knot-1.6.8-lp151.4.3.1<>,_y/=„ؠl4 P/vͨߢ9i}u+^Wx?]MR/V -aS V#AJّ2޴;$ ~jJHKaQ)8sk,O Kͽb]AiOqaIlGe%'CDx:,I_|Ppd/]K9KÉL<1PI5#n[4߆.-f?Z#rBrD'ԍlϔhM Aʳ>>IHP?H@d   5    t   l  /h-l-- ( 8 9 P:!=7>7?7@7F7G7H8XI8X8Y9\9@]9^; b;c<d=$e=)f=,l=.u=@v=wDxEDyEzGGGGH<Cknot1.6.8lp151.4.3.1An authoritative DNS daemonKnot DNS is a high-performance authoritative DNS server implementation._ywildcard2openSUSE Leap 15.1openSUSEGPL-3.0+http://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://www.knot-dns.czlinuxx86_64getent group knot >/dev/null || groupadd -r knot getent passwd knot >/dev/null || \ useradd -r -g knot -d /etc/knot -s /sbin/nologin \ -c "Knot DNS server" knot test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in knot.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in knot.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-knot-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-knot-update-$service-new-in-upgrade" fi done for service in knot.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi/sbin/ldconfig test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset knot.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in knot.service ; do if [ ! -e "/run/rpm-knot-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-knot-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in knot.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable knot.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop knot.service ) || : fi/sbin/ldconfig test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart knot.service ) || : fi else # package uninstall for service in knot.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi.9P]3$ UM 925 A#A聤큤A큤A큤_yOz_y_y_y_y_yOz_y_y_y_y_y_y_y_yW 5W 5W 5W 5W 5_yW 5_y_y_y_y_y_y_y_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.so.0.0.1libzscanner.so.0.0.1servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-1.6.8-lp151.4.3.1.src.rpmconfig(knot)knotknot(x86-64)libknot.so.0()(64bit)libzscanner.so.0()(64bit) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(knot)libc.so.6()(64bit)libc.so.6(GLIBC_2.12)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libfstrm.so.0()(64bit)libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)libidn.so.11()(64bit)libidn.so.11(LIBIDN_1.0)(64bit)libknot.so.0()(64bit)liblmdb-0.9.17.so()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libprotobuf-c.so.1()(64bit)libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)liburcu.so.6()(64bit)libzscanner.so.0()(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.6.8-lp151.4.3.13.0.4-14.6.0-14.0-15.2-1knot24.14.1_{ZS]@Y5GXW1@VwVTQ@U6@U6@U@U&iU&iTTq@T@T@Tk4Alexandros Toptsoglou i@marguerite.supgajdos@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (bsc#1047841). Added knot-CVE-2017-11104.patch- add knot-openssl-1.1+.patch * fix build with openssl 1.1+- refreshed 0002-make-configure.ac-compatible-with-old-tools.patch to fix build- update to 1.6.8 - Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- fix the sphinx buildrequires so we can build on sle12- update to 1.6.7 - Improvements: - IXFR: Log change of the zone serial number after the transfer. - RRL: Document operational impact of various settings. - RRL: Add support for zero slip (dropping of all limited responses).- update to 1.6.6 - Fix daemon startup systemd notification - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer) - Add rosedb module - enable rosedb - refresh patches to apply cleanly again 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch- skip silent rule in configure.ac to fix the SLE 11 build- update to 1.6.5 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label for better compatibility - Log via journald only when running under systemd - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - Features: - Update persistent timers only on shutdown for better performance - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Allow specification of time units in 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options - changes in 1.6.4 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Fix compilation error with LibreSSL - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - refresh patches to apply cleanly again - sync spec file with knot2 spec file - use bcond_with for the systemd conditional - replace all occurences of %{name} with %{pkg_name} - removed duplicated libexecdir - also pass disable static and includedir- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)/bin/sh/bin/sh/bin/sh/bin/shwildcard2 1595505080 1.6.8-lp151.4.3.11.6.8-lp151.4.3.11.6.8-lp151.4.3.1 knotknot.confkdigkhostknsec3hashknsupdaterosedb_toolknot.servicelibknot.so.0libknot.so.0.0.1libzscanner.so.0libzscanner.so.0.0.1knotcknotdrcknotknotAUTHORSCOPYINGNEWSREADMETHANKSsamplesexample.com.zoneknot.sample.confkdig.1.gzkhost.1.gzknsec3hash.1.gzknsupdate.1.gzknot.conf.5.gzknotc.8.gzknotd.8.gz/etc//etc/knot//usr/bin//usr/lib/systemd/system//usr/lib64//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/knot//usr/share/doc/packages/knot/samples//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13490/openSUSE_Leap_15.1_Update/72bc87405b6ef93fc6ef62683070720f-knot.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linux     directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=f19506312e0b6737797edaa15c057b73e4891ea9, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=f1719e13db81a5d52c092df0283906c1e765f8a1, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=d0b206c74b2acf4238afebde5b693726c28d8f4d, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=8798998599f3ba999f1b57323c7721441f69ea15, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=fe900b9a54aec74c69f9810fed3b5972dc73015d, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4ff3a84678bc096350d06104a602a46aa89abfb2, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c0eba1279d23fabcf9d4a4f5b55d3f5b544b7223, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=3f257a2be6e0dd0f73dd251d12ce48a6347567b4, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=5e81bdcb4ada581062ba44eddd42575490cfe26e, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)$.=KTm  RRRRR R R RRRRRRRRRRRRR R R RRRRRRRR R R RRRRRRRR R R RRR#RRRR RRRR R RRRR#RRR"PRRRRR R R RRR#RRRPRRR RR R RRRRRRR!RRRRRR R R R RRR RR#RRR"RRRRRRRRR!RRRRR RR R R R RRR#R RRRR"RRRoܳ9vhM9utf-8f1f3d388531eda8e646db6130159a24e8989cf7bbb47d62530cd631d09ae4326?p7zXZ !t/AmB]"k%]#d)Nza'~/xy{VW}`Fogܾ1:|鐌<P(o!Qb&( .\ZyI6ls5Qa*P g :LRg|Фseun׀QDb,/-1J*`IHIi ÷c3'XD(X|ZWkYYvVIE[qOX  REG2Wm ؔf•!jpІAׂh]zIοFA Q9G|]37~ٖ^y",DK bK:\ʙԙ{tfƦ|J#tE:]U.GuW˙sTBv󊯔7!qZFdq߱~ۼkU;dؕ5RG>+%>+ [m, rޑ>:NP=K:E@!u/kZaoK=b1K$䍶2~6,>Izns{x޼dqI:,|KɈ#bP =u8d@0b+&'7}QHrDh:ͥDq7Ȗ@EFuDhV">$j<ޥj l(PB&#NGب+Q1\TjdvoU9<XcIMhD)bn*m9~n:|ΔKAswŘ:: O5Zgh Z3DC *6"D/O&J٬>e]dUЩH:3m&´4I<+qNZw sd*D#}9,CRA(_0^~9umX@IPaQ.s\3R Md^Fc)x6l 6ƶ_W)x˫0Bnxh^AzbnTo+yT<&9רS2$Mڳ NM?!mP Hpa хDERE)يV$v-^\X'+X2 *~C;,HWv X[vщOnqOVyIMjz- ND!l3> hS¤`*aO\0T#'*p|` >m1}P|LDcJo =3+ o*R, +"}ż^E#'E?|XxSI<˗^0/acd g -0ID)qɢNH)a\C}3zsEv׸#xi .,G)֪#*I )L:1&Wj12Ջ@v~MpKVοTwvXƨ8UWFqpJ\b<zI.ȩq0񏄱4iFHdh_2V\T(.ju[Ssv/p4C$erir kYTGff tvm ?"!(~СOtCiUv<_tiaYXj༳54Sa RU/p}ZYqk!bu:M~u'I1HB\ NCQfQ@3*GUnf*df1$Q-+ Ђpky6?UrH@zXU:p s).?R<3 b D7X_ZWo uKFG4w@QK~-Rd9RDﴏ( )"!~Tu5z/2ew(DmeUtDE'I߬ӫWfipjκ |5+z֓F~ʼn8td[BDN6EIa9 jK#kмfqY!ST P7'n)1=E"CjQv;Ƿ|UE+rM [qs6ף6Caef#|A 7 H})z60t)'r9횇)IFj⺆5;h(aZG %٢XFkٞ|.ٛNq.l 쌶\/lSHl4m)X'f,6Ћbi*6Og3s"?3yZ \QH+8_vɘ}MԱYؖ7VϖoB Du9fqpT*uŚÚ3٧-L.}-ڣAV&"'.(^0s z]AL䶮 Y3 *+^tZkR7ҳ,ۆAxjWbu:m)1Erz#,QzrͲw{ );yUN XIr7ύWb_%6VWݪṔ}\/qc~>*IqVfzJicEL\t1o;ktۊ >`n/o4, Up@N D57GJY>%&Oy΁րGxw3h ?˛E-]Mf}}U,l%@?d`2`C 3Qk,$%gOӅ`%IJ&6QY"ζE˟D͆+;C}hfj3w hE&_Hѳ37(D(F]L'Ҽ˹CӐJف&4 \3BIX2 7gV Ug>,1oT-Eơ o.Hp&vƜJf)I?2jJvP/P⣏[2|g!-Sˍu84ǎ_9 jI sK'KnZ mv5euh"o Bɾl#^ja"'֍:G,+>hѦS=eMoG 3#68N{MHr[ (Pw2NMd(-3rk,?;>Aɾ̥Pl(ӊmMd'#.W]~ʵ)/z*7!/ͤo$9%%+ɭEm(dg:ω@N-oil9棐Vd4qfo@KĿpN}%-ߍtA V>#A qcc P;-Ot4;I< o`?yIv?)țOWaIA\6[U"HI'mP_;6W 밬y#&'=Q$ Ƅňڳ U7s]1J ?\Q qYd@B]Fr^W^}yAnYNfÿ́ #% ߂" '5 ̜>p8 <㴦6[ MʓDM_7,,_\ր?ˮKn ,5e< }B-o> p?HyCDR>9W27p"(^)7;0/Ɂf)ic慌/wvnRiۜx& >,=+$qջr*8 7dV?)c/%F( v$0N\B^ \5 +z $Xv uI18!)E,.>duPt 2<'l6eG[*DV=-+o*!MC!5~P)jszpG]%Ck|'<ϛlc#VEwxrQwݜW|ykyFTvjGcV@eIy\ #*l؁<"(VGZmؚQB[abĥHˬ230\G"̕T]e}Ё=+ v:Udlu$b)Kv7'ze@E<GS@ {X󫈕M9o|%w'UHk-F2P4͕RQA[܅>:l k2)gv?'%.+@T3ٔSA@WC[a.Tn"1]17? UgrK- Ǟ;L')yʸaWT*pźkZe7;kcq` Q/;$f]bTw. =Y}ՔhR2dy\pq3-:hZHgͥAy]6Jy4jbF5(mVFPg ׵eMSrf/ ^?jM3Om*dfэ#^GUIΑJS,`GMqk`sU%%v'B=yˇu$ /[vTD]5#`@z&S8&XG2(T X2:y8Q|^`fz`5u:4[;雞{XxH`MaR"8U3}Y8@#X`H,*N޼T Z.8 do9x&mhs 3A;Ƶ_juO@#[M-w4p9!W$ɴ2 _iy7Wԁy>|ՙ(7w ;Lui8G\SA\bPMHZDtlR)t4һT1b*{7Jʔ3uW/3E:ဇW9VZ=|TϏͿFA"*FDe6 S fH--_Q3 *J`V}kNdkOnp')n>'ȍԀVhH-!KiLN`N'T=/0CBbc77EET :U o˧0L&.)N! @CGhdJ9an>@x,t.4=zA`[66tM+vC`Iw {|)Gf(|3y{x8Ʉ.n|mr`!8INw@\uh%Z+'KGlC\āTZe7۲&WhLZ dZD)L ^tI`'wDIKo2ۍGŪlt=\סNĂnxTn͜;Hvp6M.62bZd7pu.| "L=݄qG6W[+ YJY3M]`Z? R%T\UYE WզtJZ[]ϭ#ѕ<([gudn| Zy:ECo򢳣^^̼%H#>8g)>7fՁx/O"bIBX8 ٩LJU: Hm͌3 43{8[N l>=aDCz|+ Sh=$ݫZ'>T!( #s閉H0ɹ/Iap\:eU15B#Qud.:xB33>|Ԉr0AtU3‚|NVn*.\Ze-SRs\z #y;ioGzPt#+bC!P պk!6u%6* XdGwڊwՏvCUB'WzAYIC,c˵GiV}?8bSgOl \TC0@U09$S 'gē߁=ܻ'.G2oh9Sq{88i*/tCu]ߑVyK "]c~9խ0eUCNu,N|T? v$f]m[2D[:=E v^U!R#6QiQЂ^6l{ "'A¸cIL$UcAr-,V9]QdzQBF.i1 :{?Xd$ v!.s;O@6 FJ01H${}˄c3|Bw_hGBU~*7c'\{R.}~I&Ot{EXDJ;.G#/eDPuLaѵ64&'ȷ8B)Ora;(נ2"rv;9Q[XQf3Om$sZ b~׿+mؿON B0cRD<[8:XH+ ޱ=Uk ɒ <+q7֣Խy? K#k_K|々 PLn}`bN)Z'I͋ –+ elUd靸6d!n-"3- 2$w& 4`k7,i!W$wN tFkZp%D œMЇZ > aNLOz㗠*ɐn @KOl.sg@+?렱|VRlG(Լ}q5eڍ/spY|os8S!TEX.m[1>װ:]ytwKq<'}kA cL@#3pH92RZLYhQ=9KOxUQZ {R%jy_'b}]Qy!VFOvIݭ]BP=U1G擕ʐ EЁˊ7 HvCE&tǫV**lo#[Drk#QYw 4ylV~C׹s6q% UǫpWEڋSjg&ig;ﬔIJK#~^S]о{tiϺ^TOWlcHs+ #%a_(FEؗ r2ngJTLFcjZ !xhO>aЮGR2;*Oݯ}iKt>Ps"9x6Gy4%qR$(.t遍>rH CCvsAV:)L|!ϾVFnxd4O7}SQ91 q6At?~k#Bsd0Ow'+/LL(9R87F}hAo@c6P!I7$Á +ZԔ c7*\Q®,d;r%.gTU`u6c$T#%e >Uk ɕJA [&"Ug7OJwY.C/ξ<#3e 1bҔ躓~wWL5f_I(}UKNC<0J|(5!T<ٚ&fge24.x̓bϋ ,lS܊hͳXd4r}ZKE9/Q$ aa@f0UG)=CsvDUOQ2`QEFA& m)%`ڱ}p?hadx3?O{$QzsȔ"8F훈 Za1ύfB]HZSϔ]+MxF~]۷IDg'-3py}wqe].Cߛ7[]hBn83mx@135.k4؛6|qYk]iNZT]O~ )_8k<;V5&w&FzXtf'8NB%|̈|rѪ}O4 kL3!LЎ ڥ\jaf0F<f}T3PżIiװ4G|Qm>i8(t :?3e(͌<{i}< |NuKH?GM"3q^łasp/ F LnVD'.^ɘ) irc p\o+ Xź!VnN ,i ݹ|g+%"< oWB-p}J`LTH\#WV~Y \dԭZMMnΝؠ|? @ %]DK5_kkV'Un*pe]FJHRGľie qKjgY.kv.ɳ piFe"y3O_[M=S3Π`!;ͦm`IzU;v |Lh^VzyfE*qq[GZ.3D}Sd"HK/GZġ'Ť.!K|vzx9V#ZdXQNoib>u[M*cTO/}e?z<^01 uMd,$v,?[)*S^[#n+_T##^.]_a(9)?=)DsB/?_>u(DI2>uHGcދI{2DG8cYs#䐈ؑN>(Ҫk!o*d~n,Rx5C/;wkmd;$gW#dOn&i]o4xm@vx<ɨ 96lnGatBd8TX;#HSb&#uxI"rA_7LY`d_壿Fd޼uq1&^h!@iW+V;O;R/̲>#)ҚWQ$\U5D|S>,]{ 23'ts [6hjsjNUDcԴ`UtB4础tŴď2t[M6&g$Vfldd8cNk"EHuۇDh6w`jQ@3(&P=V 3I#UDS8o9{;1Ԑ·SֶMzZ䄢`WmEi뇉l⊗؊c l33nw\+tW/Vm=*bkFh5Jsy`9:\R F "Patqs(,&3൝gؖTO}DQ@mQ "q!w<@>`_onۻYg]+_E6 _bޅu$5O`CLISrˌIpm/DU|lp!*Y'*hh5Kti.0MAY'R5̤oP^ ߓDhhIY_<%2}(8V _;EE&{)fĿ_^+Sat?RH}xJm7)FHq95 &_:0ɰҩ_tT?}Pq9HO$nAucG<׬)Xr{I?t_Ӿ91^^:#[0W}Ȯe6wP1Ճ'}ȁɖSC ڛ [ [qM|Hss4sDF1:>\WAۀ$m<D]< 8YDƢ .P0Eј:#b:Э5[qw/K%BCG~94 z9y}r<٣a 69Jlcae#d]ID[Π2G|bw?uRUa>'R^ѴE3Z#d6^zt8>|OeRFQgG'&i3Qݸ47ZJ)j ,йQfxprL6ܸ|zCW= LTQH='0^tșx(Re ,z9]DaѸeiv:M,d3Q hb÷ V}vУP{W7&PUAm H]"dƟHd75r)ۼ.+O"y;e ߈`Bɫĉe#*n݅Oz}o`<0hHRS^Acm_,nnu<`Bo/ ܴQU|8tN=faG;F[GRsT JALcY63Abp!L,} ~V[O0 JK`,Rbg!6O4:W%Y8G(4,aV+,Q8m-)9ev߿R1cZZ뤍[eSSKE ³ 9bq}J*sBzG |ƃt&::XlSoLX D=vWΟ<s8<`xl4'֐>#N\cd% 蔁\Q ]agQxbIGDM-yLL4pM|u.`D<^J鉤KiqԀ/=CGY@<"~S7)œK-lƭc$kMzgLZḐAvu_Q^L$F$oVO?!®JIX0/BДEu»AȜ[ !m0iGXVn9wnD6I˝мn*\M+9=gP<"dtFt)8s[k؇+?t[*nwk6N,}ۻP; ;睔9:N?g`F<%]X+k'ȏ6H-Pf2SSWGkXYeKpزxgij&/dpʻF֎h6T~2xo7r(~{M8ӈ ß)Wv;LԦ ;c^fZBLknL۾eZL#:cJ8Lm^Uؾ'*,0C`bovcc8ʸ^i^0Pqj]f]jzy(% a2T&#\un?!9`I}% w _D1u߱dEVjh¯ܪ|+06/7ySd-d$0 -hX 3ꗴq f,z ړˢ0\͵ O|qsɳ:5zA-R-` lJh:U鉂N:`f ̖;o}z,-:v\PFuf;2AOSƅoT0TFC[6Ȟjz\xNJ.Hҳx2OG.+J~gSo"$cUg?Y&rrƞy6w3<} W2w#МT+[%c:R$`2G)w:F  T.pEw Mv%6_)zS0YL8s?WvcaA|NWۣ{+%Z7D?䭃-FUŸJ:/hԒwr Uţ!õBbz*QWف#|pU2tv&7OiրfY8/uk]u{ "$Y ZA8~xK*ڴUp(h| FoRIcg.5m䗣LDa T\ߕrm*SRj l$(#8׬tOLUբaMS(#W!|x܏20>T8q]b(?Ů,.` y60lc=䳝[ .m]7 ò=&5BKM{&$cr*,-LYQ XH+Mtxh8"UM9h >\HM{y Do)mt3c T%U2-HUC[x}䰻2i>\b. Y*,A֖Y՗a<jv7 JTv )|/RP!9+$u}w9)]Ō/pu=8D_HypB*g883>YIk^:'L>2!^VQ=Wq }5C\¨/1.GG 6=%l9HB-Pu)HCOF_g|aem @G%Ͽ0a8,6 rX!lR-z*HaX w}S7&>XŨ֛r}B<eF~`a\O.L{ɩFZyrx"/X,K 6b|aD2:)zbD.5\վ{8L o:ˌwǦPǧ-gbGs5a7L{ڨ-=]f@2}jH}ǬHe@H4,Bmǯ< RBcqe1' 2#.B?B^ Aiw.{W -e JnY? C?)ɤc| +>:;FEfGlR2ƭjU6 8+s<")S'g6$w9\޲;`E@?u 2Jg_hhvӥ`]ASDvj*MkF񕿔r`\["Q]ryhemSfɷœE'K[M:1^ը*/C7J{(Z6gD=,ĞƿUAF 4\7Tktq'J}Yi鱚Ƹg$Bc_h4QAc_d[&=*UAICwc]V>wM|L[B8Du1P!}>^6'HCE f7ate=loJDT{0F{xYZf2~L񮚩_vi˖h~zԏtE>DG{6HhWvC2]3"=~6]tspTy}*~E+!hٚ0cm/d?}I-߳oq ,utr}G|EQ~YPB OcG.EHn"V@I_3 Cmm9&50pÎA%qߍ| ?l[m˶zy|HMY !@b/V$;ᶒ7~>pKr1W>7 ш'6(=9!KDo  s߼[jJSί@UJNĮD do t;skO5P)CE< c3bQg]-Вn9J<@g<5B֎@7r{iV|$.G t)^rYV5Nc*oc]z^e@ טElhvEV5 YOc!Ѹte)~f5k- B@ ! %̓Dcdn&Qz :äQa٫U-#=>"|:wwQ]}[>whX,Hè&p!LO,G7&}.@jR$Q-v_St 񂸇46̢E F0E9]1\r YmU #/o&F!Ux{FV<iqO J01J)1fbCOsy" '+!#u(bU;WGXyŽ[䀊B?qh<@Fe}i?ʕݙţ: rd j6.q7s?²gç͈X1$ q 6]1k lqku*mXt72 _b]s9T9r[. w\rDEFAC3c%ΪjPeh<c4Y$U:gSRg)',nKNWT)w䈻PPJVr`EXW@G0f]|:pi4i"9ٔ")ZkeSwӁNGw_|tS"8m2/sTEy{z`=/ڻKYxJFor }1C>Xq$n(oMUM"\8-H(Ϝeˢ~*'4{=?[6AQ ɑq~hgsYꬴ!cHVdtXq=Lk9uTMnhLjdR&#Ĵi[ +^wj<^_ILHպ{~{ЃpHhNwzԟB|6|wR)si<$R&&5A ;=_OŏJL ʗTwG-LL*=NckwnEw ]nzFϊʙoڰÖp* ,V*[m1 KEajV}o\͌$ !#&/l-Qlfjb\JGDZeD-:1~HQ|Ɋ5%M8Y%\ω' KNp1|]}6؍ ÖuT'>OU 97#dp9,%JIa!x/ᷭ +Y*}ʹ9{v Ku>B ZO%ۡJH, g06cTfBxjk1P(pQ`:0fgfD-X&<NL08KV'qdd:8wF Qd :m 99#AJ ndnJ~E6ևm| ۍc?NLR}.[5Eg]tߧkQ9 l~p54,9f%J՚ٹӧeɠ d+ d)ZwXXbCX26cY¹'p)(B CJ1Ut<)"|OĐ(Gm_4^shw^v~(0/L!j% dnEXW0OU5 {q{|fd ~ɢFR UmB &y[SOU)g sۋyok.,Mڐ@hZH@/pZ}A-hSVWUrq%pZnf:Η {r/qs@K1[~ شMtBD}tjXpGcaZEXAݼ'ВBݗk+ R0U`c4vUq'rΝηRuG2 ;3g YZ>p5ʼlTOz^(Yׅ,dR#$ByWy 83x=a(%B9~bAP՛0O#ۘ[ i% RCoRR.90؂V)&Ɏ=)m]/i۔ ;m5n<Jx^뢦wNmr`(%0r-~9^A_0+:*fFcT<0Wkj(_d/Na8=Aqe.:sspi 38_|HG^ш$K%`0u Awpv3Q*d&B }w![(}jmJ9kU`[O.6eƲ_?MJ}t(@N6PM;;(]H6M*ހd~u<W-ongC[g\gфr$uJ=.3}x)_ҹ ,̽xj0TwD ܐ|F8j1dn(X&,x"ڳe_ò*TB%Yi*Ҏz xMnokHxb]m9a9 dU,v+zih\h&Pa%^xNjTпuZ$"{GN.7ēh8* frg$X>cwY?dW姗HD?ifg6+Acj] 2o4n[_`.&bs@S1{qpX5 2 7NޒÙKx3 a< պ(ic5Xp*pK?j\, HI6`,`8FΤg>(Gޡܷ~F5yXyU6 uqKb Jɸ?"wyi U5\?$ZUܟKBvxO^QVP3vq4k~L0ui|}̅ȿS*W%>آU]"E|NC$ڜa:R"oGSxc)bխS@܅-!^.jjbjRWov yn z%mJȟ}jeuF3 j# Y JdQMo<#F=sV 10 UK~٘u1*Y)(Xs>U˲R7CU{$8a$є[OƱW덯_u"&%=k$VzlFc hCM($(g'm'51?Pb<]2}EV0\NfN|C Dcݓ/f].I@޹a?>Tޯr^I=eA C9«+ᄩKv<3ҽ%7H!>&߭u%>qwF\iXsb( WiLA ϵg-yx%wb12U3aX?δ`F}±SC-iy:+e)|I@ qz k[Ur_ط(*[JtEFm #퓠w3hh>^/ W\e ^{zW>F;ʇ^r|wcve޽#O n ̰ :횯 ?9%ȿqr h[D3ٰVrma!΍AX|{VW~ :3?*vxoP0jh JfaՈ]{ېskF 3v5pչ#Œt YZ