pdns-backend-lua-4.3.0-lp152.1.2 >  A ^C/=„ |^;3Gs:mҬK?$y(ik/4vI#v&lsZ[G(F\]#c A,PHlgṼa^?Bc{Y:GjzpkYo4 `nח`1zı\Z4x|L hDZڷ[¥IAnҍ,Z~VA% ȫp *zI;3P[k,ZBZZTrJʟ"A0d2ca9ad0a98b934c71d0e26c85dae937e15b2736470559e0aaf6e1695ff2a196baf185c333d313822f57947ed2d736e0c66829e^C/=„OW*kAd,^v{y*ث0Y|4X"!̸r(>$/ ʳ-i#/-]Fô[o,d[W-PE͌p& las+jjo[J şej,HT7|.i-zScYa"շ%yrK ϊrVzhYȰ gj+Sַ՚p>cX?cHd # 8 +Oiox| ~    @k(8999: 9F`cG`xH`|I`X`Y`\`]`^`b`cadaeafalauavbwbxbybzbbbccDCpdns-backend-lua4.3.0lp152.1.2Lua backend for pdnsThe PowerDNS Nameserver is a authoritative-only nameserver. It conforms to contemporary DNS standards documents. This package holds the Lua backend for pdns.^Blamb578PopenSUSE Leap 15.2openSUSEGPL-2.0-onlyhttps://bugs.opensuse.orgProductivity/Networking/DNS/Servershttps://www.powerdns.com/linuxx86_648P^Bc205e9c97f4fb9ce092838f3f3293247f676cc6d2058158e5a5df64ec225521erootrootpdns-4.3.0-lp152.1.2.src.rpmliblua2backend.so()(64bit)pdns-backend-luapdns-backend-lua(x86-64)@@@@@@@@@@@@@@@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.4)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)liblua5.3.so.5()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.3)(64bit)libstdc++.so.6(CXXABI_1.3.5)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)pdnsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)4.3.03.0.4-14.6.0-14.0-15.2-14.14.1^k@^@^@^@^`]]i]L]B@] ]@\@\@\@\[[[@ZZZЛZZZ@Z@YeYY5Y}@YMYMXDX@X~@Xx@Xx@XN@WW@WJVV8UUv@U>$U8TPTи@Tи@Tи@Tto@Ta@T_W@TR(@TO@TO@TO@Marcus Rueckert Marcus Rueckert Marcus Rueckert Marcus Rueckert Vítězslav Čížek Adam Majer Michael Ströder Michael Ströder Adam Majer Michael Ströder Michael Ströder Michael Ströder Michael Ströder Michael Ströder Dirk Mueller Michael Ströder amajer@suse.commichael@stroeder.comkbabioch@suse.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.devcizek@suse.comwr@rosenauer.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgmichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.comLed michael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.de- Update to 4.3.0: A lot of internals have been reworked, with some visible changes for users. If you read the upgrade notes for a beta or RC, please read them again! A notable new feature in 4.3 is support for hiding DNSSEC keys, which makes it possible to do algorithm rollovers. This feature was contributed by Robin Geuze of TransIP, thanks! Another interesting new feature is support for automatically publishing CDS/CDNSKEY records with a single pdns.conf setting. Please note that 4.3.0 comes with a mandatory database schema upgrade. https://doc.powerdns.com/authoritative/upgrading.html#x-to-4-3-0 - refreshed patch pdns-4.0.3_allow_dacoverride_in_capset.patch - dropped subpackages for mydns and opendbx - change run directory from /var/run/ to /run/ - pdns-backend-lua now has the lua2 backend- guard ixfrdist support so it is only enabled on the distros that have the dependencies- add ixfrdist to the systemd macros - add instantiated services to the systemd macros- enable ixfrdist - enable lmdb support on Tumbleweed - new BR for libboost_serialization-devel and lmdb-devel - fix configure option for libsodium- Build with libmaxminddb instead of the obsolete GeoIP (bsc#1156196)- Update to 4.2.1: New features * Add SLAVE-RENOTIFY zone metadata support * Add configurable timeout for inbound * for gmysql backend, add an option to send the SSL capability flag Improvements * Register a few known RR types * bindbackend: use metadata for also-notifies as well * pdnsutil increase-serial: under SOA-EDIT=INCEPTION-EPOCH, bump as if it is EPOCH * API: optionally do not return dnssec info in domain list Bug Fixes * LUA view: do not crash on empty IP list * API: Accept headers without spaces * Avoid database state-related SERVFAILs after a LUA error * Fix broken edit-zone and other features with the LMDB backend * rfc2136, pdnsutil: somewhat improve duplicate record handling- Update to 4.2.0: - New features: * Lua records * ixfrdist * a new LMDB backend - Important functional changes: * the default UDP response size limit has been changed from 1680 to 1232 * the autoserial feature has been removed - pdns-4.0.3_allow_dacoverride_in_capset.patch: refreshed- Update to 4.1.13: * #8157: gpgsqlbackend: add missing schema file to Makefile * #8162: stop using select() in places where FDs can be >1023- Update to 4.1.11: * update postgresql schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (bsc#1142810, CVE-2019-10203) To fix the issue, run the following command against your PostgreSQL pdns database: ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END; - spec file simplifications and cleanup- Update to 4.1.10 with security fixes: * fixes a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (bsc#1138582, CVE-2019-10162) * fixes a denial of service of slave server when an authorized master server sends large number of NOTIFY messages (bsc#1138582, CVE-2019-10163)- Update to 4.1.9 * #7922: by popular demand, the option to disable superslave support has been backported from 4.2.0 to 4.1.9 * #7921: `pdnsutil b2b-migrate` would lose NSEC3 settings. This has been corrected now.- Update to 4.1.8 * #7604: Correctly interpret an empty AXFR response to an IXFR query, * #7610: Fix replying from ANY address for non-standard port, * #7609: Fix rectify for ENT records in narrow zones, * #7607: Do not compress the root, * #7608: Fix dot stripping in `setcontent()`, * #7605: Fix invalid SOA record in MySQL which prevented the authoritative server from starting, * #7603: Prevent leak of file descriptor if running out of ports for incoming AXFR, * #7602: Fix API search failed with “Commands out of sync; you can’t run this command now”, * #7509: Plug `mysql_thread_init` memory leak, * #7567: EL6: fix `CXXFLAGS` to build with compiler optimizations.- Update to 4.1.7 with a security fix: * Insufficient validation in the HTTP remote backend (bsc#1129734, CVE-2019-3871)- Update to 4.1.6 * Prevent more than one CNAME/SOA record in the same RRset- adjust buildrequires for mariadb 10.2.x on SLES- Update to 4.1.5 * Improvements - Apply alias scopemask after chasing - Release memory in case of error in the openssl ecdsa constructor - Switch to devtoolset 7 for el6 * Bug Fixes - Crafted zone record can cause a denial of service (bsc#1114157, CVE-2018-10851) - Packet cache pollution via crafted query (bsc#1114169, CVE-2018-14626) - Fix compilation with libressl 2.7.0+ - Actually truncate truncated responses- Update to 4.1.4 - Improvements * #6590: Fix warnings reported by gcc 8.1.0. * #6632, #6844, #6842, #6848: Make the gmysql backend future-proof * #6685, #6686: Initialize some missed qtypes. - Bug Fixes * #6780: Avoid concurrent records/comments iteration from running out of sync. * #6816: Fix a crash in the API when adding records. * #4457, #6691: pdns_control notify: handle slave without renotify properly. * #6736, #6738: Reset the TSIG state between queries. * #6857: Remove SOA-check backoff on incoming notify and fix lock handling. * #6858: Fix an issue where updating a record via DNS-UPDATE in a child zone that also exists in the parent zone, we would incorrectly apply the update to the parent zone. * #6676, #6677: Geoipbackend: check geoip_id_by_addr_gl and geoip_id_by_addr_v6_gl return value. (Aki Tuomi)- Use HTTPS links in .spec file like mentioned in PowerDNS announcements - removed obsolete 6370.patch - Update to 4.1.3 - Improvements * #6239, #6559: pdnsutil: use new domain in b2bmigrate (Aki Tuomi) * #6130: Update copyright years to 2018 (Matt Nordhoff) * #6312, #6545: Lower ‘packet too short’ loglevel - Bug Fixes * #6441, #6614: Restrict creation of OPT and TSIG RRsets * #6228, #6370: Fix handling of user-defined axfr filters return values * #6584, #6585, #6608: Prevent the GeoIP backend from copying NetMaskTrees around, fixes slow-downs in certain configurations (Aki Tuomi) * #6654, #6659: Ensure alias answers over TCP have correct name- Update to 4.1.2 - Improvements * API: increase serial after dnssec related updates * Auth: lower ‘packet too short’ loglevel * Make check-zone error on rows that have content but shouldn’t * Auth: avoid an isane amount of new backend connections during an axfr * Report unparseable data in stoul invalid_argument exception * Backport: recheck serial when axfr is done * Backport: add tcp support for alias - Bug Fixes * Auth: allocate new statements after reconnecting to postgresql * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer) * Rather than crash, sheepishly report no file/linenum * Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate - misc * Move includes around to avoid boost L conflict * Backport: update edns option code list * Auth: link dnspcap2protobuf against librt when needed * Fix a warning on botan >= 2.5.0 * Auth 4.1.x: unbreak build * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)- add patch for upstream issue #6228 https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch- geoip not available on SLE15 but protobuf support is available.- Update to version 4.1.1: bug-fix only release, with fixes to the LDAP and MySQL backends, the pdnsutil tool, and PDNS internals- Update to version 4.1.0: + Recursor passthrough removal. Migration plans for users of recursor passthrough are in documentation and available at, https://doc.powerdns.com/authoritative/guides/recursion.html + Improved performance: 4x speedup in some scenarios + Crypto API: DNSSEC fully configurable via RESTful API + Database: enhanced reconnection logic solving problems associated with idle disonnection from database servers. + Documentation improvements + Support for TCP Fast Open + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK - pkgconfig(krb5) is now always required for building LDAP backend - pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed- package schema files in ldap subpackage- Update to version 4.0.5: + fixes CVE-2017-15091: Missing check on API operations + Bindbackend: do not corrupt data supplied by other backends in getAllDomains + For create-slave-zone, actually add all slaves, and not only first n times + Check return value for all getTSIGKey calls. + Publish inactive KSK/CSK as CDNSKEY/CDS + Treat requestor’s payload size lower than 512 as equal to 512 + Correctly purge entries from the caches after a transfer + LuaWrapper: Allow embedded NULs in strings received from Lua + Stubresolver: Use only recursor setting if given + mydnsbackend: Add getAllDomains + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace + gpgsql: make statement names actually unique + API: prevent sending nameservers list and zone-level NS in rrsets- Ensure descriptions are neutral. Remove ineffective --with-pic. - Do not ignore errors from useradd. - Trim idempotent %if..%endif around %package.- Added pdns.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322) * upstream support for Botan was dropped in favor of OpenSSL, see https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released- This makes the schema fit storage requirements of various mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch - preset uid and gid in configuration- fixed use of pdns_protobuf- update to 4.0.4 - fixes ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. - send a notification to all slave servers after every dnsupdate for complete list of changes, see https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/- added pdns-4.0.3_allow_dacoverride_in_capset.patch: Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3 backend- use individual libboost-*-devel packages instead of boost-devel- update to 4.0.3 which obsoletes b854d9f.diff- b854d9f.diff: revert upstream change that caused a regression with multiple-backends- update to 4.0.2: The following security issues were fixed: - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-03: Denial of service via the web server (CVE-2016-7072, boo#1018327) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-7073, CVE-2016-7074, boo#1018328) - 2016-05: Crafted zone record can cause a denial of service (CVE-2016-2120, boo#1018329) For complete changelog, see https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- update to 4.0.1 Bug fixes - #4126 Wait for the connection to the carbon server to be established - #4206 Don't try to deallocate empty PG statements - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer) - #4252 Don't include bind files if length <= 2 or > sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-devellamb57 15896582984.3.0-lp152.1.24.3.0-lp152.1.2liblua2backend.so/usr/lib64/pdns/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/5314cd841acd1c1cd323272b4b1d52ee-pdnscpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f6fd7e7aa42b4c73547c63d99e183d2126479534, strippedPRRRRRR R RRRR R R RRRRRRWUj@= 5K[~݁utf-895e48247b02cbb832eac116fc7594fbffbb40a0dfe01b077bfaa4385c7223541? 7zXZ !t/ ] crv9uQLL yFe% K=b\LJ  .y71d<mV,$56$5Fd$Wߧ0]x QܳBU*9D"b_mCI~ w{bRJs~J_O܋p[D]Y`4AB/ QEҬAZed f|2Z8KBW77p0~C2xN[^f[?H>[K ҍiTG-IYؠEr)}+fJKhaXccHݩGH=Gv_!aA?l3T)U=zg+lүllsZ1$tv9ogPpn{3vPيmcCgs9%'qVhv-@u-jߊy_h(פ;uַROg_&qOM$%$k6m& jCU+\"T+1;99$by:-rkeō%ɒhd}}A+Ĺ\ QaITF~$a>M9 WVFfc/hgGHӀuM NOԍVY {^G#:s-҉(V+f `VPAΦ2u/(J4AO8>l(g쇄1-7t=eʖgjI Y:ҁ7 ᠸ]s.o'twoH]ubRV30^spCZ0X~6(I8" F1 U5U B'&O"QBr(򕴀e(R:Z1jQn.m#!r ,en׷5mɁ!:ə7$aCo4/e&*"p`*4ھFηXmAؑsdgrx%ȷD3_H &r6i s 4FEa'v鹃4Ml͹z'F/6ԭ$_o+8=H: Bߝ8{U-MA+Z+s-{&}λAѤ,=RQ.SUHHwL"d۟xnfxJv! ?ɾĴ[+,HR[ C6naL맵[_OQo6XE?sjϴ]>ymPl"`~ dg%˒BIsTMm 4f Q@ֆ;j KT T,WC7y6ǽ7fOpՒ'Zf4u5fvPyM]wNa鋹%`т%#9eUSve5{B[W)3] ^ȩ tĝ #G-Ƀ6ɿV4؁a}@}QړOVS q޵1_G+E*uC/6" )ؼsйuH]?} +()TE<)7" h>bxgrrŔYXTkwvۯgPt'r o%k:FRMasjϣT*~ωNH5q5#0Rp3.i&‰ EkcFٜܾ n6嚝iE-4:lFė(_)$ wxo2`49p+YH4,ǪxÚv`Ř%8vo-/B]ƚI~3!A>m1\޹+7 ,D7Hs@W;(̭űmr {T [yVi' ;e컒F4n.}Ux%stpUM鮜8qFG'nk-Q&bM>bpWP`v0e]EJ阢K Ȗcxo`9 h Z3iX"U#ev Hñ cLڳ#w +:.!k 4,l2ĈOS%RY}mҢ`sfj#H:+K 8m!27grF<@y.CF[OMP-T3Ŗr^5 52<7Ad,Ru+/pX6Iˏc'yۦA H=Jm2XK#4:-tg=xal}&0!ӥ-ĬO*{)1=#fWp/ c*;@jB,=%YZwh,iS-p8G']UAװiڅOOD=DVL'5~:jSmGg]8m *+Q:<.M~+>kmw:}̕x)RV c9׫˭/c{r(yy? ,3(0 L(,&LǸ*s BnEsjʐ76DUD8I~:W(yEWb~.Kb)^zH@G$5llڪ;(hP0uY_sʫ -#/gWʓ% ;cѮ UJ@otw$ =ϘX\i)9DG.rLhjǷb>χuiuPsz3bHs1W\d8<2yMΚ1W+yI"6&Plki01;zû.;H#?%U-EyJ\7ldP5,EF j]CZFӖ]#֌~2kx#UT6W3ۇv噝gށ%b|֫ƆZ.?fjlvqRxrY3 )5򈊯!3@9 0dK++k˕B# @*.ڰGUPاYAgX :m)`S"{c Ճ55+*ka4Dk /F "(@CAg4/Ma1$wNIgHOS{_hzzA>A,r7aM}5&lDz@~|.mB׆/S*%048cQ[3"f*{z6U8KP. dd!J aV>[$Kt=p\p)rO3P1&P7<ki%GQqt !!yI"ylPV :e,0j <eBaۜՙ*>6)&4cjdtkp*nsMjq='2g8/Ŷ~YXU >]X^F56f>};(w eց&#(9k<:%Acu ۂ0T$ܷ o3pKs4ST[\xjCj"A)G&FT +!U.:[+gGfc!I z{U6isw.ѣPcUך^_ 8KE:8b;Ǡ(#;xe;sIG9| xF:qDW?9< 98$Z=RۙݿC}.ߎ8cL_&(u[E~AT=oۋ:z ^inwmt(Q\GEvyHG'"{>:y32aα8}hH4<0pMhBIK4j#AO+qՖcų'v/$,+R`-e 2%G IY믉` ~@|\(hfDcb}aȧऐҡ/ՁV=*I#Yd/J2F۴n|כxfc8:@,?bVd˂qUz tgpH sњY$jΞ6HEȓ4L[:*/9u0mѢSYU'c҆[yM+g`Ҟ Iqv TϘIJJr{ۛT#2aK~'ދ$0t" /đbua[I{9G.qh"WZLR-tb#׃SoU߂Nƶlx\Ll_@ЪTI`b^{c)XW'fͿ[sI^_g(Ϣ`YyCe SEAUf?x 5ڇV4qлJuu\`U) ;sNyظ4u DŸ茫`G(NJ*٦ 0vUvBhw.YT8 w+X/A pܥnmxdp*Gi‚IxwU‡a};_8gy ɪQpTLbpGv4\Hx %Ui0"+/@[%2leT̽u@>܂^)MTʲ3)'jyr@{3jt}48೾%`wDi0k$B o^(: mg%p:zzD'^,WdWuq MF9Vsҗ$bKI < 5E0ӈG4{ u4Te;O9I?kQj/2Gn5Po"&ۭĀ 紓y]5ľs \Hp`rG~D_s{mK-p(i޼cڔ23qc\-mGM9>4{p>08_iB|1NY;<Щ|e!A1oa3.54Ҥ2}.zGpS8͝Փ_ 2zІcޚ9zjkɥr2U.vhT $]wo l}ן}?4lp㓮a`#/(nZ%y#-2e `b "'ҷWI\RrXֶ4`0o#pEndb dȘ.vg+z.psAj-PswY7έ414GD`uRJW̐kƆg5[8jHF&H" ߷%塈)x cPXȫ"4M!calQ0Vi\ܢyÃ7oSM+TzB+jrJ_"O΋ QY[LNc.0Pxyc`zU|2"z }Wxt,k#l+i$PLgRz!aӹ57g\$kŰsi+@ﳀآcmĻREpA\ 4H7w%6o YIzJar ZzSQ/Hh XTYjҌ#8P;kkXp #V^$Ok3dNaojwUzI-A8_@N9r æDC><Ç$%5e}%'i0=iGmzڸЇy^dy'I"~K k'R,m^ZF\ORuMu/JMxBfp/yIt} n0QaZb߬IǏ~t֢'3j:U,eʪ@./kJr0<Y.оpUE+g1xAyZCd"<*+e3IYTSh)ɲ)H3KqТ3 ΂{o:XWmmg% GVhclUh̀[X@]7-FҹO[%1$UJ@Ywt}D@ߚ}-Rβ]OE'R{+fsN* ~}y K:6` D?_"M yQhMLG׹ɒV>{.,@X :ER1]|? & $M+qL3? Gka\Daf\20)+^z&CA&VvJ#`Ltjk?a Ps[݀$|'lu(wTg ȷGv_n-Wɱm6翋w(">j]rŸHeGM2`X"GquqsoXUwNWɹv2b{ nQG$Q>*K]I^k;Caxc]ˢߙ=w܅ %M>;sڇirSRLWegW||Z1J/IA:^"_fMzׁjfTspO;_ˢd cg^AbWz\e0JE) y^Vpxp{)2/}Xt'ϻL C/uܓ͡BUY}[vs]sy~S?fGPDӶ7RAST'<8 'W|ք>O(@ =ߦV3M"ӄeT">Աoz 5ԕ{S'\wOA`~A}.ByrjI`k[E,iM) 5 9O^q|֭6k~ w#-qyl t- dAFzV €$ZG筭YtnO1 C{{V'ad%] m8+[y&<~d`DLZZH$֤IxMOb3[quB?& S^u3][Y­;8*ȇʍEj|)K<$)()'Ze9(k"+qI1;?" aó Vml-+CO bCi-n["r$.Kr:P{̠wt\p)ѩCUTc.yvOWHc?xwfewfQ\2^m6=iƘ)SpX3< :Y2$ZYJDz+g[?Mq֥T+*Kbmuڸ3cx |-Ic);]$oHEfoC}6yNdVU^(vU)L( uULVQv]疇!R8UɡF=SA/NJ'@s݄ u/ku$&>SΝΊ{~m:f|TpYF~7F* L5TdO~@ވS;ĹƼCp ]P>咐GC0@Lj>~Y&&Y#JB2&Ѫ,mKs Rmu43#' ɖ2}H[ U w㟧!LF)3:iuQaKd]?`337vGs{x~beF"b,=ʅJ>PdU}&ܱ&+A-#և|2-ȊU O+i8:PL lq¿31lXZbmAz>-c*I~mL'3{ ;߯cqԆc7o~N6 !!ʖca k1惻7{Eߵm4I_{ka*K^j}/rB:>E 4OA!-Rpk:\+e>,N~r_N>? 㒨Q6i=Mxߤ .y'a?zjH1ܞm .6SGـE̪ M^cɊ鬚'9{G nŠ/k~n?֖݀S~6l\q&c FUF+B!aʊ2ήe+mCqb &8BDFfmLŘK-φcYQe`mm*r&iJ.2T|̾ d>Z޷O8*yUy#n߆fj_% KPc#9oπ:I=wJ}ܟr%BKH`EJ֫sthds¾DT? MV h 0ف>te%QwFf[cW^jwJwG ?;'%" :]C4ycn hȆ1[bO؂|_BpDZl|+ I&h<6:kR;+?ЀPoM!'2DUk{g0Άv;uN|n]Ep!trN(Eoʃhv6Ar -)a#Ay|%LnHسsɿ~ъLǃx{o Dzrnqtcŭ3HYoՏWы4JݲOsM[#u剶sAX OuN9.dmlQB~s˵ d)u8HU60k*x]1ňo >R"?PioDr0,2R'3-耬#-dGheU K # r<0diNvu¼ [#OGܥ奸e⦱Je&Gʌ{]> RP !{}N&cߗHcxE3=in{xpjkLJt. "3~?0r8:Qilr ?tAƁk5L,-7TExEl}˾m"<Ջf2wu{YFibk`+WB:&4F0&B>ɲflyeߠðgrl󡗪{+X. .vBl׾8a@#>?s^?~QFeMȞ4iP+l`Iq$3Od1``Xl}71&ҳC[ף)YO);vG ` H:Ogx':$ 7l4WBg$A9s'lW=评Z|GN߸d]. "шs_gyDNQP=/~_=@ '^pϯ~G|%5P{7 w8mT6AN њ%"KT;su@Kd6]MOTyV,-ƶ&FƋN"(Oh @H2m \,af);Q`ڵv*ӭÇ`I4bRz4lu;FP8iKr'{ּ9 jwZJKcݚv巧>RqTD xe7G`uuikǬeğ ?umw;yQ࡙S;y(# q熑# KR$Jf7wU)/sIDݽ^D64IԸEY/r}U⡕omއ 癉X;qQK{ZuLZɨ{6  ]K\@^IL *H ~6yL%m\`,u݂jabq/7"rZDű1&9fk>$Un,m(D2Z\@_V੿b8Vke ^DL/ANdʇ9h,1BwW _J L؈mP>Tr[Y;3/f?-\sI_rRAc}BK'Tv!N8d[`f:.jڨ3!k`fz~D[h#z>1q5(;o+T'-0 oSP&~eu#Ħ^r6ᰠmafw-%^%Ð==]?=Qhx-y?ڥB_JW~Z44:q=W8R֓6I.SAMcm<M{jQ {pI;̵ȕ fpS/2\Ӂ< SȜ^UlEԘΔW}0mR0SOY~m1:Ȇ qO<*;Π5 ].l4}jKQ.&TWm,G4qF񾝽2d̷1tf'z@6$ $@!զ*ɂG¨Ek~$=T~Gŕ4ytiW&*ߐϼN;0"Eј\f:z|(3^Ck Su m:T*PGjnf )LPPx w*J%-/!{ZgBښ'\ۇCi}#{dW\.]4n-(\A!B?DʽB\ϰ<%5$WS7Br[!pMƋF3EJФ Yn&!;Ѯ jaO3Vf]m8c"NވF[Dʱ3 Z#'„^q^אo'[30g j2!guH.в[_卼 `;D(4BMH;L#x}Hp鉃>0~gۀ=-4`gDAkYTRO!SgwoC]A+.Ԁ0;ҤVbI&D 9h/H`nP`خPA߅z%xX2qR'O[bΣ}\۩Sz}}^pG93F7J(~ѪE^%`5$8QHl\ UOA": %KNkpRrݐXTރv,ZF#(We $̀z.ICK ۟qUe<= a7uN>=+( R,7_omRg}n9_Z p6Mtm)Jd;{ڽ)u>ʹ&P_|1I:+xX6;6#௿ sɘ?D[V9^1@\5eHuvCrȇmB@Gڧ(-qd%'c_TAk=Uye96] y+هS#/u05DcCO!I= a{˶sb”Z7TWP{~I}-fv _HR+؊?愑;vi;*T(G rs|ܺED_SuJ@O.LV*wjYn[*- >;#6<򂡸8\asTǧ TQQЦ<N ǚ [ |Nv9.ߔLVg_`r%ϻLdt>.Ŕ\o2''wV`cjپi-IOQ0>g!VNc>mX`OQ3n\" adCRlCh"B!`1z0dhdaYE(T-K%t3~4k,BSډ]Axx]qA<+ohlknF&jJs"cOSZҔ KW#%˜iK&0!B(Fî !O''K˃th}-BrwMyל}o`ݘ" H4d~*D54څk1j+Zob2}+y:O}/^ENޑDNƹjgѴ>[53!r)YKhrMILgR' f;CE y7V)0w.}25%YO(-3cP,tmО~Yk~Mt9A8%9{r5n%+T3g ObԠ;q]YkGxIy"$wywǁ vuZPةe~M4:3W;狓ɱ>}h-\/BMU UTr}ʫuEʺkLІ˞֏1(S/BhK+$siO.*6_:s>6/@? 9ǦhbاbQax+q# F.NdY h$vw%:=]TwOM4$0 ˑJnYTL93PdAHMd5YTcR‹⬪umfQO[ ظR5XLtZ׮NA`i*6=. y(6t[`,%hi(^vE^w:C7Ҕ5AEc/+;`{1[k;5D0v i117ԑL DCԦZ<Tr@ k]ݚ٠F gE|5wtP8t(oEgVj#81H;u^ĔUְ݌J=k߅8L <7Qrg/{߿Rǥ*]M1vQ},lW?aIS@bCW̱s\.@a{1X1uTw[R l!'R|$k-(ѶQ+ZW͜", ФQx|R;ŔdapMV7|]2#Z kce<34Sf^v 2̓W^ϫWʘ:O)=nG>O"*z֌y75yWn\ ]+:+Nέ3"*Eئl'S1kU*X_B +>%86^q}b<ʅ0C% Ij S)UO<; nM IHCb2])ʾNtI:8:7B9xVˋ3V }u0x̥a\a*Ӟz-zECQثxVGIuI(8dxyK)k4uqGOfɄtzy,nEy±FwG-*ǧ[szy_aP-^pLKҔ^qVQRTt) ouU,I'$"H4Jը_?2RBc'\i}ԏ|צn|i`-x`UFstڮ-t ; r,yx1,F- ;k!Ju+#m)$^׹ ^U3 -ԱƁ;%9H_M7nG z_jZ!OћZ5N2RR#^E\LkjBoRKt:YEp^;ĭ)QI9-=x!ADڰǓm!a9!Zx*2Vxr On (wBX% n 74ޛxU7ҋ6پ-liQPwΖ04 7iδ; 5}&#HÕXT}/})nPiҶc ݤ^z̟N6 T*pv7R.|ײ=45`C%bX2I;^EplíPO5p%QZNE. aLCE_[' ouMϯ!sb¨^#67~^MsV)[:\<]+A!)~gԌF\TkM׏s0:FuoT{_ub'xfO9XοX8adѦa J(ƝUBKhy5M ;nļgt_:[Ó"w6 $l{M dv盘bCײ)8gѮcw%7!;6X)t6EPj7=S DbƲg}^.Ǥ{Bd2vr&oo VCs{emjE>4-jX6jgUuK1;-3a<ʎGIUs5?~qh<HWin#˜ϩKՔoY}|uG٢aeQN)7Iϭ.AîDcoKPDMӞ FV!xӔ2u^4ӄ50[fߤD0{CEѤ5l/QZXZ9 =%(i@{lXۉswW?47*U+_ğAX!&y40'k5ZRQˆp?iph8g4/Ŝw/D3KA|UPkna$ׁ!OSܯtdQ` 0U!^\U$BCMӻy= +Ӭ!Udp),| Z{$.MblMa>a\қœ=2QAb?N ͑uoId|3<1.bzU=q5wMѐ{NiyZ$ o_te?D b7i F[KTQ iF bUkIe?4@ (~sMW-UίG ੩5[V?9VsmFqBhM؆cyreYmF17. :ϒTw-7ƁN$eIpеI7-Ƭ; ̾;4C#l2zK:)̙D7x4P/,\̓^K{z S :iAu 4kMs/svBa1/ !I)5;ĒlBE3ю'5<>,t:_~~gtn&6pۘHpGfnd}ݔaGᏊgQRE@;fYf:Ql=KZ4euucyL蟊1ӅZgż#ϮㆻnU`n/AzxIIwRbˢ|j5}-].Lm#n*+[zU'70Sk7B@,BL=L&v9'ֻQcHvW}񚡌AQ{7& _RI JTF#+U%*6ɂ -ː7? ?k^Yh31q|6U+2s8JP#kgQV 1R?ơnvyq˕uj2KQxb?W/k&fdٱ߷JTC|nl5 gUh[1gַ^2DZ|n:'2UU(g30=4Ǔ9A E˱ap!|a~'{-&| ng\I η/9Ok3⬮|K{2T>g w sXX}{=4H׎}̆@n&דHCvx*t}"dcvbқVCS!o9,byX!V7&gB(\/88Pwoo//G yPQZ{ٳ IзO2'N.`Y) (iٚ;qRdiik~U_}1IܙǩoKr+oUaBYF~*d:-VS%7ZqT֎ASm!Z$ O7dۀ+7ûNyMf+Ӥ0un$RLCc)5ߐzyϑbDW}^|κ'B8>;ŏq5piw^6Bo.7ydrJgr8+xq3*MDÈF`H3"dQ\iI>uߵЗOWXA:! }yZ~Iw^ ꂼ\Ū@+!\^hDӂ~>A <)yTkFOcW…Ԧ11O7VA"xYd,g2ѐLsci-N{JHJUu]9 ]\G,0GI26a\rA*gHfc#^(8t7CQDSg$ֱ?_Q/&'я JLV$wL!KN h(Jnp Z ZOsQ,6-(+? \W,[` P8f|]v@uӽFQP+Zstuk*WN 8RUՒjy?) HgTNPnэS:[&~ڄIB)B4o(@p?-FgGPх,қh!VAc:,焊. /2KЁqo}TT!5p5f[ЫE H?]?f7]I=#VԥCc'n8}v>;Hղ>cw5yvɘaOΤkid(vCA^بnN*|Q[K6ex>Ё>E){2S,VUmT:-98ߘPGjZ 0Diڸ7Zdk2 :֑ s|*!ū|orrn#հx/=hUCT:ӀozX 3uHѭ}s^(mSy`0;4+t.PEyvNlk)'w1b?O{ i-k\L]ؐevh(f:ܓb(D/O8s~ʼFC.jq&V̲9]B$O[\㓢rb`,٨u:b\Pfq5_uW^,/!QXGF{0OXЍXF5j}>ӯ_-5Ax(ovyAJ^"yE2=Gh&%uFA/w@|]ѝL2]QgoJ V|P<8_M'ׅ!5) ?~LeD."IOG_ .oB\( J""i51tN1t:XޣR._ds{d=x߳oOx+(Yy%BO^21r ]umėܭ݀?罟;%JR<ѿr`RK3_SdN" ?c2DhC;Qmt`eD 5p=XB@`&RE2}Ȟ2 :59=" ]K[ FFjX!댾'Dޓ_vKƫz߼ys6 ,Ye-ru׻vt D>B1ӴΙR +qU4Vپ[x!/oJ:`Ҩ'X \#Iկs9,%@AtЕ5jp<3cJc QGk;2TX !V3VI:vJH=rٌ"&D@x. ~$< d $_5qqi_d+Z$ނU?uF,Ѧ?#&_&o8?a2gI0^5e.߂oN*i8eVjx,+,sPi({n*e E #٬+d.jhg1 wU^zh${:\0o^ڌz@1 f$BC{a?U|iĶ٫ZǬkTWۙT/V(x}vĻ$AĐfƠdPsȒ&+}K\x|U?vh+ٱ`MשXcm&qͤF2@w+SgcOtb L?5.]sH=_:#0@U5 2"tdSqk§I>1m OQ3}38z--2&Ͽ~'H Q6K489-ڞT(嬍Xds! J:dSKvv2?zsO3QX@3K@peh@);X3ó1{j[Fr-qnOYSR18|I8oVfLi"f+p0B<^!N0]M~fZφ)ƀC/!|`:_L%Ɛzn$ 7mVKqH%Z$EBXѿ*V?/ZGkӅQLV8lJx7^īN]QqĆES5U#֊nHdV00m~`HUajWLp4* IYme.xEvQܱZ-81g>BqĀuM( }(~cVK O1$~ɯLs֣ފ"peĈa)ȓ_(y+guh3T+jJ~VE(יt7=Z'#1~?VCC 9.p H5so6f+ej=z8"8d&BxF]Wi|.Rʖ?d"@* 6q?fsDC|$E|]0} Eh46b PwԢ׻k_[ր-j`M)NK**oz8JB z8<M^71.YHVЉ^̆d1\Qd8U_/_an2z("Dz|$,k!nYg:9pwfSұ"5br+V.0]\QCRS)Va΀~e^㠨q e _\n8d rr$nԋnDQ?tT~5$]p^=V`z md2 P mZÜވњiցj#V&/BDLYš#+Θ*֞1:P\$`N{3ǨˆтEE4$CÀhG^=or 8=_IDD5S F&n_* w̡N}sY{r V6bO؆Y7EfyR*UBU3j%ʉ+Kf>5mAED 0( s[ YUd83[Ě4 V쫯C#]aqB2l:m| "/cڇGwk:H{F>^#epVn$L-6Q %ߨ5gl0lNyFUU#:*5nzNH)}F|pl?H&@N@HB+N9@Ř=9/x#$k<; A:E~+GUsT\c zUk(xIzj({y}\']Px<" b:î\,E*4jf`C c$R)8#d$E(e& wھ-`DST.w깼-z뿿}clp$$cC Pg/3~t>@-Mw N2S3tH)3۪ywˡ;~ʳuw3_up;|t?.h)u"no?@+B ohgoÁv27Ϋt{U8ާI iξ0S}HZ^UX4%Pjez@ ^]^^rؔ%_CGEg{~uԸfmn[˝ުpR,Fi' $QcA-_N M@|J,Zᥟ wR_ЬkqZlOoM~1c8T1௹%V[ÊZt."ǣ6_>M7PuM4{ufκIΘ]<倉tx8|o_5FmtmSFqU3C dga/20mOF_kSF #(_T8#jyH{+K\VPE(yu%U ` <&=< ~E6\kM@txK脋AǍ3Bk(Z,x+A~>ٔ=C! POJRqBsω}I9b٫Kw45IWK}o^Vl6mLKv_ \.[}ekO%@'0upY~(p!up^)3/ܬ2e\4R јݖӵ ȳK.;6@73$G=2,͍7= Ѫ>f+T/K+Tģ%dux@$[QWWd hS۬H|j5.\ ")U !'f9S)C=9hI za/rhrN0mĥ+yooKt]x. fZs-(7ΆRjiY#8):(ScAZvAg[ =I1-. "׉AhǰnAV%=G1ȍ䟑uK/>t@vid/|J=τ49G uj G..>S[6 oǧVg _p. ';׌h,ġ~+;ԛ0&-kHNxnBqx Ox99 [E3m}6A}C=e~nZ`ermȢS'EI2?q?9b_u,II r |'muT < C%.kSuϴ&`8 kR!{0c,g4l{dI$Zc꠷YJQgFIQ'i~p٬yr|RLmL,^gR~D{~z\mC5U 4vm|"[VlۈAxu& sAg2i*#H z8?$h ,c1~hh~_ ! 9]q|WWJ+mqf- *d{ϒ5)`$^Ǻ rci^&H tKĒ}_CK— :R"4]ׄ^įETp$>8aһH\jx]:N*G*V)N+HpYLCD8bG>Kƿ%LL|97Ytt3JY\ݲ1epH,EhN`w3H:W!i;Лǚ~d5XEzB6Z n5/b&bZ\m&Ax2 ]],XQ3'E &h5wC G%8$vOCkd&FtqGnV}gͯz@[|%1VQj jkf;'lZJX8MԔh # vFcqZ5+@錂5_R8r`wU6b,ڂtZ,.+Nbe²O\*H *[j{>Kw6:Cݩ@˘GR"x0 OzRNVds{Q&b:> a2Q>x`apdl%4Szp;eA.޿×G!nnK@4!A챇fH\[ϧiz^xHSxן $k=dxtjf=;,+<7 qӛnֺ3!X?TSXjf[!YT$#=9?򈣀Xf_Y Wy:[ (AVD`uŒ-zȌD|M;]JVlu,}V6b@YaN0?12ɭ7$ ґ[oGskSf)XfN0Os4 na[TnLXn9Zf# tP;׋`[ t.kLLf⍚h Yی"sXJW`͂ǽ8 }p{cxe [q:h\WN|X%qD3?ǘ:A]{3 `pk| &/`z:,Gegnž\ƺ)XCJ>[bTQf6rZd8S zz.b!IYz8ȮƋƄ ڨt `07_/ ? 6]]hgEO<>۸BxTl]&7J].mzwN7d#9Ζ0t؅z$5ƒ.K_1鿏C]w#a.xG-lyywڕ9˫emDOW<Ͻq2.*A3H}V:/|$ҬY/5<{]6>1hLO1j6N[$4h=W㚥>_G( oQj˨nاR~2AeT=Ff+N* 2iwMD9hG[%-R*BGҍ"3팓 (BQq3DyŷMP?2/m^`17S<7Z >:[Aی0eA UD$jJ l翙ѵ'WobUUl/9[rq+~m !`DegW1v}@A=y`RJjl'@/s=MTfUxHqǡ]k`qjǴaZޭ>(_XeLH3Oij A2t3h@·: B_Iֱ~';? QG%oq8m &Uhj]O<(/3i)t pn984bL- B6ʠ뤲'pMS6%L^#,3%700G]¿"G2.K[L =f:u*Q7{5 iju?q:ɦrrpմ'fcRP*  Vf`t/9:,4>ji]ڛp3g }}z VO.oCP~pATۑzcap˲/3r;ō{ູ_^ڻ/Anz+DC-ǣ輞4 ˩h 7 |:Fqp g _G㺎wtͫ >1 .W&BqN2ɡ4-e `DحX}#4@/~ L&SO¸[]+m8+&˂. sD;Lr6vz]S<# `;7XH)Z Q^4âm,G:OU=Dh୿%Cb LrV]+{YJהQ/}|{nd~sLo:r IC0#3:`So //_ݣvo`TSAE:WdV?>5J4ɈZU~wkOE }}K>\Kݒf`|hb!N~MjZ?1d}\J'q?=^6",a7W9/\i8}a F^3Tć"YY/ңisuQR^R\MJeJߖ:D$^}PPJ՞L`IVk֚sP6ę5E#HKv$_Z <_X- lfQ*oh 83UCVuRnamP,2`~IIVl ٣x7<_K;!n5< +M_H{m*M=xu@`פ"2&QFuxMt5 6+'hP[ՔzR0ʜk^e.DKZPB}IRV}X"xye F^e!Bi-j yx>}Xnc. ؍-/}j|#18LHМݼfCYC]@hd޵ŽFMwxF~HQ6= ?_wfT Ϥ\G#*_fX0ҷbEjHԸB#ݯj+2^#t>zڲ) ܓáğBgD1Pz foy =j#$AZ|.K""8o4s&l[Yyl^8|c])/'oʅ."^z(jvF+q/ B'[ fxៅjl"@%D ;?B]!q ?D)FJd=$n',FGݸ$%]4}ĔڙE(c5#)3pY}{7k8L R.&/w7<$LB_Xc hlGıZFj򣲻42 CVRM,"x5mѲ)ދ (1'tN!yOzq8}Kwaݍ&Sjkp)I\o8{dԏWMM ӴXyVzw T:}-Ϸ!O zHhz5ȈSP0y0@4BR,>Hb-nX/ST_#n BV)-eS*M4/׌]Rx{8*0_|SEl 2O+^D1wEjDݷx:@ kFw2ƮQ[րI{H_.Q6Wep|Nt|"Ԍg}!K9##[6?W~hbc`o/ `eLK*zhU[^bPZ5l(GCJ*D9α@qE  &I 4V:;LԧVH_G,DIYc ˈcDZX]#c:O}g9o\P`!{H>ߞE%Gpmdy V8p ⩸@+!P:8?07]AM6l{&i s8 L{-u'6+10sSbw:qG[bki =dD1 Bq_ݎEM*b'bՇȽ vp\t"e_E^Ą^ZDGEb-x @/֦2Z{WoͣH\69kcW QW{ {7ZCx=z(}ڂGGJ l|]ex"q_PazNf Zs[ሔvz $Ju@G0![0`RD'KOg7in$N7q ,:&ԟ m& WqK?,x6Lþ~KM!7f}B&~}`Ec4.Fel;tU<BnQԠ<ݞYN2 !2XB)%pKN9 EO[0#ɸ!Bަ= C!\|:-ޕ[n ?ـPVA'.oG8y UuBh~ \&Z|\HZ+\y;tlN6@,@,U亁ux pgAZ?)8JkqOx ,CHּٕ%:/p $cG޵Oj^r_<I\n j5R8zY)QK?+YO bm1j]ө$x&pTIkߌlPo9Rm$`iՊWGbkPYpLy|c_I<&adm,!}%G Yc,N T3c0aI~.5ǶQdƝ<t Z]WΖd!0M (OQ>0`@A>9%7[ujr,rFel, &?wGЉJvxq(W'M0urk0[d5e94}. tQUN=kM9O‘u-a(Jq`K}T_q^a,XZ6a%Y?eU䠢Omƾ4Ήܸ'aGZ*0l=-0c_UAyt2(}Y*O-ckMQxDT$BNgivf^NG9ٴ!VǬ;MZ^o}Q)4qDzxO#}*gel-_DxRr-Ft\_ 8l3)ɓS/pաDm(Ҵb7sdQˣAͶ ߋkOqrW?oܺ̇C+f( L_fG5t$lE50L2ŰV_ rlg< ?߬iLI}JpͪjJ ADal?@Q2F6Z?ݚzh?w?70 v My أ}Bѯ#Nbt*2O6a}xk\ +tA1$Hm'J~Oo2q^USJkDe1f[,WM'c TR%fب^Uש(iyVFe1_MLs "ִߪ],6C<6l2+?9ʲEp-ʌK>͙)ryytRbΔM]%n/fw nbCeỌI|(K ZeQDۣzcTo 5κg1̗ h7N+]ib3yi/ dQ{E5 @f uaCl 8@ K -tcm5dZ龱m!C N_XJ+Kh} 5wye1X\O.`Aˀiv? cAX$"s,/8@!־@C/p:֊X9MWD4ഥ,O>v&D f|AI.g+11)1b5y$ZXYUsz.cx.#]]~d%|ZdX/]I7 R A--B6Mzc-/0.D}s04 C%e!O㟐^;.6#!KKt2gy2 ~18n KLR. tm9PyP V 40ot4" XN̝#?4rZ߇f Fo(2ȏΑ1*]oaLZ=ʧcՇ=O>ý?i3bJ0`m-ZaNLG{d֒dД㱣7`^v[fCa;PH7S-@Xc}78u*T cyeuV<1_ e P8lA':+&#P/(6|;/_8U@VAy3Ջ8]խmmڮ t~if˛Ѵ w)Cj J'*ai4s9P⒚BfKY -2Ӱ_TTc쑽TP?:v f6uF'?b#Bxypze_}hSS:<$ Jjr%ĵf $5l>=s^?0渷2,"k?$fHOH:0tËPr%,y~꤁$I/פ-EW` dwo5 E\ҕ90XhCSCCQh!萚߈ǐ9jsh!BuSZĞ:lްс?PhN\. k|7eV)x#|mPlB+sSfz>\4Yn-ٸ'7 kuh Q+M]v;QDC\TPes-F=8~  ]v ?>MbI;7A;tN]? #5obB 4[)[lB,¨\<9(8,I yS"jIN}uݪtl^؍ 9yh/aVqz@C:a1ؼiPӂETCPtj]9JuXZRyƥWGmHP,{R͕ /IOSeW޾ZL$ɁkLߧ/Zi eg=\'Y[{`Cj$Drdv|F C3P@茼y||Nv]4$ވ sJ"~3192]JsKUIxjݞ.c>l+ڲimڏB@Z ޅiDKU qmt3o^#u5r{?-7\zdc]aDž`CQ̂ r]A=k}̄}ZtgtYFSd\CNKnUB)>{h@Bğxfa ߑSs)ɯyOr3&ɛQc[5~b^șs]S^;9攃ȣU5qvkNn|PvSX2 ~̈́s9geʁզ_w`*K~ɶ;}@qfA R竛J*~i\DQ$̄% olen@į=NxO}==dcW#1r[bG^:Ix_kj+g\pOhCJCcӞ*<F9V5s׺ִG`!/iyۢyGeF+2P-guOPۿ֘VIGIP9fa(qL֣BMf Sx[4Ȭ; _Le4?Z3FU ;?f#Ӕ$7;DlJ,'Q0,`nF޴=Omɾ==Mb񡱎s5TI X1`+7,D$ax3Qh&cKnEԡq3W=y*^ bZ㼷jDa꣡([;Kk1`pcƊ:=7XHUӬsK[œ|#[;K*FCz*["]VCr>B 9s,ي\sM3y=%ve1{ ii]z~juᇛ3oQ2%w'4M|2֚$l . ~pLzL>mM)"!AȎE &Wڪ(EsM:_0J pZPU[]FUm4KioS5`s6!vޮ&Gu7fQ ԱlNW3p~>i,#yp`kR[[T\3:] ~}C,Q:x6:Oc!cڗxޡ=g_UqotOY >#^cEJ2~1ЕBӓX'`A!eXˑ_m0^:I^#t/ȣ e Hsx@wעѠVĢ% S7+Vsˮ`Ȗ\2V+b}HbI3?6x rR'~ރR8=ɤ1 ^T<ޔCBԩ)zgFi347;aB(DdO6kG%5Nxm,?]]4~L ԇE ZTJ׵PU[y444O+w8u 2hHR8 a:޺/l4$8YpgK /e 6O6SEq;!f[C.7n~"oAd8Pa2UUf3'a3UBrR6NܶFg{d+3\O9J!+fX 8mG J ΄ C;!&+b.ezrbf{UÚ{گз  +: x)=h.J?hҥ {:nqD Uft<LmӾVIZG-dR _4,̦Ԑ,ʹlkqsiDv~#e}CgZ r@ksh|b~?{01딴N3&[鶆n& tpsxtjӈ%NF2FOwqF{b &Zx:ӹ ̤> JE"3iE3)/VU">OCw^j 008ӏ$Vnpf$({fhǐV[ew?]+Zdx(;@Ax[w{%|Iwŋ_$BПb(^طI݊܌)b4%Lk:w!>eg1P ^! WRǧcx-fD2rlfi=g!rCy504E.:c_3afkJ-.wK+t\`G"XK/*rYmXWП>fih@1qF lM-:"&a sqJ o"J y(i(m0 v:( |s! FR2@:6[^L5X9 1Ǽ}`U`Իb_29YZDD}ґURc1'gm)fLXVKo~ m $I(_gw Q<[[%Ƨ&n,{`??W{?ZQy҉WZ#ӥ3ńD*vtR)Y2&\- cghx\( %uwg/TYhVL%֒B п~`r])`q{5::  * (Q703LccX.6fJ"Nؠ0Μw`\O 9 okv=UVg(<Z5KD">W-|G]:oNƌ'(^@\x3*lj@cDž9_4]!){R1b:4Q}ȹofS4=`oYWEOnLƀp;\YpB'PƼGD+{"ǨhbaXAloCL`}dE3_fjc}%#Z$:hNvu(f@ ViN6B7gd/49O : ^'H*m3Aܭe~v>S gWحuA~d^I eNߩ1 Th]UUz;՗\\`C!R'2VnsLxQSh`Vnd#"Ov4Kf4ԕ.Ju?ϺSVbU ZH;pq݁K.Rss<&ƨ%K}!QebQm7HV(3*DW8yǼ_l:m@|z|<>Y>)w_='zIp9ndķ0\e/Ԛ:+zs|śgq8chz'/:ǪΣ|wpTKx,^<GtZ=d(} 1^L^h9-Z+x^Qkõ=?tjY@ Z)#Y3hfʺHOtЭBXr> uje]ޝ󦨋7ˀ嵍u IZͬ4v (mY2"jGfj 8M[h`gRdb!6Qe:8²gEW!sZeHcj,L`_8?IBԳሺ6 H.c t&RGLz"d.;v+teuxm2$9e݉Y`X]'E+#1Jka T˳Y  \Ihy1(M>C`7@б`'))ФD4l(%*~*;n{1~x}5%>_DڳS]`MDRdL=dc05rXR" W1⸬r&*.(r 2{|wuTEĂ&YbxfrD?K3aQuZ/$`r{ os7R%դda8v\̘cmDulN~{ Rk-fxҌ~D (UAlӅy1ޅ(sc]zcژs#)BkG )o ωi(Q5rj!f>+*wlJ+K!dIYcl&s qQBx5DɌきMCjx/ԏOP13eVNEK4^H~."JeZ:UOCu8Umi_(t^ladԊ@A%V m @?ϥSd&_zOnxsRE4ZU흲֐;*Lf^KEyZ{ʙt 7QTGRϏH,nIn87G񵬓ԁ>j >{Z&~EM -h[*O*m9,I0o x+3/(<qbd] c ̢v g2NL ]XhU]Ëa'<ѺqUmvF@b%FVQ-b+MQ\I6@񴰒ڗpx7hXhK#_: ȓ8 e~]_0ËPoP;Z]$qƅ{oƦ@,@ /7wHʄM9uFtl 0}LisgQXZcL+i<,~,;nDF|tX g\av5ej|a'h|8ZJ}B2xh >$8[ͻ6UOt~PJ~ pOx6 ROyѳ:]x+2EF0.գBƮ/7* HXeed0]JK5씉{`?4diI٦yXtf5T2Gf<:  bqIw?4|6jdd;#kqMs2֟lpng_I^uS=5 ECi U`51K?iU,SA~UllG' VN7B7#*P䱹*Rgp[X'G2ŐCުyBGF;XCɯQ)iY:wy$OyEQ N*QI6dN%|HAKA&hυE8]5 ~ <ԒW sCE]5{, ,8ߧd% \r"E;nD$O25c5kO3 t*} z7 ppcGٰ2ʄ7eȸ@`<Ջ]U oZ.3bdjkme& kqQ`֊:7jsv4B0/.m4=t ]u/l:M*> el@ ?=gwdz[bt#¶ >f즹&yؠm0&~FV_]ȃdИ̛\Y|=cD$_bϫ2+ E^vz3=~p$;vkHU)=6Jᚻ~|߽2e|a=N`wʢC{qU(ۅ<$moFdkʫ'dxu8.sYse?O/fqWhbJ\\Kɥ2~XEmiŎ?Sl.)Z3o*g\72f()JI%g@.vbLܦqFk@ɁY}h.k0C׿7DH6̣/_N/Dq+;|vT(,&t~֙hz_HeѼ" <ڄ8Pl5 'Xy'`rC>]cBfZ~R4N s8&1 #~EdnX-,{c3FIx+%]u6:0}`9h(>!݀N+tE!{wD6 VR4LшxG~dR#54qad)Qr8ZKc`¼ۨF.GSt1@jcTɲTt-M)'襐6x9zn~Vl2.B)(R{JR"cЎFd)V/&]s5u\b(Y T!屃ru(*ּwշ\pxj۷hDF˳ ɴ˷|u$BQ'VQVKơwϵK?#|Ԗg>KޅZ/y??99Ԛ/]I䨺z |zAJAa ]tq*Ma> `;V #*ɂ]i\Ŝ\Zl7Ek7͢'/)h-Ud$^U=zox4ȕڰ):#ts6ofZ% BU,j6$t [L]bx2d$$[ß_aӶbH"(Fcz)Sn6 ӳ0:Q"KAS@9I賖gˇdKIt!H+-)!٨:!ca?VlHQTvP|gj5֔籧m# )$6wva_jJA&h6++)z.dȥ~@,P-`EsK ie~Ѐw ﰋ02X";-t+YB,'uh9vj} tN iF0zN _“9u1KÃeR#ɴDIl@ }L#QzIaSV!Ez“ մ.}[NaqD:^zh?nV4!'Kٜ{Jy(uAjn kX3tG\r':ߚ#-r'R_-2,?UYCt;2L*&8U 'rG%)S0Cs`E x9Rg6~Ds v*ooR~2w?gmX.6dV}9=-Z( :z3򼣁ߊ;"ԓHƱ޴;'YֻИ HD"]'50d,gtT= &\JZțv)o~03l'+aw1]bF<'Atm4Ijj# 3گTZ"ŗ&JQ!'8:>*k[!x*V㭵Āgqr_]3`3?0Lb85._&,lB]'[x!vy5ژ\u !fR{-Mx49Βq:}CFE]a(H& }D JcJOloohձA$Vlk㮙u7Q!S`)/!(ڐ5JQlH_c!kdZ`-byw>dbv '̾]%qJӣpha' J(JsLf"?{ Kcy}Ϲoz0Im$P*$c% haՂ 7{`-w~!K(]nN$upgFS+˭AQC$$ʵToNd4=*ҝla;81Ђwh9/ ў/j{r#iJGA$p_<n_ "e"L)_E)7p.tyXuߘ u7b)}`[*PO=P~Ι/RVCb}⨘Ti^1mC.br"WEQ݁H\Fil%#?}Qx7UY였g܊6 ("H&%ΥD@lU{OQ2x\)R8 #> SuNV>>bf!,ed+3P#یn22l n$4XFߤγf KR[\.D4oC-8# t}qp*-:gμYY\Qݗ˄RVXslBH-gm Ropk{1@Rw#%#o:nFS {ߧ%J@i@nK%vs »I{=+DT/!;7|=}ô0jvUҸE_Aj^nz QW2+wy)HhyX! Nn̓a)ܤ 0z sw)*;=?5zGHskF?ofA0ݒdT/t-/zdێVv!z#ᣉ)^hz0**ȡUvl_z`cP;IVVhfFbb$817*BGWA> }|Zl0Ȣ<WRcW$C'h^oP~gm%jJg}FoHD: !d? ~s9`hB9 T!m)e%%qC2iZy('@yfA./:5|@[ !z۵?XEQ7/mR܅,l>w(>n@JvRw0BL4k qv:YO~T-u!'p6՞0g38KEɴw/Sٚ1tnH%: eM euu}.]&hA"<ꠣuRjw"9k!hZgCƒ65z%*+(zF&J'A~,hR^ gۙ`܉qVj,I:,lrFB-!F'@CMC9&3?m ;PcPQ6+5 ϧQ<6m]뙧(IfR {mtN ?fDP%J< " *R!Bb˵qоh,[u@{=y 5[[XzLH1U.]G[_┍5_5ʸHNvXY JT_Z;y{/UN'R*i?pVzM̻Po /Aϕ"=<*Uj *mWTpfuTV|RdFG 8 e8ZH4Sz7܇z?Iuc׀c6HF>B4w1tQxѷw2b6^qf3*r^c%'0_c^߿ E^ЏQ(;j H<4nx DK4".\ޑ88vؤPA]9'յ(vR.}k`0:QE* NEmdV1zoat.Ŭ9g@T%MٌB^iؠ߈5Iz;j7|rbm.:$d!XhGi}cvEl٘LAuN'`=a& %2t Ρ= aq#' O`yO(!`Vq^AљsJR!1rXS %Ky )lB-*MƮ#=$n68"u=pdd-Oڊz41$U/;Ó <οDN*7}_22-[ 0k "TSb 3%w-爧@K@BH2W=<!όFjiף_]xԗaL4 b:ĒT J6hT\'nl=2B x{Da;hyZCFmX%I!}_޾Ⱥ3Cp*Jo0yv墙Te?;!P*auI777NT[r0< d,KX j.͓ WYRMZ+jUz_`f_k>YC 0T_lcSKwpp DŽk=ZRZ2UǺQ>kfE=x,ihNWdpf*Oiy2?@PB!KA}SȻ9lrYڬ 5 )bNӗVԝNr&JC> yq"/vS7G^(aZY}tIiC,/^NIg79'>9`]QُbaSv^[_u~Hx[C^-;-S($/!)]A_|܃s{uS7q}?Is/W~T6 !ڒ󚯥fxavIX&ZjpF'k| ^h_"3Ȇ1* eݾ>r_2oS*< 1rQgI5:'JΡ4(=6x ~ik'*KeT!T!;U_T\JjoE>R64<$2F|@* RHs0;5k@>zHN{a~v0{B5`]B@/[LbonRČӑgꡉn?ٔuWJ0/PWTThƤa'F]|]?`j 1ՂN)y'Uo#@J8SqU85t66TC}IwyD?9_EL@v12bG,/ ΢.TPB&so>" ʠ9'ᔶ[$zLrU#`v^ȹb_%7FexpM!FLcَxXV(aEPViU4jH?T9{5Wg0Q}@IB+1x,P7r<*Qni|IH% $fFZ־ 뾾ǜ X7T9IT ~Ҵ3 |-FOH ;&Œʹtn8Mm7dYH%λ5H6q_s궓7UVwh۫KXLxtڴc*hTv̥ӍtO8˷ծ\t2 ]kיcg޽a@ꗾ+Swe˜{!bmsGXI< l"_恠N⧛lF+D˹5[&H|d|Zxib8SXM';X؍I㱊AMKQc._\5;lP~ajS3b;2Ƌ6༡ iPї]l.xFîxE6,"LoYȽ9ϽeR 1?s N,&.OB;zx 29| Ml ϸ#_3t1n9r$NjG=(AT/Ybߑ8cZ/r3HEA;b}, Jo|{dæ LPkS*ƍd*Qتe0ibq ZjZ>9}~ (CrPX{ _]}=2 $(G]fj`(K9$seD^0H[[CϮoȑI%@ā;dɰcS[#֧ W@.I`p (,ȎG8ԫ.=cɄrAO ?ǹ o;25g[|iP Ji m }4u ]Q';3wge $#pIத9~ᕄm_yD覚α1U5)j@@ls)nﴂB?hx 5 TnX/ɛe3THQXzRwۛ^$y^63XY ̀$bT bsQd.#OUs6e""12t\#HQޢ &($i2a_"QE(ۂӻqBĆFuBkv AmW'<23M"Ҍ@Bv4PVv#'lOqC1sZ,AX^sAŸJ{bV"ѷzjͺu(#`( Up]<4W~5DzffG30r?HnOC8蠳(_ ({bO 5b~$DgDU.s:7$m7DkœdS;׈M00͝o|a5o {ni"N}aAe [}IHFvLWrH8NYj0@nM%֨ kc>fUB8+ȃ[*SʯssRO譜S~tHt$+яopi8$n0 p|t.h}d@op)N[Rma5󇑳Q9~M[x.{c]{%0(y*spdmSpʐ)_1\2/1?%>np B/%0oTnh"sIpqu DVL絍b^:AFF !8W-8V{YYx%B^aOsܓGGHi$S FxAD>9V؞"Y/H 3}/; /,͡_\G4R15,8.2+B1xG # #}*հf/OLHA[ =_q{Gfn]kX Q+Ԉtl'!N/M]8K+㲍Ŷ/ҏ``~ViTU36 1'K)Z癨|^i!~Ϩ7sa[ %bcj_T0RUUG!TQ2Q+)[?XP4`%Lf)Zb"/LQ[=0)DR?_ⰕkV "*h@t1[L7w60XMЖ{fL>n4A{1)'Xxq-9-^"j?NZEʲJEY$Vcp>טGPfwȕ5:sIؘJK-YΒxm8.eӊ:s0RE6h*-kq;NB3rPAkn~K`V[1+]WvMn1] )wQTMaRU!#?3nU0Z=~o3d{,Qʞ(հ$,^f8;va' Tg'EVwu^h%qN8wl!,{s Im OLuCxP#E1s,v`,Qm % t+7&k. } qc0AS}o^B81KE"c_F4:-o<M(7evTW֒L]VF9cljB{,{]\LS^76~(xGyS)'JkhY! iU"1ux`HYYi!/=r^@<\Itfo H=gI/B}\0&&x, @e.>%|*=91k_^Q^ӌ%4{$ļPhxJ$ [=;?ToیEE# HӺ.&REnsrRiQ\ 1⮳H7v>!(p>\h vT?`qswp1T8$4f7fFͰ^ӨGc4\1IQ G["1ˇ(\j+SqkM>CԳۇ/23f :dMgHT"_ؑJvVP.|Mb |-y-Z(!N+-k&v2^&Hfd 'O ={$5@A_92 SFSPǓe?$9z'p|IkCL>Ƕ9lywOmh?ϣ! ˣ+-6K*(ۡc @M7 8@ʛrMwEKҗzZޢ֐8 U| Iu|iE7ҕ 6qy @*ƀZvثj _̴oޕ9(Ӎr r͸F> {P5@n߷@@ږN,:/zo WYz;ʏ=N%pbUdgN롌I`ۖdp #xow@$ƍH[\1M k8zҧɬ6op0/;IZv4 a!//᠘sjˌ}GVb hOMsGs@,UՊF=c}5A ق,k=oILD*)[=R.cg{fYt qMOpf12DI 0P \5kTMxBA*AZos^mVv/^f `;kdoL ڜOYAk Qaüzt+!'g[@z" > {e[YɃse2M$J`cuJVD8mdSP4 Qւt:HO>F6o+qi>nSqyFӛhTmڵ~daD-ì}\g H9eӛ ?']:.V6%Z^&U~"n( F'Y/m?LlM G|IK9'P0s\3K1(ʴVYD-k~־HsScFY)o)s6h<ص^X!c&b|G fk:RZh7&b2Hׂ?C\QͿ?hSh2_u&7܅1b)GȉJʾ <C4}``rZYX>I7[S`蛏^ hm5.wuhp6I%dB: rْƔߐFQ]ZD1 Y.}Mm~Ÿxh;X't&5@~:jΠ{us ߩj)A<BTWUHOl ^jC5Zy&15":8Ee\:M@f;'D9^`㨗"G9.h&`['*8/me&,jy밸YdbZY\[6A>`C[Y[$*Dm Pc,+*[{+'Hgᰠs+Gc;ˮ/{^2jV5{"͍&m%U?+"Poǔ7aSTo.3v^`]yV+*TMpyC uv̾ɫق9IN=nhYJ~LUޤj=8ӑYX ?nVb.{az .d>B^/TYM冊peNwI[!lvg]}eT%ĿzIyR^fT ȿT"?li-yk}91R DJ-׳BL V*%;# -SV D؊B!z%r2~no  ioc@&H;\?XJ0˻h}ݩ ^#W&`ѭ~8CYW[OM _aЄ<'6hQ{NLȳEA`iN#&bZ7H &p-u^ruV켸ۋF{{wduK1?Y8W+TƷe`F *ַԶc;*PHoϙ;@=AYA2ǍϽ;4b&rd3(C;& 9|dSymkj=avčjX)oI 硡yp,`yYJ-YK{fZ87-yDwq~Rs(ݲ &e%wIv(Q_#y\V_Dyvw*1[Nڣx'=5ub+w|"rU䘊lt/-E_ݲ  f=Ne(eqCތ \D90`"x$űV۩wxJ{GLjLB%4L/!G w( 283ue>v; 7@dM3A!E &S+ȴ*@͹}*9%%>̰т7ac$? K'&Rק>ҜUAVZ ME).Q}_.ETE~Tj vDR^gꟉ!"c~2"iN2jٕqR[Gn͇W{L]=.x ZgaÅOҹPh?~ |S~b( ځ@|lHwҨ&[Nbԏt;%kleܽ=UL Ch$ƖsDaiSE$Я8^/ fwCW`-ڕMdc$x=ו8…!su7-c %xq=aa))gL؛[I213!=RFlz!sAş0S D*Ffx.Ln1K㻇+QonY鈪Ч34Du # o s^5AWOwW lI2TS'I sfIē:!(ҧDxy07h썏z,6W-?^qPK;(\llSDsvAt-({[wQ#g) @7>@ .D˲ .ru 5ej2S8F눉V%yrANt+&(0 jйuN92rn&_:_zB{tBd{qݫrH6ﻋv4K}V|{2MPQ7R %車Lw A~#3 ѫ5[Ky2vw\@ۥo s0t+_3,o˓S!WO["iSMa\ dB=跃L1)B P*</!\Y8/D;XJe+A7ٚڗD3ԦQOdk ,n#!Ajƅpxz=CeE[fwsU@aD֓G.y|X4j2 M,2)W@(qq근.. a288)SuZAơ9/% BPJL'O?kЗwt1 92s~N_ H}mFqW@ y S3u7F`Hga&: 1w%MBkQ_UOf8(ՠ54{Lg j  6_ts%7"ƺ#STķ'}gIТ9 'jH; FWMdY=p wMG'ޮUh|} 麱dcZy /m10ŋU}`t}A21{/"\ T#cI3s3wm6\¥2L;Do0%XW^znUFJzT:7^Xd\lP/WQS*G/&0fa(K.A~xA5Bѡ\) 0dN޶Wt8C*}~?Z6Y*@?l:e aP" Nyݴ* uY v{b͘q56IV(:℅;f-ÜeJXҚJHx,+ y_hZ0꼎Qd 4s>nyr',ĺEz68ӋdDG2DOwA LOn(cck,0%˥srMG_갺^O?=ӆHiA~X%K{L7wO+_Bl2{H#D1)U򁻛-=Da 7,R1T >U5]w2: * 9cRQ @ .vbկq_Y= /Zv:*/+|tTSkt)"茪 ē0eU{vҬd@ſiX S$>ߝI. y *\˿nюKL#$S{`<%pVRL aB,&X "ޕqMdpsO.Tn# zF\0$=+CP 8#? &/;4ZNjM\ de.|EA\; ')xSQpPx=+ob]T?D=D0C}#͌QPd/Oy+!q>W,Lx ^FcD4Et DlL^4>uÙP`:SP58wɼSg}e:KQVX o00cVͪNxjXse|^gE7\:|{}o_ 0rҪpzGzȲz`GH-i4 1T@dמF&Yd #Q /eMQ8K*ׯgbmtު0̛2l9 `rġk^K<Ir0hί!>W&L^WM}>3YRmO5ƨ4Ns֘n)?NAMЫK8fy0&WD!;us߭g1ږ}0e tW1N><F&Upb(䕞FRNcȂ?{"L o۰롁ăkӠ/[d W|1԰/o冀 +GP, }ԟAPT>.:,N,֬Ɗ7"K~ãN( [.HM`/gby2>.&x3߶t">Зk`=q b\mU(0UnU=8V;}0TQ]f^w0Mgs{ҦYSk*-t%yɚ@廰|[d~}Wod-0 ڜdj2hQn/1xkHN`l3$kIRT ,6HJi ;I E͑0g;❶m*s.2Ht~fsp jX^8QHTǵz7m'dWcFw@bY&="[?_Y sY!g)N+̕o fI|a {Pß0d|c<ͧv.tQ%E#-ν_+˻΍uoFί E~VBQ%lC|g 9A$3PX$dguuB'OYȳS4qnMP:5fmlc4n$8"V8cPg.V#|zNvx:bUGU})tMxA'_j[ `܌v8G ηcNh.&]Jtr,{g2-鑤(¿%"f2c,| vP |kZW0S|LcF-fD|\Ҏ=ͯKF()׿T+` _Xv.J"oh*ki(+ի'7uށ<'MKIi6QzSʥW h( ։lK04Ċ&*Y,\r%_T Z5(6ѩVRF+ GxMPcV|=iZw*Tc^﯃ErF_ylL}dFSZ_$@ +ID4Fbxej_A|H>U\a_b BQK}8Qo^+'buؠL^/Eh.O_ PpEJzcBX$:"Jr(Av%:ʫc@sG>r;\s(8 dc17@X݀~+xkyL[<`K2E2}TeX&`/<x} 16p!8)˚!%J1dW[$I% \x ; hCK.xX&k2JȓCy ;ӺCqԀ)oFtݥ:N'w*XڜZ;]UUo;_Mj{CD&[GMo l@}EԧErr;&C.܏!RM@Gc %fK-R)eɊ_ډHfט U->, nhR _]]BVz:kL&| cI*Tr,SA8!#q+>O)ғ/JQ?>z7F=kK)>6Mlr<:o%޴+_'$MTf) >\jqEN`~^T`E;FAW1 H4CŃ|Zu5M/P5$lUce fTf$rjߪM/Jv2*#$4II>gJ7pKc3݃Jna: SpZd3֐5rۈXj7pxqfLr%#E3Nu_IS n-JzYܘ<-ii` 9=ijm596yV{ZH*E{[O[]+Uцwg-u{-/jd &#ahi]{׫7C$:,g+F؋VZj8RRw"I0wh3wZn ʲNNs |#~t -KsO;Mh!&'Vݩ;UvlV6Y8晄 'Ps3YS4؅]orDhnV|Ð +%Vw1&1*[ōU"Pz݈lV,57aU6NC؊/СoPH^=q:byw.ڢV॔5zοT hQ)x4Ї]7H|_* `|\ 3q:mlɐqQPUB'ȟ!߭6aѴ2RzlL3$1P(|ʻus U)(6I#:r ^#OʍR-?,S;VH~{Pa˪ǀMRMc[/3>eܳLŖ\ECLbEDpݖ9HYdU4hR 5#.N)T>- F $$BpF\ *VkTM>bhf؈8yevmrtA|Ljp@_j^: x~sQZ[)>pR Q[R b)nQdunBlkјw0)(Qʢqҧw 3UwYcJr-f& :m$.s@ܧo2*†nLT->#Iq[#P5L1cUƎltqsYϤPW%|O-ăoh:GMְlz^&9b#qX`cukiu)?8(!ٲ5RL_E,{{^8$Dx)vH =VZktlWxgޠÔ @ 6CZ|jE?-eR?:_D(NӼ&6 v> 5GVksU;ΘK'"YŠxYYRhpl̒[A&CO?y)Ig?:AΗ,`|6 %w㍝g# vP PծY[e-ggçB7>}!FQc$0SaAA#pIQyCkOWcG\4lsQ0dZww2kAYh%i}+gK6?Aka꒍2Ǧ f-auA1LA3 Y{-ӨJ'"v}E&ȗe>%2i˫oU\3AKTnxKfd7e/`#I[yڧr#+/|$شп5Y^4AlV;LUf>`k99b#Lknx)#I`Ω W+eN\GcW? 6@c9Hq%͓S2WfuSAI7'%qf}OĢ@^]rO{e4Η&vv2F-13FΐKW|M蘌e2T2w@Y`M+PwAYiO1̪>hTPWQ\2vIj׶PK yv[(CNu TM$)NGҒ?B~@Ot`8Iͫo >D^qO,xiO`QQ*{gˇNe0>RދGFGMތ<=YE3S`X)CReY@Ѹ/]o؋%gLMght[*'a` L @.F۪A΃ 2vh`b1V2vYSxyԈ; n&jџHHЦI? xv=Du|MG Lz[Kϯ/ Ч5hH{۵2r}t>ʆi2ݥ-A`2kJMNä0S5o)i1Jՠ2n'E]EZ|u>_9:~Ta6wF_CjXK,rQJ̒ LH|\C 1 e1)6~4 N)N/'-Hl!am!6N$laUfr'!8shZizVcרpŦƏoƟ.O0@sΩ@<>r2@;Uтjkb2K|G%jHkbbܓ$[ oX_X=Cy4jTVGw ifVBO 洬)Fޕ%j'Y{|פy?c[YQoQ&4U]|1@֋ߔU GÌ٥G"O'1@:jН)"yӰ&s#1)`kYe<.+Ka )f!ES%cRC, l5:b>k_CϜԌj_L s`:;ȄJqމ;SҔ/kzy8UJ@M a"؅@e*y$C!۩n]P3CT_7_ \tFm b ] sBub x%o߆5mxPk Mg+TfjI^`~Ma~Jb0חx9cz[`ri')+ȣAcA=s^ 7NN#~p%uYZM~mf# ](&aZ*krqDZl4M!|.[έĽ'NS2/#\ nyQbi]3lJ㤥ޱƠ? y?`qc_لŨkƇv !)]31s&pR/p;XnyıŬhS[ܽABb#:(_' ı~"bV.Wm~k'>;{^L ycU 9n{Vxy{~e H~ѐ" &"W5Iv6n=<>AMKLF=U{7Q[4m0}bB3Xu*f9HȔ [7xÃ8)|u{9 fatg)?8:&DiY=hf Y uBpI!۠/ s<\f MXf;H$ F̝*iA0CA)g vWvC@c&i.aRtv.M,7=mr)g(*_U/"%2> xHz6V<ZP͕)J/gkJcpM͑QZT#-T>֞E<ÛӋ%yB: ܃Hqdw:XR P5aSOɤR_emI% hc|Htfg==G,㄁մ(ZwE=V18zL24<ǒ-`L/z|ZJM&54/nE描Xv8y\4r130Nhl>KK[XA?<1,@>G0 8_,Eh!}/~k@NCÕ\{+qAHRH7:5;= 2_9ukwDJES ,I8(nŪOE sI<^'&-H=@llzɾ))nF⣶5'vAm">DMwf"`޾jo1N&LvO#W61NȤb̴ASu;Ǭ"Vc2?>_`t5n5ѿ+p#%ok{~dOA iI.p\{Wtq x̲OfRzVW%ݼ/S}a᾿n~erD4nC"1'J|rQN"bT gjf:).:~]Q-Ta e:6P c\E}wfSODp)y`׷-YZsP甆 ү,-9v@ˆBkl Z l" 8}6*e|VU&U6L-k\~5WxaAG~/mxG T#}+;FgD|؉CDg̼>{L.g.7^{FN>]C2uh O xGyC!?V V7חbF7BA_rק$ #h_[Jx#iX쫽R'  ͆8 W` J:uwJʡp/.3; Ln򍰅YDJED *֩kwP怸}˫jFtHa.'ti*4 rE$&\KwL}ed6xofQ 40)p ?pƇp=ɘSݸQ Czo<@BUؑ}3A'&vs*wizƑ M Dl#"0D㝃[+?nL|7εVZ6vM6}XToX!y-ڪWC>밈[" GLlnMܤ:_[#8XI:9ʺU!PF'4; JXM; MЈ*9*T ;)^^uǜ(c|w7z-Hބ8䩠HTZjmcQgc5ߜh\ݐff(?O$ˢa(: NYZkP~ѯkzQq*h4X{j>]IMɡV {ہw2tcr f*/ UeK2Kzz;2 ߋf}) ex) )K|S\C7lX"Omȕ$9_sР#9~k/B%Ȃ1/J;MhĐ|~'c!˦ԘhQRz]  SEP &X>0}R5E<> f41Dj oRAYr͑Ÿ:s]^| oO9Ny Q]hrOj*@xU떵J F2x$T}()Yĉ#)o9\)S7AGdS<"+Q bU.N@AYlCX[7dyVTLmpI58GTXs*k|D/UC4A/?0]UV~vFE+qe{siе\@@s2 YNxdF#vkJEN0!)囈ܤ60h/lqԛL*-.UtDaj^L!fOkYTQʶ^;g^=twNs  6F!%vHMODK9oL KhKZ|6G%]]1"ܥhXe8a;V-#]Šϼ|$C f/ G` "4L >:I΁4!QE+-aza]Kw+dq*h=:<7L !(րF@zTO\2s?Mz&2۬hh 9ld&EČ zuA}.w;\ïoݢ.a/d|QEh 2}U񴝌JX ^p21%JևQ`04oC<:lcBJEfVGj GW;C=`CUt{[}iv ԝz>A#(/Sۧ **3aA<+`>V̜;0ռZ+[ө-*i4] +O͏~Vy>`2~ `V{<׫a[|%S[aQ ;/pHkPܜ=Rh0bA(R~3ܡAP[a$%3\;q%HՄ /tlisLHqJ&d|z}."Q U!W?6 O5YLN" &Xo`uShh# f3¹A,~'|\RY.q*tj5QsΏe٠V~u56y7bʐOD!ƫmxj{sQ|T@9wt#? = >ĉ'$I#<=#8HK]W> }FP{Euwy{mN]#ќ9>"[ԛ9krl&񒉂CqYfEWxvjUEzLO=#͚֑W YZ