ܾ&XKu'vu=V.cUg>K7s 6 |+y#B"Cᓜz[|=O#{q/x%+:K|5X(⮴g4CU܍*" lh3BJdD 1%e!ʶRxgX13mzJJ7Ӹ};`MqX6LrK?]d1"&;a_ݭw%cJ>$M?xXΨCo:ڢБ|p8:ق _hz jYT.? 2L :j?Y,LN3}F]Z]j_KٕdN'.hraW!FzS06gc؂6쉌#?$_-$EoN %nJ C? ݦׅn% O{cX^Log#ûص~W.&&F0c .6,W9:bh ?醝h$d=s[{װjk+`.\HS@: T/tI2  ރ2-XlRD켋Qk ezs=lU;Y(fby29a맼m>7#5/B;Ul{-f-"-r@[UP+n-#eڳf؅mAjBK 4BTF^ nx3I2-5(mN}ZbK"0b >r2qR=r~~ 銩¥8̗mNJCB[FwN:7g'}":.q.ߎl|KݟܔEj^Dq0b!&m|#F\7%S_P}4E h?"+b?L4ߙg9v9ÿn0NBbY{rNqٺMƑ=' /'rE>d-feWz{Amt zP+ؠ^︤[{*x>BRJzAqC-,s`Qo0`mjXc7 'DK=B XqλM` mw q2uC%n*6"USwfB #^*y-z6"2IH1{i 3?׃|TuQE%r?[ 2,=G%njMa+<\zȿu0x 6O{@rR_+X8B*-sa' [Es?HE9h (ݍXWt)R(Ӥ_VB<-*+-zgi} Ga~0#rn:jg刺OeB$pAĐbxu) 5SǰK5UQ=i+7Dħk!'q|H/826<@Uy .A ˕Z3*dBa<@GSkQ A6,ΆR0 Uƹ2{[Bc>?O}QfGmŠ·f-)r遨,;|2)ϘpWmCKX?0C2! l8WL,#r]YJu]?(Y!N6JڧmQI < /w<,_^'9pè{R  wߙIZ(kofU$! jT2o4^b30PhF4h!?4nn#}=kwAelfHT!mV3|͘P[P&A2\imkoAր?zQ}g=a32W<\*- VHwuёn&hWO tzgMr#迒= Y'&+7$fif$&a))kqFt%Er @p5w{QYH1NjVC͓' 춯_>'>o‘m~ Lc!3ܯd,hN4+HMP>,mu`(/pv3$J${I t08bݧ8-_8vT Mo'c0pUGzRP蹣;˦Wgdޙo>|eGi>+bu9%J %xm8ܪ=L,e@ QV5/W@L  {vT736Q]OՑ2Ex~5}"Ůz%}BS r, 탶7)sDk0P_:a1G=a.kJ$s?aڱeigYQ v8ZPcIE4C  S# kT'<9Cx+^HaϩI)eU\Q\YNPLxrGAP;?iA93 Sux\?d5+;Nap TItAA$d,GgO]E H@2?P3zS51AQئ`<>^fy *AZ=U9߂©|6|.QaqQmF8ɿvBwA,vV-먴 hg D6z\@} |ܼ yJ~zHCI]0ȓ{sZ 'Z!3n/}CbcE5w`d6\(,W(§&K;F}rPfgAk}7}7QgW ,p*zrA`ZN}D٥]8A\$]rzp@)5! M{|BGo?BkxnmSy'@^S$[6+Ј`9hĶ) tT9ޕg̤Ѹ8AFs6-`AC[vOkLMj;P|ƝjV8S4SU5T}T^rOnO uja23e>ARgVXlȾSg#cmaumVaM?sv[ׅ  U]BIx&K)G5$QW_"vi3"rnKӤ*Q-;r^.}RC>6Qf1.H;N]l,KFY}/ T/1 %3y3dGH$?2E`O8K:pv~dѳtbqHf `o謁bI]0>~;Uo(KJ`F:w0ޥm=P SPs5Hr!n])fC\?CNe[㠞NyαXr{2)QmQIuʤ&Iq**mNcJ/ƴ hBT(0XkS87^N ۇ#9Nvg SL8 ^$Eu(\JUwUUc.Lɖ^(ip\M>2&\$ϙ_cEP%n%*K o~$$[h}X!~bRmCat,eEܨBBIZ~DG*Qz֧8kWy`o@Qfi̼nvRSˌ(Cl7٘wDH/@f;v.Ҿ!h9@ LZBOUkwRid*=,\LDކV3Dw /9HRhhkH*'UcpD+ r)^r>П42y[J$~+s A 2P"VItX fINðZzŔLˈ[3aHb$ S0NFt%#⡈oT ͔A_␤,ISĨ1SiQW*XŞG53w<;F2r`7b]rhys pfR" ]䐁h=ோGF7s&"NC¡٠tdHW\us*wͲ^"lVv&6(wkfȮ? t~)9iW闽)u} ($$O ,ShŌLy=U]U떦UAFji0>!=$o*#JN>]oWE9PQXX2ʸ$:y8xchf1ZfoeG1Θ7*އ c4.0VЌզIOgrcdϠ67?8f]CV$q?*28}SZmMy.jzlF&2\ /~P [c t m/oBA?70p3,l4ana23e#E NV&%v+rTF cKL.gnϗdNVBjd˜?`aKS ٢օR^(0yc.#ReFrjakTao[ZLqy6l_Yhb.3yB6JVhcHkgkp E/ך4:Ai`ͱ64ˇZrL^ҠkG6:AvvjuN>@KΣhQ5dZ:,++-NmHuUF f\Nkx/1/}5Xը?V`bFzs"5)$c W&=/Lq-N"؂G6]ӌBmd2"Ntu". 3 $B0l2H<[KN2"`kVE^Zcyfڣ"Q犨Voт~H>'ÎxOGjO]IpG(_C*?F]֟KP;\z,+K٘L@9EotىƱ pD T(k?Ygn>֦F: Q4Yr,XxI/S4kEU]ƖUXw,^ C eQHCkǚuFj&v7^1t2ճ74# 1fQAUrSI"uޚrY1I &ށ](!VJN"_x9iEA\>_/ږLLp?p,ǖ?&xQh}m- )PG߼gd`yd˵ƕ]$8,`g{ 19Te↼`&)y&zέ}e>Kwݝ$ST!ZĈ""WIԣXΪߙ7NQ: * -J}W#F<,J!UIPzX54N#{4U>:!c9ܲTX&Ëp'Tk8%sV~*dFt* O@1(dP(Ѫoy:f%fW~Z;N;3"yN /kSfQ ¬Ai#D0TLlŒǝOV A>mnTf>A|Bˠ2 #%*@ȬWU_IbɔU`\4+o/pv|I( 5;OCӣ9[cӨڄCaW@I|f%Se:UA%VtV3 ;ڲHRDixiV'nK0[kbBl,' T_,挢[t<)ZJ]6W!r\**)Pr3(jM y .`8DXY0-9'~,9*#`s^ω3ξ@QUeOlS 49aSx%c!4++<ٷ Y8B~-<>Zﭮ>& F,&!\2p_zAzS98=?x7$k jÈ9V)Ud-~o9p%̺߁5@yTiHT0p !<7#V;?jlh8PBz)$"87ɓl;JbBLyBsc>FT%j(HX`>U3DiR_6[ӣFV!<5*߀Eק4EB3cWNE3!a_`0hQ4(AbJ?!Md}([N E#t a rӦ'܍J( T+o:}}3ΠOCۺwPdg{8H))AD8Xp4譧 V<0XGJ|&c%-C)D@{㡆NbQ.-ZW{lC74nrDœg=d*L2ƍ<YJ$;[_dIx6?JtY=vL [a>V04=}WM򈛚&f9_e\]Z^hj^B}~è 0b:G}b4Cp=nG PF6= y#YyDaF#QEp0j"цa Co8k> EElZ%.@;[3P~(DƢ뉙%zDzF6oA'Q.[-(!,J|iAV~P #o"YP|%VT#5,b`BIATgSkPɌ$<֚*Jo^4K$湱jqΩ-ؾZ3Ჵ!&Gd` $Ee­k8 YStT}G|k]dAhH~{96-r8<rYni8HrbdSj^Kø̦^r +{<%hs7"sd&6?(9c|yoDlJhXx-jd$"C!KsEXvJ%L[sWZÛ=&KW akKl(/rsCpP{WFՏB /6-H59[gy:ўHgG2F?(&fv|V>k[Jk1D!\qE]v*03Vţ,n;dt=:v=B;,l]RߙS?8- k_ZL.%8!.V76$dnа{}\1|lX[ nsaMfqպ;-#ӰDr왪=/]n('5!ΰXFӦ is#]$/vOWϛ8qw)T1o=| h+~)ncZ`Aª ʾ9'r{dݤEF{vU;tJtbA|>2s7'hi7^.NY~ nb}0Xk hsܜoLtܬAcnij?A #SPh&-V_L8oDG0?WɁPawRƟ|o|Y7J/ّaCͲC⾩Jjc*ӸI'x$0TʒL;;B{Lzx3YN( '<(iyxk8)]N9ÁO3*f9q->@;T@޷-jgLGN0`gTm#U+'ߕ fȅ-ϏQCchEQu*ۑد(%UP)Qw<ZhOak|vHOt5(UR7}aA*rpo$܏{0!<*3@ @zfCa?&0vVqx>R#84s:Bu@ Ӯ/CDJb KlFS w e_qVU5ـi1i:$sO2^A$-ѩo(E0 ,,xO29tHKsP1"T!piÓѩFv*pPcaób_ܦ/[iUD[t ?(x`;SÞl ̬?3 *Vxs-F9ԧ?; 96X=.^ʴ^gB"Kg) C\L/{*cz~xȧIGMtln lNagTJ ɿ`+b[ + yN_8RvX'oR)PRm]lAFynGƭS y 8F@SBizc(kIQGNXܮ惘|Nwv< 1=yG]݀m]uzdiGh7<dA. .OaCG"rH?zrQ@O7-X .=v:͜tQ p3#5U+YK;h64~MI'.7sɡs~hdRЈ"lW}g||m$kin@Hml+tD0|xn/Sԭ/бwd拌hb P'`ĦT 2EaB)д~X:ZN5Xd{ԌjG%ځ3 Z D ~iqX?˴*eN b@Un>[Mg C5U_g?(; ׎B]j:-Bt4W:ak|PC^dK>#Y(?8GkÌڂX7a.=Ѥ7 SU|V[/yrjX c&Ib"@gͪj)vc#&ݿv ܻ/q]%RP Ve:K=g֚[%2P>}?)ZR*`d V\' UH$o^ 9MiY@)Pzo.ob1TF"(h2_5NRܵwY9b_Ozd Wv~ txf{f}h$*XcRϻހo{")i 96L6آj1QHŅ]1 -3kuP]JmCս o",7pW9ªtF\s_eJA:g@_ֽ9_'t! -iA"}S`C]LV K- @g]cQ2[~ ϭ= j?4UyKa7zAPWlkp0|NTT'P;({ȅ]Zis_e'1  O j|m\/y^l f\*}[3|ybI~4@C~7=M8>)޼lqВI働`6ۥy U7_ik*O̔3xuJkqkcEe?90NvHmgbbEz({¿ k@/Ỏ H:BfGc\ ]gEikw W>=gmV4s$N&ShcmCʐ9x$C)UHvO/&TML1Wf1APñRA3ԮJD`!JQwS+AS\+)kD&:ITu9:77D+x[2:B]B'̧sR:t $b~a(D3f0Uٓt6^%&3L04$z&cuGnί; CPb;4gAYƻ)F·O(7/30h=_םO9+p|_Ȩ9Ƨ(8+SoaRQ \8 ߫}֖ntL@[jxCx!d ڟqpK0J AYkU5GYn:j{~d>4&!RAV p4R\Tla/;2/a[B|)m# t3֬&2<[~(0I4%u|T`8pJ}o7*֪M*l{cOtxy+enNbb{6?RhsȠ}z ZsDΥDPB|1W=X;r1Eq(0"3*Юê҆6\ƈKLJ !sZiD}С.:9- uҹ붫'eoӾ@9o#S^OVdܳ,y]c9z ڤL,~+:+9Ί#miv5d-"  )ayAJ=4sx,-V,t,]4תZ͵#&qko =91bιqTft5=,BEUn2FETTvԸE Yz":ָMɽa>m_!yxG VYo}X%Iu#gΜ|hOhOV0%5M޸S қ{?;WT8O-?36tJettxG>RG,ה`]' nܱRBj-X,-2;_3#?~Y 2( E5D.b j~@JMmhdL:ڮ7QjqBm&l8C6c$*y)iCȓUVw_/d5Bn&ΙP.Szy?ب:y8]+dxu] \o c7iNicNXѺ|wf=yOn(-ڿP4YC1%O*)0oi  4 V:?t$L _S+0SĂsw%`G ߅Ή'?-ro,5vMBFz 5,pM}1!.e [F6Aov0ª9,ÏCYnD( nw&%F!ّ󃋁tUPuR?ʖ5rkRR?V di[Wu[ Vcv~"[K;xAązMO~ sj'o TFk@ E+s lNhRRM\h WӤIX0Ma 7T; w+Pe-G?1z}iVMSe"ϚݨBJ"Z%Fx/ZMEGMGZ>'0QD|kJGnHVg1̲~Uu,t5JF7>"m3?]]5$ &YdAJ>Jr ASP%n̥"?dCY6U7%D%Y@!n SOImz_zEIrXnCK&j2$M'/;;R<-n3UX2[_MѨ{#ƊWeY bb Dɪ3tfgC_: @h] % LE! ;۔꼇:`iv.N]Kl4S-f\D.C-YBB@ŧzΓp{w+$u _F?c:ǞhxxgOI )@#0,WIJ%$ oz9!E'd0{Yì 4v?54Eȝq4sw@rv1L_,ʭ|⧘N:;;O%: .`BoxJnS%{7~}Vb)ƾ29{3-h('q ,xg@3Bx-<q7opPíG)ٔI3IXAG{XYM|ӡ,#clB&u*"/YIDp` Weq D`]P[˧%Qld"k]M2f߭5HH#BGp?tJx{?8"TPsͥGdΎR!暠d=zK\IJC-rnӰ]RpeK@qߜ;K9 5,\haMH*Z,z=iv]Q84`9iV瞕T*)TFϜwíλ py~<\zr7)4hυI~8 rkmse!NԫZ\"6+J{) EX!$ |Q࿡5%ѽC}) J\.]043 ^OQT.""\ɊF)]+ C`uҠBGY!T).oyqQ,&ơPy1a}XYXMScA2HYٕEa?@o,/̛L m귝A$O] {oQ-+ϋmLPRi@#/ǯZRi趠:n6#}Yt9bEuɳjAҟ=)8NH Xh:} I;AeI-ӿnO7V˥m !ut+yAe/eF\5 J,"Rz f̢+\~TjI>+o栛 p/i%m ,S[ jFjrPNN[p'JERʠ!9ZEzSab aWÅiC6'69o?ݯ,ƦE؟ۼIS>ֶRE}@Ix=EF,qNcF ED_4C8b 3e ar$̜`Xc'g+df`\_ڃ+Qk+bi`_)lS(;Ԁ5mQʎL1*i P6Wg5;l;X[&.,+7qr{=ْ9zy͹ku nr#@;f#rU] ŲX :[|4 6gZ y;&qk1RޱE_fJζSu^IAKH'͇xB=?F*z 6 ddh?6f 'r$LЌM\Ӊvlڦ+XqtU=Y!p.^[ 0%WYR 5ZʶlBuGϡQF|1+ylcIk8j/>RBK{>j9FIPtp.)w7rͯ!J9QCAЇǧolDL-!bz--ܒ?9j YZ