knot-devel-3.1.2-bp153.2.3.2 4>$  @paV&!M@eee^wʑu<ѦwiI6dž y$N1秹€R<&0lvY&f*8ߪݑÙKnד++&,&2֡+㹣fGv{Yt$KdnRj᭑Z!j+ m O9D5 57цZ-P@R ћK@u)焥]مV$yG ?=fD&cq6~'-ޯPa /pMbbbe2c8ea9812c5992940e11af2a6a4b05653bf33612199caa49859ac34e022e8edcc3aa7c542876e8b6f8b62b3ff18fe65c3263B4aV&!M@eeeΔ.Ü&c+SU~!Ag>\WvKM{嫋;5VxHAKG5.[KI4F @,d9 KzWcQowHސm<]겧eCq 7.o+=&‡D*[2{yΚ"ECJ\t27ڡv[,$E2  dH q6+rJ* y:)!(T>p>?d   H<@LPir U8U U U U U UUU*LU0( 8 69 6:&6F~(G~<UHUIUX<YT\U]U^bQcdefluUv wXUxUy z(8<BCknot-devel3.1.2bp153.2.3.2Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.aVs390zl27PSUSE Linux Enterprise 15openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxs390xH %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,)AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.2-bp153.2.3.2.src.rpmknot-develknot-devel(s390-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.23.33.1.23.0.4-14.6.0-14.0-15.2-14.14.1aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)s390zl27 1633079543  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.2-bp153.2.3.23.1.2-bp153.2.3.23.1.23.1.23.1.23.1.2   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17006/openSUSE_Backports_SLE-15-SP3_Update/a08d5cf2d25af1f2ab7fa81a995d2fc0-knot.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRjaYAlq(-F3>y\Sծӱ~6 ovϖ4;<ߞqh/IeX]2R#j2crW"捔zX4Mk 3 0$s&pd\ 5׼[%WTo峬SwqQS]#,[l@/DZn\#.iPSx=l@RYǓUöi`9Mr{ wn`Q5ejmO-'{Bi-R'+!ƚ=kjT BxYWD)v]poU8۾4 FUKٖ>/)}C1#JC ~-捣BvlCrP@q/h?bN[" <?P>LhYdoa+ٚiLxD'/$a>Vqt.d:;2܈cJDEJfw+ҺyO ~b?HܚV t?Q OGRK q^ %Tntf]!Ic$jPxMωp须U2m1ֹ!o;ڐpn [jܐI2ܞԺ<(/|mh8ްq(@Z|$ֆf ӷjHI$jcueq5F,MIf܌iB::_VBvUk!$a4av\Bd5w?L^z]G LؚM=۱?{D7=7iB 䫝@`CmFCO/5hx ^ݠT»·^PЃI,`X-ړ.hǙq:OJ*Jq:0[znsSbb\3 Ub%ӖcoRPqyu0ɱ$Vw Epl8 IK5A zKLK i9g-&ԛv6}&A1t+Sڬ7x-!ᓐY3C:?h`|p ]N|3PGwu0pA_Idrh09x۝[scHäs; $Y 9M}G 믤N0 J2zuNp"\!kykZIbUTUغEq;xqNСV)W*;'5;HP*l @0aHcubV4 MWBgjg>Si57h*אux%P^ *P8lpٟxM?Gm_HkRaP5 D\Kj=U5 qO)5%St[N='u򗦔if@XRyyǫn=jcqaNF.~X[h{&@zA؋<9(tvUQԍCMngҕ'$ N:YKklmyM@(|i?+j;2 9.L1ex Г@w6yRbw J/n} :Dkbp&fs';7\)"ŏ@Ŗ(I7RXY\5w1:Å@LYMBlR_V<i6IQH?*d1!CLc1΍:If྆rD@cٍHUs11V+"r2/Ab PQέlSck~qP،vW/}剐{T)|@u;6Yj.@njdU_eDv#@zF>|/@VH'lN 7DZߟ/wW73Ѥ}&|.ե47cQV[%4I>|i=V}X²jE}禺,$Ir%Br݆a׌Îޜ(|㿟(r@45+Tohy(ޮnE͵U/h2Z DJKM^І]MͼNd涴 ,%W~[]B1In~R˺X P1î ޏPrE8D"Âw06_3;Xn\)TsRs蒋.Ç.2ڑ&gu\ZFr(T=Z"@ W>%2v mJɞ[g'X(i:!/03Cey\A`jWַvAOqqHU4Li㒗VB; 0 >{EH3/Jkq uVzJąݕkMPQf[lDrm3mUHKeBTE_ Oέ-UJ{%†?L8=E:3|!rxN%2r 9w'@vZsN%H(U7$/ |S3{I>; ڙJ Jv3/Чi?.`NM+(phBM*PT ^,=I5څ:% dUdWYIx|&("װE yy;Qm0r-V'82Qf=3qO$x'wrPy[ɥ;"Xdž1:Lh?`Zo;3ApFe0[J\+_#CfUI!eX (@Ug8ͦKC 7%gN Z\~g }؝E43_gXع#ooQ)uaD@쟝8=F~|cwrΙȅ|H\tEz|vKRDZ2"&:էQ|JPƶfC#fDg}" a='ytB[T@(!I:Dٓ #l% fసG]`zH#YWp#w|73Q bfYf8>aE-^A%ۤšJk2b;(_]&ܤDӖh 37]ʇp ]CK=b\}NpN㇔T(k$d*`Os#-(>هɠqr'*itE92|$Jb RBG4HVe\p=l܂L6o<[W1"Fz&iQh̃9_@G .-|u/!dHyuLځX~qE2; \]7 NH'RSAK^,\GFö%]c@{ K1F>9ؗ5ϗ̯-Ð c*į12 L[ZxߌOw3cV2"ޒqyRܱM nۢ2}UL-R,!.CLЈw"Zekq5"o4mmHxf1ٺC {Z(altS7#̞_9%W]w~V1pG3W)l" Ƅ}c-+= +PNq[ژI@phOzWWe9EejSWpPN%aܴ= e zo jyeui3֚NmgkٚI|jY8L٬aN-J2|,Z]K-3,a^mbXH+&M"u׉賰'^÷<{󱢵xry5imVEĉPJX\XBnY|c¨zZS{~-J_!ȇzJ4EHú;v{H(W<*Tթ|T)y\SR[$65ob"<=yYA6jHujm:*CŎ^]u /Ǻɾ\Ca3R\G]2$D@!" Qӝcq#"t ["|7$l.+\{]Y c=%˗ Y,D\?[G-m3h~ݤD- 'co-w(N7F+%vL5'=D`)v+,d͉eڤ Lr@ժ[rPu?^$ tad0ȏ DzP[ [HwF,{Y7'}$ډ]6ga "HnT55q'Dœ2&{D6K0gmDuDe7MZrKØ=+{LeAAxRv$qʙcLF#-v~闣{`w?\eRX/ZvnNİqEDzjL7)+=u`lW|>|'o(~wL)ʼn tTW_'? ?1ي,ާTd Qd]IXn|M@kϿwbZh~B.|R=B6zߜ=X[ Q3JZeP P:b5PI"'(7&ɀp`Unc2ŮN>@en"3$v|HcUE*[mCqD 7 1'f*-Z⬃rs^4ťՕ( e=TPY9xf`H1Ķg{YM7[tumvtcuf4ka" (ZKzfX܍ >\6<șF6zh6D0s|A8=Qrsem-% Q! E }D2ޞ{1bjȄLY|`U,]Ǥɪ\YUK3٧cf)uО^ۼêϠQ]/cj">#c>Fp^zYYVSӲ}oe® P \{ Ōs!n d\wz|r!q,oU6#-K$R&6]Ϋ$A8Y`ѯ.WW&$-xt]Xxe3ĒM0 "^\'dԧrFl?wl!2Ӧ)+2 9JϪU3!7@; 1]|9$mԽ] v?@[_̍/C\k='/ǷWTFZGx٧;Xum(dX2W-u}۳׻aXQ yk 41}I苵TE1`y9*P.5BI,qUY&e3: p,kx$ KLkX]QX޽;QyQh[Sal%‡VRgth'2#=щ+IT0g;Oٶ;[X.3TLxxѝX{ן+SuIOZdQ&YF]"H/SҰ,6N*5n#(xwՑojΧAoQ.0*7_>eHK6(oAiZJ=&YU}fCcxZ{QlfOμIMwT_EmsiG VA@`\Q˥3+CZ4&δZ^F?h6͋ [g)= c9iՌ+vO(ŖOϭF+]/n&32c?ʶWX)cy& /;(8^NeQYGi'U:!lkY&ɧlUPD^ufIϋSuOZjc.EpfΝaQ)4Ɉm!~Vԩه 4L#i%lZ1̃^.(L/hc??Yb!K$ XT!^n!03*<%p RVfrW/ #6lV:wNs!=+ :KMAi@"e;؊R` \.ؑ/b@R=hZOBi% k HF$=}T9DS-,Q[&gΘdxaզP8PU@YؼlU PiIKJܹ%*r{b4E\J5Y"4Ii{cNT}DICʠ!jkSZt[*bS+7ͶHIɄQG<9>/B5g<4e $T(qe)ؘUoʎm-}ńQ73 "?xJ?#eA}WLN:=TP6㘦|-~hL7'KN2ۑN=hEQϯ\?<~SŇ^Nͼ6{:+آm*Dj/w0*H4,n8YVaM]Um*E{LhL fkG7Y-AaZ\beMj}j Iljm\'9Eq]Ex0l's0dIMh.RF/nx~su]lV#nr$\:wN<. WN熔=N !?(hQ BI5jιy")gp\.~T"o5C&X2"K-4O8Jc.M32,sMZ%>Do]jѳ S[SԤklўj[2+%BVjD#aP>Pۗ: .q'o4H]^ԣϓp=m}.J@',$Y9.4]AY Ŵ7#/q^'p Ψ}7Q-߆M"?ɥ'm=^|>[f`&QT"UBXXI}j\+ a}~4HtfIR^-AW:scSZgc~b1oin<,C$37Sm"JC+%IBjPi6-' CŇdL#pc3g2S;_E;8 2zkSKGXk@cd(Q/,jP {e[+/}Ϸ<-y|Kp:[F ? CݖT  r$ qP3o]g}'l9dhQe$W:CZ!/"`q1Lט% [X~̖>' sd;jQ'ՃA}y6z0[x&`]^CDx_cMLAXf_/a4RYMWk ;Ψ.T{J){^#s15Z=" :)!;$f* FJX]f6D^lFdd+S)w6k硦ŢT&` !p ɟTvh`1Cޜ ݟf{NfV~MT"W Q!HkԀBibK?K (禥[cu1K[Ĉ'ed,uj*'łG&.7HȥBorC0YgBB xkUhTy.{~W3Ɉ  F(|!]cl|>Cj0[e2>&` LIq-}#q@4 `w=O$XɎÚN]?3 yMx;5a@V<?׿{i=#}s6EϞވlSS*jʋj p1Zr’ǵ' >`;ƈc1dxPف]1Q孡9/ 2 DiU<  ?ֱ &gY?HsL=-n6Z:-ȑDU0qh:h@={)tD#7gi+ f-?y@|JC"$r mc ҌvACySA׷z siE>(v *T{41>ḥj+GFخLTP7 U^YJ>L@y4%Q{ճM A?ٙzIk~b jq6&"'dP`V 7'>?pQ$]7}>(IUIR,+}ڜp:ہ g Uv\zpI .jĘ4? :w%Jۑ |PKPvMpk=|< L:ǰ^_%=Nq(&h:)V_A(QHZ܋>lɊPd`?Jb,kDN fU.!Qm>T/BQ^l -زmb=cb* R|VVD(mcM¦pxr7ۊI[{zj_yyRIBܩj\oyUpgj2/$u4eE&Uo;}Mԗ*M)jCn2k{4jT^rmO)jRrRT9 5EEmf],"};'q -'[XzW2%|+Y9w~4trgAkw[.EvRfF_Z,/e<=rpy1λR/~-D)F\b +R@Q9ѩڱI%.&9 bXB -y k8j6n(H\[)8OBjSoo8X9V3ѻ+$\sxL ^-kvsh}h&̉߻4RoapfjR8<99=w+N$BZGR@exzg8δm*QG__Rnj>r62Z[z7,AAq#퐃T1I?ΑTL\zå]i½x4ecyjӰZYǷuBXf6B+aJJ&`6ˉDԨq T9/fKAH,`W]YА߳XyY3졅Wx>~0{V+tbyC5ܖPk~"4|u2;c$  I W93w] W'6/K +Ni7_s$T:ٺK ޛ(=k*k|\NT%[O[a?/]v+K2vqڃ̩.v& ;np[ 7}+5BmCGȯ t_D=ඹ-}xB\=~ȎSS7CF1:V˘jg =Ȇ"r*ކI\K7:@CxH ;}R+A;u BnU "ʒ]qZt$mRYrF׭Kq8{Ism%\J ,mED mRB]{}y2ˬcoUKѐ'1yK2sCTմ Uخ {.]!mf'<W^&j&]s:ůE4/:p[z͟[g@}$6yXNZHNKZ4UOI= YqCeZоJaZ}“3ʞ38;ZZvxAz"H7/' 6"-j uqkG=k>'O^c?kkBu3~K\osM<l!', rQ`&nؒ4Es{@x›iz+SNLTě/s;Hdx[3]rwg ÅAވطשoGrK,[_"$M; xy^-,{ #,Y.#+o#+RsIwZ>,B1toeh W%eܼw3zè,~5diyѪɈb-q|' cND%ؾ:WJ39 eͰ[[ce_I`s4L"PkϏw!8T=M߻Sq>UӐWQ0V)gYK pkiD1ᡊRt)=4#cbL(}Mm/*AĽfb۽h7``ƳL< T$YB9ڕc[{[@e5M]$.yCNJYZȰgA`:]Z - 2G=E_.قNtwaLmfM1uohN+^5%x^F1,UzU*h}2U'K` I+6i47?蛀/V2"m&/ͥ:igAWS08B(ƢyLGR|62 3굕TvyQkJj,`t_bak(. i)IlrD{R[u=jX*Y c;qϔB8-%XүLec,2^ ~(p[ >- e\7ش*p|'ࢃϯў~K Yj9GXSpgtNh_'{4*Jt|zDG2yHt =Q!57v-ǕJe~lbAiluiMîM#k}futB=X(ϧE^^rZKKf$cLՒPzQ5&P벶5=9 e\My"@tO5{ECul"Ty0n}U4^mcǐZDVrW\L}(<eG4Xajt(tɡGa2L3P25qxb;B0ozWHTUϩyk,sLN[^ 9|q>ηc'my 氡+kǏE>ѡLNLow>> [vY;cQ)zTׇwf)`v2wG8gȻm0X‡lުZ E,z #Z;?פ9J|w,È2lIi$߯V GQy+(D,l<2QӍ;ZIq_~ЗhQqeaN<~ JvLLnlg+5]&,c6tNu(ulG&ho2qsCPm 8򰽄kk4y&C˥ ZdGvF9C(d`p\U:u4[7uӷ.a؝lQ UiZ[(ysn+)elOʗD0H N~٪+oCA8gkGv#Ӭ"q&jNe:#\tߧn.9XjN w}Ի8HK72_GMꉂMtj>\tgsY6>(?l[s+Q0l[U a^u^xd/-ߚ(=ѼжkGa,J3 1'FPr 4ҩ z ٠sPeO=)QV;i0dg88nq2a>i+Sdd^@Q3x 'VR:t_CygЇU+O6A29/yY,y,ƉzyiY' .gTK1fhF/lŏ&6kΧ:d HzXz֎+;sU󸶁r;cj^Na]K" xaQuGs5n&bD*hջHJ"ٙdQhMf ;ArCR%8?]7xDu/ZP_ W Ie\<uU W$|n]nh3_(?n: r%ğX| "U~-R\f A~(Fכ֔kOO1~ypG8DK~Id.VCGws̆Fwsv<\f("m6`!X68`] m ?ZY)RB5K@^( =׺:22}8W?lP1G⛟`Y|${ F~g|}/L$ C,Q*'S$\Ny0T2(xg%Jӭ`ۜPaİQ {c+i *h3{:ѸHgHLy,'4"X>M4̌o䧥> en`yCQU xQnet쫼~v307ALIWF8ufB32X۫oy&Ogװ֬Upf(Vģ+ 3a#f߯V6?鰃lZOLdR \qulm>FS>m+z;=2GX_m]鎝vC$==4 x3>Ck ًqJ@ОaJɓ{+QAoǰ|uWSׄ - LJ!&~߯%P.a W}(%C{ѫ&]ˍ)Ebruxjb 8kbQ)0}ĨLV=C{z_2MZd:Q%* tRRߒכ\[!T[V׎ӮAkWgYLKdi=rPM.̭!Y|i dR`vYC$GlwKBҹͅx;.ξpW/&25sJ?՜b ~4Q +QykFiA' m)ϿMq/i$[@V=(o䗏 1T﵄:!N%Mkʤ}]Ǽ';&=`K!s)rj85is+(TAmם}c?_^ϢJȭ_{  J ""mWB" j5`wx<>d>ƈL3 zv !>/H7{nAʥ)h/XȎ$W̽:F[@{ލ/G ,E$,w2a_* +j^[\lU8@e{0'KPISBlz͛չ1NlET?qw}!XnӰuf:).' r'7fVN,DٺCp_5Q4}x ̈t.`64?, zgX)3ɋ#hlEߡR>nHJ!myHnx7adrl>HA+Cu/Jd7##G=}#Ù_݀aٞ*U˽LV1ӊbu'uh9]LcAx,* y5hŝ-_sh>D\-҇x]idck'Tbjɮ<-Ր~5* }]y<--ufd3 cs!d=<0 d2S:"BPشY פ53l 8kNRⴆ hC{yyKj0#V^% |^yn'W]ra=${ GcvGGvIo4"pzi< ^DC&`_;5\F~ \=^<96g`)kfhK1UZ(@>xCh=M8 yQLuT*6a$!\a1|X7#;7Nc G/zV^)mQK7{JB.)/-=k#RU>[}!=# ȋ $::a-#2)u wyb!! T&s/>moF#%00X}zޯ4& 751\!x6dG6bȐ0:쎹B{Pω)GYQK-ڸfZ{8)E33HQȉ^it *%;\߾a.`uHU_2{{8 fB%9h;AheEY\=Ս#A #kϢ׺E8G8d:* P '!+6"Muk0y[OKX7ik|,=]{|{JRlK, 4E%MFA TCg٣3Ğ3omJE1SO Wv"39̍<4ǾKd_E(hqztњObɵ&kPeP1(f|eyP_jSliֽ0U$:Il~f&=\y)xpغDa0}㍉, 3eKg.ʉ ZN< >]0r4/VBSk褚_UFG^51.w'{i*8d5,Zw*N>FCRm0/??LClSaҒ6QXi= {➷,~nQ~4iQA%ojdKI ЮZXL -vl`2i ~vyZ^V>T0:x"<7q~ƽ#s|*̶@dt[&T#XPc)14ǩR ! <'Lǀty~`x)>H/?u%5huiR}TO˥n#4>:VWFK1az2Rer"9ǒ@Scͥ&J;ňBp\Dm@z~INCzT90:@O]3J'WP+X"z$Ww ܩkɪCJDGrM $=ϫ` ֌cySj-)8C`:bV/)Z583 .tKf5#dd6b 6/*AC~*cH,TZ~)jbx^jm@6R=ɨh٢ 1nS ^~๱ݥHB`9 S5ߟܹXBp0:-yF}-k Aޖq Qr}cXB[/(fipn¦Q#=SqeCeͻ`j$\swP%iG~pBCb[6PX4b9'C_ق=q?hA'tayi!C7ߪݪ>Qn_ֳ }x?SEp@6?<5 }OZM9 >\ ƇՔe3T繺>}NU ,xѫ.\$B喘[{x:931XjhnP+uxZHd8:DY6a'{% ` !һw t4sR(WѪ]V<<"L4>6TQ$asNU)eb ]6uRNL>;lMd]S&rD?88Tpͨ~ .߽# ,Rdrbnޱѵ$lPH]̯ +^֩gW]^{yrל #{{B2aH1 Xґyo•v^(X&(!5o|x6?s÷'Ӌ3m( S:C›TG<#vPp@g8{,{$bPkN6V]*} NF4@hOќ@V-0JOo1lQ;obd'n:3ƽ+t[ћ5ez[W*q exPgM8+aKXneSJFmI}F'铳DhF1'FV7z_='9p#2䪕.z_u&-2ΈmƼ .4* ?x7kX#5^Kk9&9qq k/z3h6!W+=bWU9[&ah(gW0& +]!S 4ur^G`y`ѓP,1Wm2Zbtk2zńru3R'[oGNVTŜ-CiK: tէ` 3HXtjv <i#JZvQ֩OQv!w3Udor+zviexgt}gP27dwMS\WLmp R+^'CʪL݉lEFwR,N4LbB  0:IFIV- $^4 7>N GՉ+g pAh/]m J2j[XSK/tԓk"m)|QB`+ڒHl2eV9Bmqf9YU6|wFt1*)eyQ<RwY|JP*2rݙ!?"[@ɘ~+@X量0f7iRkAr 4k:<5Q #rbVKMuk\e?p1'l oEr;ԧ&an`G::%XZ'"x6 %]uZ*pNK6sZ_>Lg}{:A U_Qڞ Yڥ!ᄏH jE[ĩ.S T9^`kk w*'E%|簠Ğn1ƿ244ҿIR[O?B|\"07+rĚl HR@⨱%dH=U/ Ip]4N86ٮ EFw5:ßkYH7/ޞg v-KDCa]JpDpO 5wB0"}<.n1rL< q<5e r(aeK\*V]["ꦍxo#H`$岮 rȭeIjiksI(xU1]+[}7iRaa˄Sx'g."gI~s|kLWgˁ[7B}s Ҟ=z}iZ/y}|g O0Ξl| ,v';B#N=-ܦK-md `DdW ŗPiNe>[2P].%<`djYdJx\<#wC9v> (ӈ0I 9*Ⱥ. TE6UT%'?;GaTr@̏0{mIK6Iq9VDoWU("s2+hTD/Yčb=9I}ҁ0.5?ta!~0xWzt޼7.a-7pz;ܺY]ƚ}O]Cy5FPyBjLu^)Zs[&i\-#_Lx}4NM]A)lnp7o9A 9Js'muVk!Q[E (l]pMNXDek`Pn䂿yQHX 6l)q SeI-Y<΍ljp]%3Bt@GlচUT̄&^?I FU!?tTejD%' dN ?μz5jVxΖcQ|eUCJLj^:eƸ#-Wd>n`pemJ\weC hubhm<-,-ZI%,uB>HVsofW[mdK\p$% 5-5Z6&E. JH]4=]}keWt>'Q3[z9x!~Qv+QQa Ej5UƴKHzuyT%s;[t咦DE9)jHefKx]rN s2FPy`Tq+'2x(x#gՔ"ya갌eWM,"y8" Da(u[$LCQZaiC(?׶ Lȭ*9#1)c lJ.i,~{mP``a;lh@: mS9"8ٮ(f϶)}ey[ nļ *J,o.C6M  aա~-#?UvfbuR ;.A[2RR;/~VRߌd wk t"uq[-s8PPȎ룱61%N 6- Uʱ᱉͖Cb*M#\_)WNPiL =g*8IF)f=f? <,N L Px˽\F83K,+1PW oS|gHƨ :O>CD JC`]W%˂&]^UN6U w>HǸPo eF;2(wj럟-Y4R<@Tyɻ1鱢+NhjUAKl*xߒkKWk)[R z8-M_.)@b%ou bq9^ SBSz}c%`.z;x%M3g8 Vbn4@\,*a1ڙ_lFEF9r-$nVB.)y/Duhhd*M|Z0vc3ŽF\ٿQWA!Rd菎ͨttG=œ B7 {eƅY#h7#L !3rDO{4!o=rH-s PnG~$ {!+#Gb FׂO\iYBY368g Lq5#b.sdb=-˦vǤzrrqəJW %CmɿkjJ _ _ӋLU^?|n?[ގ^Pb%y3pWye΋yr@cY!wO[J{7&?SPql#[CXbj>A 8* DL +z l5u$ykff͜gHj(_>_[Fq=_EdaIFπ',7#ljvd11m](O)aZmH LW5'德nV ӪZ?uo.NiN2v|4*$xΰPq,K"jD`[z:Ff` b5U܍݁N;V囬rDx~4M՚ =RKkNvR8Uְ9=lDͭjD?I+xY\oŔ_:}hb5x}B,[H8>oOU ~*?GI4 -u`D zXd9T^T*2)]L^]Z7#(l.dEzCp\v#+yLmyzJUU۳ҩ#8͊d̯^aRV~/}@)[0p{VPݠf;z.zp6,WEYd4j02 yjܑSXMr,~/Nl9[6_ƫ8sV{4(#/Ux_՟cɫ 24a?dƃѢ QZɟ쪰C?eEH?>l>.Dl8RF_u )1Yp"_>~(TB}B-"(Q4n+q7RkGqU56Z+;n[|̫eW*h77Fd`uI W:/Ҝ.x򙓵iUd>C8 0- iτ.^dYxu0遮;AUgF !=U=QEan(Vm+h=c۰}{<7a龁!]TRx(Қuϰt٫m,$I@Wκ0IZÎ[%$fB):[DVԕNN^~l 5N5Gɓ"зD5HxH$nThh ZKͲu?z<7t0_PؿMXDQ%ׂkXc$$a,ukzpV9@p7Ղ\b^V;Wi= س(z{*cKBIEK- *N> :T2.Gkd(|׸ %͚ӤߢZ( 7 am,ٺ Ծ}7\׵wvRGv=t"J:h1=x/cxJ?.<鴹P]WeпM$ƘLv(e"SsQC0B(5r lg[}V!&jdT;s 퇖~slWYc-^̭ 99bZ. .QR۶'n@nED9=iǝp4n=\sSM`a¤8S=rKo]rca뜓kP}JEb@U2'|] |Aܸ2:8G-kr:n=@Fo GUlGWrt:Yg]d"='&hBv,]I:2bޮLpQʵIU+:hnBybgqT^d A tuT_GO "a놰˚0Ud7UNnEu}D/9W7V$;4G`F:b 0\-΂q H%qv sWDcKITwXٙXQ-'UI׸A܉e ,r2Ҟ[7446 2_\+ c:Kbe?zK),A정$- &Xru~oze1 :l(}G_11OÅ Ĭ8ƆC nxqz rAG QP_i:wHHpYdd~)?0?1i}o:xq,*>!az3G$j?.eUE>k#,n$t|,@O$ss)QL</[ c`3e=F/gk{ͫeNI hNX* p%6s8K.eᵹ.ҙ Vi-QM3tpKa.𽒆'ioiA!3\LX=6ؐ4+HI̥6˯0dB)Wt)q\|;8eL1_0 Wi@OSyn:#vZw.,2x9= r*؀? )s5jB`/U!ދa4T:B_hET$+v& n6<9׬y,٧L5 rޙfa={cwa##D >O1.}HQ.k,JA`svitfZy_'0DDuPNPo_t]ދq|c>_q'Vd}Ծ(DT:ܳ(嬘^5gR+=O17xNMZJ`9zo} Ȩ'0qvIm5$|&>!s=)9}~ ˱{A(pu@' {ZT5eA쵣6"7uc/QBл{Q3OVRPTDKNJ} ?t}$5xM~|z 6w- z#cM5G3VpmVsBFfۇ*M⮞,CF[U,˭V;PqJŅԍM7b#E ʳd3\!GEi'u  ɔy q8%j&鷙9!J:Ke4 Rfn&AG2H XɦcRjOC-GL^ڽҖי Bs)U6RA}2m0 C)1pAAF } /6*#|o*d^ 1 񼢛ֈL#sCxkz蚐ɖ]2FiIG}:z2ߛ yoHmۄi:f6.hmlaG}EE|+Ww. !QѮ|2UЭ+1iOKى'cm CAj)M347OT@[Rg+6E5+z$ C^WpԋAy[CPnOP8X@uQ2҈Mz5t%@x2kGJ96Q#@-d,8[bVXda} ,?ڛ _txmM`o ˭' _tS-+P3$S* /ƯF_>,7{ T1yАR GChkO[8Lob \-IFg6{Tjp̎9]&9 ǓЄl ĻIIfz8* }{Փ~dv "? [ܷk-tF0N+$8ۅWtGq0h贙=Ck[rO1oQHo/gPmPUkj.OsȾ]uipO&:+W]x?!5gE*< ?"`d5hOKUnS}ycH`ȯ54upVwOp |7. ZY"3yWD(NhmR/Iz ;a*q*;{M֏}H}iQDDi5\jrQr➞E_$s ǫe lp,pUO@X3$b9z U46vZ(@놌lZHg> |<?8yT"oq|*yxs~)ܴNKNAɥ18rڑ+-j1;ijqyJ:!tPݔM/RuЎ^x$$|{ ,jJĬ֍v^.XS{%JCBnڿW <~J*uT(P6z HTMhcR .ZZg2Pw?kE)`ɼ7K̯p ',`>pïv|rT6J}=uԺy(/L=#ӎD>lC~8\G>afL{07*ޤU~+3ӪU/~BSh?8, K8rU&S˳9ā6iWLrkͬRiGQ c[MWHhzKJ:S%Cc@S Zlqa @~ 6)&a:]& ( hwa+vñ#[2 9Z 1&xZ<|PòKR]h^X\4ZLN~ B۵WXf-:[\q2a:lMYE6c%`o))R vƆ/{\~0tߟEfSG-eͼJmƛ.=QPCneqs1~ nBQvMĘnof׌b_~5zEyX!:aC2eb^\ {`ӏ*`&$]N9X&fkQwvC^o i4Y*3rǣԱ߷1D:2aGVich|;OI~+NL_ZE6kSĤCyb'wrmsUjSʹܼcA׶$VWKyz>nց6m<]z0Оɻ٢y`Bi6&S7YvVCgEX^E#Jz|u(E:1Ny_fԢ|o;/is7ņ:ůu>̘kq Ǯ ӚVpaM/nӼ5sB+01Łq^+#l̎MuhJ>9S 'J ƍxՅt:´0Oꙡ'QT#J.j$uu yRX YLjqGSf 6hV틤߂?4?us;lۍPiqxƞН',V1J=+.Z@~* Q%WeO P?FnHGR-H#Cn6z\4nP 1x~j6{]4%c@"G*+ ~m(~V&Ʌ VDѤK;hvezsxSaO M mQf.Љ0i~38Y_Eܻ`Q~}PV*^_AK`CjXx)Ipfsul;u+w/:vY;x7:鲞A~M2nW7p]C>QbO rm g Ӆ2U8T+MF ksmrDMFԜ1J([ĨV A/Y0b2=4&LH0Q{TҸi}KKإ Z^a7}Ms,Wiފe}߳o$c1YZsJv!q$Wyu>q)"/D۲Zz43c2,O?leT.$햔W[@JhJK$Υ_7{P5S VY*%J[if0ɅCV,}7[!־)2/' *OÔ%\(oyJ6&); cAXk7T/iTk%R~4mynLb@_~0i7Hԋ0QoٷVWDc3b="K09ߩ&QУ쁑&e=UZ=4ғ!)JN29Q_RH[Tڱ3sw/0)u2}Z-}K&^6=4)*k # ̋Ġ(W" πV㌃v#I$G;ƍ! E/3FGሻ 2;0X*N {E39̒.S."(ſF͆ߧL=ݘG%"{c?p&X lVWm5b_,ϼ|z~ԔwH=Afw<5lNNjgCh.R.dž=aKZYOM—K(%3ƀI|Ik5\yݬ@ j:mhHgRzr!%{ak# |TmNeg9 @zY@cH:uH}hj]lx]@鲦?>e.OK^SDplJ>eZ=Fibj^׃^p8+Oi:+OטOΑ1NJI.ؙGtl܊9kh%v6PyCcj`r]M` +T@nG J|p`k=_/$+h]79~VD ,ܚtsSF˵"7;W쓥X8!t:Zۢ}%ind.&\V*OmRM+wU/l>xU뱤~eSJ%ҋ7Bvzʴ=dH͝'#-JI8qH.(Mc=Y$.w#4Z= *%Z]q-1pT:$]$6Kʝ"%4l):#L=[ﱊŒ$:u=v[yi\?B4@@Mj]du=$ap#`Żn)v@pt;EWΐy-VЧ{ǠB|WnvIu;6X)w>W\Vܻ=p_B9<[2|A6`DW>62SH> 93 8P#R&ÒgW0f8Meؠ&I*}Ob8 It"}[Hmh]Lk"DZxV@fe$P2 dg[%EUmJ _럁cX'–$M!™61M|CR nQr)~ѥfDn!n';8UD0+3|Xljay8Ve]DOU{fZn į03۱t9b-`7.~=F^*1@׃dUa5LReen+Kқ݇Zױg775]tzVUSzvd("ShoᎪV">{OI+l3(ڍ@f.=))u}Ρ "LͅAU{¯xv$ZPA}3Z,LD4"޾Ip#Yab61ha[))K87/CN0StK2?x$qƁ\` RZA ?K"kP&dO_͂c^ތnOA/8 ~h#/cen<ԧ3yR!ess\7艼uʈg͍Ά|w$'sKUQeI-, Cr8{&hzvE4-[bDˆC;\@gQ~Rx=~( bF>DXbAՉI<0%_"a ttV՛:['- = ~mo5 Ţ}P٤U{!Hdkug*Z0DYnS3MK*Ťy"rJX\c݈ڄ?|%Bw4#lRbl"Bm0C=KrxNk&aӈA+Zܺ\ JQֳVPB|Y ޽lI,tC2a9뎒J|Ay~ˁuS擊u1둱Z頖."ÕAh4SlrMV Y=1i!7 1Aˌ#= ;b)'oa@<>Ν0Oosk%G MCa얡_En^7ʀW.μ))V|}$=Xv)~i)(Rbknhf}r5? E ϶پkJ>גÌg@ Ia.C>~HQ<۶6?Q`ԙBVW\#ә,DJjVπ*I[{rS5XnI-ھKdȭ,P{E T|Y8^5dV/Q"Bki4tFy_*ho+9Inf[S)nJ{ j[Pb uC87tɐ6Gt,rǘpjae'v&-(_l&p خk,(5^Nל:"Gkχl:UlӻHAEzUPp F)Ќeo&gXa+°>q2%DL[H"&ZrQX }z@IG 0cc%"leaꦺ 0H:kH* OW0$&?L.)b.ˊ7H:fB8AntNWn {^ړz6Fx7`3e/i|j}+ya΀"jetO.e*Z7~,WkoOҞ: `Ut|21rnR#8ϋRgkG*Bx '%XYgḙ7/7Ϊts<ɰQ|}> RuݯbC)(id51Yhn)5TdB5o{ZlMKf47ъJvhNϚ4V[/fFO!ơ"(=]ȊFsdE"jh#_UۉJ|g`9iا.glez2)-aR ?+T8>vp$ > 5K7CI-XJ*0*'wusˠI/-hDāzЩW\AWYYHZ;hnfxԟU0~5vUO9t Ekx4](T.z3_cрCyD7vw-*˲E;;[` ( [A=ި+0>5VWȶ5B*07ibuXAqւ&4Av NO'<\g\G:-o]&FJ߼R,6WIs2lImziQgdheW~LTr'r} AvE+vմ޲)PwD ̕`gṁ,ZtU9\NPBNqY݊AK,ARj;p}AicYb̳4DΊW)BZN6e`( [B@ Io_9*jz.X# g$tC'5ޒ`:7|h9{#ƎQmD.ziv1f,Y]rim5K np} oHp7D67 sĊDžmH.IAS"`{"DTeU42ZۤUBLS׊7jYG}Ru]eY$r43 b:{(@Bj\_Az\GP:HI%~f*I˶\cj;)ϭK`˒a+ЄUB$\g}Kp;q!(kZ4 ^XUШ~8!A?YhRcWv}ӯyqj<f&<+΋]3&0T(p#E.ɓO"N}j>[t÷q< Uc rFH8^&. Z)#wywop% *l؛?Tmźܥ($DGr=Ǡ Ѿ\:xH/B}i^keZ䡽!L{kMF"C!"&n.weu9RK+zM]]%֝a}'éso|KMc?y_GP(dW!g 5A(l6uҳơŽ% O@~g_")㚐`%Á\;loj*YMBR(VV;SJЃjvOeRɰړS12 -^Y(ȫ2Rj}|p]'һd#ۭJMڀ`b W|e,oV|kr͑&=ӊ\1*Wm,v7XnXxخﶏIvtO2%O\ px/`=f`^q~AxHzK!g`>A(9jБY{{BGS4IO'Q?"&Sr*r/PQ(Ǝk68o)$%HnB8 6)?뚐)'(%[>;7!zbW na`O 2{}l0Wa"!D_l|B]xBkX^K]Nʆ'=NYtt[ouEV`N< JJf?K$@KUtl GB<%pThY Q"h~0mJ\$Wց#CV026HF[Zl:v'Q? r*L5x8=8]0ynA1ePH^r(L6Q^Z:X-6_VUz[ȁNӁaG==R{=2*-u:r<Lyڲ{AU@i'bn6-RJݻ׿p4\ܽ. ζ2U^"ӹIѽj].-k?bMIbI  qԆ뚶 YZ