knot-devel-3.1.4-bp153.2.6.1 4>$  Apaຜ!M@eeeg>BaF*)aiyΗaWS2E}Yֳw>R m>L@4gViy3rhR`NCl(B_ C$(.=UOxҍ5S5\ ͯEL^]zZ?NL?"%$7>2t8 qSh"^'8S\h>.7n-iB[RS%'22y҂I%$='@*PuUtF:*変]Ac>()75ac5773e9cc9c2bdd4223ce86ef5ceae77666a84b3938a066fea5a55c98f8490652eebc3f4b71add30309b0ffbf9497696c79e4Chaຜ!M@eee&2*ScjgZ+_6=d <ZG*ayS3. 9doVnZQv$nÎrɮ?ZiUA_}{x\dcүacEAݼ{rXdOs(1՛jZk jzMTlIBBa@M(@~71Rc!&8­;0cIUA'V{~\jq2^h)awt.?0>p>?d   H<@LPir U8U U U U U UUU*LU0( 8 89 8:'e8F:GPUHUIUXPYh\U]U^bec defluUv wlUxUy z<LPVCknot-devel3.1.4bp153.2.6.1Development files for the knot librariesKnot DNS is a DNS server. It implements only the authoritative domain name service. It uses a multi-threaded and mostly lock-free implementation and can operate non-stop during zone addition or removal. This package contains headers for knot.ays390zp2aQSUSE Linux Enterprise 15openSUSEGPL-3.0-or-laterhttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.knot-dns.cz/linuxs390xH %~ B QzR N ^ J 0''Kv , tgj U  GK}& r  >"" (,)AA큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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.so.8.0.0libknot.so.12.0.0libzscanner.so.4.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.1.4-bp153.2.6.1.src.rpmknot-develknot-devel(s390-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.1.43.33.1.43.0.4-14.6.0-14.0-15.2-14.14.3a@an@aD@a @a @`ݮ@`f@`@`q`_@`\{@`@`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky Jan Engelhardt Michal Hrusecky Jan Engelhardt Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- update to version 3.1.4, see: https://www.knot-dns.cz/2021-11-04-version-314.html- update to version 3.1.3, see: https://www.knot-dns.cz/2021-10-18-version-313.html- migrate to user creation via sysuser-tools - run spec-cleaner on spec file - update to version 3.1.2, see: https://www.knot-dns.cz/2021-09-08-version-312.html- update to version 3.1.1, see: https://www.knot-dns.cz/2021-08-10-version-311.html- update to version 3.1.0, see: https://www.knot-dns.cz/2021-08-02-version-310.html- update to version 3.0.7, see: https://www.knot-dns.cz/2021-06-16-version-307.html- make sure we have getent and groupadd/useradd in pre * added dependency on shadow and glibc * might be related to bnc#1186023- update to version 3.0.6, see: https://www.knot-dns.cz/2021-05-12-version-306.html- Make /etc/knot directory owned by knot - fix reload action- Update descriptions, remove unsubstantiated claims.- update to version 3.0.5, see: https://www.knot-dns.cz/2021-03-25-version-305.html - Update description based on homepage- Trim marketing wording from description. - Drop old rpm constructs.- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)s390zp2a 1636360569  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTU3.1.4-bp153.2.6.13.1.4-bp153.2.6.13.1.43.1.43.1.43.1.4   knotknotmodule.hlibdnssecbinary.hcrypto.hdigest.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hdynarray.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hprobedata.hprobe.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.hzonemd.htsig-op.htsig.hversion.hwire.hxdp.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/probe//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:17150/openSUSE_Backports_SLE-15-SP3_Update/7e783354187725acff3c96b1522f4e9e-knot.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5s390x-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPRZ]FZ8a $&utf-835928fcf2312af7b8ac327dd3982a81025ae6753c5d775b9790c04c1b5fd0907? 7zXZ !t//s] crt:bLL 怐\8)U;RZW !Nj58=&Ƨ T6[xfԔݣћ+OK\8\").qyX *];VZ` `b \^G";AG|p=#r<_9h޲{S#~3t@f#讈*49Sd) e}>/p{-*|, ioב""px0=a[,[BVsx 0,=1HoQӤꖐ Z8f9IKBB8U=5g#ݴr4W)~J:b.P~Tw$s:ݧ5yxl PX-녱N'>|g;ď6HʪF0/T\} ~u?/@4nd;QIA ag=xk ŵYA%H? o+NPo(!]Ʀ~;+H"۰:UG[[7ɺO4@S*; m,%>ʇ5 D$(,-i~bo*{Dq #Crr Ȕ?nw=Dp@-TƬNuʩ_,qɰ#e-o]374غw~Z`2%ty/[}F| .(#)ނZKEJ" $x9fKCP`_ISU3xPqcDsٵ8Bk7'*# ]R5Rn3(+ҳNC?*Z$K0;d?ZxΝ1jic{P2@TT\"aSRK]Y򓆻G>&*Fx^BTw |܍ nn JȴVEYzȁ0*Q~k#8Rw% `駐n#24\XDZZhذq+°d͡8ڢ#V[d@^M ug[A08 >f@悙yR);~+n?DD : !5 Zp؊@ЎYFU0W;^8ԊulW+Vr WUES 94`߮ˁb⾶l 6Y?usa99=NrH!GɁ֕ǐgA1d-صWd|땼e,۬m)ȴL_͟2Y+h*p(t#yXOLMQ4jTXDl"Q9~PE}葙Ŭ֟BF#ބ~7T$S||_8}x팯6]1=mbgS9c2hspQe3u_tۺEj%'gk,iT"슇ɤIrW1+o0ZMRD9O%zrh^sƂZl? A]nNE&}\|ߠjT~cb]f b{eBK*|8Gdl^ͭ%@Odu1;;iPY2ZxW#A6[& TUŢ#N˳s)j`I<]lfq]ᒄ0Y4׃.}=_;%/vTIO[7nw8pЂ8뷕W"{l-+`T's(=JѪN` JCCS}J`$̠qIIIKփ3ru t֑WTQ5 S&2\r! u"&T':_7LcN\܇ԕ &׆|Pli.6=[wi+I!\)yɜ #jm* I d'UpBԀt̼ȉ?E3Եb,*%yJ0&TVb,c)o~>xSഎsKn;&̷p`o)Ӓ<5,(.mϫ{/iF㕫J|8d;32C?-GLC;z/1/-= %?U&P1<Ƈq,&s?txw"9,rU Y:!2kÌdM sW7)~2h5QQ42Ӭ%2#fKwY<7NӁ҂e-[48Q(DL%v*Xrz>Vwu䌎 د[fOٗJըy%](W}7l@Z&!/%ak/hڡ d::br+NVwAW*hN`+3VKU?'t]iest]_bN%p8!~y@NKE"9?\'O2[oN'l~ ,b$[+Q~! 硿g:"^ް[u;J[!O(, FUuA+^6P5?!LAw(eB= d# G7^섿C@1=`Z5]( FߠOkqW';{6͒$XX#U5$PȗTxRNE Bj/OQx+eN8Rz S.o Zfp.koM7zie94EbM ]$7؅X>$̮G4/9S%& ġj 47 zb@IsSS=#Dlsj|W{&-$0(GʊE7sg18#^ RB1=[t/~.X þ ߁Yλ 0pRi-H:YO^vX{Ju:JK%Q=C_Ȅ*Σ' @W颲'%!F4M9Olb-? <])1i :+;7lI.w PE&v@lyZK&]~[EII}kQ7% ab)!vR]Iu5}x%)Q\ԯĠ]b3@321X]n̉>!x.d? ?%')@~+ /QH 6O9,픹#bd1OTvE*)ʡ(Oh2!YW{)h? $zr$}᰸òJ4*3v&1XH_nzl/Ur3l9\4tb ,:]51 .fq"^} tz"֟{Ll1#ܳ囏c1l)+(`~@ie76|!(,+=-UuOqX1Xng;!1,YOtBtRa UPbםavYGH>QCQc9C˟ՑGܣκ.Z{N2^OO)0=1/c?.K*T@-&Mw#Ȉt 3ňkwjxM"!/u3X!4rrĿ5ݜ.3(i$ [t@:ÔbR`4OR^p. \~2}8dpwCDŒd,4 Cj*0Pa|z᳐qt$d #cXYm! dÜvD7hp%ַ+,\ıS)LKet{m1;Pp'Ϝ#k5x-$a"4j+^ 6.+ZC%-J:~ISc0M %QIO6u 'NFş7[6sa%P)y5{\mCמ&#PsŽ/p>1 펙KM=NlO('zey@(dvX=L9 3M=_ktnv =D1# 1EOExHř0)uRy*tw dG7tf[8t0gxIz@Qw/a'Mǟo#` /Oܧų R>uZ{VrT@yv)!"eTܮhXM}b+[Y(a"dj4L sT'%u1VK.BsڙU5r(Ck!6~?pu}YaMnP0ijdzqku5 Ki#O?LIG``|eLB:Y$2UNzF؈,U/F,r ;&unM Osjeo9q+.|0)3\=rڄf`t#I1%&5;ړAI3 ;t s(I"9[KɅbۼxWbf,{Rњg{I]1NLAsd]kKQ¸n14OQc.O%i9gw-naJ9?=܍mo9@lwmzA"FTKiwj@a9SȖ }<*1)@: pF4B_AJIKP\Ҟf~t6,tA#4\C,ɳw*\džgW*b BJbuϚ85}Vo7酑<(>~Qfyd=0Tw 栝/㊬D4N]e'"g~::wXԪ߷l:7dO;%oHdRb٢~]-gz`&%w8dC v/3[Z=:Ux3ay`T %n.YC H͡UY9~9YBJי"r{5x\էѪJT-N~.zFx6V>,- mV)kLM韵" ōnk+ʛK{"$.v݌IjJN1[Hm0jE d41W;vD . D>f?#$>8"摘1;IҮە1`vS!Uaddi,J'Fo%t4׽Ij PFץ};AgSf>oWkwT[hS(/cdž+vZn0>a+ [92#YhӉ4rMrT8F HQԤo8e\Fہp-%`F3Ԙd5-lKwH-y[*.j5m-iݫb+;޻V&8//\m/ gQcWqNb n2>3&6 B.JJc'TCw7$&Y'Éx9n,6R wmzR'Hi bǗ[MzF,&]\(Uߎ^]LO#0 C5F^tYϵ+EŒIqtn%<ȣ7y#D^%*u}R;i]h0ѱS[з"94/VvWG`~ h@v jdc|!w M1c{N0gZ&:Z*/.؋fY3[ V#;c|3uVAE;B"Մ.Q"@+AJC>wqSWTiP0 {RpD!\9aN œHlI` ^&J=b:E -uӨ) 9pp$3+#}JP,ײ^ !Xqnѯzn^_{ZEQM84M-kIxMEk`HͫY|aKcbm 9~+XLE'qkMJZBZ>O807lLT)2w4񇸽%+ 1P[o2[͇gRS6[QcI9?aB~)eu#7 W+MUc^"lͤ}MU kfyW1xз@&- 9;}8ic#nv+#{UEN/{R g xUGy!GP>:F,v r@{Ӭ㠶+?V2yN"U.ԊVOU~fC DfC^%J$>1)`J ea5y=QVXv13!W~v_Yx`yUmzG7Hw4ُ/ `y>d z2ڔ4aJ y?IQѿ3!P`\;6w r'[gX'[‚(l+.4ŬF$V̄@|u:WMt6߫u^EEꋣO78nIX!wD,krz%']DE L" p@ #ؙP$GZ'j`ܶ#b{FвA%Nmߊ$<4sgޒ C !J]O{a*z*/tfq= 0/qCt@n{)}\J8'h sy\+rԊъLdߊBgIS| ٌqT1\,yH"3#s=U[aDpm֤wh`Lʋ.éc`3)0Y¶)"1 rlU/u[33ɛo @ziƏ6 }=tjJw:FׁL$ uT$pyJSR0_Glu^qʹ$R,'!a; C׃uլd3 9B*5qgY ^]s؉=S2ya`/$ècn\4 FN\E'N!"B6n?:J_ s !#ۇ9YiHc԰ً/(O8D'CxzV4oWR WD pM*ǹ8~]քBĤf6n\CZN- TتH#FW{d+Ĩ=Xù{Ʊ("srB+~S& 8SOSrC /MCiQtik!qGj d!UӞJ[1BhsuiF'٦#_x7CA$;&%BssBA6 pUBQW jHĪS ใe51*ɯ6Lm/u'xc[)o<|dbᡒYJ\ ]PG֡6M)sh VxO%#0?,5>Xp}#MԬaWdw(wzSU!iaHRH#(84u1ThKqâZfƠF '[s1*Ξȩ+W؇.!(H,~(܂JJmh ;ST禋-AشnZoCerVJʹ|M=0}"83 ۮ S <ؿrI Pk"F*i=BovG}Ju* pcqFus,d &#C\3қm r̓FWV'h0-h_T,Aoo({[ /Cᬃ̊u#T6 XwģFDU”J_r}DRK,DEꪁ8t㐫-έH{:%~kJ:t!Vς^me` 3Du=Povd&٘࿭;+L?4@LSX_C/u*Jc$Geue]P9,ev_;F\M%(*Lmb|#4<~TE-\hPs{Jw>G'6EZ~/vq6kϾMhmxq")\$>,pT3u=RqG2LAH 'i-@^ z/,,#8,)\ԗ(cJ\WT:M7/qyi*vzm#8g]^յ\>}_ OM`#47(8JZx.u XCyώ0`lKn Xqk scKgNfsep09EU}{7o8Ӊ-  ц6 2;uf“w88[nxbh0K'ߩXl<+e#LRc)spbz@( G[@ v #:ʂvǬaj56m4B #f#);kn|90|7Oifꌟ_]:p߮Cy'mI7 e\0ısݳ>!ܳQIxڳW1Ju P N'ӷ}B̦"=<-@)HO;2DuYIV9U'Se 8F*[W ~R~짝ddlQ8 ]cqQLMGs^GJ"ZIzj7{H#U߷(Gh c Yǫ5-\[ڏq߻ؔ'2$09Ԏ^/z,BKBuEK$, YDs\}nya`>|,[+17ZdO<4EvJ ^dEX ~y(ۅZOp>sN$Zԑxf(X+haLgp’zє*i1=B}Y|@"[d(!yg=tҺޜ4:)$P]uNӶS@+'nXX=]O'J96К4y破9KǒuY%t o`ިa7D㻝.gbs{8Ɯ?aR-=Yz5j}xOYkt4 U]ʃ"ɁPË(O(ۨ,+>MLڬi_w&ca=AгkT̜`Z}܃ &[0VpAo\NQ )&a9g`A~ +[G~L ]FRymV.MFi礄eg|icN 9d-kS"LZ"zHl 'IZvބ0@<Ñz޺l8`]ϏjڕiȓKD0%\T=y36$?ޑp+$ @#a oUm9A @Вv)j汒"%84;'\]=6et kP<2{ys<ͯ?wtu[tRFqSx(c82n]zM4ɼ\a T0@/`# hpE{niqa'7M"|')o;v̱ 1,_5 `>GŮCBHpP~3̿a]{?/@ǢtRS'Ԅad]a0lG&د+L]y*ad\:1E4NA0vY139VE593ܧFT",l+܂yƂ\bb:x t˄t3DxsG[/(7ٰ ∦ yFHcLV6G@a^@SLkH L7\@kdn5ݩ[5*?`qJ&eָ UfaKX{#SUj/iVuĬkJ=iz=% ?tK3A:+嚚0Ox̉8wY-h4Nە F侓~19 ,O0NٌYfZUE&+,wô:gR$tCЇ>_ }}zdŋx-LK2ŏ+uP|v4"vη<VХ"Aw|),tT5?vbgЅyuB O_;?[P$ 5DI;|Ks+Snq:}&c\'`ϒm;a|ljο1#KD ǀ#X8JY-]46ԽV, ADf)  >oYO]+o-iU7h_\6^gС|de$`BF1h>ȫ@[0$YQĠ,-(XXac_ysCp[=WDɣR_cR&16 kJfQlhX:+I-%O*E-:fR~E.|=LY0y$d2EWdeѾ54J"(Ѿq VAt^.]pIDbWǥ5d!ngqk'#_c:t8ɛԂ3v}llG0x0!AT'i\ηW`lO^ 0E1֓eUnו_!pQȧ? L!?eaZ>v-~ij} lEH9%<ȶ4X;ˮGxn(Aِc8˗}6Dv1䂂+%6*nVlsy6dh۫݉湴l!=4W& 7ï8d@͝[MQ-ax%vxRPrcqD%Z^X5 tY+y.{JW_&CܱDt|oF]Y#J JXe(4`pSjo4*? b5Z:a#vexA޴кwGb +x+"GG[ZN) ; Cd$=wYM\('{V-WW݅ M{>J6%[A}^ %{CYOh^aR+-:r믥m\5m,jT^r Nq4LOTX؊nAOY~s*Ho|l]Pi%ך[-rէ^6G KA0Jh(y OD0E3Z/{_?o[)Y ,qoZ2m,;O ~!aҋ8=sǶp@wI*/aS/.ptgA3(FN=ĊЖX YTDU%8C uM졀aGmvpxfx(^qf| 4q a`;4Gq8`-_O_F{+jE!o:Ҕ֓"*:x˄ ^-&ͅ`>ΌWOi.-et.'ͨM/g+5K"F#%'ܘ1DjD4|Qit}L,5FVzH2Xa#cҶpK= 劐 qY/|e-]i , F+*SƓW3̙Ÿ8hd̡_VFw{[̲3C5}_N)zf3HU[a/@.$fG&1漑;u/+Գyd|X=KzGA@r` vŪDJĪ(wJΈbk7/2Iw6o!{.𿭆}gLTP5& J)!5?[\O(Re/dxY6K b^[WDc otQmK=[M 8łv]!bxIq>hpEqtp&c3p6EZj`*UXh+3e1PiZi\zeeT$gОs6^:dq%U@*q%b$s3 *"Mpq9sԲCje ^r;=_ qf )pj{67{. cM*3R16i&5ߩԴڹA.Ί.)K g*܉uSP;$pJa^ G1 s0HS uTّOL?̸Q.0Ci E+[9>q y݌&:/ ^lL1\ 38.\"u')1,m ~u0?о P;g_*pV6DZ=!>eSWv/ae `K0b3peڰYKP*kA͡ߴ Ep&&S} VhHM6vH0EZ |Zyk<\&*>y58S̖tQH|CA&G!J*o<;c=֩5@%v ԰dJ7,Sq7HC)(FPV "jv+A dY1tc0yz͏rGquj{-(S&o2g~7҈>`Csxb`M-.o:dL*ꈳFtvtHlj v@ƿE&{ϖtURw[DUJ}I,0P{1z* W|-S)1OR&0a݋lܞQPN[s@i 򞘴 ֚O>CW4ltӼW$f0ě ?vsIguC],}M='nYpĔa(-.~sLHz!;/\ެ('#diQ[ϡ̠dLDZP  s5ʟ D&p3SzMJF}c1 R%ղ*t"ڎ^lLb Z=\}JPe|=QN|>$U] <&D' j+YNtB}1yQ}Vm< 6ʔy<`xr9Noͥ/5:{cE]XrvRvtn;rVzZJv>s^պAo{a,|nngH{0' B!PE{3 6m!r.L X-0~7f c%<#2>@d2O([[$J)e|UX¹d}l;5qaFs!:CﻳdX=SӸeGN<)oakۓ*F sc!}VOR& )%OJPu-BWI+N+vN]*?SyUD7QԚ9BӃapD:d&f"!t59ҷgڗ(cq@p87q(qN20$Z]/Wh]ӈζ(-DK*Uuzh^pEr̅ߞhw8@d}rHQӡ]_ZLv˕Co\/W 0~E } K!T>X?dl2^.1LV ->t0‘28LZ]^}] R`;~ p!mB*H'VY^޴VQE8x5 S/:wْB&.pX҅WśWl^yAQ+ag;Rز-b)Ǣa 殿N`v2j>ʙriy3ޓqʋ|ֲ1^]²<ȇMX[5X9H#Z un0y& dl/_n B4-e)nGB}iY^q!fͭ)ǶBX=2a'zH,PFZ;c4h1Ŀ.DNe.y3^>zD02V` `-2D^+ 1;LxИ t1As&Np@&L16( mIwOe>Ƌ%, rxv^L3{?1w5a 8&+֘x'r'(\hG_B%\"ҽUdsyr`-%DbwLEL_FM-C?UxrA8 yîy@YE}9":я+p.Xc08LvE*@ 'gn#Ff$h0X-&yCleqslqsKy t)R+F<ޝ¼ᑆ2߇5GeI,GsQY܊Hi֚hZ6è@6׍Hhۤسaeg^}0*Z9t MAgSc{y =8"@dйaDc7-tbDbgD`\y‰X!?[;IW H~mzm5fhR`UP+ Nc'5j;3VٳY1`'H(՘6`^KdP:DciڹPP wiץ% %?pf=w}Qj5|l?aYbx0,-?qhUz \eDGya$,ɶ:bHԽn[BsxVF@U%eW_xfi$<|){d t꟫tҖk@؍#aY؆&\Mf@*-(I3XwmK8قE7Si;Z @}Nx +vjqH<$=Bh [D@ Dqi$fNI㟄q/n@,ydC̪9lou@JQCAռb{(nWУcTclsҵhS`IAJPhS}2gYp>QqLO{;f#W mXG }D_^D1R#AZWhnH2īeF ,2ciFT"\͔@6Vk7[l{k] oKr>xlz;$iQPq4<_|,PU+iN˄MK3Ás?Uz!TAS\)w>vh)Z_OtKp]O Sf("lӈ:"<I9OV#5FX8nQ84Uq1,&)^w5bvF5%!KsvZ7^F',7Q"Z^bAߟЛ2aϴ+'Ȍ ȃ(m .-8-F8|4уuHV+J#ͩ;fŢvg+ri̵nʗ$Yvf =IgEm fջ$|,yJS$oj8> c^G;jf-7=Gm/VGʐY~JOU˯SddR[gP ta)/ kD8F5zC;@(cDQC~9Jrah#50KkB៖-̭>"#g_`RQ3^.oziRܫtbCn1f6(C|1W\'WghYs֗vzjyyr3L FGg̩К9l#z,/kt;\=VbR5z<2''#%(az+q}'`[էXp=l!JQ}# 𮭼Y{SJNN&bڑo6̮˰iQM+ B7Ym?he 8[iẗvbv*u5H c?י}rSm?0} E+pi(8 fQ'ȐFyˀsr>^J"溻- $҂w#H,'/AGvhq$; af p]j ˹'ҙ!]g'db7C= A[_~w@Y|8!d0>Bx04ɪ++qZ楑w\W#rعw9=̢ZV.͊6{m_:7G8)LB >)\9߹>;C/-mFϲ;=v}퍎 fCYP6z OLiZl2)9Ϫq}b)lV&Nt%@wkʣ)\/,@MI@S4l{K|#( ¬ c7Ac {O>/8Jsu) M]0-P!,%qa{|+&? 4UZ @5+ņhWy1, B &^-lyc`x7 St˥+Viώ\.[FX _[ByWދ wDF c޾rZjzxİ,aӥ9{Bq8 SyPPtM.ܸT[gKd6 Hdy_OӠx13ވ|Jdj@*5<1Lz}YAp[ч= {3ofS$TJџhd^<܆k"]ڶ/gՃYlc oe8lG3Lj( 4Xu%ȲS#bs$叄YD "νHV0I.po ']o7}a@6fG{%Rw~Ÿy!}I#'ѭ${;HrJlo+:&W;:}mwc5pØƆ.7.D>`kvdgCC(*7wP:Sv7C#Z$΍"J\MHru׌괜ߕϺǬ1bvOz2&5ӆyľuYǯ;Ϫ5#L )(O0g%xtqQ7pJeD'^gJIݷlMgdP*!4tDs j "vh0M9 /ֺմP п'yةFN]B}`p A&'shK|s[W-HF4c)p! ,| @>k~-ƌ~3l^Qd+ c+27 ]ntN${ '1=Xe VJÑvvљ/TYEٴPɐ4dCk19t,uQ+nj S;k)xib(Fu7ۺK)r{98 R{< _ y_;oCE`>eaΌ p(=3Mw$̓⴩|aPKkz¦}cAXɿAY^jY Cq ĕCi=Ւ뤧9FME~9y39A.ےDpRUxC@QO$w=<9? o5)"nDR@\c*6Z"ДfźY=3L9F{]@D>l]5M,51-c#Iδȍĥ#q ZflyT8lI-0IʇxϗS'Jv1hR޽-AOaK5> d1| ~8 I8 0"T:]J#c MC Ui<{4MTR}\XPw^,Ci칰 rJ[Cy;lX0ؠ)=מ;Ak脎>TL&c2϶ MpCF͵PPh́á\rB"SΪ.nvW-CG=䘎+ͺu1fզDC:of 8pyWQOwlbQL,hw+4r^q  \(A-CuEA T+T|fCf99бNH\T1p7Bxġ@{nzu kyQ'Z;."AKŕ`nQQV06gX!U2 `"-dCDV3|]أ4F au= O\mw)qI 41>0! ]{BceP'|.Rfи^FGVr7FUc)OAQAxVhngla[}c}ΖW(pKR2(hK8B~X |DC _gCٮp6pѪ&oKN'Ur+N.ap.0%}RREh_0ooF76[5B4:ZՍM`(o#Q1cXn\F 4Y@VQ@T`w2. v1&pܯ:gs%J lv]ibGi] ASj45bY$ȗ%o^sdVY%4^-$6 @d:RskWoL cBܕÏgAV N[2`96N隱l6y"X?ЀhV~wcuf;Xn٥1Vоe`kxP{t"#T=(!v#H9'2.JNZ^O!=tGiq{? 2X<療l۷]>NFc^ wi/Qh 2u]9o=q=# *~O)7-WXb,y#^-Ķ0ekT,ڔ4+283`Lmļ!?꣉}uX}3EԆה(i~~HtUI 8([F^#z gWIx:;1#_4Y!FBmLs0F4y"c~|.]u1~J}fB봓o.0UqS ӦlIwTcrHq{qCd"̘QZ%Kԑ䪐ire K#Fxx5O\6 D}T GbQ>['3 @޿%EE]YY3Bt2 \ve7[0T9&|0eVHM0*P*%;F=˵5랗 AX6cKd8MzԝTN,ۗfLPΔIJ4}9ǧ` UJPZdVu50~o&ҵu4|Z nC͟.N/:["J񙔜%"%+pNgaG*v R?6:6%jNzM5xM#)x tm\5,?%4PY:Z.4Y7mH}{^чyv!udi!}V Xkhx>!4AfI1e$ksGJ^ |}dM0ya *%M.hJ)Ƥmc96nڕ1qZR^{tMR s ]oJ%#bW3^Re #2=x830>e+w*j:@qv_>UM[ÿu(a.IN}8W+͕v>+%U=]n{WAb Ҝp8Kwhf{GTsXpz"Eqk}[f:0R1hqKeF .* s p-dŝRI_d<,?0AuAtգMNLDlE<T< 3/x!zaDk<\:\'Ь?l":O7$c),˃\݆b (m̐ڞ{@Yb\hL:a>67\Y0A^fDxȞW-7qz2mnV18զQo2QBI>|Ӕ/Wy/d+Gۘ-&LĬ5)&<dsƇ7@Tw2oR?QcB.gNyqoI*aSK5On۔[wlZ&Ju)><{XN=,9z7'ܫ|U`5\tpn8B҇Qr0dZۿuS& 5+J³?\E5]& 'RAͰI260"F``s0 F n8ƚb4W7vi^C(Bi yG^C7Eq+GBFc{ϭ:vr/2Mf~1zaѼ}_Z]$Ba;Cꏉq XuA-YXL&׳}x̹czxiFY(\u|xi9B 'IRPgӠN;PM/Qh:&K85ǰō%:Y[S=+`PRaLe\bAZzJDl">95'[05-ɤׇD'``D2=ȹ[n`w</c>c:Y*m?qhu8ol &Q$̊45q?ȠR S|43V{ry갢qcQqf~Wx6a|rRΟ1`EGŏdgMD}J_LwSq;K*\0c}ŪO +8D); 4jI֎N =Y6߸d-ij^M0<14(inrPqay8,%GVlo<a}GI>w-Cmuש aSk}!1R\y'w>jk"_u5<ܽp~'b[0$VLKkC&XX[7nR<@FuqD搑Ezc,U j5 N5 LvHj^K@Z%,j" uisY BVgth LqH0Csf7M~lf_a-pO%R 체IORz2}d r(\ #T ܔgԬ컨Pfv;/,hfX#ԧ@,ze+쉨q0@5ةKCSia.LXE ♵]qH6N;ܜVG@s=189lqWa_{(e.I}8_zy9|@J%8ذS{9 {CJ%wV$!(MBcds;9WASkҡf㝊/ fzD4s z`TQ?$hܷyʢ V3SͱVC>@|D.XzPC3Q9E \v{ԫŤs(QdmE$rn T\:xoTZ,IhQ<|~ _*kv' IIEtRnAfRB I5}Ō22L(` A1KWEz/~@ f)'*vԔ 1 $n:换> euʢP8afJ 2 ,H:sCPeAY",[Cg @E Z"eŷFG@uGSM& Et= FRRCi@4R& F N>ӟHaE<v$=3KU`V,<^nrnkcJ8X/`i\pcèh-oS77`6ư7`EＣrـׂ]4~ǖL56{ TFۇ* aC!4p秿аS>}!t;[{;qZvtJKˎF{Ww^A߸ P_WZo7G]QqUvw lUFy2be2}(iv/ `4|A=\:{sE)4j>޺zd1BH=:oS|p .&]2 $qGsXK01k^u5SNsD4沪 1#ξϪaV9 ;PE f;݌YE%CfgD ԴЦ+X~ב\&vJj:["0`籈aN/և;N4kyoX(gCXٴu8ڪVUrg'$V.l+N%VrmH֘w4Y<7KP.AaZ}&@IX23k|}1F)XS~5^>W |+_}=1R~GpN¦C+ʓ6Q(*.[ !'^c0' N7VFr:yN؅$n@7%g'*䕦#=-dHV69sb$rHwgp^>w>0\r&d=bV@dJְ88r…R?+"9V6=@IS{VSeUGp )YCI'0w=cnϐ%xы!j8+{?cXѢ!DeghDJǻgJr2/YT zUX1{mr"OERb C>2l,NF߾˸.DY_Ȃ-\:\ eJԄٮyHAZ%8pH,N`k2u}f1]'y7Ǧ =c5y{!ŔtmR @0JW%< a5&-儍i+Ʋ꧋5qZ ~w ȰWETUڛ4/; [mrAj_^\ҴCX;h4dj^.X{m䥯f^^`[&`O]{uV" Pi]i/y̡;P+K`<8F>F2o$1<em_A6%w:*fLA%2eFN'83Hv.,`1 ooicwWJ c唯^1#ZQJ̣nV*Jw> 뺺:*,HEWrֶ*,}??G5獏q'Ï|YLȂ_g wdlZx֠'5nnh>N/n|PUf, ʪ.*C7G+#phG)8Y-F}W d>ad|e1BǴ*gpp4ÙI,9g҃TozͼaUJ*g:4hi~T뇕yݦ]SʭX#ZQ) +u+{e)J~Q4Ґ*ECDu0ُ|odPÂFcD]$Xl˫ni@ rd#K|=Xz*|#Ljúp#\[k)*%$qE=hԴ cTJE03!`oR0NBCX#XRң`i5H +`ޅ]F\VWrKe2fn d#ݥ{ao DS4C_FNcQ@xg'HSVkeR=JYEqrlP!Ëo}yCȹ$%)v{s=܏jvQpUo\XIܟLY! ZC .9οEkQp_2ѓp-Sdy b4@ޯnj#y+ڦ)3eҴbik~W p1'1hӠd) Jg=m d8AV @l߾ᘧČfL{ rOE4Kuv[_TBPB 9`C{%ފlMTz4VC$L%DvЬmRYvʧËdG OD>`H1БG Jk XᣢGފI~^,*QE Z 11; ")M3>Œ7]$T 9BWA:(qĽRL/ܚ'mM"eD9; ^UT4a8ibFt?f޳ܦ]e<$M| KnVs\ DP/m|vkYMzK%*B݋|2vAsNp9c4 a|mOpU',67T=[`·dY!U]1ú*dEzYZ6aDF ?Bݰ)3Z-|Q_; o&Ms 6S'|'9=@d2jBl.Z*)/::7]: a 3՝ӊq(3_wihD FB<'W+'#"V~тʕJ{N  Zpn!(B> ]o&{0m4A!8cHb87m5p7 25gl#dG"S[/6g 5g:IOT%/OΪzS LsA gS-| LjЍYHh 79`)NMҀQz1TAz'`w]#O{kC\>j}d 5/IZ/E`mWB8])c|q7F9 1SQZ Yvƾ}l#N\ѓk:h#zl^HqQbܷA0H -']:c'-%~hHa8hW4TwPģ]H%:VPZ]D>"`|NPxȂt[CLaΚ6s_f@N?*0JBi;S0gn{oi4w]:U%`Y!-:0ЗA#H2EtT|a]㞞ﶻ=KFu:#BabȢvx)omM]9=sJ77i1\q[&q`I&Xzxb͵j*;Dp!}uú1m`6$݊͢mtM M K? VBUX5̝_?A@ p*iI:ffUDlD=مY ZE456$kreӝm9-򵊴:B*3MS#+0:0kXqcS7Qݯ/LwRj4mBRqN Pc?!GJ7b~4w۔Č{gdĹmm39 w0s"'a.qrXf(ܼD (8!,bb+1NX]>_"Dr2 ,}b_EDusC>p7k7=,ZB^]*BOȊhN Tkמg%+m(`ݣ۔h1^^#.m n3)'{Y6ՑP]5'@dGFWȗ ŞurQ@olgr"*#Wڦ`6Rc-S\P0L煍+֥j!=Qbz"ưֻ6DJ(%'B,'F{sW_pFo&(p%.a/PqgL(.4Gť釞!r*6hTA@s Y\kέZQ?ݓU"sH䬆t ,q`SqƆçuвN<HMk<;Gw@ޛ׮/$rp@e)&!I{oKR0gTz#I\ ! νDh<;)zXcwWm# $[Ou\ -V?XץŔ{.IKikX԰*;WX{Qg2eEqlmZO(?=EV+L {,[dWV3yP]69W)J}sΖv_A[I4NU[k⠔%@1VY@ѱ_wG,(7UOgN PlWEx@r(V`Md<Tܝ033#\mshft0rFT^0 Pn2H2&*UfAڜ91+:u:7:HGb8ڃbOm;0)l>!F1w},Pi`Z- <6iCzRؼ01&d=Cj7-w8)n 25#̀1=<5}>L\H S.+CCgR_'XN&=4%=C,]N#my|zeu8amX6|@ӕroH>z0!x]]4 d61NC5SG|%D~rSb[`7ƟB;`xyϸs )[*ۜ93$w{|qT<@3_(e֣oY d:OyS b#DkK{.Ns}Xr,{Y;' R v~U `eDVq2jc0(mۃ%<V|S+kZÃ{GZxFt|d 8eakc|`; J?B-3 XR;RrUTaU2wl \*t-21-%e4&6,8ʣ+*l@PZg\+zd]TiX8jTϙO%,Jxߊ'6 oP,4_%yU܂Y!#mwK"pכ|Zq,OEZC-إvC,w 42fC^&j\,!>5 ;!dU+&+J:}>@DQ`y׽v"J)3&f~4XGSB^X4^P1}GY:(#opMlYÅ[0NElOKYy2aK!4Tv&jЖPWjpG |$9h}@ "OUlw nn|ww-]Gi@01냔g;sjQ2 Z21I y iMe(P7 8Afͺ=VYl^8;H1vp\gi"Q'k/ȌP!`(njewڞnsܔCcȦftMĘu1jP:Tk,HR;=b1vJ39dJ2$s2 e|QN(0gNrIl?CõFnjz>qo)hWB+ 6o&-ee"t<dvV˒j~3}x,[(hZH5Nݝn;7[XVYWm&ń zyZt]-o =ccDJFF4ҞÔR)"@ f#~,V AiH&?U;\]vbx`WQ s=S*j Քc m̈>ϜFu2ݱ&۷> b)4)6ǢeDE%4$30F^Drz~2v[0RV,~ ‚^ %dFbd0 :0+aQTCutc;*s/HA`UJtNL YZ