nsd-4.1.27-bp151.3.3.1<>,_ˊ!M@eeeR/L" *\5];D/LasU* '/2LADLO덥e);l}k 0\bWMc.f !=cÇ>߯%ؠl1շ+nA?^*l̈(^?T!.\{P's0bP2ةj8)B:K9V~Pp,ubwBq`6oF?d   B+ Dhh H CQQ Q DQ Q &Q &Q(8Q)Q+b+Q,,-`/x(/8/90<:2=>?@F G$QHhQIQXY \HQ]Q^bcTdefluQvXwTQxQy%zpCnsd4.1.27bp151.3.3.1An authoritative-only domain name serverNSD is a complete implementation of an authoritative domain name server, developed by NLnet Labs, with the purpose of creating more diversity in the DNS landscape._ˊarmbuild01+SUSE Linux Enterprise 15openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://open.nlnetlabs.nl/nsd/linuxaarch64getent group _nsd >/dev/null || groupadd -r _nsd getent passwd _nsd >/dev/null || \ useradd -r -g _nsd -s /bin/false -c "user for nsd" \ -d /var/lib/nsd _nsd test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in nsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in nsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-nsd-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-nsd-update-$service-new-in-upgrade" fi done for service in nsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fisystemd-tmpfiles --create /usr/lib/tmpfiles.d/nsd.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset nsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in nsd.service ; do if [ ! -e "/run/rpm-nsd-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-nsd-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in nsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nsd.service ) || : fi fi+Db EhL8 RR sl&;t!p3 PG< 4>=E y \ , @-T :'.p*0D fA聠AA聤A큤A큤A큤A큤A큤A큤A큤큤A聠A聠_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ\RlQxtRCMmRpVL;\-D3E;_ˊ\E}VL;VL;RJD3\*[2\*FVL;FFFM\*FFFFFFFFFF\*FFM\*FVL;FVL;FFQP"aN)K[2[2V2ElTEI˝DJW_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ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@AAA@root_nsdrootroot_nsdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot_nsd_nsd_nsd_nsd_nsd_nsdnsd-4.1.27-bp151.3.3.1.src.rpmconfig(nsd)nsdnsd(aarch-64) @@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(nsd)coreutilscoreutilsfindutilsld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.26)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libevent-2.1.so.6()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadowsystemdsystemdsystemdsystemd4.1.27-bp151.3.3.13.0.4-14.6.0-14.0-15.2-14.14.1_ǁ\\l@[#@[qr[^[;e@Z_@Z@ZZZZxG@ZKt@ZY@@Y]XXx@W@Wt@Ws@W1@VuVV@VUV@U.@T@Adam Majer Michael Ströder Michael Ströder Michael Ströder michael@stroeder.commichael@stroeder.commichael@stroeder.commvetter@suse.comadam.majer@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.deadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.deadam.majer@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.de- CVE-2020-28935.patch: Fix that symlink does not interfere with chown of pidfile (bsc#1179191, CVE-2020-28935)- Update to upstream release 4.1.27: * FEATURES: - Deny ANY with only one RR in response, by default. Patch from Daisuke Higashi. The deny-any statement in nsd.conf sets ANY queries over UDP to be further moved to TCP as well. Also no additional section processig for type ANY, reducing the response size. - Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds nsd-control print_tsig, update_tsig, add_tsig, assoc_tsig and del_tsig. These changes are gone after reload, edit the config file (or a file included from it) to make changes that last after restart. * BUG FIXES: - Fix #4213: disable-ipv6 and dnstap compile error. - Fix to reduce region_log_stats if condition, this removes a debug statement. - Fix for FreeBSD port with dnstap enabled. - Fix to remove unused code. - Fix #6: nsd-control-setup: Change validity time to a shorter period (<2038). - Fix unused definition in header remote.h. - Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big. - Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets. - Fixed radtree_insert memory leak. - Fixed access recycled variable.- Update to upstream release 4.1.26: * FEATURES: - DNSTAP support for NSD, --enable-dnstap and then config in nsd.conf. - Support SO_REUSEPORT_LB in FreeBSD 12 with the reuseport: yes option in nsd.conf. - Added nsd-control changezone. nsd-control changezone name pattern allows the change of a zone pattern option without downtime for the zone, in one operation. * BUG FIXES: - Fix #4194: Zone file parser derailed by non-FQDN names in RHS of DNSSEC RRs. - Fix #4202: nsd-control delzone incorrect exit code on error. - Tab style fix to use tab for 8 spaces, from Xiaobo Liu. - Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails. This sets the msg_hdr.msg_namelen correctly after receipt. - Fix to not set GLOB_NOSORT so the nsd.conf include: files are sorted and in a predictable order. - Fix #3433: document that reconfig does not change per-zone stats.- Update to upstream release 4.1.25: * FEATURES: - nsd-control prints neater errors for file failures. * BUG FIXES: - Fix that nsec3 precompile deletion happens before the RRs of the zone are deleted. - Fix printout of accepted remote control connection for unix sockets. - Fix use_systemd typo/leftover in remote.c. - Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu. - append_trailing_slash has one implementation and is not repeated differently. - Fix coding style in nsd.c - Fix to combine the same error function into one, from Xiaobo Liu. - Fix initialisation in remote.c. - please clang analyzer and fix parse of IPSECKEY with bad gateway. - Fix nsd-checkconf fail on bad zone name. - Annotate exit functions with noreturn. - Remove unused if clause during server service startup. - Fix #4156: Fix systemd service manager state change notification When it is compiled, systemd readiness signalling is enabled. The option in nsd.conf is not used, it is ignored when read.- Update to upstream release 4.1.24: - Features * #4102: control interface via local socket * configure --enable-systemd (needs pkg-config and libsystemd) can be used to then use-systemd: yes in nsd.conf and have readiness signalling with systemd. * RFC8162 support, for record type SMIMEA. - Bug Fixes * Patch to fix openwrt for mac os build darwin detection in configure. * Fix that first control-interface determines if TLS is used. Warn when IP address interfaces are used without TLS. * #4106: Fix that stats printed from nsd-control are recast from unsigned long to unsigned (remote.c). * Fix that type CAA (and URI) in the zone file can contain dots when not in quotes. * #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM chain, NSD leniently attempts to find a working NSEC3PARAM.- Update to upstream release 4.1.23: - Fix NSD time sensitive TSIG compare vulnerability.- Update to upstream release 4.1.22: - Features: * refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal. * Use accept4 to speed up answer of TCP queries - Bug fixes: * Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. * Fix to use same condition for nsec3 hash allocation and free. - Changes in version 4.1.21: - Features: * --enable-memclean cleans up memory for use with memory checkers, eg. valgrind. * refuse-any nsd.conf option that refuses queries of type ANY. * lower memory usage for tcp connections, so tcp-count can be higher. - Bug fixes: * Fix spelling error in xfr-inspect. * Fix buffer size warnings from compiler on filename lengths.- Update to 4.1.20: + Fix memory leak in zone file read of unknown rr formatted RRs. + Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.- Own missing ownership for %_tmpfilesdir- More specfile cleanup: + Drop SysV support from package (and hence usage of fillup) + Don't redefine %_rundir + Drop useless BuildRequires on systemd-devel- Check group existence before creating it, for real. - Stop deleting users from the system, it might remove a legitimate user that nsd unfortunately shared its name with.- Create a system user, not a regular user - Check if user/group already exists and are in system range - Do not ignore return values from user/group creation - Own the config zones directory- drop insserv requires on SLE12+ and openSUSE - nsd-lintrpmrc: drop most overrides - don't install config file as sample - switch to using user/group names _nsd to match expected names as per recent rpmlint changes as not to conflict with admin created names. - update and change current owner during upgrade- update to 4.1.19 with the following bug fixes: * ignore fallthrough compiler warning in flex EOF rule. * Fix warnings emitted by clang for --enable-packed. Alignment is not a problem for x86_64, don't enable packed when the platform requires aligned access. * Fix spelling error in xfr-inspect. * Fix 3392: Fix regression in 4.1.18 for notify lists with ip4 and ip6 targets.- update to 4.1.18 - Features * xfr-inspect, it is not installed, it prints xfr files from /tmp made with 'make xfr-inspect' in the source dir. * retry timeout between sending notifies dropped from 15 to 3 sec. * NSD sends 16 notifies simultaneously. * configure --enable-packed reduces memory usage, at expense of unaligned reads. Saves about 17%. * Save memory by selectively allocate precompiled nsec3 hashes, saves about 16% memory. * make ip-transparent option work on OpenBSD. * Save about 2% memory by changing usage count size in name tree. * Fix #2871: Increase number of sockets for xfrd transfers. - Bugfixes * Fix gcc 7.1.1 warnings. * Fix writev compile warning on FreeBSD. * Fix #1446: A corrupted zone file "propagates" to good ones. * nsd-control zonestatus prints wait time between attempts, for zones that are in that waiting time. * Fix collision printout of nsec3 to print name, hash and reverse. * Fix #1567: Change crit to err log level for gettimeofday failure. Add defines for compile without syslog. * Fix crash for DS query when parent and child zones both configured in nsd.conf and parent zone has not loaded properly.- update to 4.1.17 - Features * zone parser parses type AVC (it has TXT format). * Fix #1272: use writev to put tcp length field with data for outgoing zone transfer requests. - Bugfixes * Fix potential null pointer in nsec3 adjustment tree. * Fix text format of deletes for CDS and CDNSKEY, single 0 to represent empty base64 or hex string.- update to 4.1.16 - Features * zone parser can parse acronyms for algorithms ED25519 and ED448. * Fix 1243: Option to make NSD emit really minimal responses, minimal-responses: yes in nsd.conf. - Bugfixes * Calculate new udb index after growing the array, fix from Chaofeng Liu. * Fix missing _t to _type conversion for disable-radix-tree option. * Printout serial error with hint it may be too big. * Fix 1228: OpenSSL include is not guarded with HAVE_SSL * Patch for expire state in multi-master when masters includes broken master, from Manabu Sonoda. * minor manpage fix.- update to 4.1.15 * Fix nsd-control and ipv6 only. * Squelch zone transfer error address family not supported by protocol at low verbosity levels. * Fix #1195: Fix so that NSD fails on non-compliant values for Serial. * Fix to rename _t typedefs because POSIX reserves them. * Fix that nsec3 hash collisions only reported on verbosity level 3.- update to 4.1.14 - Features * Fix #1132 for SERVFAIL zones perform backoff, and remembers the timeout on next startup. - Bugfixes * Fix null memcpy for radixtree with single link element. * Robust fix against missing master in tcp_open for xfrd. * Fix wildcards in include: config statements with chroot enabled. * suppress compile warning in lex files. * Fix to try every master once, then wait for timeout or notify. * Save backoff timeout into xfrd.state file, this file has a higher version number now. Old files are skipped silently (causes refresh) and created as new files upon exit. * Fix restart of zone transfers when new config becomes available.- fix tmpfiles-nsd.conf to point to /run instead of /var/run - add nsd-rpmlintrc to not display some bogus errors - put log files into /var/log/nsd/ - put sample config in documentation directory - update to 4.1.13 - FEATURES - multi-master-check: yes can be used to check all masters for the last version, using the higher version from the configured masters - Support RR type OPENPGPKEY from RFC 7929. - Can config key algorithms with the digest name, eg. 'sha256'. - configure --disable-radix-tree for about 15% lower memory usage. - for type SRV add A/AAAA to the additional section (if possible), just like we already do for type MX. - more extensible edns option handling. - When tcp is more than half full, use short timeout for tcp session. - Patch for {max,min}-{refresh,retry}-time - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173f - BUGFIXES - Fix compile warnings about unused result from write and strtol. and signcompare in minmax retrytime. - Fix #812: fix that make depend fails after distribution. - Fix #817: xfrd update failed loop. - Add robustness against unallocated data in nsec3 trees. - Fix README spelling error of BSD license - Fix multimaster for not tried full zone transfer for a expired zone. - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0. - Fix malformed edns query assertion failure - Fix build without IPv6, patch from Zdenek Kaspar. - Fix #783: Trying to run a root server without having configured it silently gives wrong answers. - Fix #782: Serve DS record but parent zone has no NS record. - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.- reword description and summary - add signature file and basic keyring (currently only contains signature of the released version since upstream doesn't seem to distribute a real keyring) - remove redundant nsec3 configure option which are enabled by default - remove obsolete --enable-draft-rrtypes configure- update to 4.1.10 - FEATURES: - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down. - NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size. - print notice that nsd is starting before taking off. - BUG FIXES: - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. - Fix #751: NSD fails to occlude names below a DNAME. - If set without nsd.db print "" as the default in the man pages. - Fix #755: NSD spins after a zone update and a lot of TCP queries. - Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser. - #772 Document that recvmmsg has IPv6 problems on some linux kernels.- update to 4.1.9 - Change the nsd.db file version because of nanosecond precision fix. - changes from 4.1.8 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch from Daisuke Higashi. - #739: zonefile changes when mtime is small are detected on reload, if filesystem supports precision mtime values. - RR type CSYNC (RFC7477) syntax is supported. - take advantage of arc4random_uniform if available, patch from Loganaden Velvindron. - Fix flto check for OSX clang. - Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux. - Fix #736: segfault during zone transfer. - Fix #744: Fix that NSD replies for configured but unloaded zone with SERVFAIL, not REFUSED.- update to 4.1.7 - support configure --with-dbfile="" for nodb mode by default, where there is no binary database, but nsd reads and writes zonefiles. - reuseport: no is the default, because the feature is not troublefree. - configure --enable-ratelimit-default-is-off with - -enable-ratelimit to set the default ratelimit to disabled but available in nsd.conf. - version: "string" option to set chaos version query reply string. - Fix zones updates from nsd parent event loop when there are a lot of interfaces. - portability fixes. - patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new defaults in the ssl libraries. - updated contrib/nsd.spec, from Bálint Szigeti, with new configure options. - Allocate less memory for TSIG digest. - Fix #721: Fix wrong error code (FORMERR) returned for unknown opcode. NOTIMP expected. - Fix zonec ttl mismatch printout to include more information. - Fix TCP responses when REUSEPORT is in use by turning it off. - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. - Explain rrl-slip better in documentation. - Document that ratelimit qps and slip are updated in reconfig. - Fix up defaults in manpage.- enable zone stats- update to 4.1.6 - Fix compile of zonec error message on FreeBSD. - nsd-checkconf warns for master zones with no zonefile statement. - Fix start failure when many file descriptors are in use. - The servfail rcode is not printed with a space in the middle. - fixup file descriptor fixup nicer. - print failed token for config syntax error or parse error. - Fix #711: Document that debug-mode yes is used for staying attached to the supervisor console. - Document verbosity 3 prints more information. - makedist.sh print on pgp signature creation. - Fix typo in zonec.c inside error message. - Fix #701: Fix that AD=1 set in a BADVERS response. - Fix #706: default port 53 not opened on ip4 because of getaddrinfo hints initialisation failure. - Fix #698 formatting errors and typos in nsd.8.in. - Add --enable-pie and --enable-relro-now options. - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. - Fixed checkconf test for reuseport setting. - SO_REUSEPORT does not work on FreeBSD. Enabled by default on Linux, not enabled by default on other OSes. - Fix that notify from nsd-control contains soa serial. - squelch SO_REUSEPORT failure on verbosity less than 3. - removed hardcoded interface limit, --with-max-ips removed. - SO_REUSEPORT support. - Fix #618: documented need to list ip-addresses seperately in nsd.conf if there are multiple, because the source address of replies can otherwise go wrong. - Fix that for expired zones NSD performs an AXFR and accepts newer and older serial numbers. - Document that minimal responses only minimizes responses to fit in one datagram. It does not minimize smaller responses. - Fix NSID response for short edns sizes. - Trunk contains 4.1.4 in development. - improve nsd-control usage text. (23 june - added to 4.1.3) - RFC7553 RR Type URI support. - Fix redefined macro lex warning for freebsd flex. - Fix that formerrors are ratelimited. - max-interfaces raised to 32. - removed unused defines for unofficial tsig-hmac algorithm codes. The TSIG algorithm is identified by name in the config file. - hmac sha224, sha384 and sha512 support, patch from David Gwynne. - Fix crash in zone parser for relative dname after error in origin. - Test for zone parser failures - nsd-control addzones and delzones read list of zones from stdin. - Fix task and zonestat files to be stored in a subdirectory in tmp to stop privilege elevation. - printout names for successful addition and removal with bulk command. - Fix #665: when removing subdomain, nsd does not reparse parent zone. - trunk contains 4.1.3(upcoming). - Made log message more consistent, changed 'axfr refused' log message to be more consistent with other messages. Also notify refused. - verbosity 2 logs axfr refused and notify refused. verbosity 1 contains less log messages. - Fix #654: Fix contradiction in notify logging verbosity level. - Incoming notifies have serial number logged (at verbosity 1). - Fix #655: Fix contradiction in verbosity for zone transfers. - Use reallocarray for integer overflow protection, patch submitted by Loganaden Velvindron. - Fix allocation integer overflow checks. - Fix buffer overflow in config parse of domain name, reported by John Van de Meulebrouck Brendgard. - Updated default keylength in nsd-control-setup to 3k. - Fix use after free after zonefile syntax error followed by ttl or origin directive, reported by John Van de Meulebrouck Brendgard. - Fix syntax error followed by too many TXT elements parse crash reported by John Van de Meulebrouck Brendgard. - Fix origin directive from unused old value and subdomain parser failure, reported by John Van de Meulebrouck Brendgard. - Fix b64pton out of bounds error on invalid zonefile input reported by John Van de Meulebrouck Brendgard. - Fix segfault on double origin in zone reader (thanks John Van de Meulebrouck Brendgard). - Remove dead code domain_table_iterate. - Fix segfault in zone reader on invalid input reported by John Van de Meulebrouck Brendgard. - Fix #642: Change 'zone read with no errors' to '.. with success'. Patch from Benedikt Heine.- ignore absence of the systemd-tmpfiles command- update to 4.1.1 - RFC 7344: CDS and CDNSKEY (read record types). - per zone statistics with --enable-zone-stats, config zone with zonestats: "name", zones configured with the same string are added. - Disabled use of SSLv3 in nsd-control. - nsd-checkconf -f prints out full name of pidfile (with dir). - Synthesize CNAMEs with same TTL as DNAME. - Fix that expired zones stay expired after a server restart. - Fix "xfrd_handle_ipc: bad mode" log errors when compiled with - -disable-bind8-stats. - Fix #616: retry xfer for zones with no content after command. - Fix char used as array index warnings on NetBSD. - Fix that queries for noname CH TXT are REFUSED instead of nodata. - Fixes for wildcard addition and deletion, speedup for some cases. - Fix that failure to add tcp to tcp base does not leak the socket. - Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE. - Fix spinning NSD with lots of failing transfers, due to pointer comparison using void pointer subtraction (from Otto Moerbeek). - Fix bug#637: fix that nsd.db grows limitlessly, an off by one on one megabyte free chunks, created during AXFRs of large zones, that caused the one megabyte chunk to be leaked. - Fix casts for ctype functions (from Todd Miller). - correct some hyphen-used-as-minus-sign (from Andreas Schulze) in man pages. - Fix zonesdir chroot error message.- update to 4.1.0 see /usr/share/doc/packages/NSD-4-features for the important changes/bin/sh/bin/sh/bin/sh/bin/sharmbuild01 1607174896  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS4.1.27-bp151.3.3.14.1.27-bp151.3.3.14.1.27-bp151.3.3.1 nsdnsd.confnsd.conf.samplezonesnsdnsd.servicetmpfiles.dnsd.confnsdnsd-checkconfnsd-checkzonensd-controlnsd-control-setuprcnsdnsdCREDITSChangeLogLICENSENEW-CFG-OPTIONNSD-4-featuresNSD-DATABASENSD-DIFFFILENSD-FOR-BIND-USERSREADMEREADME.iccREADME.svnRELNOTESREQUIREMENTSTESTPLANTODOUPGRADINGcoding-stylecontribREADMEbind2nsdCOPYINGChangeLogMANIFESTREADMETODObind2nsdConfig.pyKey.pyNamedConf.pyNsdConf.pyParser.pyTokenizer.pyUtils.pyZone.py__init__.pychk_versionetcbind2nsd.confinstall.shscriptsbind2nsdnsd-syncs64-mkpws64-syncset_versionsetup.pybug390.patchnsd.initnsd.servicensd.socketnsd.specnsd.zones2nsd.confnsd_munin_differences.pdfdifferences.texnsd.conf.5.gznsd-checkconf.8.gznsd-checkzone.8.gznsd-control.8.gznsd.8.gznsdixfr.dbnsd.dbxfrd.statensdnsd.log/etc//etc/nsd//run//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/nsd//usr/share/doc/packages/nsd/contrib//usr/share/doc/packages/nsd/contrib/bind2nsd//usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd//usr/share/doc/packages/nsd/contrib/bind2nsd/etc//usr/share/doc/packages/nsd/contrib/bind2nsd/scripts//usr/share/man/man5//usr/share/man/man8//var/lib//var/lib/nsd//var/log//var/log/nsd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:15253/openSUSE_Backports_SLE-15-SP1_Update/aee33069a04f4b3cb8ad7a2a13397558-nsd.openSUSE_Backports_SLE-15-SP1_Updatedrpmxz5aarch64-suse-linux         directorycannot open `/home/abuild/rpmbuild/BUILDROOT/nsd-4.1.27-bp151.3.3.1.aarch64/etc/nsd/nsd.conf' (No such file or directory)ASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=7aba0a07df748d92130e929be390a9318f560311, for GNU/Linux 3.7.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=d57b02595eaa8ff302a45c64ded6f6f10f161b8a, for GNU/Linux 3.7.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=311d628dbf89dd892f335b4604525d6fc542a514, for GNU/Linux 3.7.0, not strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=dd8b94cd966aad5cf86184a5e09e0d81b11e4d56, for GNU/Linux 3.7.0, not strippedPOSIX shell script, ASCII text executableUTF-8 Unicode textunified diff output, ASCII textPython script, ASCII text executableAlgol 68 source, ASCII textLaTeX 2e document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)empty $  R RRR R RRRR R R R R RRR R R RRR R RRRR R R R R RRRRR R RD Ʀ'a¥utf-8c177e524504ab4084a30b3a8adb01b3a17cac1c06f8425f7a5c8f4c09a2c8bdb?7zXZ !t/#U]"k%]eGT! _,hֽlL㨾3AysPv|%"'dy+-Zgg4r?S4y8DZ):F>uZX;n2süz{oMYOҭ]B z*EA D Xro. iS>"E =dTqH(w8k LU*OؠKfx蛐))Gj z8ŒVuPIiiݹjڋjµĪ:BF TJ-('U ?j7/I6+þJJd2ħG$?vf@T*'ZZ]F__Ds]2r؊ llܧ6}@uFE|l2em&l(l, W"@ȝtSx`Jys'/M]@+VDz\̴GO|VVV[k⋄fϲMN)NjFsL-''ـ_ԥOrFݖ//PRPxR@~nN?n%Z[[b"Eb?``Ri,Q R]ų43CUӝRFn&T;O炴, 5$bhvp4 @yIp~0+:RޛmqYr9%hM[QrX-%ނlE@~n1oY/ܜ,FqF1.` 9_[ F@@O.n9əu:JW⼣p0P" 1| 2gA5 aOp-) dǰ敢IB^7v.{J` 9Rn?&an"D-3:~ꫳ+{W_%,yŰnH#[1Ҹ6mڽT.{8׻Fe~f3MXUzJ,GYW>W0슎XH\SDq-eS\\6ÒeK}8v!-GM{5!祁{wFY᥾\{(@*j5u3bӧYHJDJ{&o% G|Yp+Xz2ZЇIt~ZT m$. ZJ8m)bS2& Em bF=ڽ1̫YkzEtTM$qʳ~o;XJ; U,]M.eGi5xi)ɊI]DFJED:Zl >j(Qw9] RYg"6kP\"1c{N6dMQ@˦]sr~w a$\LCoFpyG4]g=#G/NUy_S׽d;wC,oqxK,tv7jXX#xNU;]U|+1} ޚGK}]F%N}P!k~bCOiK^\YW $kef 'O/4أ~8[x(֝ #ypL..VuOoP_<gOfC$RfD~pQmq xH}#L}4"?jBgOy&X:7ںrPh=CC^z/ap8Θ%:?c$[~VjCN&7˖؋r6k_a6 :Ѡ=ٙ~!P$ҠW Ս 6A~>|Uh$1f|e%[G,YPtFrc"t,Cl/@zԜ2JW'ilKYW?_b&ߵȜSGъ菎~^q -YG 5Fumse<:IbX;N&`1YUJ|{G=&GiP~J[NѠX8l/[܇+gl3bE$ |4x% S3vǼ /8:-=_ƭ4Lu>/׍þ8ȂME wVkZW_Y'l 0cG|^JgQRE3Ћ=,,z*KFul@pǦ+6_ pm<}:{;rs`]B2J&ѵ1c7 kyX\]cz(On=6 >-wCiyuot k[#HíLPkވ΋yIE߀ A|6 YN >ɞz鈨'klJZ1w[z_OB+J5}gFstY K>qQPWCwQ:nLR?dN{@୮]"`-b캎oRrwHԆcJf\-;ouxOo9{~"]s,}4$+iJZnYϕ`P!kH>hԨU?8JG 1MwB Q;Ѧ))~dE=-\ J5~e}Iu&5nSzi#)걄[ 0=&LfɚPo M5X>uPllw>K2v q(Xd׽i"yM}ZᄾTF8O*|64 s׏b#> MS?v/)ud8cB^I,OvO;vC3{[Gҽۣ=6#bђzR27m.p ߖ+FṒ5eIBB /^nzFu/ |!Yz '@z Ms5"4WԲJHIU6]AhC߷hcuJ!X$~3ꪵrȱJkYr>eǛht_HLJr'HصQ^'qɝn"/7_Kra^zᅅKX^WޔЕQ b HCmZ<]Q*gk0y#7RMnT?Q!;hyD|r" ;og2 C r Vx R ^=8B/36uD/a= I6˗g#Ӣ39jAґH+ONk0pf-16tCvuBGjڢ₴ҥ eL5&2J#G{8paR5G˵LJB+%2oᮡy [/O$O5#Џq;#Hm{*ӧt.݉,C_0^j3٫bJ`kƘgpNVQ[]P׿[NVMVw dufش8_K@$Fcm-߆.[),f}vf3RQu_52=3'M(]ރiHێc)9_NQӍX^yNZ6( $6='Fs¹L_GL1៣~OTsLҭO.gr m7I{>Q O;~ [$n h5Hv5P (d]PCQ:۠䉼zϵ:_ -H);p'M@?}8Z|ވEy3?[fci_C@`Sߘ"-FBx4 VO)U9Ku~HK>&z2萙d5NG$>q']4Vù 8TM5\ [n3g˼ A,Uތ)k ~@@kp G-rqJO+r&c,kW.hP#V`_ܞy9#- Т.Y,TI?Te?A 92fw{ySRQLZc(𓡨,K#`~8(D>Uv$YC =_2Yִ7؝n?ep2dSL䡦(ͳ="b$ؠTv'b#8x]xs~4q uң:;,yH@  ;zB47k+m|`Pl7a꭬#U}Hc#RBO[Mv( Jz_mbΡP/IԜ ƒ℁_-iT(Z-MtR\ܕ'M?>L@m^Eɺԋ,qhrM' 2΂k xo(77i'Lĭj}8n R1>#.<<rMmUzTӖSI;~T9sYxO LId@Cʄ}g p<ق%aP[/5a HX\\},mՅCܚam vFfr՗c*K#`+TmJGtk!skv/*^T_ vo$sS!$O RTmFtc(]>Hz6z~D.?fyVRGzb4RH1C3A0. ~<sٹfj]>o,]fs4 Zxc S1r_;.5@9 1jJ(mqv2u\ v$Pj883'd7l$G/;,@!VWJuNP-y\XI||fx/?^gߣ9.I= 7ջӕhJùBnc7/%~LfR\׊zM$3eLھꀁȗF%je::edzmXK`Iua.A#4)cHJ"!2iNpS<(/(n`]Dk`":}f6?rG[R%40gKjWj7AEO,õ#6 (5jD~eݶTVώj5KtNbv\(h Hg'a])TX]s.Jrh6B>yo,sYs§ʐ2n7fw )&hsnS8Ui ܢN%$\D"ucx|\\Lhۺ)NFJa.u[U !woKʭT:@rJ= /IQT?+ VB$"O-z?3/?jK8dQF10W4k620QuHh ͓p2A LҞO}M yInO4Lٱ^M2-Щ+>BvUo%Z%.(li/=By=XC1pv\SQx|?Ҩغz!T`s,$&9R9JΛCsL97XAfaN{CkAUv7 D1g' *c#X0g;~~?9_yWԵ 2  Y^Y<9q/]{+XO>{@]9|' W. h`mJI0NHS;.OWX&)IS8EƶTSR3 !R[}MZ3@pۘV&:*ȕ="\f!.s (tJA}gmקU_|qq@+wO=Bbi# ,VBJT/ '9r .Q7>&G~\~N+\x#G9xQC, 'vkPIsP2 s!#lLCzn*фZggo^*øqLkTCh|0P9+_fKϚՂnAeMR݁h|B߹P=8Ӛc~!HmIVRQ4H9ig1ϸ[PδN9gM\)ڴ!t[dh; 17(@zA1޶nQƂ,-%tfG ^I,d`C9xq<6%|ke(MJKsku!1L`cYtn<ޗP XɇzM]s&TtJ^"9Jyk*rT%C8fNus(߉05²@'[S }NJJ3XT5g,^# m5IJyϳGfc;?D(EJg"ԅxT@]{ָP @iI)1v7f%96h:t<9od}vno9+ƺ #r&WǰÂT5h I&;'?S},&zc*xDݾy6;V5]G}i CBN1 &6l4$[.Qx^sTՕBK.aRYk_[B{s>ymT/cAfY{kR-e9T)0 YϮW~,7_<]qҾtSTnDW\HJgV>ҲN-G9cP07s`Uh^Zu_[ ∽%뵴1 iNN5L\?IsOX&.e >1fi2,tgu?:v0FCb6q~;}1|p[0e6~kA$z" ƹ=2BPq uF{nϳ_n>jT-)Y#l[g-mn\L\YUս^|j~|Z,,U=W=p8*W =XC&_B={€,(6Z]F NB7 `dC MEvmwaDj0ػ_@5287@Fe5.Uƞ'*7ʄaՆI(h]WWa,= 䙴mXJzuJxzMyc?3 H<VIg؎JBEgg0ɤc eSD&$h3EJ*fof0'Rz\VXNߨ}w.xTmu'9T4ʧn_ )|Գ7tƋR|=g۱udr7? r荗 b:ǀ_ifN[#A|zYcfJ\{Sh-^U0l+|vX$ԉTD堀|O0aY؞V=Ŀ[~CYdaī^X5τr)`HE ]RDA2n1^< pn9Q?X^Щ0G XAG4J25lNpKDZ19CA7["|BF5 Juu ?^gΎ (A[L24[,Nl*ˇ33N߷'?Ly~a5#%uC9=R*u,ŋ/@M]2m玣71^s-T$Ėj}zѢDc]!5!&dap,͊Ga{Oai2ʜWpu!kV6<Yj;-r@O.џBE(@4IIqu: }N&ؖ^ΎyYVL.fu;ꔗv4v]Ӛض{;\2:~45T䩾tl%H^2) Jr  TIQkBȇ@[@r I$F}' :vV __lJYG`π08Ma.w#F+iR ]ݺ4~7>y hH 5;j 4ez Q*h|E B15>aDP P_*Z!yb =Dx# RwԔ;Cz_챘KTrK][͐'x'{;ɪ|;}a];;@.NTRGr+T2gϚ!g?n\ϗ9N#l "mv'mt[j 'Ŋs.YZ$h' i lA$CoƧB8|G^?H"$s5]xLqT jeq O'ULq##AIKd769`ŲM aϕrYI͆D:p߻a7vlf]9.S.f|nqx7x l.tJTYow_!_Slunl ,?UM9!4NI*|4+;0!t!cބ%IoI}~,XryQyHO0 Kyetu5zcft:r0XEj@:2jE8D=;xhVk0g4hq:TZ!xM~Ks<ڏy 3`Y~ٙNJ)m)r|:ࣂ}hé^pj'*^5_Oۓ=7Nč"H,1 Pdx e9yS*u5VtM׺l|x`2TO}P#ۣrQR1 95D|8q}x9^j:ǃ 2 W KS܈N|2JL頹'A|uWU[ ؊WbYXJm۪) \^CP,a3&oxs7LzeFK#}nsTi@hU,?_gvei5E[4FR+{ʸ o` Nq/_ d2nʡFw:K`RCk=`19"9-uGHW[Kff>D9K ^l`SX7,;*\DŽ򤜲_ '()1>ጰ1Ayіfz>a{G# 8waݥrޢYe/Sql pThhQCmmN<5}2 Dw?n޻,ZdCèSb ]!YWwUA"oof+PO11"=(4ٝk~lE~nhBx*:Qw 11=P9VZP-%BcXH;ߖw!i~Xr^]9y?5oVVo;&qlC:-pk^Tڽ(1|A5pQF "]r:=wuKgiòpBqZĵ T*>ؑvrPIJd[Q7d2.eКC1(∬'1s4]|>uUu\yysd5|mfs\ze&-z3qޘ`xq7Na sBΔYQ1m4e3N2Tl<ÄNDo-k,Ү'i=s/QWָ\Q\S=\@j>Iw6{6mU` 5`K0MO4bͱ`|Ũ X^"<ˍo5jN 9R) Ulz3;Cw!i7?]]|eKzK)rZLގ J]Sm b s"zjAЉD-hŮ& ƆE4p)m=J۶&"lK?ޞ[9P,Ʃ@<5"lڼTǝ\`yʠB7yf&'ru47Fڣ[#/G( w8ַ,.f&Q:%Fnf{fމHSjpKWfCċWFp^42#AJWT: #uUq71~r+;)x|5c4E oOIr}o3m8`Nl޺G2YBOto{!jZ6G?J,r=M$:Gwmp]sx&} 1O'£JEsl6,立/,a[pMR wF-Y@%C`ke҆H?o#9Csc9 |C, !JybgǁG[=KOB.՜{^[HajX qgla(L|;VG(Ѣc÷2OOסs/6mWkbPPM][k-znAҮ( *T} @K]̭vk,苐~Y7]+cmſ gy W!˰QIU}Hf9B0=nBŦqds29eJ^_"CFNGjY9za鮋85J""RvU[k%'X!R砷l[@·‘ӘunpozoUyK`OU,ѫ^{Fq+H/y 龙h<ĴfB%y,=!nˆ3 9O* A̺tw#ɑt#Ͽ”iK[aS£2| Pkh|@mА̕Xlavk/+Gw}.֨ҼBO?eܿQOUV͈Ӹt @{^@$]_{= rA r4.ը1`v~ VttN8щ 4j)8orٲz1dՅMZDFSk=f@'X?K66 /<. !C?`O*岴sgJsJIۂ+Э7cYJ8!1iʲ'TlXg5!78m@0o$ |$Qn佢bQ *?ѝ~~-\w3UtACcg`O=YdpV&*W1DjkvC% pꮙ8?8Ə1 r1G8@&4PE:fL$`- oC1@`ۨUB 2"8D\~èαLUnw+!d'\TPazH9J @_pE)S=~tli뀆C5vGNw ȋuE~ÈBxLɆ wy|`&ePKII+,mJVn&# +GՊ$}gW4pyhOȚkyV\Ҭf)h‰1\g?YOB%o}[K+8fg0IJ׫waL ZOì,"jfcYrYhf`PEm8GͭiZ _eNT'I(n4.b=y piPI"lX)&OVÃXO(gȟn-;z<)cT0T#Kw LnGEǶ%[A}|L(%.^XhG=C >i )1oj?p$QqgR-%RCc0b JXc)ՁS7z(m@\{N%e:Nw/(H`){d5JSm4\+S VHaRu=6_nRJ$Hb[qu>\M#♯MC(_gfmĢ#\/Ri51_)S3 Hf+h7@E#EvX%厢 @)92w\ΘUa*)ǨS!4,2{xՠ Oji F{R6'pvEom0-:wZgE}#xcu3_'n!.m&!nHơeSMn3_2@ȥ UtJU}fFe%/.Kry9:٬ψQ)Yy -vqAO|I@6CRE6p3KP+r"; #v_gr;Dm3E Kj3^Lw5 [}R7vL vjHJZxptߨSp%S絅m0hpBt讍7s4-e܌TbubuKJJ)*r q;ڍzoRE˧~V\K־@qVE\[]qX[A P/Ӡ@+p"F)Mwȼtq;z4/S<|%n=,=U $˃aSHG҃}&>{beqJnɅmxp4 Duœ^O LOeڝ+EQ1`yu~(\BkZt$,`:N'L cPLue HWVD.15c@x dd]v8C Ǘj0o$Yꍚ| e@ǽHE"yeeS$ v ]Ү|bgݾ!r64 nx(gL7 iePYV*GEa^fSR@V2a~Ȱ@lp&O% 2@cb7w!bٴ{u6-Cs/4<)Zsץ?P䦖0ăAa\N솩.)п&.+uqX]RY(y1Or "6*op7$JIƨkG ćF D"I4:|EZN܏YxJ09Q&tY^6hƷXSV\| = |I* 79# E )g-u#\8>DœXG7ֈ@X\ `x&L"P~˷20<"^7b=&D:ՀL_O"QWiFWW0dK//+-9M.V޳Zʸ<M5ɬTm&tdMqS{haP g?zAk=]} #5}D! l]q$lͿ6 }wq8@EE35hK6:вcYI"Ig񔝭bjlDkDeK꾭݀ ā !bw!b؜6]&0)< Ӱ^}]DPnNs>2`VH Zb^d&jb:I[d.' SQ3d{1酳[d4 L{s>֝ί\U4xTw"yߖ<ѧ,&|Rk/L@XSlo~km` d䀪gMW}_YIHabZN¦^=[kϤ'\:=:BVP/v€M?S_0m9?êE~AppG_Z#ơ!c m;~QlŧCn]icV)_a.)6N&Rpuz~1IPeloԔyebtwmBxҺc_j+ר$a)x7d)[h`Vpon%F$G|/O/@#n<^sl\_*@yG1~,А3tid(kCR͡1܀`HH 'HYpycxOz0_h$@Qzn8- ?#UD1*,}x /M86)_5xt]dԱ0{E:oPB0͂r9Av7 kuLr~)YG] q~g6*懁DJ`r[9+,]UI惴6(![ܷ3E C^qWXʪ7hijh 7>lB нV?#r-;'I龸BHJ_ W^`$@\ǭ:^#n?Bc)a` $$/6ȖTZ X3-Lz rL,PE2X0x߷월ITbhf{PGTŌ8FOAp q3TfA4<gY-iLxyԠ$Pf^'.9'c+d2И8OM,WWتt0|~U~;֦ W C~weEn19:bMŠec3Bdv^`Ul]f-fYtpDdt Y/r&;>R`XJ$F.;g:w2c)6}z c+(\=h\=G;5SqWʾ̚,Y7fZ%(-m:W30siAW\OHdZ5ٱJT/"k-!Ӳ,_9szaU4ps"oN̘:A_fHgtQG _Z7Lal CXZMшY} #zҝO,jT¦z'J,t>xzʣ]Oέ?=;'k` m ݺ8vJ=YB!J*0ۺ>[jIv$5Yx nC3}*zokӥݏ2ЮIa>`=0-BCM, H2-6Q6`NYxWrrN LCIFrz60VeNeu`F)MTlls`yFr&HƺA:plesQkc à(!!i@Ht % Ӥ7*=p"JɆe&%uU8FS#6 oXCiLSM4 ߜ{lM^=)nb 5íR'r{>e3=8q94 ibI a5Fm<^րN:tO2. ]ZkqCK/W(v\TܿdFȑX4 Yu%*H9= ퟚ4WekmFnKBV˷%+֖ѥ|@FoR|01/eҕgM>Js3#:lr9"^/prjx#ї>^Hq_n"9xgCj't坲V$`YV܋|ҙ6hk7(#.<"D 4,bG @SH썥'W wXh}|AK9 *r%&NycZ BL.4IW9t"Sx2{y֧5,mS(] bE0o} H.J; K| Nc\ѝ\Ԗ>vzc$P$qp.~"QqoktbG2.#,ULshŗT?9;ddp%gLoW)v@H;⋚RZmS^7~O@y)& :TFFnF#jGoI퀲FaGhWUTOt IbC.йA,g$eFerC0+ڪ2܂(Ј$aJ!Jzߞsd1HWKIpkk/|A o8K#6dkSv\Xs^Puk֠/:ƣmc6 Gw7k$P u3{aŏ6y SE#f@:}E<'SDDFly樏cޔ@Cb}[!UYKDYDl'xxGIpykY6h|7RU /LwV¡6A/v6p6]YNZ,z!i @d-{7zXI]J >_#1fpaG7Lh;'Y%m bZv">$>s^1ꥂXѕ=5b6!E3CifbZzu>>>V[txCff9Wձk2AJ|-Wwop:}d7sqews+{̻o}L?_]>f ^w@*g'y9hepc$]Eo7lY&lfAhA$yTOv0p,)0zq L06<"2o {؟ꕌHw^u\#N81]&(BKxL,.ԁ\+%W8ӎVBK蝌kxϦ<Β'Be졖ޢ n{ R\sUQNr`V6i,_׾oƱ}(o͉Ѭ갈Q(-XiuՉ QM`ղZ?yݕ~ rwHfe@Z&P^YcM0%=n؎<+fZ-T{wX /:(.c̔gW7I¬SS8Af'EI=/{”ʫkv*`ݤf_qL/Lh#&Nr~}%dv,Up&>ItH^N?6QKB";!U$ Hj%hـ$^R ^/0 k>GU(x aaڑjWn9vD2.~y:7^Rzlmvd8,ջ5~X+&M<'pO,wŹob&`I?#]fWwJW>VPn 1 z R+=gT d7ޞ *iyeU}}@ bQ&R9q,31"ۦUFre٬эI+[ ~&h: \W{?tvqRPz=Q1V,Eݪ 0y?:;Ga>xsAwa(Y|װnHC>BدU2늸#[`![Fکs@n[Y~dd5: _eRT!,hIbyP$x.BĚwgaǫlJcF{()5S (Wh,@~ כ~7&y•r_N4P1d(Q4_z@&4>M|Ο";_v(1iT%h55+rǑVCR"I3o-S kcc.0V̸?܆'eU*1}mTludvql[rIazdpc;8eЕ>;r6e :᲎>#ۗ^s){aԢ$uy\Knw?rL).?YX(/ReN7읳qds$G4:zC=G\YAuf?|*2&~ųXqw \ 7@{P#|ث2;?.zm|tw`oZ'-"Zܲݬbe,yvOmKD6Tی!@nhy*q _K xIuL;5v'fH H/d;7;1HppC57 {F@{;t{ @2mϤwdDž.3վSDh[1gyYKGG:zu2VCjGNVZ\](𤀞"18ޠIV6{@,k¿)40ȿx.юN0 !UDt#4ޚ̊,oEܞ_aQɧ沮(F;(n9R,=q!q  W"] 1]z ʘ5ܒq .N ^,=vY̴חrgtG``d(gljxQ)yqf.H؃ W̯~ʡ/ţ@ .`eAċj@WĊU+qG#c8Ul470r-7KNGi`MrMdg #NqHԝKf X\cP'm "Ըk:PHƯC'9^+i΢gm|T&,svl&ze1'#C7͈q/ R.l`CJF}2UW%q.lyZ:^ٰby\I$nrwDYXx! C`lXdSlõ6;PWxW Rm|; Ծn+#-1># DDeCN6"R`ZnXygț= R+@Iͭ%$+paDlSsŨ>Zeߝy??63$o5f4Ͻ?MOjPa{VVpV/T)y|r~5FN0#%kY ~?D}[-;^-Jt¿ޯUIeGK&p'˼OA)*[Ql(qF\% ]9EՈj{de5rr5:BR;<;!t8qn$7qzTNe?9'^<}ujYZYem[ǗJ-yĤ%n+3?N l${%HְU#Tr3w^eS)9ƌnٟ*“af4N<&Vlanv=O) u5lGk7=PJV3s6- 5܌n7 ^o㚖#;L[@f6MD&^QcsT.[ȋ:EgJp:EQ|E>7 DV1xJ-FΊe!3fe+c`LHT-l37^BNw%s7շB>3#ѧw LZq;@k--H籏t~u:U&cW^ݒ6<1$Q")vmLXH>cg\ :p]f" +ޥ[_i9|4pDl=",ĝqH,圡D7iN!In"-:֒Oƀqɾ"ae~GHH9*yMfA.v<Ӂ"yH },`:3+l}3 FXcI6g̘N vYDa[$ u1~t?i"<ѽptN1X=G }-~ }f5qa2kjQ2AP_e$U2}>ςxO`TlKL ڛDT&"]P)Xʋ#_7Ĕ&'XHI}eOBw0@w>_oR8!2%JkztA( NZqW % 3sfy'v7LIk$9Oi)m=/P"~ӵ.CF+Z#6DSdLXJy툟x-Әn)ZZv &3ɬa7N-X8m{^;!gpDN&™[D2zQ(*uxÇP)n1[/͵'ðLq"J2~g@guo( 5W8t~.+ R)ZsP&UYTյQC1T~3c Qzz(х_Ѓ`\ƭClzP\ޭ߆C#zSe\Plhrr {RQ((bA9 D6av: 39.}"\oL:zVve7Ԭgf0rb[XĿ]NTa{+x Jlr5~0̩ xǾGfTOiizA 4 ;WݿP\e26h9F ڜPKP\fDB8PeNJVU*-m4I8q4<$=pD<(D. "o7RNS;q[ZtJ2ԞcOrWw4N\`g8 f#_4Hs)33CB!9^}; unCcASPX2?x4(]*8.PVrܑyѺ@'.ǔP xmq*K;9Zm6#gw;jK@+l}Rq)si8 a`(>>?Z";(c+*^ҩZBpotPoO. :׻c݇o1]R~@92Ê"8SAWTZb:|oI'bo/іI//]IiїTϥ.#`oYe:hidʧ (˗2F(J 8To ³"Iv&~E: I(jit^;3VG ChG-;9R8})Et@ eGUn!dVCwXTks;0F߫6,q[\ڝ(1]Itg#C cs$f{6X 8s#u;A1J-ct$93ihj ߱t-* V|ybsk<]fIyZ qleql=x ᗘWDjGs%Xu9 t!|vq|Htڤ>͏&#jFZ(H8lx9wSІ-:D_qj򟙯<{4*`vVet*\b{s98Ϥ-w^rp@ΕWyʩS["gL੗ot۳t˫:GVotjV).-aܾ$fŋ }n$``'y=Ͽ5A+bTh 8}uDvP FceP[unK懱OHu\BLDqN!]GLAQ>3}t^i9nOZ㼇 #d):$$ Yω]2a1*L+m]7K^MpxFqő*I 1Pj-68.r=R˷\W(.ZȨAC:qp@{|{فXA,nX$Rz,sJ+x`!elyM@&? CG42lȘp ZAH5jd^ $ 1{ʡZB1DA-1T.,nPuSFl~ N"9~/[DutE7yqbEa]iW/t~c2RzX#GZZU䵽-J 䌦GiK5`^-N٠<#f3֙CYbХ>46 l\$oȢFMlw9[{U'aNRm/]U ӽP Pt~ab r{VOLA@ёxF 4<dH]pp"殂VΏj8Y!uFYТ'읜;E3urڍ_ӂ#Xkv/+~RI";"LJ[j,.$$a߯ } iHJ5ү.Xy̏lŏQg\׉udB{ˍ.pr>pGG>i/Y9nlzP5g`R;Ih-CM8׍s/e\?KK- Muf(vHKȻ7dk)\Rěmz,2:l9v(GR˰?V;>,ʚF5zOærмer~6Q 0&c̢UwB!<.2hH1*Օgy XكN04x_$+}ZpE3NhN* ?ʘU&O_`iV`ʃfH'{v OloQT 3ʊ8Vni YZ