knot-1.6.8-lp152.5.3.1<>,_y/=„=)+C})al~F:*KJhrP̻^Tm͖]teS6}k5fZ8E|cp ? EߖyIG)uy`hQ3kec Ŋ"Pb?2ֶ>IHP?H@d   5    t   l  /h-l-- ( 8 9 P:!=7>7?7@7F7G7H8XI8X8Y9\9@]9^; b;c<d=$e=)f=,l=.u=@v=wDxEDyEzGGGGH<Cknot1.6.8lp152.5.3.1An authoritative DNS daemonKnot DNS is a high-performance authoritative DNS server implementation._ywildcard2openSUSE Leap 15.2openSUSEGPL-3.0+http://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://www.knot-dns.czlinuxx86_64getent group knot >/dev/null || groupadd -r knot getent passwd knot >/dev/null || \ useradd -r -g knot -d /etc/knot -s /sbin/nologin \ -c "Knot DNS server" knot test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in knot.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in knot.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-knot-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-knot-update-$service-new-in-upgrade" fi done for service in knot.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi/sbin/ldconfig test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset knot.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in knot.service ; do if [ ! -e "/run/rpm-knot-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-knot-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in knot.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable knot.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop knot.service ) || : fi/sbin/ldconfig test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart knot.service ) || : fi else # package uninstall for service in knot.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fi.9P]3$ UM 925 A#A聤큤A큤A큤_yOz_y_y_y_y_yOz_y_y_y_y_y_y_y_yW 5W 5W 5W 5W 5_yW 5_y_y_y_y_y_y_y_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.so.0.0.1libzscanner.so.0.0.1servicerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-1.6.8-lp152.5.3.1.src.rpmconfig(knot)knotknot(x86-64)libknot.so.0()(64bit)libzscanner.so.0()(64bit) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shconfig(knot)libc.so.6()(64bit)libc.so.6(GLIBC_2.12)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libfstrm.so.0()(64bit)libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)libidn.so.11()(64bit)libidn.so.11(LIBIDN_1.0)(64bit)libknot.so.0()(64bit)liblmdb-0.9.17.so()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libprotobuf-c.so.1()(64bit)libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.4)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)liburcu.so.6()(64bit)libzscanner.so.0()(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.6.8-lp152.5.3.13.0.4-14.6.0-14.0-15.2-1knot24.14.1_{ZS]@Y5GXW1@VwVTQ@U6@U6@U@U&iU&iTTq@T@T@Tk4Alexandros Toptsoglou i@marguerite.supgajdos@suse.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (bsc#1047841). Added knot-CVE-2017-11104.patch- add knot-openssl-1.1+.patch * fix build with openssl 1.1+- refreshed 0002-make-configure.ac-compatible-with-old-tools.patch to fix build- update to 1.6.8 - Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171)- fix the sphinx buildrequires so we can build on sle12- update to 1.6.7 - Improvements: - IXFR: Log change of the zone serial number after the transfer. - RRL: Document operational impact of various settings. - RRL: Add support for zero slip (dropping of all limited responses).- update to 1.6.6 - Fix daemon startup systemd notification - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer) - Add rosedb module - enable rosedb - refresh patches to apply cleanly again 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch- skip silent rule in configure.ac to fix the SLE 11 build- update to 1.6.5 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label for better compatibility - Log via journald only when running under systemd - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - Features: - Update persistent timers only on shutdown for better performance - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Allow specification of time units in 'max-conn-idle', 'max-conn-handshake', 'max-conn-reply', and 'notify-timeout' config options - changes in 1.6.4 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Fix compilation error with LibreSSL - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - refresh patches to apply cleanly again - sync spec file with knot2 spec file - use bcond_with for the systemd conditional - replace all occurences of %{name} with %{pkg_name} - removed duplicated libexecdir - also pass disable static and includedir- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)/bin/sh/bin/sh/bin/sh/bin/shwildcard2 1595505139 1.6.8-lp152.5.3.11.6.8-lp152.5.3.11.6.8-lp152.5.3.1 knotknot.confkdigkhostknsec3hashknsupdaterosedb_toolknot.servicelibknot.so.0libknot.so.0.0.1libzscanner.so.0libzscanner.so.0.0.1knotcknotdrcknotknotAUTHORSCOPYINGNEWSREADMETHANKSsamplesexample.com.zoneknot.sample.confkdig.1.gzkhost.1.gzknsec3hash.1.gzknsupdate.1.gzknot.conf.5.gzknotc.8.gzknotd.8.gz/etc//etc/knot//usr/bin//usr/lib/systemd/system//usr/lib64//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/knot//usr/share/doc/packages/knot/samples//usr/share/man/man1//usr/share/man/man5//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13491/openSUSE_Leap_15.2_Update/a1022dfa499473a86a56a440af32f170-knot.openSUSE_Leap_15.2_Updatedrpmxz5x86_64-suse-linux     directoryASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=f176e3a7d6ef721fe379c15f9d35fed291da0cf4, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=78f702b95155c6a11f0d5f0731a66af7874f7745, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=ba07447c24f660cc39226dd2aab5647f1f12710d, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=226e48713b885f7b6c2477e0f7be5873e1cec7e9, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=155618d5659655199e7694fb3f71490b4fcbf7ec, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=27a3c3ed5d7447957759e01cb448937b5a6b8614, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=45d1eb506f24e8665a82590efbe510591f48df12, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=e88fe31cff93ac544eb5ff28134cc9c1642fe5f7, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=9e9368f90e1166b0d9c6a43f79003123a6bf6ae6, for GNU/Linux 3.2.0, strippedUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)$.=KTm  RRRRR R R RRRRRRRRRRRRR R R RRRRRRRR R R RRRRRRRR R R RRR#RRRR RRRR R RRRR#RRR"PRRRRR R R RRR#RRRPRRR RR R RRRRRRR!RRRRRR R R R RRR RR#RRR"RRRRRRRRR!RRRRR RR R R R RRR#R RRRR"RRR6H2wfUGLzutf-820717d6a8c01c1379789919f61d20001f0dae8aefc6500e46408c9376eaad4c5?p7zXZ !t/S>7]"k%]#d)Nza'~ Ԫ\}bA|`NNrf)Ksݹ٣`BlL"6UU%8)"2`B6K  5984.+pYzQ^Ӵ;^\}:}CS>;QD< v3Xȁek'JV̿GB͏z! ~ yeKpEFO#rxPNӤ?G-9*Ff?M}{OkwֈNnv\I(E8Jiy }|=z-L`03N vdQJF=œݖґ(9@xp %mUtv} q>rt.AT%_bCc~w~LYhd Jڈ\r 2SeIpkd)0^ j0A/ٚ/͔ m^:ehA).zL!HG/hd.M1yI *Pa ƒ0I?Bz! KƒI߉+:'cf88Ms`tf!Όctx.v"+_] u(Lsꖘ R w^_7ߟ +$RyP0hB ޫ\!"K!k KPCXa2v9EF5Pb[.%'M:QǕ^B(H$ޢI_QOw@4/ڍPk fIg "H[\<ɟ ikr"d|Y[,lV!}l}eS &ӆҝBTpj>rC*/o$`_3VlgBw7[{aw8 f =:ŗ "Ho1!njl_iǛ-#c%'!z 0))!9qp eHO/J>7gi!D!BD'6=-pizTPq5GttwIZټp,Lx7{Ϗ㛏0"c `4q(F^+-3EjqDq} S &~Ens[ax M4ȖO$g #iXa(+<B Se ﭶmC'6}ohU?V|xQ/`h~HA<>JƸrP3[s);ą"D4q.뾝N7qSSk7㬫m~4[<GAb z OoO `Rs(ӱ@*\K5] bIӯ76[:i3d,fQ@TQK!tk.*uBIOj=K7f ;#e;^HXhRI40 O f|9Yrmxb Z:59AbwD2焤(ݔr=& (Ʌl]߂6φ}wu'o`|4KU]$W%.9$hoTܻ" E!.sCa{UQlևЭc#')]א_j'QpoEQu[n~X%K޳Cux?} /B 2 'Yc9v'.BaQ9~|'1h?38R%RJ~m"wfI薝)K mVK)vdniKX္ͅo[X k)F#OwO*>u}ScBt_(QYI+Ƹ`rCفM+c $xUi!2-% 'Y(m|VC!*05E ^c>J02Q8iNt1B Z3ZDzxHcELL 6=07yZsҌY P\O#0o ۼO7ѣkϑg>D\ʍB@\su#ƫ}م}Qgai[1k-SٵJG(̠֯.ƃ SǤqWf;O=Ӭp[}J^Z';RU-([\D;pll^Bj u3ƜIKH T<_CQ0\[5TV~ pJ7ipPZ*VvL[x鹥VAwoB3jD؃yo{CLl?K( MF!@뭮꿯G>:DN:~"ډn r-FWEqpjsX WF߈32PP!Yd@h`y5vf(5+" ]8nSD4Qr1~7 [nx?x{4ƍ4Wڮ'l 1'Nk;GEB7bfWCQɺZ.f{LR`/+Xb"2 d^һ,9aV)?vޒ{^-F(ˏʻ_ߠ'Ӄ!x|7?GwP70V?4tItY1W8B3lhGK){VWngXsOUNEh˓!W`88=c{$% kHoG<[Ir* \"G+ 'DSt:}Dd4"rš6_5IHo.=y޻9\D+ `k:f IWoCG\c#Sz{9@d{M9hn WGHėQKqk=ج;jbveSZj侱xcm2L2XAD8yF|8H*Ckeè谦sl{sTw,B2K\7`rrr#]+uADd pԻ3T천qyl~8'jHˆ-Yp[q8?н;jG3!f'Ŭ\7rjnȝuVHn ն\^B2!oye 3伻׏5'g ڢh8nxT'l0/m2ȷ %i K.Dy"ο|*ۘ/j$SJ *Xꀛa6gL%S~pJw2mWF :buUyM?@zu.^hqS:-뎗֝HVJХi'a :j^{N#q Q @2,E[邨9MiEK[=<fĵr׆N{},u"$(jF-J͂"#H-Ft^gh2&D2Bh(+^U67aUadCid@+6oDA9ؘtB$jC9n/cTW/ :? CRM鏀qsƬJ"a5ր 8B֠3('teQ)):俚m4E3E[ =bW E.\4@lJzL{ZʣO9 ,aoØb_xXؓ[{{n\gt}ҎGO2ٺ)b[D"N* /^_Wqɳi'=oiBUH#'&$T1t@#T){L5)Mc֚|\Z=wVc͓T`1b+|Min^ct3z%N -GB,n-]d׌G6RdXuӶd(L *43yzPV:hk-!jU3|EsX}YocKx!5,xW|uO#,nRZiA45H9 N0i~F¥iw.f]ig\0Sk>޷ _8_I\+~mXIB4K|1˭RмXM9(! \(i _cgqƒ,"9+we\ d gYO2L/W%Η췧~08*>]J "xs8 nkPJw5>^) N@<^:vﻒ 뒇vNѲ4)Npr ?O"+hS\ F 6__ELq \Ns V󳊚2@:\} kM(O1Kw[ yoTp!0^:^kq',4 ` \䒘۹HOꭼ9b_=@MYb DƓCQ_;YwӮ50\v7Rl0f9di{ * $tp@SV(M]M^S9D{WK%O)(# 9' l.12-l2|^Zk7 eᵚ] l*Z̨[V!6 I(P[ZSX+(MѿBpm)Kmn|%ײ*c;NQ qYL2!}_;:YpRvOJG$a]@eNKR~UBcƉc1+/"*kOeΤScYXXQYCߡ/X ٬﯊z2] $ ABxh 2~+fJN&>ԦңQiprl%n';%w.guQ仡wQ*D ^H:[4^߲(9/_Y,n# ԇTdRE @>Yd߾t4(M<ټp|'X=LgfjuQ4Sk}_\vxi33[! \/ ㅨc { wU7s7>".wvԃ媦V1+vFLp ]rGVgi!kkMmAL!|j~ZӜDp+B,L hW"4pdKAS}k!]I_XȨH.aÊ6Kb-+(94 !m `yTa=SA˓h6:P S Ή+^ Al~a~PӔ⿢96'{3<~km!l +8VE>Щ4t$S"IF֣\`(Kx|NP42A垾|agL~a?yD]'ӖTPɥ̽2 U-h~S7ߴr+BD"cV) 4 1"-TykṦ/T.OT '"C&ej)魔`<B&Yu(٩W6ca+ИOP ;&9. Du"(X-$>Cr wuਛ¿ ,`G8;jofAUݱ^!ªz7d6drK""~E ȣ:;֭ Ranm&[[%t̲XN$w:,6NPHW){@]ɼ>.X;~H ul(Y*WmH"/Hv: Sv}<߅M˿q1*]ӗ)vg#p3*Y/(}lC`]k,pIח(Uhϊt'Xj$o-ܭwGн<L6J< ÍL^,]5%.Dn&)gA[D?y bD^8iNG = pf-a sOT<=.kH%(FsFE w!Z=+}Cu;t1,ߤbց2™Dnraq̹AqT|1 :Dj $G "J XuU9sI[}u~> oV$hfFYT$o~Z@),*}=r,1vL:R s\WnvB)kh ąk?p@o.qHKH'1v}`pgUI3Nt1]wm DlxU®2g"bIe 9Ï|2蚖%Cb:hc\Q'NbQ!4xeTp{$?9 ]cO3]{"j*1 WG~_-i٨Q.jx1%,ȥ>ϟ]o{僲%pY @Ssٮ\nƮ;gtXKႪ;Uʄ f(|o]s'.'H C{I(2#ViTqX8,;uT G  ?q(fEN5xpI`A'BG#v$xxV~4ֳP!pK'{koķOmc; 4GF|{-1̜iD@'Θ!ժOV#:a7c8[\ 3 `ra^6v,<Ls$ sRB2!KQҩ$XTvj^!؇uR"dkЏ{*I^wxr_YnݭnmoV 9fSP]Y/ 3aJ)g5* s!%M8r]>`IެfyI{"M Ax>y;3}zFl 5+l4mzO?+ *KQ>@>=xcKܩS"۟<% 3U>-tˬ.Sn>Yst[[[NtS5ŗEP~4Is9:&ު.?-`$ ugQ%0(CċζLI#_dq$ykwoX|$8A}]O,֠A.\f+Ÿ{"p}3೚'\X>,#o&־ј^6H[)G5uUo! */6{4gq&ɻ$` "Ak㜉j"^GpX̜?WnL[p>Q.mU#TrL*KO^V%g9NfFWFJ*2򑾷6%΁m!%f.[E,a㨾Lfm܇ND2bq<2 $][FMsokbP-Rҹ&ۡD3- B%[Q;tZuOn\#d7z4z#w3wפ:_$.c:(b{ŕLyWh0"_:stşƝ6@GPw|`;p!>x`GCG`J1c Uy*;@h7>8Ԥ(QPP9 *Cxrbbrr6$hhy:$QZi 'f8X)ZҮ.Wđ ê vjj1O˄9ƣtɋ~~ۜ+NP,$;va,.K}S%m 9{Z;]`_ÞW_>mY 59Oט<*Hj}c.;r@ 2Y3]q;+p][w(dG<&pH0IDy93Eq^au9 h.29 2TD#םHb'Ę7WwD.N$5˙=_=^)/LPͱ` fBxby͈3CBaO;Ze*yi̳~$p3"@fppNTtҹ}2ُ5#{\Bn2Oirޝֱł4?36q5ϋSl5r%\r/|Uq.AL6!t|uQ<_!+c@S0<~C+ nyAyɪݒTrJ`cQ +޻< wOzp 7bgT+lZ%-,VR<I!Ͱ*J~o) !IQ<;bw_X Y]G&ؗ6=1 -"*잂#Py| V+E~#C;u4;H.*}*XO9\*Q.t@xg"rɸMBnRЏhE찜}J$*h]ZEvH'x^:e^܂a}Do |~?+fW# U;SW陃 .B)>i* Ӊ%ys* eHe%"FܾkeM0EXQx_~:/Qزճ ?SD6cahy9gYwc7ly$[8FLJrI`CS;0Fe6wEY%G!HѵTYe?s%C#qkc|hR3GH!z}Nİx ZmN+3I:H#7FɃ[NͦBRXFM%=Q7"W:-R.)tUGѸeGOk=s>U,#XUZ".8RrJYxނz(ϋÜ!LDZo߷v`9^l1{TxL |G@^m9P-ғ3BZd=OmX=3)aUE9 "j(2}mq#?vZ8Q-a]T{vVʑ?~\0*"fdΒ AA[-S9 NP;X>C'Ȉ2t&3Zg`]n\ ۵m)~"iMxl ndR-l–VO:hֿ{"Qm\ܞ1]}d_Y,-Kp 6^׍r\ nHE M}| {{d P~IzPrJor{i"Do%frPɑQgWD@X5,pNrh6Bﰍ;!KT2<KJ6^/98Tv.k(cT;VcS=KaiO|x9jq:Ǎӧ[16p7_zEfdK*q'%[@DPe|7`K7Vjceнcp5 [䭥XRW1a~e^Ñ&}_Zvp5sPl "Vғ@8v +7aL:$T22iDq|ـ9:!uBE:=oSA%-T+) yqҝbPѝ.Su` z֘yOܺb7pe0^KƬZG瘱9;I&'t34^+$Pę3L?R9~ekU Hi;FTT$T.!P+hj;1ss#S5 NoKzP\KM YIZ <ˍn .RvOx`$&J|l!$=ԥr @YcԬPϔ"CK|&0Z FSM$0ok%nz(U9(*5d,,n7rn vzuϡxXXkY&PӪ!WI ;=C1z[N$@MO fLe~)q?c,%®}vڅ %jI'άI}MRW|lPoI|;7 wqZ@׈HE7ǽc>{&3L!ϐ T6zQP_j<Ήw˦/հ2QZ O>wsH%%t%q+CἺ]{C|@d_-7`x$: h(="Gճ^ E$ Z4LbV~b*G`~1{.| GQ`*_X*{/ݽ,d߲v!Pjĉe6u4PvA}^!EJڋ7HhG^&T6 _Kw׽~EB[PbDVZ`?xQo}ѥKM_,z$0BT67{pFRЋ%| <E0N )*obEh{Q#16.)VѮe1LNlb[3i3M3^d['2O̸]$>AAVNϟgjmҫte?4(3^H>`VkVrZB p1D$f_A{K>;v,a|2(G=Fb+0kɠnv GuteM0epث =ABA )Toɴb®`+J p j}|j@үfsB|]2?%K a͆.JqCR .SĮ?%OPwxxS\ P<^ڵ8C1ijsB$I8zPwL!%YF;Xч <{aPʙsfTk`]C1 8CEw_XI 1 \i'rNsQN,UU6fdgV<,BQ=])QիG}_eS!1֖ 9>TMl,BΗFIw5|^mET^R~~V c'{ZsN  v֐~(yOHJhN䙵 ?>'T߭x7_jńMJ K^?l[3v ~5kL\I:%*q &S#d7.7xpzb(Ӹ #<,˘!tWqSH70{`ȳ8GnF=H RExpuOGf^Ï!o#/ZV0ؚtYUc!vHF!IKq-^@Ջr(r(PJ uۉJ]ap'Cb ,xCb _YDF;Ш`#T7>-'##Ǖٚpx-bKeDѹt%?CSgF̻c4!g{ܺ)xڮpua`Unة|uR)g"MMe36"K<:M$|1߶ YZ