knot-devel-3.1.4-bp153.2.6.1 4>$  Apaߝ!M@eeeq7"q}Kd B=;#(2 r5y ;Yu;ifct/Ş3L/5u %@i.kA+s!ZXQ̏j_Woǫ͈>w2@@DgK/32=1\_cx,PhG'$dנa<":ĿG>«r,Pi, N٫}$?نn"\;(Ș&u255c9b28aa862eb7525a1e0d29a22a937bed791570578b51f216463d1c11f478298092bf5afcc5daa27a33f79a85959805bd935bClaߝ!M@eee \CGوOuIe(_駿({UX2vG~j*GŠ- mVkGŦ% $5xziq۩Gڲv&߈RW1 o%D͝x=tKWs oMj%2:J\/4Li)=ld1T4Zk3a6H6cŗO+FPB 4bك \YM2F4NY0>p>?d   H<@LPir U8U U U U U UUU*LU0( 8 89 8:'e8F:GPUHUIUXPYh\U]U^bec defluUv wlUxUy z<LPVCknot-devel3.1.4bp153.2.6.1Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.aߍobs-arm-10QSUSE Linux Enterprise 15openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxaarch64H %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,)AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤aߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߌaߋaߌaߌaߌaߌaߌaߌ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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.4-bp153.2.6.1.src.rpmknot-develknot-devel(aarch-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.43.33.1.43.0.4-14.6.0-14.0-15.2-14.14.3a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)obs-arm-10 1636360077  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.4-bp153.2.6.13.1.4-bp153.2.6.13.1.43.1.43.1.43.1.4   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17150/openSUSE_Backports_SLE-15-SP3_Update/7e783354187725acff3c96b1522f4e9e-knot.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5aarch64-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRǧGq1s-utf-86ebee1b77548a5980266fabdf3f74d7f2c2ac91eddca53de8312ee93f0d5ba70? 7zXZ !t//w] crt:bLL 怃 ɮ#)EvQ  [78l>#rx]賴L 0 GtUb]NS(l60ƺp< }d@ Ob{ܱK}ܓpJ*l\iIc{YD;]kuqֺ3nksGypdsڗ!6koؐz>R;-?Az6}q Gr gt6o,7f'6 skƔ͝_юˑvfݳHNǨE-(oa/VdfkIH R50dۥnN7ot@V=ͭWkM7E#Qm ٓq0fsQ(JqsOA:?fF]+jN_~w;yƌ09юk,@Z9,+!U3_.yhs >?{Cr&v~HH[,!Q(cØ</x\;fß]*a?WfG9 G[ہ! LD:͘;m'\Bsb&ȱ.AA8\hƦ2\ XvYZGTt-b\2 ^cɍWKM: N?}ү^ ę2e1z5Ǹ6v RMݳ .ۥ/l#/K1M]+%PK}ۘ^r f$H_Ua*qp"_]48ET}'PԊ}AN~[w+Cȴv]2L6aGdY&Z85XOk<*z,ٿ57L$cD/rgmb>㿟Ƌt _f!CdP+wA+T8޵_Τxe y'b=0D гZZ5n& ^qPHa Ηx)&?}ɣ\QH1U$CsJd/M1si1iSaJS anA Є"rj20*J&UKzNvOcY}dj 0c*_E zKO悴%mWA1,jLelbiPU8+swdC^PB]v!ԣBZtr~oe{ǚu.'mOK+^Рr ;_lEPrA@׾df5&rݦ䓿&X_JP%GrfL3}]Ux@f宓,~7 ̍{э..Xۼv?A][.IOϓI~fӤǿOZ4=1%9 K.'q( ,P`ku(U rU@*t 0OctWّXn;/ &,! @pG[NVAŔm̹ ~ ӵilp;5ެS% *^wӬIɨT䝣>ݐ>@_lI)V7WdN6'SDBEpn,Æ؏<cJ(ew[wtGϞ!d]Ǚ|} _){ίS6BfzwxPw@H^ :|_$NJ,s)˷yۍRa,;Xd%#nu]4Q*}Udasr;, Ɲ]hX?>:K0oz17z+} Wc|l' YD@5c74궲mz~<o<]goe={btmR>搤6< 8zs~a/%!wݶVb#cGB( {pW4hdy_U#bĝD ISy=̆3f ,W:.j{B x (W^4nAY0 vk߇$d=N11mUJ[7+2 Ow=ZJU^9`7(7^lTy{H:Hw t! V"70 J'pqrW>ܬm]v׶rǜAW4~/JP2ѝ(8xS 'Y;[J.s<90Y{O>ųn&}uBA# bsҩBLyu}i 8"Q[3=}CU|ZICʻ>L՞$`W3*W כ\>v}^!f%9؁6o&\{Se{ZN)A뜣hr3QG4W e`]定MtW"9AcV)+PQʽO9D]S1sf4w(wT'ē5v۴^~:*MMX]S6Sv:7}* x$!@YƒOX aQ '.@E7l][}3}YEMyDEQxzf͢cJ,$$xk2[u'ιi4|y|U.&xYJ,ˣ[o_2ST; vbnG._NBfd_Rl{nU~.-o=H MHuidJѐi{ɝ[,;EFϮϷҍJhUcYSBN 辩jne\Av-~MI SN4n5N8 -˳WP0#ӼClR~[H+4y|\#.yk\ .{Яb:\#O.*q ɶ_JO~_ V/ۦ Lq,P|<u(3ѧl' l<B|Rn!Q<6!5S \Y!,䫪68~+%%l;n˜G$L)9j~P{0e٠c/a>0ÿV]igwB\Noj9KK~fd0~yMu4}RNY^A1fDŽ5-ƣˎXğ_ޜ\4+2F4?Ya1|&_$Y ^Jy|brԿűԞ(BQKx뛴\RIQ|=e|& ]Gd' 1 | 3l< 90q L#ʉf*-?,&6_Cfl]=͉1[GQ*p:[$ [jO/+ZI)|lԂ^? hLF{Sw hp6< 60hӟ%lu~5,c\RTAlH"nu#lmkh_sh;m,#_bEN_(%;jI|acWŔS RZb(_C!4>*ӈQl:euDBd F}ēba=みr×_) b.=t>ߤS[v7|FU*<Ԙ;|&XA`f3bmmt8/BWF̀$ ߜ~/QVha>ڞۥ'㾜,D.8>?E!QMP 0FL#/Qj[%%:=JIM S<ҝTo)^5M1xeg9sPM:Iy5YN>8CSdS)0'[K VgkpvuEs j!!xE*h~1z?lk0#;^"v O1lgEaeA:U}TPo{,ݐJ*E!56X\x Ż!8eJq^ h`H(x@W%1fݷx,p5Mt"AAPU<Ͽ#5*VGmǙ>~\opa+Q2+ikM+d?ՠ,8M91È 1Vlc/P=̐$q6RF:H dkT*#g'Dxrx:oSk?s;Ou(<-݁*gA@E?ңbtP#) pP1< ~EHn>E#q=vGHT;I@E~Itp{/KIhI.,IxU@bW:!V":/S DS뮉T'8z(G]ReIͻmPaYgThnkydqlX3؅mܣ6T~Lst9: ďG\or(0UZqJF4aEV[CbeZ|v"$S` &^TB^'BЪA|` @b]3Cč6Ϩ{|eiJ=/|9wZxίaQz\O D{`̸C4lJןFl~ɜ-l[7B0SՌA38DkU2шy6]bwu+= 3iSѲr2J?}?r{lew\8Z3ȻIsڐr~{(&۶>O﹢h%?nXB7a-Ҧ0rzSyvp51˞~g9M󕍐k,{uA&ym2Vv[6Uv/ۊ&q d ni O*j\N| |9&c@(nrex3NT)FٽJl ϔt!ڌ9+o~D/765Ve׆"ڗհr&|`ns*"U}i-x/?䞒O84O֡0f^o%խ̫F3|aw L06 YV>۠IfuU%OwE:0Tvik(: jKH?'?CNGKN(؈X-(-2QJ'z'D8%($v&5yNQ72.LRn, ֵȄܳc Υ<:$/kqZy!]p\y'cDtj'9K9upbLqOѭU 9aR@V͙apj`D&~fv_| c}pϠ%g`* ZNpS.'J&ҔE:MkJ:%0 Zfŀ͒`5~DZFB$MznOQ{0?ߞOGWpGiVh"NT@e;AuȽ#6nRА4 yˍ:&Ղ4s7ӥ?[B$PNFT3Ȏڞ?МʕCౙy{# /<oZ%qh*|QSrsb.U-0x!8 )rat. moJčPXTn5r,͗&eje!_}B*Pj o ҈s=+vNW :&VQLTG.$*PCk ڔ0o!$*Y9b<̍tqҮYWKj;⧬RޗĵxO#$p  ʾҠ6MA8'zJ6ֵұKWD[Y?|kDnHf>k0w62\s |.a8dG3۶|[4o[F|k+v=v,o X77C.5g$o^rE$.Fe]9A7nAa(}0( 5}oȠM(ߥO `'Y!v1[D#p,VBPz< B%y5k Tds#ѹ<+zէVLgxqό3yt_GC[-R'pH#3x>FGW/֡m\+7-iiŷdgI)3sҪӤ*+9}S;b8aRo./ UTQQBrd3P?LP bYXi8Izd^vdOE ȿPVn_<~E2$„&JH }?L(=fr@+ΒPĠ:<_yd.x桅٨㠯{WR.25v48el1+>5(ִ2лs)Xp!lh:^Q2 p# 27~#owoJ` s9HbʼuĈtkxIIܗ[3=(+t$ʙVlŨ uUa}$ mqt&lL߂_se~g0AFm&rHZNԽ*s9shohbHY9Kwssf=Zd6_bOhN:QO0cB{%IF޹0.>VY@ܘL*H3%J\S@VI`nTx];GA)B9A27f =a iؘu0={uhYێTeRWuXaI?xc+Ok~ /'0K6JQ9 d>N{O{NnJkO-UL./Mްp|OYTg YoXKe;Ɯ.mH^Na&-Jk\݅^; dKQ5Vڿ<] TqABMt"~3Yv*-E4\4[`|_3e 9~kjOCT>g_/HX;FNO K ,*"Cjj9;a%t\<ʳ$b\Ԡ"]̖訅}PRBrY-~XRY} ):[dΠӘm}Ft<xP4wewN S`JQ~@$$ fi]"`\S>IG&ǿ67yzrkE;K陇DJ^Wso{x{`|M;?|R mLdU2/ y]\Rfa0yKTzI\)쪇HJ5]vř]Ua O.U:4HM_~cV sK.-@^38JJJWV;=A8(ƣ#D]!wQTXKPIY;dwA?gBxw\Tm r/w~w(BOD%Pcˣ~ Ɛ)IQڰl6vZjOF7@ wޗ1%XR@u'7_:ok5?ۂ׳ uCHm _4\7N[6DF)1'H "׬x}s{\7g}n| ܘ4T/VE$ xY`iW eشv%i/hy/]#hK.oDYjϫ=.|,R;;7E2%LMN4eBN|</[Ph Rcō AE(zіD/P+qK#_kˉ_|գhXNga *ed On j[Lʓ\_]yDQK߼6 -~]42Tߌ#%S]],Q5uy[@"r(ůFX1kӏ|zt _oLU&JjɎğGFY.cF߷`;(/Kq3ĕևY$窥bȜy>\EW)/MIIeAj,U+ACoH 9jYdB7S;9CQENz(0mDuhn6;_>1=Tz8Y$?G ##&.Y@#'e1ֲ$_E& ]SBrZi9 ؔ}. &^^U3IТ oIۄ+X PԾɤ*S10ZH(G5YEC㣥])yAf/ë/͝^7h"I~/ MH)cp-O McF (0QZGPjuuu6Ў+@5yLq_K6 Ss#,u5؜EJᙌ/Ri,f#+]ado%XAr+,[NiEF9l'5ϴUL 7~}gCح#`xe_n Ǎud`PŮKTטj ukWgMjaEqm@ܠgQCk#]liđAHO2WD+l=pXDqh/kI3hr㇄hE/N۔FHdS> ztiŵ3.c m{ ,"N*pvx94%ߞX{nFhSV(+}c,3k{WfeqSG#8}qi>]ˮ*!c.wJ44Qo{$pQ'6[# w j̝f+mt$!LOxڪFQyfݗVݻ81(vv_F0wDɱwˇrB %p*[!W"O%3 kEkyWWǹ~_ccxF7iqbSWL9ͪ A-Y0OE?JJģ7NAx`B$%d} Z?BAѿpMیt{BY$$Exme6l0|G^;nju?A3LļWqx~܊aC]plßd5l׳b i,*M},ڡuu5`y,s )orAt5rM#bde^/2,{s}Tw_T?:Z6^Al?7F;`78-;f@o02'vt[e8 T.%XR"WCH =n,кaĭ6|;G,t}f3@Șh\!o$B[Y? o@11//H/{Z ՇZ09ZM51)^?VۏXcަc,AW8'^13Lz8aSSzReO*b%@k.ro̓Ag܎ٹ=hnw:ЯL՟A9c0 Ŧw3űG|JΦoZ@{''i5ECSv65!뛾kBtň 5 2;ZxZţVZի- ګGV|LK a y:XҚp {NBfod.#GfwO&J uG)=G.#lסwkaS;>XF+ :'vvGb}\'σ&F2r ݲX$/c+DL>sa&WvbǙ\q 13ҟz0B3QFC?\bL{7#zI.3 ԯ߯N-^.^ sKNi)_)64AqrUu9i/Yԃg}Cy =1O)iYR*~5s!yb>>߉P5+~eN:)t$΁y?< KN*Aa"{$ŸOZA*K*421T1'pS=} QPt{H!~V%ЖމRSzf:U|5mtok W/_wJb+Fs$ ?(OVĦ.نsR gIM+{Onf.Q&Bؾ栐֊(S yRNqn˪b[ɲecrURM+7E/T]ԍU QZNF*9+o$Tjpc ? XX{Y#ـE9Yecp#of 6'L sJ;q|UD3Ú+%ū7hJ4pޒ1$"*bo9L=hVzOzȃ氙xIvvY͟g߲sX1cuS=$q+& ->Nw[^4} ޠk(,Ԝ1^d\XoOP#x*Ab+ֈksrxh&fj,Sʑfܣ*jY$Z`O[`ETلqyNe?z$c/:-k a ynDR;U4؍M%|E7Β^LaDl?*1B6<8*,]+n8q-x1yGس9T _ C!T+6z?4;ORg\Yb8ADk)0F\:G9Đ+3|CFo=fXpCuƙ\$L6[UBL~zmܛ`WyԱ?XgQ5ƪGjړZYp<\X_.?cFҀu3kTtW я$`H'iŒPsJ(m{&ƠֺLѬEm$>IDʈܓNY֚r|R&e,hk2)+!=-2~wC,@8Zh;#+56}2-78שhމ*0"mt0xTSlƲ*r`XsGusJ W%yRff$8 B =1c{ۏKݏ`?M]%% D#٨;gO )d`0{cn?LBl@c3u,ٲd]#ʽj$R}a\M?}OLh|zr Ocek&RS[4CBe2#S"12]`L}\Џ"'gZ Л$5K!`wr:f"4wc:Բnx6QkTt5gVoP+P|/hLaF=V &5fZ?WRD}j+WXzA oN&Vl=|(!,1,Gy>)a9ǔmXD8`E;*d䅲i &gDW}5C!,俬 o~z߰ߤa5]sM|i14}2`j5TNC(7 *eG AgR(ZT3*2#9 ȣҡH , ̴Nb_xVF}y7yCV T#l#CU9\ GQ'C׻ М$4/x48X 04-K#y/Q!ͧSz3,iј6e*P LJTk,( _8%ZkDZb FNi81>BERb6@~„@N~мz74ϥLD(kw;%Ug8GkPŋh>Fa]bw:d[.;J!ij^p穁0^Eū{=:Sc-726 "IrNXL`j4 .j*ꋖsc2{;F&kiH k>zΊț-"LJ=ʧB2 T:rylQEӚ`Ev(8gBRM;7b493MI-+=zrȲVLM4-9mV}kY\_3#Q8Lqpo:z-tU#M?)ӍhXȤppF~\PV(8w 25>\uĥBDU~My{7)/Jb*ɯ6JYH=~߽l<}08ݒ!+b[b帷iHiRoG Y4ctXSSϢ{cx0ǿ9|e-֟R3! 2d2*$WFS \.Ǘ{{xBWM'B6ƛhC7UUM!.E W2K We]!b*\mv8Ӟ |ػZ_ZU'*y1kddd_JPtdGg k]tw. yB)__EiF({鏂0j'Q-J;,6H+Mry/7pHoe*l끣&_Μg  y/i>;;>cxFd#|ĝJ=$KkSs2(7 :b{Yn瞗53D4 ;rǹ"fO;Kf<kЊ0CNXO94ixˠ* Zl}Fԋ|pu5PWT9`֎)ѭvzXBl\2tX(\s}>;hjy~SBㄱ- VOƎKgslܕG̭V ?H-u[,Ѹ 9~q Sy?5t3Ǟg/e߮=L=h9ov\ǰL@G"r0>2bor=U}7\Jטk ӄ"R&_AX13^q dmaʃ ]Ⱥw"z^N,GEEۺ1}={E Gt΅I[rq},礯*8`j˞?5~r9ɧB+Į<~$A' Rh醥PUl; pExN80F`@h` !D.od[KAmISξ=H]LY,֣6, =g[GG{*©L 0|VnNļ >Z35VSCkgߜO7 "b "(Vsm* W!;Y1b0B.Қ0 Nj. AXXh9lhҜFGY\cn̑%hۛYBO3Λ(fvU`CсCPXq`r9J'9Dŕ1`$NVHnKI-naP5:*JҡZB(cb)w&1n^Q|\6 0΋j>2|SCrȡ<ue=?B+D:ٶ!")BJfH̙l͇>MJlKXc6Q>i΄AWE\O{ԿA0U=7_GD3^␤H]k4=,c(Qߞ\HVh2V00lZ#Ճ#`r\dl}0Oˉ-am%$eWuT! gT`*~KW"{I(Zx&pCw%ޛ { '$u6岃/J4Khq88_]W (pL5q3d/Gk)X"ExJNB~>:|:"~v.ʓbPW=bYntzyJKHtIq:%S@Ta@-!UR\>ty<4}j3~Ӎ8DߋITncUl#UZV5T);5$iz9'fd Jwٸ:m6lx\V:6(i_!}Pޱ895ԕU1Q ^R,8bU Ƶ)* !  zey 'Ϥy3pN J¾ფ-aG?dP1{m+ܨ1*2G}+:@ML)LqNK>H샬=Y-,5 -{O$< mEp߂+n2S##"{'jM;l4ǹ]dLPr*:$'X>м7 h$)gR@~([5:I_,gf &Iy*d Cꐎ#/!jm;N)#9E=zT+rb")g}skJ ۷yۏF+K:оEXpyv5DR.3]t| NiLA(A;=QAOa1qJy;y-_KΑTھ#P,-h&jC+һFߨĹ \G AZ`a\+u,oır&t2 LD-&J8l\ƔZ>E)B.K \mZX...8>TCi`$:$30-e fy;&Y0۶V=X-"ϸu hO-mT] Q#Scxw|ً:%2qr}A\Ѻi$|#$)a|Z/"=i}o4-e[/67S ˖hsPZg䂡Q (n9^m.m@ȼQNJ(/:坄1Yiy,^qK̤Ǟz{n5@;g}K2w;v`kpa¤Vi(wz Kv4ROYYO7kDw4A9FV2sGp@ B+8@7$w)r+DNoRKV>ݶ&rPTZdK>B: **vg|ktnI7M>wӘZ ȇ+E* φ!\xi$<ً^dDl6v3^^P<ݣ.r}a4 W]f9 %EO !P~$46fnX"{ 'igM}"Aac2k>xR?̑"~ f6jCnx=g M 2,r?}#@K= K6@r* B\"(\YNFD^E%2skσ y5b襎Q/=C {+0a 0ᗊ8)wGfE1jf|^Ρ{!|yU9e'Z UdjZR{/qGP6Νbי COu)%Sj_1i|gZ²$^_g 1!Y2=?]Xy1zlɤ'뽉^"[N bnW6"R#F_ӒqQk 0^Xx >{N-ExZkaɴ¿FbFN!i({[\X7-FGoN;a/[g .oW,Vi9MqϗKq r f#XjBYKD(t,O:0c}]9%/G)-UtSfSx" $ ne\TZ)Ƿe7H , dnc&AxEօ/S$!Trmji`F QN96ɓ Vyԅs<3z%-]Q( ٛϨ\U̎[ #=a"RUSKT:pl)0sؓU&&:aq0,Z,1[FZɈ(+x*mj֪I2 غɬ3up/:ȷK=EZ`Yhy^!-<5E SؕNUGMJ:$J5[7]/c7#s*prhHhJf_yHٷ:t@ cBٜzܚf{*FCGJQ pcކ X!Vz-*P$Ȯf: $OyiL!OITsLTچ=re`X&qB;L1g7nQ zpw T;z 7 DmC%,:/[wKeDHW 'Oa.Uo ,1lNy'$tf: G '0L)M "G2+׻=7!0tXQbMO '~Kj.Jjgݏz~M6#wf.c&m2)v 2 ̽r&( r4Q ]$3 Rw۝<Ԅh:Omq-$0KݥA.H-Wj m3 !qtЖ@ݷQD6 63 FE:;O:"lۣO=Nd:n$^4dVެn;PR;{\wo K%u$0Mbyu\{/NJBX䒹 J`712,SYh#~zS:K*quA?e^MA \f݃/rKhA :)(ߓI&P(-lZ߯ejG)ȄݻۺP o5Ji@͞nPC.v[%ӌ_PD#̬:Agig.ѐOi.QpXъ+9dnǧ՛׏9Zc2?/1"A3p {.NN2JW'K].%2:(0чnԙQ;w,Fmhs"8 tN+ũqX"оt̐<:nXB0v&Ʋ<,x!@#,f7c*ߘ?J %oJ{_beo 68tÁYYK>Mwk|mvL VQ&m?A`,,ŜҴhDH,W!mquQO&ph-EfXU &Vc ?hI1@"!`!kmT*@֡R[v@('qFBTU?$ ;睻d޽qZIRbE@2C|m^ngfޮ1ڳmi0V_y/H{ lc,UPC33]j'S}m_}-3\HVPtyP 4x@LbLxG &V0@1#[.[t"7ĄEQRyhU?C S4w>CK5CM]g->Gpokncr_%Ho|=~5zŧ `Y/Dr@A醛ky%>+_j%Z׻Ypem+8]Y~lTlTֺ@-w4)=n/Ɇtĺ=y7Ī@ʅiӘdÑ,ǚwqR<( g*A4bƼH>LΙkκb>C9mރڔn-=%o20, **S+2Lp{YTcop)S:S əCR#f$ vH8уd~[q32l%P56iӘ쵀ImzO&3"6wVyldlN֐:ҿ)H s{i~r" # Rk5 WX }&]Fb-Rvrt-߭F?͝- ZuJu: ۋu$'p|h30.RaMiw/NYweuy^QS7IECN$kWVٸOG+|e7$璻z!C:uU li9v_5 ׸f?UcA0y:ӠM댱YX[۷{@Gl'&#)v"o1Nt >\jɲW4t\",RYtSjhT,Xs& ~1ߌ[]qglc!V%٩Z\Ivd;~=?йo aEnM¼!蝕*3"g΄x >ωQ'>Rg F:dSb+@HVpAP$L^?^c0ԪCܧF‰V^b<"wEVS2ۙVOQۺpN0ɛ> lOOIv`xjH?xwmAN!_=:J X,EбE@,ǡfNݨp0Iҩ] Xe,{%K 9a|Vc}`:|Lxv3SY@B:st2*^*h?c0!N>%Lݵ|,l#p;r5['BaCjw4|N0-$9`%@TUYI~p5 xϕfHw參ˎODQ !vG[ z=]LޛnUS$Ha@.A|< )CݕDY {)|o ]vϬg/Yhx+[$^Σx2F*~2)1 އة_W28!&(mpPݏQyT?mq+ɱKa( a!A^Zl I/XFݤ֭%zk_}g7=n_$s-JHEμV)P~HݡJmXF6xcY}D3 6od{dJR>eQ! 3U(kfs^I>%3{DaxxFh˓O2@|Zu-: Tze NX߫EZhҐ^sxr8m#r''1ݲkŅYP AyYm|Jvadmf[7p;+pJQLLard|j4i6p{N>Ɑ$UjKa߹Fwk?Yj\06f 9!ʤG'jdPK܍>++V9 &W*pե/,%.v5҃5+` oHho^DWcKV-[כDޘӽ|Ie1xk]K 4Ҙ#ʮ,-bO e! SIw|m[ђX֟,)fS`4ōimKhYk@`?`bFp7„TVt^7ↂoPɔ+!MnsroW8A_:sݝ},ю?$<{}["!^sh`ƾH*BoYZ.QBulǓ?+^Kwe@}u"/T^5w؀q\W(̂-`3Ұ!>/$XMSd/bBn9=c뱐)qP䃟gnnzM&gKS۴瘰s,+IQ=UIK.:V=/`:*)ݟ 7 `KDTYNOW F EGm J#5P >}XRd;s:LqsokmDϬ!mDs흃oU3Nz˻He?pmgފ;'Dlbd03-ZR-1EݥDh&]\Vzir,w磄z^| Zf+1qr ZxGIݮQ i䂭(J/_.!cݘ'7v TY囤:q*ҼKf 5}\{@q`4k:{pKLiG߁py~+Lf\^Թ1B. .d~TGQ!mM)=p~5xEϽ=*:uSUq%/fĢ II8{z9mNpiucbP\V3.hR:,76r,*"'&p @͡"z̺l~%9 gIY!]} XP1:ydX8F_"xzV/dk^yRwܨfUC7zoK)x *<%Xj63H<]!HRv!-® }K\ֶs4 ~:LL} Qr(AR  CTi[:I!Ȯ =+|k;+q V n–J1O> a;.0=<3 V"ͱlܝ!a"qǤ(-`Iw񅠅2jitGƾM] y*P. ߠ}E@m=t"ѽb[hj}"U&JQfK2G`y_0- ]x}1+E|VSne˸ n]Q0r;eQ*y);lr^U{LHS Vh-te XP&MCZaaE9+v`T_:A_Sx~St$7Ds偰<F,..Tl\f+O)BMt@*LbL-;6BحK,7!R=ZN2 lJx"Q9^ҖdᏱ1:突(vQ\p85G %-rV[:cC\Qżs_|Y@mhToȀO!T0YBx}ؤV.@1'ݍ=(D{B0O 6!7s8,u{Y`pl6L [4;0g(*HNs{e_\ Ž[ɏ`5cK@AY9} fR*vU=3|JcQĂ1r6U"Kۇ~x~z9ɲ"]2 c2HXys'3 *Kcr}How._S*꽅:JZ&ڰ. OiQrU9?*䐬,YS7Xjy[-F6n85a̓θIR^u oS8#*fANy4 lxZqu֓'D 0W)|wVh4}r3*қ |`wPIGf=׮UJfP TZx&~#sZ .]KȲk kqe8MĖɅkaċܭŢitt(ŹktIE@9jEF .p8u1YU\/yyd3Ga=n9sP4`cxn:om9O0>NvTwL{n3'dwgٙ0uڵgq9A&ߞ[v&íj(7;W92 E~NRRe X71^MQyok^x5į<"}ӝ.<0, iv_ .Mrg>zW G 4ϧR !+E{ǛkR`#,/B&yn<71] Z=Z-$Q)#ž!s+ђ4h:(IAp \\TCTj؟?vOfXuv}!6\e P' %|jS uso+)e mVFIv@}`bg-oV|;X5rNuiϐ6MǨ= HdzQ=PGW{oR,)1All$FO?'="MdGv, bS18+i3 *du4}Rv\O޹ .sj-srg5#q^A^NW.˜-b rՉ>覫2 K@):7 L:)O4 O:`}rˬ2A;O8sF?zF rs.U;ot WzNX+3C$8wxX-D6(}ſeHu\i`ޣq׊+#h:@;#q.e!`[[>.3 m&&MN}w"12q?Mr VŬ™2b<^r ϗoI -*mѰ?y0aLN -!O^3yacVhyn8iҩ0euT8ZOUIf 9ɉbG|Es?+&Gk%*,WR`9h8Sw-qYG{\B$ o*_KhnJ}QajC)фF/6i+rf57O o-}*]CCH{hFQ* 0Z%Ǥu_=&K,銦jK ?yt ~G ETZHdJÅPd'bEr)kVu$j$A1I,2(/_+PGD=}iI!"/n3V$܇ K0fxS4,AGvFvRJ;AmM]w! S/:ujz籮t*ϽQSRNJ-Mnpl &JVCmݥ¡,qݬsX+ '(&^;dfCp `MjopηjJz4m>¡6%M1Z#@Ni 64g WpZRWd%y}jܚZ7+_ZVF8p8v棅DsJ9ae"x{>z% %;\E|Dž䢎K ,!hw4&pO+z)$o[;m9+̼9UĺK^*:YQsQ! ~]Sf7cB7Mcǻ㺷KyE\oDbv$v/=v6Fc:3wZNS)koqܒ;2eLKeht{C۶/ 䑗 ?'sZG P紘yՀPҠ}iljGcrZt%d1@(zq hm6z?u'Q7z@Y쒉 ?5Qo&ķ\ʏYA}jvp'3r,05G;AGv}&xs6+YGdW@xP{Sq94N:bH̝X;e] fV}Ia:^XR`Z| ʊ=h 2 X9P~_w|!,u ܟO j0 +|^P#T6x}>,$BIb{\E JA5癟̓#1Ym:W▣`w#N*2qf]^{bjėȎmTOYL(3>-\]2FK~KMӹ#zNlk5və' 7 sLtyD.\f:e݆+es)A)s51潡 hT:gu+nءJLll&4*TdJU/֞t̽#jZ)joWH޹ztVV(c0[##DJj2^5ւZJ;/RNGieVi3_ϒ5բŝ: /#tVwS<<lב>\ 23SntiީG͛FrnȜ6nzk/fPR/.Ff>~iZhbiIY:(K<W)IpfRo?ɵ}9zD tKmGˑ@UVnwxy1G-}ZMO璳uP$t>4%Fvwt(j7DU iM@KR ܒ˒PHz8Zݽ*T3p̰ъ}5dU!0ԅ01#޶ٹ}щߗ];w/q8 |'DMC-; |s3>|zvW{dl6DZ$Ft??)95q dfbó O-k4G\)`#:HiMě[Ƭs֏>_ ׶4yg ;eF s~ |]Fɻ72vT$<*洺}Zb BZoO h{ WB c.sɚL mB#4SXp>)e05@43nmhq[E4PHӻm֠TmbmڣbFE _D w\YCӖ"?ƥɭ;]_\[~=+.?#I'KmҀc;qآI@TTf?߽}-靓7h %g-Elvn`&Zn@o!;ߺdU-PFjA@n8hаɍ]Ptw/6M$ OD cU/]&hk2/1;'O; Jnv!F$} ])Y J .Gr3_Ŷ<ƖM_N{NDw24Gtx2Y,?4%2H&b[|mLZDM2'KJ:s o^[qo{8LtiFaE= Wts7=nnܪfIʿp:Ȣ 8$G6A;-QNR&6`vf|K Nљ$&ց@QmP=z%1 HNSXQ̑np$irgBxZ&՝@]2FX}#wMj=U7̓ IIzq?b$RA>PoWUUv\-&2e9K2eNmD~Ԧ.Iur7=rSڪHV+'6E2[}**ZTIԫG!I<kSsY4&X>/O,@9k%S+T~1kxW3*:@gBϮ'S zX)DYAqa 4x)|t؏u ?_o#tLVOoMr۷kI٩n2I\OY'XJ \<L<$5(dO6ՓMX9 dIи+1߃(?VnMWLUnK"-ME^c7=]5L4AعÃ`V>a_$JSs9VwNoaɻAS}ZVJ*eNs8JKݒ i:wc(XPEd9@q *<+=>=EngbCZ^Vd3>8?YoVd(>Z_؅x#A^I:xD#x/Czlk} ׊Ҫ Q[Cn[ 4ㆧN׍_e QU(˗}z{?0MG'T*nv.2FPrŎ˖V,y.+z+c7 sD\0zwkKeq-As1SD_kB]zP;t =Yӟ}0]YY8$2j~0mot^Ub-F(π@/@ϲYVSt-ymfV 賋0עMz/5d mF@n#ɼ5g*6^N΂Y'ģd6)VY-c>g|fJ権59YsKx~*Wx|c0(+- lgP-Jќ_M9rL{}k:kSlEMpoIWHO*$&[< <7af&W}SP! #t[ 5 rJ*9uƸ'ǘ,ZG07çZP1/ӊ%tRypx W&,7Z-7lw!Bg :6h,@aG-gp[:RXP8OMxXK+n7 FxbB=?{ ǘؔXPDz7XڏZ&k S)>9͵е?7PN$G.^-5/G="]4U=lW EeDZ ޿a33(fIo3_.@M2^Y7~"ʁ9} _#ӢdbMqcPyE7ɦD(:>m->E;K~7CRq4ΰ_ƞ|-/d5gAz]E6:"]/>lY'ePpRtΡ֢,DIS?Ȳ~1(Zj@xO<tR0ϝ?MHf"@5Jrν{#fTt^4;U$Y|=B݅u)T3c\)3`mf^ODvl,†<ޢ/oZi`C}gЀctEW:#ȱu!lXCЂGtP̻ىn.N6D6"uJwE- ¡> \ O^sK&Ѐhh. /B/,aamy=_g jn}O;ʋ;800-uFG mxs> xv*Q0B:1"'`2|Dg"c/O'tMG7kipldZqX sR8 flKQ-;޷z#.1~h\L te5jTBěs' ԎT>&_@Em9ShsiB sFDz䃳^禜/a?.#{+?{?aj_"6gh(o/>Y\H4jNE% & ;Le^iG,38x%Vֽz4oaP^].@^S-Es*H;;_DKh$NqTݐ޵ ρ|r6Cjd feO_ι2 2i`4ݽRN;emJ@p拉s:SNu{GsKw:;Jo^- "Jf/N`7.!+"E /ꙄPU_MCpsr!Bd̤3<; nD|.@g*B&d4=FClQ[di"ճ#"^y:sm_ A?LD #~s^D89"'L1(*5u6iDŽEbf ^O3կ~427#&|կ[Iuah;iA*$tՋRb< /5gntX * *s}'!u!C͖۹ $d>,9Ex_7DYx%]u:xYHA[/ @W8J0"m2`0ҫc.<*~'&UO~lJȤ(eu<9 g2-Q,hr *CT3tJ( ([P<31 [yĢҏs|2Ed*8].Mga[ӬT&lѵ _({OXSK<1| ~pyֶ8+z!Elon_h\mg>*3֦Tk9q7^B3kMbSj.b)0h|`[4DóG:3W =hS,TZ=>5Gyl(_9=V5,<@(E_ڌ=B] ;5yĨG𥰁Zu4qkЕ`x4X'w@D¿}vu C-je ul'SyepE .ڲ;72G{f`2tf0q$&sS29b?Bg ZA&ܽuF.v4p̯W +iIg*)'(r›U~oDj_҄VU)v۫.H|5y$,N|E<[cK4U5|8o)qno~)™F- .2avq s\`>{FCJ I3}c e-Bǀ+$Cc0 ewB_(1y;D´G<+DsM:,1DZPGT Tt@ v/\X,N{ifĵcѷi7c^ PpcMH>P7e/S=t0f'@>~*F=m/l1:8Voo6x -!ͧhiһ%%тuS-ïiS=}31[M].dijʶ YZ