knot-devel-3.1.4-bp153.2.6.1 4>$  Apa!M@eeeWVd VMլ[ոu._/3?r{ΈRBQk|xhah 3=D#jȓrRjۖ-)O f!_'=Յˆl79F{)$tyb秈@TSaH{huwp9d <ʫc;# ZpY쫅`&%؞+>Zjg#Zj9h=x۫,콤={JkçV?nlR?(sidb2a4c5d93f5e0720cc7b599f8d6542e58cd4e12e4b13b5531510ee5788ab3d368fb629003d3ea21056b38f6386de09b4744944cCla!M@eee%XPA8unLbz9dO19sq3 W?CQK-["qww|V +!E"]$Zz;z[(CC+u~/ +GeFWMRBXƒCX ~nwbrNR:o,s`QHj9Uҁ'}4^g]P;vol\ =o廥}g6߳Pn;$C$7 $t5vqNAVwј >p>?d   H<@HLen U0U U U U U |UUyU"DU((8 89 8:']8F2GHUHUIUXHY`\U]U^bYcdefluUv(wtUxUy zDTX^Cknot-devel3.1.4bp153.2.6.1Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.abuild74QSUSE Linux Enterprise 15openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxi586H %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,'AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.4-bp153.2.6.1.src.rpmknot-develknot-devel(x86-32)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.43.33.1.43.0.4-14.6.0-14.0-15.2-14.14.1a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)build74 1636359944  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.4-bp153.2.6.13.1.4-bp153.2.6.13.1.43.1.43.1.43.1.4   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib//usr/lib/pkgconfig/-fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17150/openSUSE_Backports_SLE-15-SP3_Update/7e783354187725acff3c96b1522f4e9e-knot.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5i586-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRd2aDutf-8a9f0460bca452caa21f02aaf29d6e255df58304f74ba77d53ca1d10749568510? 7zXZ !t/n] crt:bLL 怃>=2dvA⭣$ȸnVR]wDߕǠSAdmO-{`/W$]Cj#P Ne r;)ֳ7drX%;ׂݎ;L(S-o + _N!dB=ƾF_)K!r yZ@aV#LCAڲע9.LM؂ȈC Ƹ[:Wg: y~Q;è&`\c?OQ 5;$L:SZ50SNsbܹH:DzpGY|LђW-ʨe.}1?`&n A(CX^¢&by/Rێ;`5Vǒ$o|f>\ڍY2.I31: 7Z06a;z⠒_cMPX~~z?^nYhre3cGQNi|'N}%bsa/^N"`п4Wm[$_~BB-DT7ͺ}ݳHJL<(ٮ+nMN)~/N#.[6(m5(-h#9Y+ͣ~\w%ՙcVXT{ 9,.}'IQaƓ$.LW;f,A:39ÆH8Qܨ`o6dG\2Zca 㑗BGb6v>TyWЂ1V]#84퐀dkpEp$Gƪ.}$J!'V`Ck`)aGwifƊQ_tIP,c$ͷhurhwߜ_I2Ч0 =1 Q8%dm[ИNe@co|o~S<M$k*9ޜ~o 1M H1*~}yNww_Fr%Wث R{gn09]5D-)TvZ!EHR[ Vrѻji]s:k;)wО9Aˇ )54Q̅JO5Uk*pyO'J3)MP3/ ,K/U +䩬ceS>~j֗mg/y5I"8]ֺʼnS]bz_dtfCWQTqSdaR> =/jFMx`F iQ癘$Y~$rF̷+Pz|笚d] }.-EV굡Őoi*@k("pQNb$r΃{Dl.IOjµćH7̧}I9A*%vKvWHoR7S`oyR^]@{ "A Ɗ*Km\1We*^F"GK<N1 L/_E7;rkK$atѢ%g;C.>l ^f:#HK.Ô ѢIW&IIhB"JrpC%Nx/q jD v21[d;%>Zm27fpYLq@;Ɨ1*->t\DZM'~( {I-'CrZD4 =Bd|sQ=o!_Uy9"IU g\8VxKIź4݁1f5@V! cZ?`k0nJJ*.Y |WgSPº_LKnC>]L=t8*EL̝^6'\йWsD^iKn0O-ߋ8doASY҇؉u`-gW Nq7I5Vwe^~frbT8x<|ڨ; 0ɯsq-g )1r2xARZI-j6ct9_;d:\ժ9ŏ1H//dūoW~ĉ4 %)qI<j3JD 2!dڶm0.QŀΧ>lo,n`ގWI|6j2v 1WԬBgY0mdiAGlIcKK. 33jjB4DT0M?eV^a}hP-(} iʸgF͖x.$"ka*f\Ȯ[7Ć!FC=<,G O \ش9jxQf[dM\5p^!|"nID K]) \F_ox)2HXw;[改M3@PjH!.Z7Z䇕o-% @/WztBg 70/Jݗuk m.(@ ?4#8Q]ʲzPHo}7ʞ፬N {;l ;N5bBtpS~ݩ3(a$h= )KoExGgM&\颡)58G P [k+zpeڝǢvsvd6PQ.? dJ <=é ɱ13` |\^`R?ΆFb#GA3:a?x-h>V`vӳ+,\phHU՞C8b{JٺrduA0 zpPyE+R+nH}"_u+Jv?+};*J%%ː  36mͣ:kDQ9xl>ہG?-aԏ25Y'.Qi,{h]9{TԘ 7IFhxnW+?4zQ#]noL7RTK>s 5]UvZB&AEk.kqWABR5@<*Mܹ!cҘ[H|M %XCOe*ƹbgK#xHL̇Ȭ/^rdϥ )l;a[ϜGޱյ$~WrZd .5` ku*!bZNa [[[ 偨xxD8{I3R٢Z8TEiwJ-< Pu*V C88ݽgIvu̒ ׵7)$& l1!%%0e\0\M@^(*^`l(1Q-*j]fݡ˦Н,Wr& DJ$.K{؇ YI|u!4x$Ik\{ ?j/:FN5XO\]Tt<`" DDQE(Ww_<bLXsp "}7Oma:_We]-3ߏET:{m\UbhmQmt.5+Xhlzup< |\m{j{΅dxh=R[;q3N XL-F|Wݠbmg Ѷ76+J[N5C>Mo!`g(܋_Q;𰧷csLM')2Ax"a[^hzssΒ8}wܦHOqGQ!g sm} q.EA܊MȴG]0w-r3붹-UeP`Q޼`R5[š(븴aخ0N.%ʚDL`m QAt3Shښ?k=ґs_/O:!f6A%>he5@Cτgn.(%3;q4* eGOv& 'BD:^ ydA@Q'dȻ ] :4 4LJ4M/!AA؅ $[œh!"l;.xo2D`Wƚ|azs\4Ї$LBRU2y 6Q4LR^"tl/$e|A[('Ǻ1_n%yW2To X[D|?.e$a8qVbEW:!o5e`C]/ڊ rIQ =TU1 i:X;Wt}n=&fPE6$K"X1p:ي>+;V?_}-$xu- a9U?'XY mXߋB<%*TKܸP^K€>˶-1Wa&"{&lq*#eÉ!ug=O5qZIԭ<@" r[gZCTiN:.ˈ,Vh;r*"!AzJѶWre ~,'e^٪39,RQh\ ӂ%<(5Z) t;Si!eI1q8ð4B4;+r*& oUZQJ ,L4%8dɾ핗,J'tc~&,"|PBǺ8BOyڵ a:XUϏe/V;vo854ZO S8ީf'~k࿧-}~ ~E;6EpT̀.Lfh*VlZJ_VO.{vᖫ!Daa着Q0\i '-iov˖:#8C m27ws|?o0%n GGDU5;іLkIvRlU P>(CE-7uV6xWeEKkW+Hg x+z_]P^A|}~Fۻ0+s(^=tra,IF$ xS,yqf!2L^_v<% \N׃K먊PKF7zݫV9ꢠNxRDg<_s"˲u>#jFE`b~&/uR0gXjC@αҫW7l]:# ;MϪwI[|>]Cc_ QtI |vb:>kb<;kUl 2_?JZ|hF$gD6bz9m$dxN6x])ne!bV"{ 7Пz؀S_v8rbp%ko;P.'vixIJ, ?SI>ZMʓ1³=6]5nou K%%w)S- hp$Bswl|J/dJw7`如 ZAo!=:=mVu II ]{΋9c([Ix~ .>nE'v4-{aytjl\pL]4Y5v;a󊝹S0H J $;e<8ûad;JyN<sCŚkUf^k ^#66yQf(8,K55nCpǣaύyn޵iER/ f45`_|62`>@Ij?lR^j .Gk 9E|A&DG_xg%qư6C7Q0LJC3l`3nv#ڤYu34̄w̧ NPˊ;4qjW4T,\fY>/x`a- 9 t=qF' Ko*Ӫ*0+3)b[\(pV9xcG]QRg1BCs!9 .RA>fof,w Pz-B Pv,ECvu ym:<Ֆ d1zx>:uFf Ǯ (HJEY/q 5k ͥWT[i rP_Fz&bE[,0yz (CZf  d4(fn mTsߠcL8աy!f RQ%^S,ͽ#MBr Lmʐ׋oGv=[wڛj!]ՒV3~Tvt;-g`Է=8gOXTƑCP[;ّxEtvw7$lyc=h[;I GOdPGY(PKCkКkHpc~1 9ຉ%SG{h>٠_3'2guZ$0fZC!:2FrB"+ɶOiBt 댴y A:SϏ8-)7ƐB߹Rs]-3|u`p=BZ_*& 0k4W}1װ4ͦIpeϸR<5>s)ccآ-.qIY㡣epFLC؍ڼ+[xW@\[='%&#P<71F]ei/]q2ay_hTAJChU =j c @ԂS\fTEQjC d~ZK=n3Dt=~2IgP7:ctoޏrkiЎR䚆qܠULfmc&/ֵ~ a*ht)£ kLXR,ܩԗpyw"BxDCY Zܸ<^Jx9I3iݜVq^!o)5z0"TD.3<#>N7Nygi,@g B ' ;շ$B(Lj> Kzk?(p{J87R(F<x20}~xW SL Jۜʩ9rcX/MnevϽ[/F4Ho&M] u51ۅV9z;iB:#u 辈E>%xI*9嶐}M; &j'{FC]s3ȡOY9)SP`Gg'ZN(ؿS\<ַ=Aly,2Se⧶F_˟OgvH %3^`0C jXva1W9^?iӦ0f 2rlBrg8u&/0e\l=("sar&jZ]i:"3Ʈ:k_^FXeE$’WB=w+}*m59ZK<#j6+)l/}0p Uy.³+|7N.yD~p)I%I>Dx %k odf%xr yϾ/]qӄ[ /p+ P#Sι,W85 /nܢWgRsB.ޟ2C}M-UĄeУQyẜy?:K_(bfJ1#ELؒgy&,hٞI! < Q٤/,d#/,xQ."SvQxG.s+9=t Ϡ,+&WɼK*qG hx-.ˆd|8_OZeb}aB;cF|P arj Hw=5\2[WJ-7Jzh`06wۥͳi=}cr XcwW=N ģak]slF'^D/IvcMH嫶z00`]Aｸ33iq * b+v OhU%L-<*Ⱥ q1o~K:&DCr.T[\Y_iS m:}ڲfSBYf i ɋ(=ls]B@v㈈LA2tqS] JZlN1(Ͻn 956y92XyH lerhiv0K­,Iz7rc5!qtn=KCIe&`E% Nε?C⭈6/z8)Ђ#R%E.d ᄳA vk3Cze<3 [h]KX}R4/[RTװ X@.Mf v:;=V<i \mս z9:r9d`N[7PG`2 Ks%4c\F: &E{iSOz@Qh|Q%Rbq/`\`O7ݼ!Мumtw Sz 1[ ؞1Ixخհ~xyͷ.Շn6vl.lme4g/ƒjAVP,&,AHzTΪ'^oc0ME#1cUH)Q0"ʽ+%ZK$)6a[#1k,R2 6&Zui *k/gElhӘb^e2G_)l)#?rʿ^ܜ)ÙD~ύY+(_qf|WfVCr%]cG޳HC+`.Ys6!cg[Jg/ވډ0ǚsqäkP#ߤGxbJf@VBf^o] յR"qQBnX\LF@d9؛9xp3k ~sS uz~ ,84[_9,coy|R8}@ɑqp}mRn kTUfI{>Έqbw +M}9Sǁhz_磡)oV; 8LSp:%! 91LsXŝve2@K_*8UigLc6T21ڥ [v>(QgIK>1IJlyO v|Q]yрB:'K?J)Ii5`*^CD-P3ݩbu\k$ZF:0"(!ɀ-M$Q?Yy4o6@h1aO MdI|]S΂^Nܢi@oC._ eЎ K$>j;gأrN%Q/{(lCsf[D"DE` uN Y2 P r+3qJ$yMVed.>M S|r)z<ހ94x72t<|Ҕ8TNI!(AczYW}k_NHdQ_iF ZĸJ;nXOn޴'3Y+x4~G_H<2tGŠo5VHfdnGdbpCǀ qՑHa'@ qfk5dʘY ZeWoǟ*91B пlّ,m<3ے߰ KFw rֈNwHac QkɱJ#;\S*#^j7g2MJH{{(ux`;g#+UJ1{Т4AZFQ93tS 4I7Q;1{"_ U۬gܟBciK:Г=`e]jteaBGϿ9-,.5F/؆jMS_p*=ԡӷ+?<&'`w+`^=2'!jSJ~ĬBDKp[Wx(f@hl+LVm鐷[sEӞ #2m ;>Mx5Vz%\Kk}:Ih.DT Z-bqf?͕jƜ>h90Ez}lC"W(w$_?s ְ{D0%UHO':o֗¦` }:!bIؒXT@ Le.hh_k~Op< W( @'Z5J?0Ee2qT5=UlgɦѫE0ˍhEU#D ۋ=|Qa%Ykס\|,a>@I?lPǐ󭷑0<ϵPc z#_xT3*i !BXT@AyAxy}c5@S6QwyޡK uڔN Aj*wR/ .zICn2_%x nԭKp,1pG6%Juf e,q _Bs2Tu~:`b2;5H<᨞YNXisS8(Ǥ5+)&u -:.)BmíYx1EmI_JhJ1Wb76dG . Ô $ W%F呏$(fCT #F>{әrZ_B^ꧯ`H+Dages}T1:_׏s'P%+SN!?DviIrÎF Ƚ__DHNǃ0,TQh#%ڏ= q=P5-'sBH v7&!.o6 l1ǶT [MZ~HNdρP}eJ^a6N-O0W7Ӛ n0VLE=$0=Ę> PYlwb )m=k^qE r!~<%z!IUܑVwpLo^X4';O&pULMCI ZGe(OΔaZg攠|hNw_BQ09bH,>~vK/Ui3&p7Sz/tHwNSJSXSyakLa əe}BT+L}?甝kpAKJRn m߂ B4^ R]vhC5E8QtQ|?EyQM׀xR< k1~zƏ_G5m6ffxͩ;rm([ގYl,_wN Q'QDU"|>g!O3w?6#L, Ѣ|m&6MzfElBxk2*1B0GlLf _..])"a<|BG }NFEFclIQ\~H2̲a469-Eƪx0 }Z7gN֨p% qV8ΑXˣs6{;d-V^&iQ'H!HJX@O!)ޫ`,ь JbG6ҥ=ʊ6G#zEIFNn?c:|L:#yDAѓc;ܯ&1p?}h,QsA+sGI7$_7={J:!%wzĥ'eZԔ1`πCR :,@ pΞB7tI6$ meF6:a6u |>rV_wWX *LW^ KȉDGk9!Ӭu6M`HJQ1wӽ_D=<˃R`ԘFq:{䭩bKrSyUaoGw8=R&S'az"AO{?2j"a&fVxLh{v5OfmӂK&DBV~-agYwaUj8eA#~{+@|k:D )Rq$C"Fs/ WWxriޤ;9ÝjziN-ij;\ 9Ҋ+^-#GtE,k O_pãPx% 7N;ɥx&ZP,50N?g@| N %Yq{p?.Waqdrdp͝)6B*~)PHe(t_D+.ւ?0CpnXVh'ax+<Mi(+Sr11ThkQm|-59 Q2sJ8úҬ !2 Cܞ=#:LSWJXe4,r}ͶS1rb5{9E0xw[tP2 _yMh$,˨$ ~T6}Q9-yA.|gV-Dl*o/G`(@WG?`RkpQۃy/]ԍ 0tKRu3'cι2C}(uxvىw\pi#g\6BEXIP. 5N wRB&߉uuuP:$bBv1)5Z0k(an!2~TvUǽkc{o9$HVF :`.̰JuEUܦHj,` fS֭|ZZba|R83?$ 5Fg TْT4q{Ea 8ew[@yW_ P`"rWu&Tx_Z%CY6 }Tx7w#lI"ؒ=uHg+ӡ 6)BY{сT`JV8,::Ɯ)疆b ǡIt[]5Sp%]!17:J/gFg/8E5iVqM Q֗XygHͿ/7֗Rb=EKSf[.KV+b2kD]kM~d*c[!.}D9fUUFF Tcﻉ1\&zd}ݨ)y=/X;() z p W* ,NTA,c 0 p𕛒OXu M<㸍i\`-"D&)cP ;F#vA%u2lU'F+$86"w,½:'Àn@?6Uaq4BE.%=wL~*?KT$0 p:E<ӿ=99H EQazq)aȎoY6^gV 2jfrvv#%9'i:Po8vhKεDB\^Z҄\5k /leXRԟ8fM5wD"YsC._P ]'֡ƅ6ѣ]ր7.}&/PlFV7 cE֯@Hrfzn zLm73NǠqgIDI^{'8 biyo6,$fklո1LsVo((Ͷ]cf\6p=5G힡%Gܕ%~X7~ӱ`ѫ6by}#m g_S~W0\d.;?R=U֬NJayަ;GGsI$B% }3վ`S^81V ttEsmC}$cR:[5b ̩ogH)wVq^ߩ7,y_b]$r{dL39RL:1l)Z*KweXvWjΥZySi@I VcfIk;$VzttV`+n.Y 7NZ\toO OO@_&2G?V8[xlsaypGy<yM l QGcnv ֗=:i7 RYy;լ]v&1ݱ}LS>QnU2U xC0\ٽC+DZA?nyK'yg" Psh|Kœ> /a0r05"ʙϪ''APaCLLs/@,e3Us>~]5x?94=y"HtkPT|oN S>f /Fۈ|D:q`r`ʁѻH0O?ǭs5cg("?DS*@ ^dv;E(l)ͻNu#' 9k73RJ9( Wg- JtFNI/- .#`AYX^DLK3 _Z'mukm3I +Wn'oQ-YJ{bߚ-^?BSS'}H*Ys{KO\c^IOziv&+1i8FJm4˰5+֠B/asX4NW @e'o^V :5" J `WAm e-@ dnR>\a&BK&P K|X(ma*(rqM +ՒݎӁ6h]V"r^9/c==x/m o{coIAf`#aް]F+W@n5\oH>t+)kS``Ƿ`Ӣ__([m4LGHqJQݚ@V [z 0K,BiթBg1G҄b dfә ʗZ ߵez_=@<**EML>i 977.ƳP7o''=~jŚ?K Sݔo[x#\6j\pMz#шE icvPvem18M(+HտxμTtD䦭+ځ7G5D|! tFI#ǩ)ޏYvHlk%VcsI9!).F.,Enu!lŽOYlɒҫ?\7>% d|_餻6is&K1+ީ8t]zI˛0=oF5Wԗ(A>2ŁfZʠB$~_^d$\nL8çOlށ=$/C&A L=ց|q7#$Bt \Tr>z<,ŸyPQG*$g90Hχ|&^~e+4og0%Oy 4` 8vue䋆kFH}Ec\9,ZE"Yr]O9 (_~1Иi gSyYq4vG2)"u٘[J# *X(wT_{ a(v7RNӫNH!LvA:4cCh.&CÍ*$֏")+/4>WYSqsdSwu)pvvM23Vp. ܈ΰVsڡVv0r. >mG:Wt Ŧ Ņr !ԈrH%qhqYr*`~gp7V~?"^I%NDVAcYZN?W$i56}kVr.4sP%hM%BI舻4ލ74g/GBٮVx`tNm\"aCiR͇(3\tHB"M<} +N!1׋ fXp-7\=x1|F@10][Ǖ.I ܖD` = S$B[H!%IMh;) FAmNC3wmAK4A"P3LQA(#/dMF <.eY%H0r mhM#}Ǟ)*\q4Z0A.^Hߜ%՞sl٪lsbu{ewb$N]Һq.Zڤp;|~׌+UEȨXwW{AuJn:YQ011|-i[\r{E|fm1PXezbjp~M;unÎ _b(SJ}ÁΚu0UG;ЦG_D[D$?6~R00d1:Q%\u\ۮW-8(ymLoG0T^"T#eXULSbHs*E knW1E)JXPK.fF<[q`5EMVod+%,=KXΐvٰcuwO,6ȚsGW_poHazP' W=$ֹT!IaO|tSVP1P&;AYVyUNO;09#icw}R IP4Yvӱ>RugLYߵ*C9nGiOGɀ;CT= '2ӁxUzd"kFHhNSBGf{A{  VcYf bV#~oy: in̦&?[nC ~r>?͘#v*4mCۺع+ xrW;H0NnvE>-\  $ |*OR$0ۗm34@(p2A&.A~t;l@tBMl̜sH:3ݜy|<>zrj"T܅gˏ$'[ɮX|ߎe椫(ȼ?e1COD9 ûT.yï]J, K`hs;^*i?.aΝ"mV&+7{ox pJnmZ`G\BGк.lf#9~W'[Lȣ \*i+|"k[~*yJjoLd_ }L.ez];ӡ^ Ågs)Is.?m=btڜR8TKH·z,JdϾ0/i* zI=z4r;ahQ?$`C+:T{aUL dll/NnX֒΄ěLZ^D81N/G$~.z0@nt7dnx1])<^ַ{4_'!>.䣗D`90MaO_BU<a:³B@*4KM1giqD83qC@gt1-x."oe17+E_7  g /9v "6lQAgw?CBqIWoO=76)s(~MS59$ BO9JkpT6EB}+i/HK^&n‹zƤ旜]]k"Mng[Gg>1{U?:uYV#S]^vzYG)!4J0y+E{ę⻯ً:  ,>+ZiQB2BTPk"l*fQ߸G"O_1Z#h qF"oɬY;|Jx7.qֺ`yv+n?.^j>iur\dbͨ%ű)jy߿$Ykj2A`bDva)SY8aHZ{1j/ Jbwo?0*ǁƈsf  .F9̤I{-@] }Zد<O&Y;F9J!}]y({DL57[``X4n۴DI WKd߉{VQנVע~ c={+;?zaH$% < z_N{LB2ݵsG5 vYFyI#6GlkkHɲlv81FVγY}3N4F*|px㰣ES8NmG a5\7tXD8T}p9>1zZt{gWF*eKȹ|.%njDvMDg%oE2;<- *ԍAF7 \ܻIb%y@dN '㋄VQ_u"n?3h6D)qW$q0d`<= w6|QS%jSD@4EçF _ &텱&WJ%4kV[̣͑pmH$_"rNabW`xsB Ev?_ a?vF-:VxE{p֗tN%6DNQfhr[昫#zqYW$KV㰣BW0NUg+[-S񺸍 #WG1&"Yx磞qy-+(h.Jt_W,LiNDS,@+cbCM :`P^` }eX;e*y$-'߅mrRQ3{&&'d,ѰBhN+_8tAg,,CA 1X[Pbs^`rUF'"Ӗant)dLڱ!i3$` S4@GHlWFHȠr򔒦 PsїuQ$_AMEX>PR&s[ᬋWJ?W/2٥*qextL .fv찠>y[v1&B'2 WK]Q;p#y*P< j?lyEp Ekh࣑"kiꟽ"-be7vlH@c&&<EYV^]wys1KEp,iI4f8,Ppe-83Jr܋ίzk$v+6oN,CSySvVv:H:v2)θvRlʶ{NC`# ]{Zu١q{* T'lPR,+DdD2|/;ܿ ߁w&R`$$ͬ8TՏ>W``iȧ@o,RA+?3E#&$SoQLfslq5 CCQ'aaX茮ӏf 0\|^tx$&x))5m|CRM07=b oZ$:'(!@Ncw8Mm6JūE ~zmBgi,H&XN{F}?c0MAdN܆wgR, ;~ Iu4BOpD0fVM\i?gU>G"όZ}#F@Uv#λDU4QV!%L@+Eɽ$2dʼzdA\* KMu |\gJpX%*TYU ґv$9n0ƚPDyWyZUfx Wք=z ~)u]<Ƀ'dN#8o.@z?|/-NaT- u {UaƢ#/7e:Pg+*r[s#HI,ŪvJ-䓨Logqayʅ4t[b,ڷ 9 Ԋ{@צ1ظu6fx)rW2X@܆MY 1P\@Sf !-׋ /_e-{\Si&qՙR l< vm,ƚLH?Ŋã#;l,~ͥ}|=.uNꧺqrm?<=gPz7勬tGio|v|𗹈Xh+'/U15SƧ1pgMֈ50uh8%ILWa၎ᖅ1u+oMIwTLӘRz^ &~`y)>i(%e)Giė10Hk'Q!Q_Smx,!;W{P۫*|,nFAn*xVohX{Xv M&KՉ ]2rh_v$.v8q`Ӹg1JRP/"ـUMk~~Dz'U lEW#"'*Vb[pR(h 3kn!{*:Ŗwn\ 0 rR\G{dK LSh;,&)ƥ$6ivްʿɢ9oe-TձPPwGZv+hl#ʚgt4)ل ܌-4`̤6qMC1h߬ȻaP~("I·!|*)Hufˊ XᡘD1<srv/k1hW+D{zRYLy[7 euCP@/i Q ق:/w|qጇ?̭#=p3d|6..>Ods|8tS3<|x@sJ-ĿRlאQ6i~E'r9C>(Ls}@ Z@v\W ϵ"?m?.Ԅ@2IF%ZD fͥ&_0D~鳕L@6e4OO;y_h{8{Ɂie\_OO$Q:VvCl:[Ց†G9Z{$*1aHőᨷg>*k{cKܐllt,\dˋN {:g=,|{fIgJQ<ſ|(pg{ b4jl14+L~8PVKh`bz>$e진2yh#dX--)CY(#jا?a ԈH1nKbfaֳ5`Di(I(yE\#[6!CC[UY#dr%z؅AMD>dު.楸l5䩇݇[",;./Mg[ f{Fy⑷ka3X_1)Aژ24LВ{4LR&%?N2F`=OPPk('9^r6NOW{:]+C-WB!+mJ&2Mf@ؼDI yk,ǐ$R҄X4NBط^PZGKLm1׋z:))3m,95aG%oo[EC" l9=I.0s)%_YpФ_+:VkG]{eY+T!Vg+wUNQ&1 p2),Eٳfy X{EB7Hw{n>z =`>pQU'g ~I[VbH'K[ٓ_0fnK3| -#d}wge89SJ Mkc"Ms+?sMX2{)fRp@vR "0qZMGB ga+@ M`5E[TO|島A`P5ݾ 3xcn&@FA:;|tZkPDMYV}b}H` R'Z-tf NpꑯE +H?xuNO++,UCӫٗuv+k2aZa N _l){i z+$'1#0ޛd(exLK&R?)CKSJe˖ǜݤg-{.v ]%ޟŵ.uyֹ|a'C0w?0J$K"sn9`+i;˭hYU2S]+\YqPu"drЅ;JqH~햅jh^# .<>3O ttKs9!{As)3笷7eF;2Ue-zi @eFq_4FeT#m.=DzO)+bSхr%#-[Q-REL(R_( [a3h)Ģvӻ" J{P6`!k q1! BOiLdOx7 IKa} ʱtn:PhwWSXY2!+E6 5KMpu fѼ›[R㐷9-NIX 2"bLBhbM/GRN&5KC*!) ]Ia%g[V]9RXIH&'4S3 **ZD_BV?H/G=DdXAAljk;ka\jF'7K +Lv eF8݄/&}=vqHxchz4DIbR1:]x`&g+DZ?K;Okͥ=aPOc8Wn],W?m:=-Gg`0sݩm%َzX]b<"+AuӤB7A>\(&=;?p *Xb܃G Ǿ֗*q=>Ѹ)K  =lig3+ ]?+mr:Y0$]uUK/8c8Y*cTf d+i=A-b aq?Ä4|83uO!Խ` 1] RRa롥q+ 7Tt-ojd<+ouuӉaB/X=4 id iqVrqӏ_c݌0N8JpTqRJ:rC+0GUM1_ǟ_cGj]Ƀ7JA;6:jz 3~_o{k4̥-Aw\f+c$iUz mhkAf<˅~~ق a-]ovs Dx_1t2ԖPҙCn.GB꾑HnHn0K P~+hf?ΈzEY]hb`Q K B_4/cFDuN}VYios9e;@`Ru_^]jJq`l#$r֪ӬYd/ʅ*;!-A-# +I53l0Jↆָۚ>˖z--9w -%(}+G`hEj"wݥ;ʣ/@φ'PR?(,ĒxspPm8d3h!ܽ0m$5bPU[>D:Jfb߼t^>[A\> Lxy3AZD>3AGQeJ*"0Ow'7_v xӀFLy6)SDZq6'U'dRrٵm# 4@Jh38Kj;-yҥy25grrrq*(0K`lS51c94% a_}ul/;6PKK]g*8y(amRqǛ!PAk|voosWu$ mFV -,nϤ]z/ia\!MR#` nٵT#0Y FWklG2bߖ k8[D-[^w|PBt^'v'm#j0F̿M,@W+"'zE#*ߞUþ_SxaH"Ǫe1a l?Ha~⼌Ptem(ɒ鈓.'O\WiJy1?Ox=輔!dtl 3"3 4G.E^>4V{QɃf1Z}+Sqp4}jظiZOtU,vʴ ZBQ-mheVԶu~y~VV Cy qE,gY<|4,(!5zuTr<[*eC)OpL"v+$&YIAcix\ó<>| "^D7!B`ϣ2bYNE ш>EyGkPj ַ\;N+pܳr"żXjZRpe >d+A0yޱO^1[lmsw\~]DC/Vz].;!BGpݞo/8?Do8^4B\h?No!v4b; %weQ%$Q [thn3K 8fj°nJ-N8t:m[OTm"9XתRpvLx>t %LiHIԼ̱.edUiBXc+j3/>ZAN#R`l:h(u,ٮOg+c e[FKĖ 9Xg-cHg FgM1" TsJp+ wGdcD^ʉx:^A/;RW:mBLvxH{N)hr|_4ftpMk Nm !+Pu>ij:(OFj,<՛R48xC4A԰cIښ.>4oa<Ɂe=BlËB'M'@mѰXz$v S1sHǢ2I'$'eTor"Gf6UX]/LJʣX>zd4 ۸qɺ_Oc1FVq? 2 ng3˥Migl'^3xǟf3m\ɬ A&rZ'k\ӵxx7\H T (q# MPP=K.f Q1` iN}n!!͠qcő'[k+!nj4?0RwrBwlp2%`{$3R]q䃽Pp/ļR3NUCH ok4oZ3f6* +lҴSvry= SS^`&N"y^y5f8H I278 3O;/.0n #A#-rxT 攍^͘[$ȏ͇|& kE[3w\2"q#48 a-Ֆ=wu )Ѻ?|*c4X42Q"0/: h.F5 8P۔FyS 'زD?jz0yeBl xA+f잽=srdqX16Q 6ߨwĎlg^J Χp`YM0,&o !6 Fߐ+-7!i,`t#[`s~-tsP<\HUvȟ-{"pl>?A9BDA.tj\ XFË L [;Ul νD)Ch.Mk8jf\ޣk"\v2p̻+:yԷWt?wKm0ҰƐ훻kh0rxFU";9~%ȋ2YP0s MX \qu39[sDv:嬓T J1SL~v>XN\9 ϖsH[|;jPݡyk# -DT6qѬR)`t/Iʅ ]@lymf1j`ZD~L,{3[B׵%?v8u8lU&^%+5gqS (A%ݡ.g- XiC(A9 p4y;Q>O1o;yM+7(ySF#ZډUlظ91 ٟE1ceҀnzv^eoiD cx5/λ3z.;Hy- :g GRZB -XcY0A=wa2uf.~Uhx(;^*:͔pm<;]Qrլ97M"8VS`0PWZjOHueY&*(LQS}R  v>u=dS,ahJg+mJ C%%ːs#Rc~Յ"O,܍L,±Ewe閭-BrfG 8mh ?-Bgqi&mۣ<`o,0#<|GHgX}fE G6#X'74XbZ10tPl'96sL.;*jJ/p\=ӛSYq.2s>9š7TTw G ;ߜ9f8P:2L2B?0e%pR8qM64NGȱHlj-Zyɘ2ZI,{.Xu;KSVuba(Q|~beNv)WR803&e U 5mP5V%"fՕ2δاZhZ0?n)3PϞ?-뇑Xq~<{HS,E%_CW){gN*@cb̦"TFZyl@&ыfum Ugޒ[ݭOV03dAxa_]9bE$Pq܅Z* 21׌?HZ17u{k ;} yhHVvh5UN?u}VÛ 葤e6v)|W2lw˒*؋6b뉰}"e=h^S}Ldh(Ӊqӱ׵swKh&O@ױl3,Esyy&r@)?`")ØVYGХ/^*+LkJ)o_ D^rRu\-;6,: o[!a5d >5#u>$D=:h$$<ʳ *%NsyB>1QHa"~RU$0O ŅCZFArbIDtJJ q:3,61EqdQ=>,!@V3'_h;Ż:},KqCUHR.vw#ɠyO9F&(.@-l ;Oz7xRln ٣b Wb *ৡː)ukW\n+&C5|jU]в~:NwTRo ,yn4u?ܾ*W:R䱄!:筱MbH1k"|\%:1RDm\!F[.gRj|T7b[cѪ €7|zBp%~m[} {5ŸO .SGy;MC }NvDŮ;^d9'^2껶mn_[ug@ TT X6Uv;INA$)r2)1e7 &Ol',Q1qeLgGqryjzΆse7ΆY#Ѥ9NU )ndՋ3uHCF!e>T,+$˲dZH%C̲!j~ {R#9k.OLWl97mTG$mƫ~,x! =zIo | 3n1tY{EiEN5/HR+߼I%ۀ8tEӕ%j,/˜ ^Lil7 ;P} UA9i)0<׊DtE{d]B0ׇbTunc+流)]žֽ0xKlK:b( hkDzAD*zCPkrQ=I1J`<~=[;V(`ߚsmgB`AK޵|xU_K@a cN]cpbj@, 0.=%9Ge뵻;v&_c*-#!l߯:?t̺F #R#96EaWe7C'_+NK+v:[3&` a)g"]';?{Ε]U( rAAspȞ5W Eֵ 4 .m,!UG"#:%'oS8xϖt6L^SW ݈dn*Q6FojK &Iao^ f?|tx N) ߌGenwaJlN* VQ 1qܪ'W¨N~8ٯfങ/h0:E۾ HmֲdPZ@)SB%(8TC #G \.=llB{V<$0u_ VvicL6M$iZ"پ*L븉kb"-@ǐahdy $]R9bpozHbے16J[Vt)$ 4Imפ.A|+iG )Q &ﰴJe-A``9b' 4-|e6g7;g>kտT'QCQokț 6^#D#(\=gOH/M~afʯi\hOCeisɃw֕-9N:lɺ57d3EJ2E԰,:ne8Fwe̻*%J9KL0__(-,O[{K>Qaf \3{H3&AvO[dlHT:$+J>KdEsIL *zG]*Ztz*fr ً OX(y…XD[hC-% y]Q;a}ɷn)Wb@E3;]֯o0?W'ʄl8 v#9*`Y1}nx&&iYvr 16h2ʯK7b|ҶֵEH&z0uU @9 .ry%؜cH1ǘ'".oE}Rg9@pߡ9V?ؿ!"HSSw& 1 "ȓhz美r>SqYplq0Z5Km6N+5o "gqI;[AH@v1$0oj^v;>E`gr")ƴ=IY7i6xJf7p$4m1kӎG "D@?3 wԳwB>sVi72y_yVf˚/L}WJ"}"$9WLpHs4f%97jO30 yKO%m[;oN/4KWۢ窩jQ (ַ'E7@LvV @6~`: | %:xߖ5G)엮f } j -1QҢt=P78%G*IO޶$&Y);{}q-uÓ-|@G 41喓'{ ԅ V{iyh_!Nϳ%ʟ7A_9ɽ*@BToEe$ƒO0gy*4've 9ܥ^h|q\6O"#Weh}U#u5vbQMHSz{nI˽o/8c)S;ң'-q_l }8.-,K[hx*g|}U?E~HOA 60pӨ@] R\-*63{r(8}Gf4 vQ!h$Jb: Ec,VިhaOܔ2xjq$nTFݞYgd,5ܮw.0UBV>|q>SRiBМcih2 M5<}y6AAB&ċ"23epp3h G,ө=HhqjOGt_H# 7c+3/NWKi ˄\PBd,Y8-֤!S v5^n膔!{,xyrNz谵iErڝV+ "?#*OzZHwE-E2bMndb+Fh)+n9Q+͎%ү:>bnҕ-h ZLA/''=m;ro$I;\~ܾҸUZh6G2a3)$վ[ElI2k7JUG#:Muڥ<y_9/ݖkp69\p&Dҙ'$VCP'g3(cIH}c4K&?)iaB=h Jmp%:{sNY5nA8Q,U}*JJHRQoG91{p+'7y A [E|9՛RE3"1GG(cedp "N|##Qf_η\DE>zq1 8^˨: -3u^lxiOJ]v[XnjPM$9<̏鄡,Qc`Hyp+> ~ҩ 3! IT4B~:Z0빞i.lpɊ~6-֯#w i2uƦXN!i/Q_ij\Oi}*Ykr}V'1l]Oh6!*.¢Wqzl.;'xԑ_`øDi{7bQ'*f80 ;Ɂ=|#%AZZhdm&"eN^|{ivUe[<hDcD$&jPÚc?e_8_]@-Y~WoaqALMU`5 12 Af1(㮡:ثXZ ͻ[B |&J1>=RÿWj3B1[;JZPz*7?i x&9xګ~σ{Q9lMM.Xgihe>[j^#o `Y) \Q PWljš4-bO67KU8 {y%¤ɦo 5D9Hԋ!V c orθyiYa([$_-q!1Ҷ YZ