pdns-4.1.8-bp151.3.9.2<>,8_lL!M@eeejrP.PXwiuy0IagB0;@a4(7 IDfԺ4/'{Z4(֒=€;w?-5L T S = =.): N!_;HMkI.9(-9WEtI/r/ZgyIً։7iڜ>rJ`]SRps\-b!N tV~qbբS9Jrqb)i>F|?ld   7+ Dhg  9l9 9 P9 49 "9 #09$9%19&N&p9'T'2(2-2(.8.29.2:3@2=~F>~N?~V@~^F~fG~9Hd9IH9XY\9]9^T bcdCeHfKlMu`9vDw9x9yz  &hCpdns4.1.8bp151.3.9.2Authoritative-only nameserverThe PowerDNS Nameserver is a authoritative-only nameserver. It conforms to contemporary DNS standards documents. Furthermore, PowerDNS interfaces with almost any database._lLobs-power8-05ܼSUSE Linux Enterprise 15openSUSEGPL-2.0-onlyhttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttps://www.powerdns.com/linuxppc64legetent group pdns >/dev/null || /usr/sbin/groupadd -r pdns getent passwd pdns >/dev/null || \ /usr/sbin/useradd -g pdns -s /bin/false -r -c "pdns" -d %{home} pdns test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in pdns.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in pdns.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-pdns-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-pdns-update-$service-new-in-upgrade" fi done for service in pdns.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset pdns.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in pdns.service ; do if [ ! -e "/run/rpm-pdns-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-pdns-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in pdns.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pdns.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pdns.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pdns.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pdns.service ) || : fi fi? H @ @ H X H H H   H H 8 0 0*  8 8 8 @ @j~0E +FJ /Hb^n_hc큤AA큤_l_lA_lA_lB_lB_lB_lA_lA_lB_lA_lB_lB_lA_lB_lB_lB_lA_lB_lB_lB_lB_lB_l_l_l_lB_lB_lB_lB_lC_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_l_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-4.1.8-bp151.3.9.2.src.rpmconfig(pdns)libbindbackend.so()(64bit)libpipebackend.so()(64bit)librandombackend.so()(64bit)pdnspdns(ppc-64) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/shconfig(pdns)libboost_program_options.so.1.66.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)liblua5.3.so.5()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libp11-kit.so.0()(64bit)libprotobuf.so.15()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)libsodium.so.23()(64bit)libsqlite3.so.0()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(CXXABI_1.3.1)(64bit)libstdc++.so.6(CXXABI_1.3.3)(64bit)libstdc++.so.6(CXXABI_1.3.5)(64bit)libstdc++.so.6(CXXABI_1.3.8)(64bit)libstdc++.so.6(CXXABI_1.3.9)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libstdc++.so.6(GLIBCXX_3.4.11)(64bit)libstdc++.so.6(GLIBCXX_3.4.14)(64bit)libstdc++.so.6(GLIBCXX_3.4.15)(64bit)libstdc++.so.6(GLIBCXX_3.4.18)(64bit)libstdc++.so.6(GLIBCXX_3.4.20)(64bit)libstdc++.so.6(GLIBCXX_3.4.21)(64bit)libstdc++.so.6(GLIBCXX_3.4.22)(64bit)libstdc++.so.6(GLIBCXX_3.4.9)(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)pdns-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd4.1.8-bp151.3.9.23.0.4-14.6.0-14.0-15.2-14.14.1_k8^%@^`]A\@\@\@\[[[@ZZZЛZZZ@Z@YeYY5Y}@YMYMXDX@X~@Xx@Xx@XN@WW@WJVV8UUv@U>$U8TPTи@Tи@Tи@Tto@Ta@T_W@TR(@TO@TO@TO@Adam Majer Adam Majer Vítězslav Čížek Adam Majer Michael Ströder Michael Ströder Michael Ströder Dirk Mueller Michael Ströder amajer@suse.commichael@stroeder.comkbabioch@suse.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.demrueckert@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.devcizek@suse.comwr@rosenauer.orgmichael@stroeder.commichael@stroeder.commrueckert@suse.deadam.majer@suse.demichael@stroeder.comadam.majer@suse.deadam.majer@suse.dedimstar@opensuse.orgmichael@stroeder.commrueckert@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.comLed michael@stroeder.commrueckert@suse.demrueckert@suse.demrueckert@suse.de- CVE-2020-17482.patch: fixed an error that can result in leaking of uninitialised memory through crafted zone records (CVE-2020-17482, bsc#1176535)- pdns_maxmind.patch: backport support for MaxMindDB- Build with libmaxminddb instead of the obsolete GeoIP (bsc#1156196)- CVE-2019-10162.patch: fixes a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (bsc#1138582, CVE-2019-10162) - CVE-2019-10163.patch: fixes a denial of service of slave server when an authorized master server sends large number of NOTIFY messages (bsc#1138582, CVE-2019-10163) - CVE-2019-10203.patch: update postgresql schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (bsc#1142810, CVE-2019-10203) To fix the issue, run the following command against your PostgreSQL pdns database: ALTER TABLE domains ALTER notified_serial TYPE bigint USING CASE WHEN notified_serial >= 0 THEN notified_serial::bigint END;- Update to 4.1.8 * #7604: Correctly interpret an empty AXFR response to an IXFR query, * #7610: Fix replying from ANY address for non-standard port, * #7609: Fix rectify for ENT records in narrow zones, * #7607: Do not compress the root, * #7608: Fix dot stripping in `setcontent()`, * #7605: Fix invalid SOA record in MySQL which prevented the authoritative server from starting, * #7603: Prevent leak of file descriptor if running out of ports for incoming AXFR, * #7602: Fix API search failed with “Commands out of sync; you can’t run this command now”, * #7509: Plug `mysql_thread_init` memory leak, * #7567: EL6: fix `CXXFLAGS` to build with compiler optimizations.- Update to 4.1.7 with a security fix: * Insufficient validation in the HTTP remote backend (bsc#1129734, CVE-2019-3871)- Update to 4.1.6 * Prevent more than one CNAME/SOA record in the same RRset- adjust buildrequires for mariadb 10.2.x on SLES- Update to 4.1.5 * Improvements - Apply alias scopemask after chasing - Release memory in case of error in the openssl ecdsa constructor - Switch to devtoolset 7 for el6 * Bug Fixes - Crafted zone record can cause a denial of service (bsc#1114157, CVE-2018-10851) - Packet cache pollution via crafted query (bsc#1114169, CVE-2018-14626) - Fix compilation with libressl 2.7.0+ - Actually truncate truncated responses- Update to 4.1.4 - Improvements * #6590: Fix warnings reported by gcc 8.1.0. * #6632, #6844, #6842, #6848: Make the gmysql backend future-proof * #6685, #6686: Initialize some missed qtypes. - Bug Fixes * #6780: Avoid concurrent records/comments iteration from running out of sync. * #6816: Fix a crash in the API when adding records. * #4457, #6691: pdns_control notify: handle slave without renotify properly. * #6736, #6738: Reset the TSIG state between queries. * #6857: Remove SOA-check backoff on incoming notify and fix lock handling. * #6858: Fix an issue where updating a record via DNS-UPDATE in a child zone that also exists in the parent zone, we would incorrectly apply the update to the parent zone. * #6676, #6677: Geoipbackend: check geoip_id_by_addr_gl and geoip_id_by_addr_v6_gl return value. (Aki Tuomi)- Use HTTPS links in .spec file like mentioned in PowerDNS announcements - removed obsolete 6370.patch - Update to 4.1.3 - Improvements * #6239, #6559: pdnsutil: use new domain in b2bmigrate (Aki Tuomi) * #6130: Update copyright years to 2018 (Matt Nordhoff) * #6312, #6545: Lower ‘packet too short’ loglevel - Bug Fixes * #6441, #6614: Restrict creation of OPT and TSIG RRsets * #6228, #6370: Fix handling of user-defined axfr filters return values * #6584, #6585, #6608: Prevent the GeoIP backend from copying NetMaskTrees around, fixes slow-downs in certain configurations (Aki Tuomi) * #6654, #6659: Ensure alias answers over TCP have correct name- Update to 4.1.2 - Improvements * API: increase serial after dnssec related updates * Auth: lower ‘packet too short’ loglevel * Make check-zone error on rows that have content but shouldn’t * Auth: avoid an isane amount of new backend connections during an axfr * Report unparseable data in stoul invalid_argument exception * Backport: recheck serial when axfr is done * Backport: add tcp support for alias - Bug Fixes * Auth: allocate new statements after reconnecting to postgresql * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer) * Rather than crash, sheepishly report no file/linenum * Document undocumented config vars * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate - misc * Move includes around to avoid boost L conflict * Backport: update edns option code list * Auth: link dnspcap2protobuf against librt when needed * Fix a warning on botan >= 2.5.0 * Auth 4.1.x: unbreak build * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)- add patch for upstream issue #6228 https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch- geoip not available on SLE15 but protobuf support is available.- Update to version 4.1.1: bug-fix only release, with fixes to the LDAP and MySQL backends, the pdnsutil tool, and PDNS internals- Update to version 4.1.0: + Recursor passthrough removal. Migration plans for users of recursor passthrough are in documentation and available at, https://doc.powerdns.com/authoritative/guides/recursion.html + Improved performance: 4x speedup in some scenarios + Crypto API: DNSSEC fully configurable via RESTful API + Database: enhanced reconnection logic solving problems associated with idle disonnection from database servers. + Documentation improvements + Support for TCP Fast Open + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK - pkgconfig(krb5) is now always required for building LDAP backend - pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed- package schema files in ldap subpackage- Update to version 4.0.5: + fixes CVE-2017-15091: Missing check on API operations + Bindbackend: do not corrupt data supplied by other backends in getAllDomains + For create-slave-zone, actually add all slaves, and not only first n times + Check return value for all getTSIGKey calls. + Publish inactive KSK/CSK as CDNSKEY/CDS + Treat requestor’s payload size lower than 512 as equal to 512 + Correctly purge entries from the caches after a transfer + LuaWrapper: Allow embedded NULs in strings received from Lua + Stubresolver: Use only recursor setting if given + mydnsbackend: Add getAllDomains + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace + gpgsql: make statement names actually unique + API: prevent sending nameservers list and zone-level NS in rrsets- Ensure descriptions are neutral. Remove ineffective --with-pic. - Do not ignore errors from useradd. - Trim idempotent %if..%endif around %package.- Added pdns.keyring linked from https://dnsdist.org/install.html- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322) * upstream support for Botan was dropped in favor of OpenSSL, see https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released- This makes the schema fit storage requirements of various mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch - preset uid and gid in configuration- fixed use of pdns_protobuf- update to 4.0.4 - fixes ed25519 signer. This signer hashed the message before signing, resulting in unverifiable signatures. - send a notification to all slave servers after every dnsupdate for complete list of changes, see https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/- added pdns-4.0.3_allow_dacoverride_in_capset.patch: Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3 backend- use individual libboost-*-devel packages instead of boost-devel- update to 4.0.3 which obsoletes b854d9f.diff- b854d9f.diff: revert upstream change that caused a regression with multiple-backends- update to 4.0.2: The following security issues were fixed: - 2016-02: Crafted queries can cause abnormal CPU usage (CVE-2016-7068, boo#1018326) - 2016-03: Denial of service via the web server (CVE-2016-7072, boo#1018327) - 2016-04: Insufficient validation of TSIG signatures (CVE-2016-7073, CVE-2016-7074, boo#1018328) - 2016-05: Crafted zone record can cause a denial of service (CVE-2016-2120, boo#1018329) For complete changelog, see https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-daemon): these libs were merged in systemd 209 times. The build system is capable of finding either one.- update to 4.0.1 Bug fixes - #4126 Wait for the connection to the carbon server to be established - #4206 Don't try to deallocate empty PG statements - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer) - #4252 Don't include bind files if length <= 2 or > sizeof(filename) - #4255 Catch runtime_error when parsing a broken MNAME Improvements - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi) - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler) - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler) - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo) - #4192 dnsreplay: Only add Client Subnet stamp when asked - #4250 Use toLogString() for ringAccount (Kees Monshouwer) Additions - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172) - #4142 Add used filedescriptor statistic (Kees Monshouwer)- update to 4.0.0 https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released/ https://blog.powerdns.com/2016/07/11/welcome-to-powerdns-4-0-0/ - packaging changes: - remotebackend split out now - enabled experimental_gss_tsig support - enabled protobuf based stats support - no more xdb and lmdb backend - added odbc backend where supported - drop pdns-3.4.0-no_date_time.patch: replaced with - -enable-reproducible- update to 3.4.9 * use OpenSSL for ECDSA signing where available * allow common signing key * Add a disable-syslog setting * fix SOA caching with multiple backends * whitespace-related zone parsing fixes [ticket #3568] * bindbackend: fix, set domain in list()- update to 3.4.8 * Use AC_SEARCH_LIBS (Ruben Kerkhof) * Check for inet_aton in libresolv (Ruben Kerkhof) * Remove hardcoded -lresolv, -lnsl and -lsocket (Ruben Kerkhof) * pdnssec: don't check disabled records (Pieter Lexis) * pdnssec: check all records (including disabled ones) only in verbose mode (Kees Monshouwer) * traling dot in DNAME content (Kees Monshouwer) * Fix luabackend compilation on FreeBSD i386 (RvdE) * silence g++ 6.0 warnings and error (Kees Monshouwer) * add gcc 5.3 and 6.0 support to boost.m4 (Kees Monshouwer)- update to 3.4.7 Bug fixes: * Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler) * Don't reply to truncated queries (Christian Hofstaedtler) * don't log out-of-zone ents during AXFR in (Kees Monshouwer) * Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out. * Handle NULL and boolean properly in gPGSql (Aki Tuomi) * Improve negative caching (Kees Monshouwer) * Do not divide timeout twice (Aki Tuomi) * Correctly sort records with a priority. Improvements: * Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi) * Use token names to identify PKCS#11 keys (Aki Tuomi) * Fix typo in an error message (Arjen Zonneveld) * limit NSEC3 iterations in bindbackend (Kees Monshouwer) * Initialize minbody (Aki Tuomi) New features: * OPENPGPKEY record-type (James Cloos and Kees Monshouwer) * add global soa-edit settings (Kees Monshouwer)- update to 3.4.6 [boo#943078] CVE-2015-5230 Bug fixes: * Avoid superfluous backend recycling * Removal of dnsdist from the authoritative server distribution * Add EDNS unknown version handling and tests EDNS unknown version handling Improvements: * Update YaHTTP to v0.1.7 * Make trailing/leading spaces stand out in pdnssec check_zone * GCC 5.2 support and sync boost.m4 macro with upstream * Log answer packets only if log-dns-details is enabled- update to 3.4.5 Bug fixes: * be careful reading empty lines in our config parser and prevent integer overflow. * prevent crash after --list-modules (Ruben Kerkhof) * Limit the maximum length of a qname Improvements: * Support /etc/default for our debian/ubuntu packages (Aki Tuomi) * Our Boost check doesn't recognize gcc 5.1 yet (Ruben Kerkhof) * Various PKCS#11 fixes and improvements (Aki Tuomi) * Several fixes for building on OpenBSD (Florian Obser) * Fix several issues found by Coverity (Aki Tuomi) * Look for mbedtls before polarssl (Ruben Kerkhof) * Detect Lua on OpenBSD (Ruben Kerkhof) * Let pkg-config determine botan dependency libs (Ruben Kerkhof) * kill some further mallocs and add note to remind us not to add them back * Move remotebackend-unix test socket to testsdir (Aki Tuomi) * Defer launch of coprocess until first question (Aki Tuomi) * pdnssec: check for glue and delegations in parent zones (Kees Monshouwer)- no longer ship dnsdist here, we will ship a new package based on the snapshots from http://dnsdist.org/- update to 3.4.4 with a fix for CVE-2015-1868 (boo# 927569) Bug fixes: - commit ac3ae09: fix rectify-(all)-zones for mixed case domain names - commit 2dea55e, commit 032d565, commit 55f2dbf: fix CVE-2015-1868 - commit 21cdbe5: Blocking IO in busy-wait for remote backend (Wieger Opmeer) - commit cc7b2ac: fix double dot for root MX/SRV in bind slave zone files (Kees Monshouwer) - commit c40307b: Properly lock lmdb database, fixes ticket #1954 (Aki Tuomi) - commit 662e76d: Fix segfault in zone2lmdb (Ruben Kerkhof) New Features: - commit 5ae212e: pdnssec: warn for insecure wildcards in opt-out zones - commits cd3f21c, 8b582f6, 0b7e766, f743af9, dcde3c8 and f12fcf7: TKEY record type (Aki Tuomi) - commits 0fda1d9, 3dd139d, ba146ce, 25109e2, c011a01, 0600350, fc96b5e, 4414468, c163d41, f52c7f6, 8d56a31, 7821417, ea62bd9, c5ababd, 91c8351 and 073ac49: Many PKCS#11 improvements (Aki Tuomi) - commits 6f0d4f1 and 5eb33cb: Introduce xfrBlobNoSpaces and use them for TSIG (Aki Tuomi) Improvements: - commit e4f48ab: allow "pdnssec set-nsec3 ZONE" for insecure zones; this saves on one rectify when securing a NSEC3 zone - commits cce95b9, e2e9243 and e82da97: Improvements to the config-file parsing (Aki Tuomi) - commit 2180e21: postgresql check should not touch LDFLAGS (Ruben Kerkhof) - commit 0481021: Log error when remote cannot do AXFR (Aki Tuomi) - commit 1ecc3a5: Speed improvements when AXFR is disabled (Christian Hofstaedtler) - commits 1f7334e and b17799a: NSEC3 and related RRSIGS are not part of the dnstree (Kees Monshouwer) - commits dd943dd and 58c4834: Change ifdef to check for __GLIBC__ instead of __linux__ to prevent errors with other libc's (James Taylor) - commit c929d50: Try to raise open files before dropping privileges (Aki Tuomi) - commit 69fd3dc: Add newline to carbon error message on auth (Aki Tuomi) - commit 3064f80: Make sure we send servfail on error (Aki Tuomi) - commit b004529: Ship lmdb-example.pl in tarball (Ruben Kerkhof) - commit 9e6b24f: Allocate TCP buffer dynamically, decreasing stack usage - commit 267fdde: throw if getSOA gets non-SOA record- update to 3.4.3 Bug fixes: - [commit ceb49ce] pdns_control: exit 1 on unknown command (Ruben Kerkhof) - [commit 1406891]: evaluate KSK ZSK pairs per algorithm (Kees Monshouwer) - [commit 3ca050f]: always set di.notified_serial in getAllDomains (Kees Monshouwer) - [commit d9d09e1]: pdns_control: don't open socket in /tmp (Ruben Kerkhof) New features: - [commit 2f67952]: Limit who can send us AXFR notify queries (Ruben Kerkhof) Improvements: - [commit d7bec64]: respond REFUSED instead of NOERROR for "unknown zone" situations - [commit ebeb9d7]: Check for Lua 5.3 (Ruben Kerkhof) - [commit d09931d]: Check compiler for relro support instead of linker (Ruben Kerkhof) - [commit c4b0d0c]: Replace PacketHandler with UeberBackend where possible (Christian Hofstaedtler) - [commit 5a85152]: PacketHandler: Share UeberBackend with DNSSECKeeper (Christian Hofstaedtler) - [commit 97bd444]: fix building with GCC 5 Experimental API changes (Christian Hofstaedtler): - [commit ca44706]: API: move shared DomainInfo reader into it's own function - [commit 102602f]: API: allow writing to domains.account field - [commit d82f632]: API: read and expose domain account field - [commit 2b06977]: API: be more strict when parsing record contents - [commit 2f72b7c]: API: Reject unknown types (TYPE0) - [commit d82f632]: API: read and expose domain account field- set $LD for now. this fixes the configure check for relro,now.- remove custom PIE handling. upstream does it for us now.- update to 3.4.2 This is a performance and bugfix update to 3.4.1 and any earlier version. For high traffic setups, including those using DNSSEC, upgrading to 3.4.2 may show tremendous performance increases. A list of changes since 3.4.1 follows. Please see the full clickable changelog at https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-342 - move man pages to section 1 to follow upstream change- disable botan and geoip on SLE_12 because of missing dependencies.- Fixed broken _localstatedir- fix bashisms in pre script- update to version 3.4.1 Changes since 3.4.0: * commit dcd6524, commit a8750a5, commit 7dc86bf, commit 2fda71f: PowerDNS now polls the security status of a release at startup and periodically. More detail on this feature, and how to turn it off, can be found in Section 2, “Security polling”. * commit 5fe6dc0: API: Replace HTTP Basic auth with static key in custom header (X-API-Key) * commit 4a95ab4: Use transaction for pdnssec increase-serial * commit 6e82a23: Don't empty ordername during pdnssec increase-serial * commit 535f4e3: honor SOA-EDIT while considering "empty IXFR" fallback, fixes ticket 1835. This fixes slaving of signed zones to IXFR-aware slaves like NSD or BIND.- only enable geoip backend on distros newer than 12.3 before the package lacks the pkg-config file and there is no fallback to finding geoip without it.- fix permissions of the home directory- enable some backends that we had forgotten: - pipe (main package) - random (main package) - geoip (new subpackage) - new BR: yaml-cpp-devel and GeoIP-devel/bin/sh/bin/sh/bin/sh/bin/shobs-power8-05 1600952140 "#$%&23456789:;<=>?@ABCDEF4.1.8-bp151.3.9.24.1.8-bp151.3.9.24.1.8-bp151.3.9.2pdns.confcalidnsdnsbulktestdnsgramdnspcap2protobufdnsreplaydnsscandnsscopednstcpbenchdnswasherdumrespixplorenproxynsec3digpdns_controlpdns_notifypdnsutilsaxfrsdigstubqueryzone2jsonzone2sqlpdns.servicepdns@.servicepdnslibbindbackend.solibpipebackend.solibrandombackend.sopdns_serverrcpdnspdnsAUTHORSCOPYINGNEWSNOTICEREADMEcalidns.1.gzdnsbulktest.1.gzdnsgram.1.gzdnspcap2protobuf.1.gzdnsreplay.1.gzdnsscan.1.gzdnsscope.1.gzdnstcpbench.1.gzdnswasher.1.gzdumresp.1.gzixplore.1.gznproxy.1.gznsec3dig.1.gzpdns_control.1.gzpdns_notify.1.gzpdns_server.1.gzpdnsutil.1.gzsaxfr.1.gzsdig.1.gzzone2json.1.gzzone2sql.1.gz/etc/pdns//usr/bin//usr/lib/systemd/system//usr/lib64//usr/lib64/pdns//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/pdns//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13121/openSUSE_Backports_SLE-15-SP1_Update/800bb5e90984cb5e1dd903a4d61773d3-pdns.openSUSE_Backports_SLE-15-SP1_Updatedrpmxz5ppc64le-suse-linux ASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=a1ef26c5827f1beb90dabbfa1f2cd2eccf2d007d, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=0fdec1fb019d0b7ecc8de981115970627e53179a, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=3f853a8b8ce571f64b0d0e1b52ab355088e00c57, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=c98ebe4b76581defe519b362d68062a03809749c, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=69e96ca2b134f6ec5b79802c2596f231f92a1a82, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=ed370ca92be03ade54087f79f70d34ebedaeec45, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=6a57238b9ffe5ebd26eb7de67fb96d4fb06e5e06, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=72abcda11e95aa2fdab2bdf9e744018090d99283, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=e87e9463143e500e9f88fb1f307474e22469a0bb, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=757d418cf17e0360f6abe1ba2e815f76f36688c6, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=feff128cd15ac3dcef9e693977cbb0f4110b178b, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=aa16b1611703bfa52b055051b914409bb89a01c6, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=dd79ac143a7527c887bde7794864a6b9fe72078f, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=f0fb5ee6fbb9b796adc7d22c9e3dcc164c471b11, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=07e70208ed23bcb365b9d4157203391e67b3fe73, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=6665eb397409b2c25aa572fe8ab7700c0dd6bbb8, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=53c35a2ee1f09f7885520bf3abe49091e829b60e, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=ac9054c2e449f90116e4ac864831aad854ad7efd, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=421339abace4454b51b29c3e9743bf000966f91f, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=acad22a862cd2574a8ca7c3ea00cae9528b035ef, for GNU/Linux 3.10.0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/l, BuildID[sha1]=0967a09b98ff20a89229fd99ca3f5855d60b741d, for GNU/Linux 3.10.0, strippeddirectoryELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=94a9c4b6bb511ca5d06189d89654bef900779dad, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, BuildID[sha1]=553294547c1cf9fb34886ad44d09df5570616fd0, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc15b5569f53f95a9c736f25c61094a0b1bdd5b3, strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/l, BuildID[sha1]=e3c6ea85fc919f08e228485a93be8f7ad2520eb6, for GNU/Linux 3.10.0, strippedASCII text, with no line terminatorsUTF-8 Unicode texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)':Nbu4HZl~ "R RR RR#RRR!R&RR R%R$RRRRR RRR R RRR#RRR!R&RR R$RRRRR RRR RR RR#RRRR!R&RR R$RRRR RRR RR RR#RRRR&RR!R R$RRRRRR RR RR RR#RRRR!R&RR R$RRRRR RRR RR RR#RRRR!R&RR R$RRRR RRR RR RR#RRRR!R&RR R$RRRRR RRR R RRR#RRR!R&R R$RRRRRR RRR RRR#RRRR!R&RR$RRR RRR RRR#RRR!R&RR%R$RRR RRR R RRR#RRR!R&RR RR$RRRRR RRR R RRR#RRR!R&R R$RRRRRR RRR R RRR#RRRR!R&RR R$RRRRR RRR RRR#RRR!R&RR$RRR RRR R RRR#RRR!R&RR R$RRRRR RRR R RR RR#RRRR!R&RR RR%R$RR RRRRRRR RRR R RRR#RRRR!R&RR R$RRRRR RRR R RRR#RRR!R&RR R$RRRR RRR R RRR#RRR!R&RR R$RRRR RRR RR RR#RR!R&RR RR$RRRR RRR RR RR#RR!R&RR RR$RRRR RRPR RRR&RRRR$RRR PR RR#RR&RRR$RRRR PR RR&RR$RRRRR R R(R RRR RR#RR"RRR&RR RRRR%R!R$RR RR'RRRRRRR RRELyTutf-844df2c7e84e9d131bdca12880ccaeb98fe0c0168a1adf7562272705373cdd4e7?7zXZ !t/_]"k%]b# L5u>Ms3e9R }jf-ԧ4H!Dr \E$Q,'ZAR2iJ:yS'?եW"5E QTjliZ@NFH# zDEZĻtP}}?/kS6}* l VxR&/k?,[{nI$E lGʜ]CKMivA=\*_rNx–8ؼA 9jOv1YYesONw;@:tٮRy*BK1NY=P'~+gA5c6#>|m)RSt'A·oe~?\ ?_3T1st#g'*QY/=b-Xw?=k᫣zIK'dQNjGyP_%vl֛E%|'} y Tm:9}9O1T/b!J򙜡_itL UpǍQC(<3zl{ $:a7Z5 К7JI!\E#w T >C7Mla8Aѝ`у[a(mԒ4Fpp=}&!觏6&?ߖ∊c+gmbbm)Y=*`TǶ#8ւ |~iW %.@P(:1˻"3'Kh0]yyi[U y,dA'54Xq$G2b_hF5i b|ť9TL3t1{7'0xYdt ΂06}jNiL/@ ocX\T(z/{tL|ɮ)C(;.ǾX)1)`rH YM߄N0GC$t$-&+̅|Dm*ȸͿһ~^)ߺ\A^48#$سن[Jl78{I3\X%>jH2]LB mr$s KJu&sB~FCkF\|[a?qީ*IfD{G%=nlw[' .7 !(ܔ2"\4N$wz29ǀ2 瑏e$T[jGFWps.Ƿwܜ51hG=lCWFQ2RP6bM+CӌRϝ#R4\|}W7o2J+k|'KaOYYJ U=e,<-_%Äu]h^iAbO=6ՌA'i o+E<5y˰D42Z{X϶HE`5(4Eyjx ӂ0l,^TH.|koα.W003PN\RS" P݈RY sidl5/e}L\s'723LHI1mM^u{=DYi՟@E]X٬35Imh6C:Ɣ ^0*ɺDq0wBh.Xpx]̑]+C?9X76룤 o4>=~0KZ@a֤udlOs^]ػ,ĵ*],x!Pa(HV;TT(?ݑ/'x>iGXub*]1ĊbUr؎aЮO՚&JgkEV:cgt$\7b_h%"/51 {֤#] B*Ts6)ΡW+3OoY^Q j|؛JT0nLo\(ő8B$;ҠP2{&Cxf20Zu61R894ڿeB0tUs^/h$B.9:OTL1A@%Xr۔]2\wI},/ZdK83#G\7^̬+] _ǻfbdᅤqk7~LM |{g%It$E^~~ D]kEy?΅G¯C?[(˖T,Fu? ey20W:$1vDSDi͂ħu<%1h\|peYxLG~P\@ ļSE3[x=x5v mCidESjӳנS/EF7+dF}h86 #;:ʼk%=D/~`m$8՛XN)?][Zn] (F9m&4B4㦀.AКcI _,ǚTxƯD91ioP_;Ss˩8>،@OO߻! X#e}@1,]Y?Z{,İQi@g =zPu2ȍ^!@qt;T$_/Pd P;o,ڔrC)[֠'m&oty6Cu x 3 l@/9H^lO1$."怤/!0IA}"};~LݩQyl.6V#RK:#'/%t(\{W%*SZuN6)!5(Ms%yFO4"ź*YEKjٙϛX2ko9w:$h/I5!]]Ո& *P&M#B0}JqjЪ/5:gpfMeqιw<-Sx+0Կ?! ]] y@r!uѱ=^R qi)|o!#;ݻF^ ы.2Zܽ-g?ǝ<}Cm=ܜ,fK{6 uvFc>iϨ1@?Y2}ɯ=}t)p֥n)QAT-!T\AŦ.`DUw(_ !/%sYi} X`S xx߼Ĭ@):&eIIvxaزax齘s(s;$bP`6bɌa#2P g B[~f+s隙]( }\ ᳾M4 cVͺ1uO~HJu0ot@1-0fy ǵҌsJ"FeJ ѵ$jmv_Rz7 [gbvm+FM*#.i_-zBU<԰{U2_cR3_#[*v5@[ Y(ffuƬ\/o(t8_@;k;Iӧe pquxЍ_#Ju.?I4t>ƿ4lxkqp%!従b;%ƣ wT!7<!F(yƶu(㏟yJdiM/*.'YDL%W ͚nIZ&ǒ;ׁT!{6 0rR_vZ\$ݡ^]KmI ^64J૳SG/jzx.g-jbmk+5e}vB.h]QLp 2tc3c׳/&W#EBj9hAL x'ѩJHo~Ao3J1%=TĠg:uʧUau z 0o<-dyr50GP1GFd#"..r԰@Z'307G2{p~ On ^sư &Ș :gq+լ 0kݲzMYP}P}xOn 8"of˕(,& 8lU|i Ji"_@|k#VM4g>oF)zܻ~`dY ; Xݼbqw ύLF(ae  X9jAS6g״^D-Qzd_ՙ:Gͅ3 빗p3ʨ(nF~>a`+`>D+z1s)si 3}pq=$9 79-h8]_1ląjOOֳ<jj-PK,P:Zρ~8~p`ɪ e6ϺUQ0|\QF(dZ6/IEЂܯJ,?cqb. ₜ_38e0hP~1 Ah6^%Ѣ 8koPʙ;Pt̍Qy=W3Rz61Fӳ<9Xr,Ϋ:K=m(sVpZd 1W3g =~sfcȪ߲BϚX`k(j kR.bi9͸U#BY;X7GhtT 1+5FzSiga{^Χ2l?Teh6zUcÊ/rmfz›wLKf`ӰhE3aZRwF몖puW!C(NC$:Ggt[RhĀũ̯%aPC\om#tH}Xuءg]yݮ>c@}i}%EԔ Ԅ'^pkZW$ Qzcd,r@3{ 5n8SdINBv=>f.K"Sq\cػc'I"a0|XSC[Ļ*~ΥĜ5.bj&ok/hT=Ux0ud2#]賄jF׿f$_#ci)7Wcb$uH*M#LaBP^u5U+^uø,*̊UBՖM4P+攸Zd"G3^j>?t.T!p O-2rϜGudILhg#"2 ӍP?6~6u;ygE;-!yVzJWCW~$>+ ?x^tR_R|?!'g'2}2E2˜=$檉=Y=0) ewTI/U'$ {I0P^&57lONྂsiڻ:,?e/!%uAHWFr2[PJ8j< Ĕ絣eƣ/h+_fFN䟍⾾]"K8GF㴠3u"E Íl7k,kyͧ{ ?%262T Q5vbYDv'雊:Ic.twxinorH#Xo0TGOfTR>ZK/(M%- U^`evFܠ*!gE}/'CV(񫲥AneVrA_1볍|KlR?ƚt;fK1i~f;'6zɪ[nOl/~IJe]>rxC _O}1;5#8rP_ (:}[=Ն?8td%-S#QpKp=d{ܙR=XUMtw֤"CU *bU[%K6E c ~-Ֆ98unu|@nR DCQU}[p A_[̞+*-Pa$?>]6<bs04Z.=Csie ^&1PT rXE}49?\{hwv4 p^ /ȏ@ZaqKH1TFض;LB+.Aj?sQ 23K\X>/ziiIGs39]*^mTVu'w/EHԤ {TdYg!(}rbp=qr@H=s> -E #1uQ@g9ReJ[;fW\_-i~"LisLɧsˇ>C[e/,:kZ, ]Td(~ί;c1^GPXwy~QrNM"+ pR҂ܶwLT]G&%W)v3,T.LJakBg+:EDS+sP1OTj'q$.ܝ:@k[DFiQ+,\=EwAڼi%aWr-u0IO'Im~ :H\wqWtaS8R+BPl&iО,*n86L[c-=T@]YX›V3$i~!OϧWg\6u֧5K%$"&&r^Tn8K#[Q &\}.fbm *sRة_œ'ڻ79zȣ9l^/ݸaK_:4t2D ^4rma%N(VI-tO v~DǥO]G.iLPdX,w鄊HKxǍ\&y!P?y8zJ+Z>T`vE-aOerX(u0𐦑"}д$l{ 5 xL.x&VC-XM=I‹V|v@:[:1'+ 2̭=NZEQh@p*% MC !tklp9^+17 LGU m,NҩzI)m '-?߄I~'a`7no}*tL.9l"g{BSʣԙE]_/*f32=e(Oޣ-^V؊ØCfwA4{W,F}slAQ_#ʩy(M-h C?mx͐ _V%H; Nl^~+: g\4?8z13yAD8s& #zż`.{x NѐiE'W cm-9X/Mf'.tןҤV侱2T[ ,aKy6fje =`օr<yĊ__Te멗cSse3(r$ʳ{8/ :"q='K7?nJBO#~v'Kz>4 O{WM|!qpGSҤtnSG2 сD T[MIӢ͓g$-5mt(<'WhwkҀD~lRf-sS>*ЂdvnDŽA{A5E5olcg(mC7; >4ыw(K}ZRpuMźl i[(vÜ*u>PosV+x8 0LC >;r[ǑW[ay{Oֲ[,} ySjEpKګwIfSY" x'G?T5emDFErFKo}C'4[W)UMٱ$a|x@ye6|İ d =t:IvsLDῠcS~EH<ѣն]f^إuzQH?F̾8K:1/@A$X>zyz)=Ad) =[ݤkJ$L8G8Լ*m U oKγ!w>UJN5Ó\'{͠.uCd#ge!.dC., h 'vQaG`"nbنJr ol8'3A'tB>g΅i_]s ס(RH\(Q(,EXEe1bvc,.\29L'gM叛0 POx$hb0JV7 .e?Wtݎ@?|Q/$(~~J+D7uc:HQ5O\YaqiGGQ>eXL? 9rX*`l{Z~ <Ǹa"S x:HuRi}?©튠ZwؖVoysk`YgSߘBT䬵4Y1_.rb~\59u`>J_`iOqw<#BĞ]g?L+3d!8 H&@k׏Q~o"qjΓs^Ɂmjnc[-xq&ʨpPVQnGhu&u.@bjy?IME&XZ%'8_#i=ՋJ~2m5{6Zku!C똓bꆽ{􆤘JId>u֮LY>F; Il4I@<%+vǣg UzW ͝-u]\h!rm NOh;kGVNx:S{mƩmy!=, Cp&{xqr^OpYڐC<|96| 8ezZU5!F 8J.w La\wBO^m 'j7 MN <} Φa!/^+X(nE=kJ=bə0ID ͥ,c,0.f0ֶvݖoÜ6Qc܁_JYsɹ3\^Px x%Y5VP؛&"Tu[2xP b5\?Il>v(@ **_fw|ۣC;GTԱ<봲.Lk,|1VAtPKkE_3Ok`o-D,twA\mk8">Wl>\}lG͜= 3Z㈧58l.XA #D__8&A7HT%]XO3z:6E TTyuw''x:T2Q 7&%w0 -0;DauE4P\;NG@`Ž*ʓp`%l7w:_PnL;_ bM`B+DV?\ yN-.}0 TV́g:)؇z(Cܬ׋^zSNas?2V/Lz|*vՀ&:4Q27h/N8X/jh>T]|}5ۨM͜{d%u2ʣZ"ù? {ԧ=ko~>5rx js}[@$HL]ح=C|gZ+q& ?}(DdO|jXglɲJiWRX@{mߏG$}r%@R+|ggIMVl q|_Wav͊ew+ܫ F@53@t?Q#uvƗv|Ny 5v+y0V9%. ;7iaw|.-:?K/dkXp+)Ƨkr٥lqsl~l3<؇ӋߘѼgUѷL^е~ []~L;D]TU|e}{d8\m5ַ3\ff AݪL"udU \s_cm9:Rӟi%$C˛'TMf"u{SXè- r*rnkZ#1%g6+Sb4`oFeEOeX`$_%E~S8G,("z݊tEڢp0تBuRQy?[ wZ2+D7OzF>W]6 ZTST#d{:!L՟4l;d _t_/|sX*\bK vc-P.rQ1mW_*p!65eWl`V,pFuNkP @ͼ:ZPhX.р aQ /Ѧn@ò:Z^QEڂdcq1k|vmzbY6;'1n"ye0Ev DHbKkzRH@z!r/а!0/_l67$^@>ؔ3=Bjz@Ci4yBcM ew|Y!@Q1)9/ rױcA>_8W-XQs&wQ|wdb z4 T+_n/dWGa?*)1lu{H%[lkWt$ /H艳Ö:ZE>}sݫF24l yiy M#ǫɾ E:I\QF1r=ȹ]cҹS%q(ZZ"`/ mϭ>&z 棋q9ƬQ9| 5/g( Ճ<_pP68vJZux{X f0axDC4lLn]KG&޹T!MSգAvAF~tBlef1:OQ~W]bk)`7+ $R\?j ͩ" +xk61xkxM;I3oL!I.j Гv\`mg@Ȭ ]7-qq)NKh(}T1 4 RőC/`%$Z֋-`V riUy:Oa< hµӬt)Ps'*Zl@v{)oeU.#uu8͜yIL ˼ U;i|''5&FEȴ;탴'YE?ju~ ZTp_t~5Tctm%'<2%'*h޹/,"\عduQc';NQ''Q *Ulp7MSYU,5KxX{cKgnhԬȠ!M?Ґo7ߺ9@k~%Cft n>3,4^Y6D]XȒIU"LIa42?#%XH㥴HcFXo@>h(]MI MǓsʛ*2YۙA&VtKNf~ 3Q58۔ Z|aգQ𽨯km=nވ&̸:"(3xl^=ҌK>| / JaPeO.Vǣç6I#N[V= 2T&$ ͸%k!!q _o\ȏu;7`-~z!ys-U(-eۖܙb8D{$s/Fi ; jmSshIw 17Wt&g`ʃOuȂ+UVTNjԣfqfR"t;)'yz-̛~rS~U6y ԠH&>%gbLhȞKwS\6} 7 7+# x .#uE܈b4ӡ6E(T}1ߒw4 *mru\_@Rjx9'3?hCo=SeWx2T E\J kVy>D߮=g}'>LdD:oJ:22\7.E\oRzI8OUo#{~.xE27glpsxL< Rr ಎu{A&wClTV޳IE2{p#Seo+# + I9KetP`Rk1 (pܜ֐JA`kbcÒ%8)hzseOENcB9c^ʝƍR:_iLpfpo~GO~"/) ;DCqG {~տVupYkW]=[PB rJښ@Kt@9*[w&uDoeMwGBwgXKK9;-p&1O QTBug/r9J+wSS MymӊGx62 0|RQt3!+#HVnjdxGdPun-)|vWW.DYn ^&L"GQJF(uH}}sg;1^q@Ae$w=)ީ%E3\  [DECp`!=ˎ BB|nd@n^t دe 5Δ6{$Y4|ЊdX&L4Z~){<>z/Z< h%I/H6EW~ 陶r<}Q3vPKmyCsKNL]HJ.BԆqCjSc0m4XlB9tڟU>VYswq8UzR<`,pn]kkU%~kW + p,(:>T3a'dMGN`5hs捻T/XzO-F;W*Kh\-k78ǥLz>gwXpt_A}U}7% ]3ӦxЏtb'nRC̫#m 7)T$OhW XnܶD nUg:&V,{}NVJ`]K 0['knj+|=v#xA,Ygf554<(TpZbAM9…Le7d W Ud+5~ib .bv|ʖsr1 GY,mB8ʈȣӢ[|" ^D`V)2ױlRY#\J2.0u![^GsZ3򜣙щeEy cBГ56H{7.R 鹅¤777tXq]vu,ܜ`&|>TTNB;O9d} xgiN&,jl=՜p1Bo;)XG`I' uIH6,M5{0`3WVK޲.6-e#ԈzhdBn ^18KʘǮ×ENxoZ0m$.]l-Ckܹt&"a(n> q?@ KQ݀A"zyٵ.W_y9b.[}$h(z Yb' c!eA/:dro;h8pjc)~l%W}U=#ऻV>L^Q5Q"ղgݢLԼKy8. _³F0}or)_CHx@C==|T U堯16ȻUP|pUIGޘNc \LXeH9 +Vy Xג ewfp yƭ%t.-l | ֭ž*9oFiQ)?,W?ʿha1#{aJVb,?'\LQ Cq {bzOM,y? Q ϥps3\'=!yjG1o>:S`|@ՒE)mXO||Đ]4`MBE?*^҄&!(w3;1#-h x f+'=@9q,c!yT~Cuy.JܥZ{ptQt6?|߬粹w>8U1[!mO7T0]Ζ(6VۅaׄF{hVFGFrr~M|CB:%a^TTK{7Øhp6%hcn8dh:S46j>}3 ukذU︻)prR,\ QbVncljuVmHS*VIMn* !ƺGv:\5_h$gr> r@%APx❀$BbIuJP1, Zĉ㷓4~l`}#$fy ք>.ςR(@mm{~z.ͥYљ]&GsE͜]bPh҂hWyT"0KAHE~yj8QCsȹX% S>\JF_LYRZftU""FC+N w8B,_kqsEn: T$L.f2 4*NEfwvtjr')<送2,ӵkhxkb=PP`W*Gg9,T2@nشu:*舸 8oe+_mԕKyE_%zuww Gu/f C5VYݠ";F=˶2UTs*3Z.;q@Q#>4;  elL;v@& XщZiX~{-&|3(P]-  *]?YUiJ?8e' 鿩Z~ ?c7;[ /ZswFrR .%_E!)($3p? 4)0\L9F~/4wTImyVLNc"e6h t];;G:gt^.<;Qoֿ2IPXư8-~ºH{)djNfI儳ҫu>P Uxz묓0e_fIaҢw3p04(#LTGe-V NǏ:#f*d~Y*De14Y=5ZH U[ެI53]F=4C1N[@䓨 dqzsV4Xh1 FpsAyc;M),2Sxl_aV\~VzO?ct3ʒgo%r/]j {>sbpqs!,9h4xȻE̅гiqӦ>CW90}5*6uQ5\5r+F +h]p>ο4.A.`S,W UÙAo'8uDөIZ/R:h>.@!}n| 7`ta.ݻd dE#B"M9d ^q$Mzɬ)ՎmDI9:վ XT.x(ȷ,@4(nUOAn0fUOd 3 "oFe{7v(ÝYܻH y/E3]P\|#% 7P@7*?b*ү=wư<'s>pyv6E0)kM8[.}Zd rjQG洡gzmh^ueV56=ͤÛ{C + OkjXZ鄾ʆB;Q9Td:V %ԓ;QVvjY?3JxMSvNNhl t8>T#v$RHncraM!Y>zCw&OWڍuK&UEOe?MUk+ɋb0ol ?#"C^)t}dhf*-= {2̨.Qq@3aL %L(?ႊ-4! Eec[\_fK@~+bjS$#7#tNwONf9FbHു0{C3T닛>M֑FH:z5f%KC; *,Uc|`I]޻3AD !'9tYnS OwBM%>J7xs{붆Exݳ|B Q=V{br7ѡySBb,d.Fpj~ fr"O0(C_pUjexgoV'E8>xv+kP-7,»$`Kg7bJ9FBڋ6k,اRm{'5Pѻ/ENxJwaU R@}W7I߭"Y~k%3\$pH "oSOyjmn)cYQhls#76 e)M{87eCC@_fŲqR%C|0Ч_М$n(R(ҕcC1Đ2z(yCdBay[ʣ{(&<1Z rS$y5a43ZMBjW_`w',Nl+h=s҉>[HR+'+ɆK' 5XdA Z1޵z¹lƶ4w:q~ot@ŮTApdc@y8V[yS!j$oA<' ٔ{rkyWM> <=ܜbω):R4˵-n yjr)fJ玉wTT -\s, 1$-& d$u-e -Y"2)l%4q*H:-?l9(Ć _MU $)iv۪т|ذnG2# 2S(5@ߓ@__;dqDi>tLتY NcxsC13eEw Q+1-[`MD4e,ܢ0^d' sYiM`Ǧ|쑎oa-bUjϷ'l?ɜzNǐ*:|_kSo_CШB! *z%Me/OyGu/[v)VS)a\r]CG $ n~$ a&#,t6:ќX˵CKO 8_{Tˇw/HɾjqY6$RAp~>fD >Y S>j'@gwJz!2HwWvK8r/*b{UDIREqnwˍe= X|0 8EN,|nl~h`ᬡ|/_:)_cN3p4Չ R8еSMC8uJ @e!_CC3X oT _~pQs`rh76|xڈMe TU px}F,",%X-['I v\*MsY[ÖlaYK&ə(|Ă@F 3{b$*Mtҿ0pX(!m;.88:DR~)$+f2lHv!e>'##SF"kv'^dRUj(_΋tVM<7eڶ\=fclVJub7Wݤ7rb'@;42.ZNt+ҭ,:c3ZdY"0 CϠU;v{hvz5&Nu(+/zp`[_dBA2T?VH9t (ђ[J`0j+ؑ0܌]bVOT"dO$/l9,%q7Aw7k!醢>kyCTbx!]"€Ui|?h:$?ǫrlo }Q>ș?;jA谍H!XKfj\I% AUsBƁa P7Tw;Jy<:{c:D7uZ% #y=Lm{ |x[ߨ5 '=[l5Gd55emz13'h`ǑhF_,z5*mkg$ Yo,ϱ"xoHɝ0Y@zerx9C %Q3Q VATjAv?-1FUTx2o1 ^7:+#r5bTgsX > sT0bɾ (%i5h;?UO3mzs 8̪Yaݚq@0 &krJZ]>{fO+,ތzi ɓA8WS)qF] ˨A/؁. KbGWpŅ褽ߌ=V>Iz֝ LjW5HOr6!5\JN~Nتm,^S4 ч q{}p.!;k/- L| =B|#2OUrиu"*ˮoQS<5q?ee;ⳙ}&[_!U1a% 65;L鄿R*] x)@f#GyDvF$RJkZ[/ P%6wޱggp "S|zSԚ@Zm hT8F3ڑ/_+5эL*FL%#frH /<’w`:. D.lB~5HB5 k:{L1/(UiQL9ăVep?pXh&ZRo a7~}p2Ef #K*.΢m-^(3w/\5oګŅQ W՗bz aOmWBe$B(eڊ>=$ХSP?yG.(}KHeq Vpoq2J0})"ɟqBB$RuRX9w#{m!҄Eg)V;J~mKz # BamW@sr[x`vp>Dr e R*2g`ۄoN)m]UF(#N(+v"Ba2t*p1B6ўd(GrPodjXPkyT 8 #9zuלYhyWQuT|;T3eU||!vg)v(Zk C-)O)Xu,b]w8 [:7ם$"!n ٟ{bT0ǂ {v[%0LWaCKd;B/_zA>t NnAxxw8a![RL8+hv_ .0@m}*agFl丷h罽l 9{պkELbJtqۏ:5*J.b@<ٿSֻ^/1/и{ i!cLݎаyO=Xc'(ʰ*}[+; .w5]ؔd $z6xH.-g?;[[n*)B|vS@Y80 ʅN:A~c.ŬMH~i<l1Slnh[/;G HK߭MHWʋhhTmoP}E+ ؉?$x7H#5#fXJΙ8^T Opa\V7}5MIrA9w*z̼+K̒lF M"z=N8-ܬ$ Am?RXU i0N dAnBY OtJ]]hf_lՈa&c@Q i0)#F(JGX#@`@NEZt;+_#XU-ťZT'*/nhPMX`$ 2|.1F6"C*7ߔ^PKQ)dUZjEp`CUG/;TϖۊdL6E~E)Z5![[{foS(b 9GӺwGY8MH6R:5O! 27&!uEXyS eEAzB]K#3\"T h\iOh3Pa kSݾ6>CdyWPحx/cV1<R{VKH97^*ztVk@ͿUc¤89oE@yVv]X&k>>li6Df $"u!v( rp+g'e16X vY( ^cAԒp2`]Ko!'׌ܩc+|nݽ<^j#NjN7)G!ZF{TP22㏹E?6%/ ;gg(ɠ٩vwt|kڃI30yQ3A[T9X5][9^Ǜh1͋=LGzz F+vCFA :r}  B,WYo#W^p7YX |O-J )lu>AS%irl:;rƟo&h/">8肊KWo =/~We֡|%6 4ijAxzVB_؉rn!%L,1xK)F9 x6酜[M~@'IG#,~@;2ןr]%2Bs  ˍLh9Cbu*?d^m+njK Ё5O~=ظR-!6I+u3GpD5! cڜ!߄s-TBn ;=աjS|N{ϜRs4"1kSV3-2QWwˏ G.&9Q7`yPtF+`A[M:@^trf pN b1417XrX$1YKV`WQwh\ވ#q, >e{! R5{Q ww }/Fu(e33?読B^2aw /oV9pj譫QRDg/hdGEb,^1ixHL5P&{ަ*rI߫k_R/͔(MLЗfKR;zV%!C4s20Ǡ%A0ؐ{t ӺQIBl"t>_~,13adѪr||LٞtW'^Oٹy(NŚ6 $ W_se; vAr& ~Fܕ _Wh2.TJ~!svG묘b9X,I$'frIaWja=oʸ(\ Ƚ8D'X5»׷I 8O } Biǂt@&$)3!˕vr@D:+V=. }y]Ro{8p@Ma3TݛҶܥNI^ݻTa<,3 #q~+VY RmQ4fUKp2r$'zH%.)$\;D|oJU K׀Ö ψ~[ .R1iW,'FS u|NCM3 _";Mˆ]2MQ %,OF2B`ϧrBޘ]3PJ{`C7/! 5[w8h&Y{*j&PU %o<WۨH/¾}R1:![cg;o" !am* Ftӟ(vɅ9 Tӿ=ʅ`ӻ(=v]lFIj*UN+ $h4fO>o_+mZ@wVp1L״7Gof3TZf ϛTXUo *:ԮMOɳ΄ɃUmbGF<6;"W^#HCiq{E7$k#I\'.iPզTF4VX*@ʽjjӨT3tz(ҟ:y'GGuvJsf|`HG'akpZ#"f<^eNw!jAˎip7dtE5U.;YV$ɝy'LXJY?!{s u^)0LxWdMxUWӹ֭+kB6YŴ;p1b'?-jz9Riy:'Qcce@{ aQ176(扲c,0Q x=x\ *!!SnYF(f(mL`+3K">ms8)&h6j<]nCx ˚'=hS;| #!Sn! -7`)|EXE]';²)UX SD_{C+6DyM%GF ſ̰5F}FaHLec?Q/\H/7| ˬsK:pO=Gڐ/mLtCZpvmycw cmR*~a_sGx=G?.l4ʼ̰Kj^{nt> Lٷ80vefMS4ħwrP1yҍYNCIN%icO~gK6 zZӊTGBT(] R0*Bh9T{W ӥ^u51I֍ No2!f5$`dӞ}}m}&kS/ E{Py??PL@ӇX},jW7RX!%o9"^J߻"_LDOռ Džcx&t&[~2nMvR0Z2LXUgȬ$'vc:g]cQÌA^=_Uӿ+87E 9A]c8nUc90|`55=Ru")~`0;뗛w/t~2FΎӅW筭z*rDseѽM,;P?>֘(9,$Ivjֈfb/oI|z#.㴰f܂"rɽ;&HQ`e5nvtHhY]V-\12A$,s]r,%>* mvt .l7Q6Sӱ{\ `Ù53ޟp8</*ӋG&=yצd8jQqKdVXC˜>>T^Kp7q\ l6)Ո%@WKi=spim|I<ߐ-+,Ii|5|iB+|7Qe43!Jn*?^z@9`U A6GYҕB~gwytЂ"<6PB~L&RvA39N56L$uJ$z]SMD'xO:ߤ5Fජ_ 7w\>8ULpp|z#(V }*D!(cP%HXnJP{&r;rU`#Y^1J]w^i,|p5gM\](s'ԢKYZӶj>PB nqC?Pi! ZcxHl`1EH, 0wz- h3o/`^{Т.e9+!,d튴@xvs馜34pχ;zY\&MHk: E& zv0]!qԁ 5=@ )*7Ad|+BNsc뤐d ? *BFE9z7[_m]H̥GB,L[ )!)ݮ +mԄw!y^ fT+D?:ƣNFN_%"Q7 Nzyt֑i H9kV$k`ĔzF[wґ$ $_'YjZf Ԇmsj$h2)`D ui?عuxűZR<6̮R_sZ3UHSR]Z#ftQgXQFc٘^в8G n fx|7~J-@NT 9_ϲ/rAX`c}^ASqމOwvZ>Jm#]gاw-r[ݰγgdRCGv\ٻjM?k;|/)[£IT2MvxG%kk'K_*Y\ ^6A;ӬL_!rI({Y+{j3:k m;l=4=40'0%!tBΔ|Kk } 8+5Ğz0k!G$^$82p۫^j JClN/4aw+׽",fPԸ!: AW[4RtXʇ M!['s$m?,"EDX'0oCNT 0~uvdV1:WG-m1:G&GK:[Isʦy Kߺ#b`BAP[ydՄ 3J%#fԜ.!;M5P{nr\ki֧szF^:~cÄ@"=,3 IC'fknQc`Wa'RuD։;::bJ[v$%mdfjynye aj u o^cg3Q\avFlUBiQז7&(xpKV_|\A$E@IR7 & 96BSW:Ҿqxɑ2 v!k`zx0v_[+hH-ma-_<ܫ\ZUnFh4/`"l "οsSQ{O^EWE4-c%;e~r'J(iM+TIE"kGpȺF^j`/l^r yVo.5koz^Ply18zKrik']fStLS!n(/i<۹= yj._kh g9;rI#vK;.`6$8044}6ЌtU#`̇lf8EF5!FsYG,qQ@ēe%f+ߑвL<Uk1=m0}Wrb4Sx9!$H,\l .>լSod)5WLwW2ncq Aċ:^7j5BX:<,[iŪ,KbE@|} KX'7Ti0u{8'{nΦY5pexϼ9C&"OpS̪ qhYuMѿ9M$yjf<w'wvA#-{|u=;^#4Pj,׭\-0KGp[{$m):)7Yz`ӯO%y.qp6lޚԣGga$Plr|!#q"4Ε9nq},ݺ= nLXl,5IR+UOy'+HӋp 1_[ϸl(vGB%䨗vB]\ls͗8B[lE:|~hÏUm1X( ٢˜&V?!L∨WW;]dĨ\"H%J5:]̽}Lg8C>8C _?JR $)cU]z{fجW>p"z(v *M9MQpX8R]o(19Rg(\sVkyN21y.4/C9yD+SvꛔjzEޘ`⧣>8Ne4Tp'teN Hm&m/^庑=?n.P^&a.q" vCEV{ 8iD%:c㜅9kJ5q.58x4|rȑk^u7)rhHM#0CH)ni!`.x>ݞvӋ1[t [*1W : (S0Z$\s <sYlXfE K>l{eqG,tG]!FپN)!2 Cy}jtD6 Ez7?T.F0P SL0WSpFHϰK4FEO;il97a9"AE7U_2\ Pe Hvi/ᓫ ꊘ{"?ݑKg+Jon-;Xk9ÖՉEkqDsU~[TVQ0;=![OGtZ~ CőN)ꏥ5eFTW紺l"ʼnz P6ve>G %;7_~-,ץRXTQHh80J{#~o3 }NePknlťJ(^!_$|rtg .p!ulC؊ S˚t-J{[/B",+^x(:wзnr {#\Q~dmnp+AXq〮tvt$ßuU}m?OD6&%G bT VԢkE"o.'iTTBEğ/1b`32 Dqfq~.8M:v?͛4ex3V뙟Ȳbf'5x{e*xUk.BP)w$D } vc֊%|Nqۂ2ҒDЀʨ?k\>@%DcΜ6~PSz$$J)O!^_sݙcЈ,j":F`7w2nJOY1g`7nıɞ4t&AL> UlB:,vhN,!P"[&jCY)`"{~;L ``7,H%= e4gƯbR*[ TwLml@l cQ[a=O)0{\X|[S]h8_CT6}皬}PEpw>GLܦ2:o/l6hVaƻz_G Nl{x1HM yXY՛$WJXLIYJH߈s7TiꦆGw7/:9*5nҔWQ O,Nz*)Gޖy^)\">/"/wh aqLc)wS~2>mP|*_iqݿa.<{1,6EN?Vʽ;7ɑlDaWRbJ ||Yb/^j \.ʀ:y}Jz,w n "Sea`|x"W釺*ĈqT8kgv#=㸑[ˊqw `}Xg"UE#(>~D)`) di%N$M&;`|~'juA@ cuyЎ(K*[~'>C mw{[]&g3 wN4g=Ъƹ1^~8[!P#KH ;X,ݲuEԘ\Ղz*%Fz>Vy,n ( _gh٥< 7Ub?jIPo{Z 4q#@Pӂɬ /#5au˜7e}show<9]$NEOm⠅Wh?M|8=_RDdHo6>Տ.v9u̯pof$2 Om_,FIKQ$Qf?`}ʯƑXhEmvt:eY*;l#&#NTC0[L"J%=#3jH~KA,&)fuP4Ex@U6}*o3ٯP.I\d)b͇ cb 4IVk}x&ڄa-Ae]% ӥV߈bOg;ÛeFݠMHod,z}eJ:"pa}(A&35Iʩ{̲g%. , 60:~I[Mҡ~iRhBDdg\~]Ym > sϯ >!I#VIMz|nyv;o… ~uA4H R 2`{C8hRCGq p2wagҎӃB6%ͫXrN0jZxV x20s`Մ }v=mx"U'Fs4K Eb7HdĘ* E!%!1z1z(~|󅾶'(@3BPG<pFQ AXA\<8/s>"Pw6Q#6l037Y]dntw@5mU auF9O-ѱ)$2)5)d7sƈai֎#+{/Pv4|gG"@TO%ՄeG%@(I{+s:n<1"i&^ u oGBBW ҈4|۰" Ҽø&"EQ(IzO7oRqo|*Wsjrb=Tg#WdXI^^\La ~  !~&cAQzޒe#U!/\;xoԛ'DGt-D :y Α]%@Qsb$uCA)2f4 h-D~8QC4۩0H(V` ?,Q!VZ($ȯl邶s\7Σ-(YZh!ͬ(Wϋ/@;ם7Vfv_p|4#a(n*Jm/yq \#^;nP+4#gHw Y?h29%1gZhZPT.9(Zԛfm֦jEg򠭎dl'fE-=JLoo=u *NY?NS$L=N'-M 3߫a -Ip69݂V4rTXLb; 켭 7e [bwC'@cePhuJG$<你pI,` netpT1lT"hb< v`T]tRq''(rDd4dJ[w?SKldSj8'gW Lh&|f2<~p[?:,+I%$FN(QDxve] ?zAx|8-@CR/QF<&jnz)V 錩s[Vj[j'(A1?Gk9lFJDzd[%8Ʀ}s/Hx(m>`VlkdPñ4sw! L@3FgDBRJrSqX`n+r+n*H}'|d)4 Gk?r3s#qzARM' p#ܦqڱ5FA\4 3lÀo%PP3Oƫ.@'iA݆P.A5+="Ռ.,VUxB;$B9^ErGT#Av2-o\oDY֖k$ yvF!w>Y#L.QW alo4+:VY߱H@_/ZcO )kB_WYgU J?FXFTi>a[k㉺@\ }+g]8sn8<ms;:rT7/!@@.`UVh T8i'O~xO3g)LQ.thh] M5p@:h8?JLy*^ɔI1!3mѾ#tgs"->bznY8[iq% 7j̦%=9<Gd[Z |v/7X đ"* p@Lͷ觨6 Z7c(_dp.QjSGʴ@/?-w.t[gwpzS眛Jmp\!ᓶp&%m·Pg=C3 XΔoڗԇ5WG&l5N3:x :fJjgާ*Ph|U+ K=MƉӯ׷gV&\{hp^C.KhDY:[QʨZaӠXի2k}[Ƙ/-Jt<(]LyLW_6@sPr$膞kp ԣ{`hV:oxUWα*&\yy |S`[}cmoӁŊ|_mVkeyUu*;nrkNeX{@)W 7p$v~* p;{ޗb1$OMH#Q ٠ v gh_ka+agg~5HhǯRiLf{l&x buJ![CȆ,Xi7e39=00r>fԚPdVW nCf"bWPsQm|[Qk$ Ms%g2ny!©EL={< KϡG.%Ibzt`Yցw;${.'+rOXؔYI(KB݄Uc$xrX6%s~dv I\D-P[CrU]wyaH(ηw~AVun_-$i M侩@K=Ws%RE]h)+Q|,S S'yHDZ &ѶAu7ES'h|E;OWXᆲbz΅`#'9"Ve~70i?`0(j:?P+0GMrfŨuZ;X73RTsnc dFRHLsFZj(mN}3SE!2K&_qZH2g),@"̃_N=%S HrPcy ب1yt?O kMN6>? +eݿhd P|isc|P5~=E)CmȺLx {csQH֌W9<<_gc%KZ,~QNPzO=S"8%i[殛U7Ef1pd"}TИ9pXbL?ᆔ{WYEi-xvbc(\\HU!9?*آ3yN?O)dHWٍ֢-C+՞VU5+xǮr1Ct? z>g^3Ks]dz >o_wkN܍>TƆlރ$lo5Yn`=kXȤ{A|ch<慫&+L.HypM Ln&]ap#:!"2;XhSFv#j Q+FpqoN)bf`UB0n.\O-Q%K *nr0(dVx4}yBY[DnF"ݎ47DZZfl@;㊨?tᇕy`E: %rKh \!2ȠXRSAX o#oK vsp=zK (Cbq&~)(ّvE ?dmlkfc\&}xM5]v. BW-s!H%4@En`WVOXŬυHs tЏ0Qm/9+X}K1Mzٵ\{ms=}*s:K&;ACXN4cv~;F["5,Jexo<1؋ 4:S+_EJMEt!!Q=0{37YKę,2 -+Wq}aoCz VƎ2Lt'eĹOx}nΨ|y-G Mr IE 0doU\%\MB#4Y&@!uH>l⤅6UN5 z&YqL@skS>޼e\Sӫ>^%PDQ^7`YJ@b.5<yǺs,RĹ=a@J"m->Od/CjAs2:W8@Ț-E0q0ϵ̴#hlAIJLw,w6@K[=66yĎNo;l)#ឃ}mdPԽZ,Jx Vߨ0Ah6^x6w؅:r e KY"or`F\{@Br|MG߸֦Z/NҘhk8`qƃK F8x45)v~1 p&9v7 rcMV~0 $ِA(:U)\cSX!k߳ڗ5Q_3?UzF/Ukb3rALvKQCGˣ<3:z.:*5X5*29I6,Ss Ѥs̱aH5ȑX(^Ab ѻKG-Y9E4#\'K!8bW2h>ٵAb.LqQs"6NYم'XDŽL_*){XsyW9ٳD7ּk$\E8cO`0޶{54Ӯ/w;NM`bb `g/W:^AʃDc=lsߣJwm$%x!C|r%:\ j65z$^Y"9^7a9*iC`sﳲ[dՔ{%akP7'n+1XqWsօE|slƜxWXChakHO=Q&dt1oU`H'B;>3΍tcX Lv&O1Qk>,kPa6GD6L+;O:@3 (yj3_>+0ǥP 0pg /y`;ǐbbgG}0]+%Ab%ZgӓyʑxUCF{ÓN^:]^fq"68BX0] *)WZ'HV|{}jx,e}k"QQ\ 2_Aduqvf6eJ4>Ex`jQ|?d@=Wf`yD_E4[~˘o@Jx+!&!\ ' a=Aune_Ao EW#`þb$_BA}hyO]0זPӓ &2%3ri$ ʬJ.;:E3M|E1snN/ \RT24:Z 8ZzPwBl(=$ŭ̃JD`@^r]Oδ}SL,!O})f6n]G3>;ϩ$~~)*ezBtꟉ;7-fmQ>7=NwƘTd^$Ԃ/r$kDxõFj?5G9 HZ A`o"=2fhl :u"O gJىXDq*+v/D}Nn)0Bj)7\Nˏ&RZbuP6E)L|Me0#3sJ{y- myX&[KΧ qYH,0\I ]c>l!riF[O jw ~;%ݥ1TEj 5K8#f[򜛬"RպV_U!t aCRޠY='My]fE'5z#Hw;443坌d/.$h/\xe[Y 9v50E*08n!flNgf(N{1'uʩb8,P`XR;)9_EN( S6~ S9/Mt1e5AxE͙w.L %)7 Ӕm蝡yVٹ{TJTm:\iƪ<RA.U8.q?wIz.tv#O8'ը }9zUw՟ke"Wd7C@#[ ?O w)j1*b?scs|" }CPe%caFfԴ^h$:oYn56:4=.X.J盢s39钫%W"rwփDpӗؽ[$~wu,4;PoI6w (1LsNCI/}&ॄ˨[aE5Om{:b !uL^w樚oKІ90һ<g[*mg*/ X4.^_[9)`;Cz:P;#13bEl5J;EKU Yɮ"k "jq УBih+#Y9~ɄiE-wqm,ӈV!L0LXe50Bte lp`"H~RM=#&i]Fq;4/QߩV~nȪTZS-ESmD?|OrׅٻXR4nI_I\>~Y a}\>=)a oUcw674EDo}@{Vߒ@Q ta8or T)x-ٺu[)62sDP5]gҒtp@Ps.X͌O ^^@];[`#odiHBF}T0B81pr;e#2l{߷7 AWiGȌY0{,?ߛ?FƆTK&I BtXG1 x& &+O3#|K%83pbVQΟU&a]lgp͢.hpyǛǁԕ\x=Bxd@aپ5z#/[Zli,q`;RZvgɧ+87O9e"T,Zo+al'V}/ E/##{P^\QLUZKue?#hW8 (mhl c@M;[z[6!Ȳur0%^Oyx*:@yq<(tɸ?Qdpz1".sY1gz9#A'UnwFAɢa˴M* (4ٔ;`6ZCTLIp -}oA!ͬ+mrv%wQq=v鉜[M;gXm D$gd0L|ap#,;Kh3h(di6G[e;+hy8Mjw{3U%Ff+УSs!3*{z"ó@~]52Jge_KpĞO-|(}nGҮ! Q9ljw̺3UlfQm`m)E|wd_hEe҂",M+i<9̄B gq_H"ǬP j R]!Q:zbޙB8Hp Ӄv"կ5mRAsOaf!|Ҹr3X Y#BPJٸ\uG⟣6n.N!fR\! ôafJ>Hf;L:dLTEdNa#)n+Z+ct7{;PMB9 >ݧ n ̴UIaq;NW'{9% =[m>H{BCo0%t )&H۞d8G*hEJ?%cL2բmOAt?)X_6d+ٙ15hn_h GW=nrጣ{9dT*$8oM`##-tbs8[`SߑzS };s,` %tX{. @" }/ >׽~P.1"mysuYY3T k #P%RAC@M?a1g,E#~OU$,Bna: LIr𲽱i1޶2[0{Y2u=KM6WVT("Hw[L6xQ%oV5wYG%][{=/uݒc{'ZdNe" BgWqx\)c'h1N:RQ4Y=Lgs rciRby~5,?/.ǐ=7S11n5ؖIJRY[kͩ(E&9`׿IQ֡-{YFʊlTMQ]2Al>|gϞ2'0AKaW=uEo6lXGȂ-2nQc0Jہi9R+vz%9u[@pG|_ZlAqO*" a3^pI(`'mm<}&SIJ2FS'T2s,-;]@Zb]8 ӫ&gI[N{e(E#w›FLRVW!tT>PZ"'m; :$O{zߎC[2%H }_{|5sƅ7 TUr %<NXS>-J^"©'f2lt2<-Q%Oc6Ǯcn$Рz x/W^#^u1Jņj@T;y\Cb /D턈Os(Mɕ!BW.P LqsNCR_0/f5d^j,`F^ KuͻGSV/Gң|; Kj@СmttGKIO/}x8ѱ+kgCL7|FV<6VUD⣇|]79_Kw'ɬ̔p. @kR$j>#^f%O`QnKpX%Ϙj^rȈC[=bgHWL⻔ sOgg[*`3fT³k=.TK'ѭjK8eՁRRw~a(@a~0떄`h#X;$S|rX駯$k$ צ.:y8M:A|Z|ܲ MqFp 9q2oC1zq/F2m]t^$Ô4gn ?$LhğoHz`Q|)`D3JpY6eXZ/ m\Tb[cmD(ֿdO>)FXU˜_Vn;71 *VsEjjk5 ~]2R(l{zfsfwfgjPVke+b6CC"fu`%>eKUvHG6rLF\?_Ћg=ȧiqݎ=ts9ԽGWe'6MJr62ի2EL[)Upq)1‚.O|Awtn|VYtS_hUIŲ2P^d˯B wq688c]6l>ٱzj\%NRG;FW :x B#lPԀH YhPQ~NwBK:DdiΠޖ<㹗!CtܷbJ,3j/X)η@Q fj,UԚU&f'%o_&r|QW!_ _;hUh3, 4Ȳ.A5\]_((V:rm^h ]0A;38rn_6LG8Wҹh쐔Iҟ [J'ayoCbhEssϲ':gm1YTGW҅Ɇj%XGn;܎C02$sH !OBc-JF:ڑ1@z *O|CnP~M.=Eg)'[ZynmUʖ4"ԅTOkC/򮮣mXI$RFoLEͭcNHF_印ڧ#Z"-یRs,_ChX'yQw緧5UUxJ=gKɝ .zϗ JM[-?ˁ%:Ń]){eTو6["GeaQLo%n@>.̈́U$B.fÇX,eg̼AYֶt l{{(Vc2FqN׶׼}W˪z!X- ":qyPgyU ZwnŸ! /:*`΁ PDwHA)])SQd\8$sG8ڻ^Ev$j:k7)f^Xrni V$L/+#SED#Z lT_Q;Ybo~1\_bT|)NA%}v|SoE`\vX _LvH5ۨ<+/e;5 ?a- 3&iWX22.+E^Wf=FIzs1D%{pF *&_}пtQ_oS;7Q= ͋v11m xo J1谬83!p-v%e"m9<0ɣHz9䛎 r ][ZT.)~qS^);k{J?q|aRd.h(CheKn )ȶq p) 2wC>GӦ~Io;nbqהn@6۝K={57̿I@$'̕A 8.U m G'd=vE1r?ӵ1v?kXߞLB!Ga7vMH%@g83m<!HHu-0I3L\?l_$3wp5IB:Fky 7 zwMOJr&`ߠH::hyju_2I^M))=2}D_aO={=ItGz_$b*Sg-aldqJ`eVfW5AāJNc4|# wng耫6-GO]} _K7wc l,&Cb Rx\?q^Щ}7]O-92  gkQ6  4c5߷YAT.HI$ /'v/I@K^0nhs|KʤM6A4S9uތ*]1D1%ʱ;i?E߳ *|t $E%g[ɫߥ*}h()1v yժV(C'Z?]cLgtEf% ~aR%r/T8` ]Zz`.@I eGh71UTJj*f y EpPu[Ofnï(E)Fw cƃI |I>+0<,Vi6i/i?dW8USIhnu7a&Z|'W7t?&JaG%!Ȯpݩ. >ӄ}bMG6mN:7jǼf+|qs2P9 <˔86ԋJhBXґfIb^ p8.>D"(f4w煓 9+1(E'PmW{q7c(Nj'@J",4eW# }͙~5zإ)v 2 4z&n$P~03"/OSRR7uG⠩wl;zȀ@2+xM{ZJ=I< }dh2}h1 rnwnhT%,>[i!{Ы3u p=ǷY37PpSE5/( SeդX 3H/d54:@eYs'LLT]Mb>(?Iƀnd _N- i~D@I&8,h43 Aqڊr0o-ܛF=)FI'y͜eO@)\v& /Ibz>Ã;s;=B'N>:RaL9,*v-&g|&ٗI!fDX/$5[V(`V(9fdbj}LXu71|n1MxG⵲e:P|¯pNcm&E0%pq}RY> ^VНoB]@7$6y*5DS sEUr/9ݔs RC<&"47bopOb%ZR4PU̍J'J&F NkHAܖIϹ6όrnsr?yW:rܦmXn"Zs]}j*z@ p-O1)8a 45eTw9]Ey:pjK$mt0ihVGf*]c"6UG*nǖc+;<3dZ7C6kb`r$#:?T$g|I2Y*@DJ'|b1yd8?1Dn#~CD e~N} WZbߙ̮Xgƒ FK#\7 bJr̙L6D_v֎er}hP"͇N }6;nթ0N)U$9O7Oo0am8LsxwiD QKCw!̓UKo&r†+(x~cm"6$m*o2|&2cOoJ>/󹩜L?WH^y#HX׵'RD?DLrP+UkhfƯF{7l])Gdh &0FUfWCgDPX$y;@y[:B5խ:-rX槡h1˰2{۰KF.`7k@|AHfU oPnL_ʥp20& *X#B\nWSzO($O*$䣔dJ,/yT)T0'K`(*W*ZtlD{OXfբf_l7">(dU&;e: 'BX;Jw9oZnSѕl/pѣmԩ9\neۼ%X. mIleaLSkRv(d03K dޢ&Qh5#>`dV^hүܽDV@k8Z^7K{huY5UU"7|Ue*#d化<.lژ;B0-IÛ`A7 2i!w/>ކݐ|c7;j-[$ h&7)yZ]h-ӧl\1*CrzO+)f$w`Gː0Y Z}oOy-'cƮc!%4N"3F=,V"5~f oo'P `xcۋfs `C@!!C9XeB;>hx=#f4 c`=iq> a豃]{[Y۟6T绯 B'(5y<#Ai9R++o| 9af(M;$ulSA_8VI2;䠂tm,X|%E|sZoȓgSzf{+i q]We $e_>rT7m>[/DMG/Wa~~rۦG"|ں+ӍwgC? d}M|'| =^<~7jm5>7e?R7Ϲ7>|:'{5O<ݏ''FĆ'fr$ erwfѷa*26hWqn9Ϗeg 4w]FCV'ƛBW7;+%|+>SMBOPnӌ81w?˓rle ' vmu4w;?e7KӾ> .G,D$sj##"]/<†ֳZT()l@y odF@pSKLT|gF ޘ_xP4w豬Xm2l^w"A tA)ţu|DM r%׽6Bo`=K҇&i 6.}'RP  ۨ&rD le/ޡ~"](&ێ t3>H" DC$P`ր%""JjD8 n,LJ(:ƛ\#Yʿx?Qp^_R'pAg\sF6d1@'P'?7͏{hC{P7;o[?Y@~FP"c6S߯w2O߰_bx ɉA0(+DTDUAYD(F'#JBIz o8,sm𧍂]u:6*}Mm$"9{%=E@ avvwYq PT|%(JDF~^Mm.Qx>Qo@: {CuPȈ X;^kyx*Ys 3"v:[lV`Oϵ8%uuֻqtt&hpq9):y0Իvp^V+f /[تC\Q1{a$hx!q n2P;yz-K-*Y~?u#n- ջe?珽NkO֚~wW6[[ݷ'|oZGt=%_?3}WxwK/=O񸽾껿Cz_?{s/{W}?_ӹ;߶n״.˲{W_ux?M:h`^O$ՂkP$r~2߈T D@ mEr&Ӷw@! k^WRioaq@0 : Iln:Je٠5X{o=5Eְׁ: OJaD2[YwҍL.sZs@Nw=;}uDaPуɪ-dҜH)5 {U ֪Ͳ9D@Ȉ.[`5R (#)CrE$Ax$RS[޻Ū^UNYϡdAR F5E"ddi?X}@Pm#`nsELDxfΌ9!!'S[Fb'ץ&(Z?v+chf 8@OdOw]w{mSɣ^zNZBY)^c_Zng<,TUb,fbݷv%DLC=xy  Qu" GuPFk5\R:c+<)w(r-\/Ю'3l!>}9vEPT}b[@ߺs+6{ݎ;uɓ N&ⰑU [cf~&h?_y?~.~/ Ms_yGl *?/v$V{A2, *|3XVcЦoOsXdx=qa..oLa_Rp/CU]>ɕE uyeDSQ:/K`=kCSr>}-"β4pLޝ }ohaWL聿. ֕FUA2Sirl( |i #2pou|B 9"'"޹c|ow]mg2V]U]m7zf-weA:'MVc#H %#M#1ZPT!,K o)TYbH*v_ͶO6CϗYP?ĭTR5ܾ<"~* DAx/5EGo߸;k0;^(K6UT[• P3BUقM8wj ОqsUcbZ߽@b4ۧ㱹Ǚ_ U "[!ۡ_=߉;0P1@Y˼P[_H f҈HdIz[ 0K2IZVf/ojE:VrM.mCx_+騢/Y"ޒỦ>_:?vSX*#y)QSx;ک$ P\o_Gɻ*#̢2@+l@WYO,a@ 5+eT<Û, rJ,;-\  (4CN2/"3H}&) .ȟeAYp8T"]ėn]_9XEԐDBVt,`(P@D _Nk^v *(-bZ[m tuY[gW\h'Fr0A$Z>#I線!,Lx`ҠLHi(q E@X^1x`k-VUSQ~C\o,2wx?ןaёrbB>h"=ͪ|ac!dt"@wk@ 5-fu[4_bϊa./,ߦ|l{FVӾd.OA Od%r8ie}7fΎp?[ueG~oeO}o_p0*xnEb BZ޻Jv|}EpMF|Sퟙ&[?d1ecY[ _'m9&:c|D@dķC[`f3S=%mGbӆqYS}ʃW^Ŋ}Xv.Ao‘ҘiE}~*&B "r|) z?Tx[&P#0 3$$*6W,/ -e?]a1ujƙn- u3}Twfǐ%#!0: ΢O}y.ay^? !.I DE$D* &Z}/&ob,邦o'>3%o м4GN_ɩiy|Fa:ψ\f#A8ڇgl@!H" ޴מ0Pg1\Pr^rY < j8 ľ|I85N>}oɄyozߏ'$9eRBEHu(ϱ1Nk_<`պ XvIQmxZ-휟 [q걜?|4+lKJ ?r m QpwOo۠*zιcejkx)EFZc6Lh3 epr[M+?'md;[ږR?8zbwz̀z (v}7F X˭VN?&O9D_P/Ne˵<Td07Eʕ9S9S6wcH%09}x)s鸔.f,{s?b_LKPp*Oo{AJBq! DWԄ^y?^ק,Pi"=R\mq+I B]x~x]`6D!Fmn~Pwxhe?Z `{sѐŀ M?:*u|.u?56iJ5^^Ur@A-&S Ss^ZYP9^g? PXoV(}l5j fg=_%[cCVY&S3r 7p2s6LA4='GX00;w^=N i/? =-1+y-f/ZILBD%I(f>gOVwej@=4/"<„E7f: ]u*J/ Es<[&IX{KJ\RR_z.pو\<;X+-Hٜ"|Z&ə5tNc3r[@y=_j/DNdm~*/MG+,si 6`ȅSBmBy^w.:1Ԫ,GD>`d]G?g tH?zH |_n} %$C Rz|WuX (@Ŋ|sD<ϟգo=:Ozꍂc—0&b,Q/;۪)jnQ+ +C'