nsd-4.1.27-bp151.3.3.1<>,3_ˋK!M@eee. ѭ4^acsmtܢM,+?%iHSl!)IɫN4?y~+b Ghx̌ܲ8Eza{ʏOC[l $SgIP dHkC"X&6H $v.} o P ø#.Dǜ P30KT-M ~#DOAYvD֠SzjyW=֌+jb|FZ{>FH?8d   B+ Dhf F AQQ Q DQ Q &Q &Q(8Q)Q+b+Q,,"-p"/"(0880@90:3/=c>k?s@{FGQHQI QXtY\Q]Q^Gb"cdkepfsluuQvwQxQy1z4Cnsd4.1.27bp151.3.3.1An authoritative-only domain name serverNSD is a complete implementation of an authoritative domain name server, developed by NLnet Labs, with the purpose of creating more diversity in the DNS landscape._ˋKs390zp21+SUSE Linux Enterprise 15openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://open.nlnetlabs.nl/nsd/linuxs390xgetent group _nsd >/dev/null || groupadd -r _nsd getent passwd _nsd >/dev/null || \ useradd -r -g _nsd -s /bin/false -c "user for nsd" \ -d /var/lib/nsd _nsd test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in nsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in nsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-nsd-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-nsd-update-$service-new-in-upgrade" fi done for service in nsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fisystemd-tmpfiles --create /usr/lib/tmpfiles.d/nsd.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset nsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in nsd.service ; do if [ ! -e "/run/rpm-nsd-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-nsd-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in nsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nsd.service ) || : fi fi+Db >w^8 RR sl&;t!p3 PG< 4>=E y \ , @-T :'.p*0D fA聠AA聤A큤A큤A큤A큤A큤A큤A큤큤A聠A聠_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK\RlQxtRCMmRpVL;\-D3E;_ˋK\E}VL;VL;RJD3\*[2\*FVL;FFFM\*FFFFFFFFFF\*FFM\*FVL;FVL;FFQP"aN)K[2[2V2ElTEI˝DJW_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋK_ˋKccae1ce121236eb885970470b82551c23935f0e24611fcd25d07adbb5dbb29fc1fbd36d5b2de3ee43011b4a427d318ba432b1160389011e1c1bcd792057bab1914b9b47ba087d0d9db31a055d9d24abaa177286626743eb1784ff8bfa38acf433f0d543f55ce0d30ac00e26ae75903fb1b93bc26f74c1f8556b2b4ea2f683ce279150a58b4459f9e4f6ea3ac9a242bf905fbe00984436e0687b2805c821163e31fbf49fb3bc785431341159ee0a157c94e9a3b6c235e9f79bcc14cc1d4798856bfc8daf2b9855973766d87f5b802b6a3268d584a997f14737a681c58586b0909267c53f965d1042196d4d2a20f221ab406c559c87c3cb721d32d19e9fa5bd457297917b7a5ce8ba504b481c4ff7a2593cb29bfef8152433357d07241ba1fcf5b900884b6e9b0b62b794e5c6c0870cb6609fbfd7df30995a2385c50eab34d938a31120f2662823bb1ba7b4f6fa789ab61edb5578c3d5b51b463ce65ede8884669989b2611626ad1e0963c303fb6613297194cd4f9030a36435ff7153f666c8d95dd424c976374db412f72fbbb356b3ac0bc96c2dc54c22e4f2ca781b9cc92e598d8b786247845097f9d9a47d6975d1ef3ea7307030f6f56ebe9829895ffc82bf407d7020e19a8aa84c18542b8e6ac11b18f81a2444285c8462bbe5f59dc8b1698bba8fb0dc5d5b5694a6488fe21887548215230565ecce1baffe4c11287cb61d43a8556994bf4fee9e917475025c4dee1672b7c53709110750f3036a7d84b6a96814db3bd821e858e067b8c7d51248597b9299a72cb1496c60180275d71abfc7327e1ba7db78545406d464938096bf49cd15aa5829e9693d98571630bf7f9e8c84584283afdad14f3b1f89bdf5382d1df2a3d89b1f8bdc68511a23be7a420657fca2f23198a5e9961ae47751453194ac17257eb6c2be62cd8e10c17156741baeadf56307b290f18d35f9322cc47c6249118ccfffff959d293b4958bfad7151b680f8bd4177f2b4fdc75f566dcea26dc389b7baeb97bd6b2345a5e92f7935904d455722c18776b4f28cb386bb5b0830b614f77bdf870a59aeb80efe3e60243ec5541340d304d976b2b6332c71c5d88eee989b3aebf0d2a64bebdb4f4db5788298b98a7fa466680b2648eb79c070b3f22387915a1e7c9d5e1129c3a6a47d38a3dabbd85110a5aae6619972a07d9c8fab6dca4a32d878abc58042d4d4b37806f1f068af43fb58ef7d134dcc7c28b655013f28bd999b783234f5c0e3b64febee1cbd59ab05456cbc9c60c5f108d51ba9aedad5072cef31215e77afd8716d461539169836eeac955665497af1fefb9fa809cbffb78d04340aa766c73c5b889d7a4f2fa90edeb043b74d03857ea93562766cf63dddd79d344ac888728c773bb685d8b3caa477a0c297c4cc0d026ca518810f6c3374483b0cf9bb9c6ace1d88dfe077022c4d77721ffe7385615d2ca2ecbeb362f817ed1d5357c740f03ecdb0df7c0db1f6fbce349f037cb2aa4162aa1b3dd0f13a00e622a2e4dff769fdec295e6a4a246d50b0aafdee11eac15d84bcca67e630420adc5e01032be761edb625dc49c60a887ca61f0d12ada031833b47547775247ebe7409788a7ff4edbe5eb785b7a41872faf823a4186a4b258a5efd4d31792193f7c01cbe6774941970ee4c3b37d63d98c5af12bb4ecd1d09ba7f7ccc32d876abdb2998d382ef72437b9f1d02d64b8a753be85fe4caf50aadd648fe1ed3070b57ca513cb24bd41b059fe2c78a97378fc471a0899a7def8cc53e0939044dc573790e6e8e0661c0dd117b6517af512a92a214db4a074d530bcf897954b3cb8010560c66b664ca28504e7b77d56d28a50ecea0db8859cd671383c7bfa591d70f73f5ef123488ae120bb489ea608ca1947bf14c93f3dcf868c51816cf028ede2eb683c568772c77e8257986e699366906b8957edfefe3bcd9ee86a5b94b8f1e1879632be49339a36ddcca6fa9546ad5d67434d2f0880b8a0570b101d5e120a6ba985dffe443fb6f040ada2a4e1d9608220a6625457f9f16ad0b3928c23c0ee61f4e1909c96c005fd6b4438e1cd56b3eb77c6a470e83e13ff94ea00ebe1fcf9d3ec529ac4388f06ec5d26939781e01b9a0b539e046f2d33e072fc1947fe305963f0e95d436a1cebb80b3ff79fa32434a61928e5a2722282712cb3e7036e148baf6ad2cbb8687d310d91b11f0b7eced9c99dc967543efd724fbacc2c4b7b42f75cb4f8de763020f0cddb8841f027b359f29ab4235a653740b5f5abb16765f483a7075807bfbbd71897be264a66bd822f9ae91f4203aa5be4ec35f99fe6c16fb7472fe86e6b6c34eb7028d820e0fd34fce3b0bc81de8f1352e0844798f32646aed8a3d0035d74be658f5f0a738e380a1793cc4930a2199a8d9933540494783833ef3447731744263fa0c1c0f05bb30416a507399e43ac56336ed67c106506aa831efff0ece5558f37e901cfdf8dde916d3dbe78709714b958eb8207d40ebbc6f67581f883dbea8db090581cee7c69335ad4f928fab028c822d4ddc930752bfc58e8a8c9302b997f8f6b15d08751d59f2d031c2e71650d7b2950288936ba0b23e8310a92dd84305faedb154ea2869ed7edb86a2ddb917f440738d176d59543512fc9e0abcaf73dbc1ee48eccf32f666734be071f44467963a92eaffc837b656c7749bf5d2308a18f1994e8b22a126b60702b05b86b48f0d62a6026f81d20213b2de641adf89c68f16be84dc52655b84f2e9074af5f34b6ed4b13e8bb2220c86f77bd2afc1340106b6a6f52034f2eeaa5b3c666bb5e4a32ae806ec9a337f61a3975011ba0973469553d5836fdb4fd32e3bf136151serviceA@AAA@root_nsdrootroot_nsdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot_nsd_nsd_nsd_nsd_nsd_nsdnsd-4.1.27-bp151.3.3.1.src.rpmconfig(nsd)nsdnsd(s390-64) @@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(nsd)coreutilscoreutilsfindutilslibc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libevent-2.1.so.6()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadowsystemdsystemdsystemdsystemd4.1.27-bp151.3.3.13.0.4-14.6.0-14.0-15.2-14.14.1_ǁ\\l@[#@[qr[^[;e@Z_@Z@ZZZZxG@ZKt@ZY@@Y]XXx@W@Wt@Ws@W1@VuVV@VUV@U.@T@Adam Majer Michael Ströder Michael Ströder Michael Ströder michael@stroeder.commichael@stroeder.commichael@stroeder.commvetter@suse.comadam.majer@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.deadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.deadam.majer@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.de- CVE-2020-28935.patch: Fix that symlink does not interfere with chown of pidfile (bsc#1179191, CVE-2020-28935)- Update to upstream release 4.1.27: * FEATURES: - Deny ANY with only one RR in response, by default. Patch from Daisuke Higashi. The deny-any statement in nsd.conf sets ANY queries over UDP to be further moved to TCP as well. Also no additional section processig for type ANY, reducing the response size. - Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds nsd-control print_tsig, update_tsig, add_tsig, assoc_tsig and del_tsig. These changes are gone after reload, edit the config file (or a file included from it) to make changes that last after restart. * BUG FIXES: - Fix #4213: disable-ipv6 and dnstap compile error. - Fix to reduce region_log_stats if condition, this removes a debug statement. - Fix for FreeBSD port with dnstap enabled. - Fix to remove unused code. - Fix #6: nsd-control-setup: Change validity time to a shorter period (<2038). - Fix unused definition in header remote.h. - Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big. - Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets. - Fixed radtree_insert memory leak. - Fixed access recycled variable.- Update to upstream release 4.1.26: * FEATURES: - DNSTAP support for NSD, --enable-dnstap and then config in nsd.conf. - Support SO_REUSEPORT_LB in FreeBSD 12 with the reuseport: yes option in nsd.conf. - Added nsd-control changezone. nsd-control changezone name pattern allows the change of a zone pattern option without downtime for the zone, in one operation. * BUG FIXES: - Fix #4194: Zone file parser derailed by non-FQDN names in RHS of DNSSEC RRs. - Fix #4202: nsd-control delzone incorrect exit code on error. - Tab style fix to use tab for 8 spaces, from Xiaobo Liu. - Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails. This sets the msg_hdr.msg_namelen correctly after receipt. - Fix to not set GLOB_NOSORT so the nsd.conf include: files are sorted and in a predictable order. - Fix #3433: document that reconfig does not change per-zone stats.- Update to upstream release 4.1.25: * FEATURES: - nsd-control prints neater errors for file failures. * BUG FIXES: - Fix that nsec3 precompile deletion happens before the RRs of the zone are deleted. - Fix printout of accepted remote control connection for unix sockets. - Fix use_systemd typo/leftover in remote.c. - Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu. - append_trailing_slash has one implementation and is not repeated differently. - Fix coding style in nsd.c - Fix to combine the same error function into one, from Xiaobo Liu. - Fix initialisation in remote.c. - please clang analyzer and fix parse of IPSECKEY with bad gateway. - Fix nsd-checkconf fail on bad zone name. - Annotate exit functions with noreturn. - Remove unused if clause during server service startup. - Fix #4156: Fix systemd service manager state change notification When it is compiled, systemd readiness signalling is enabled. The option in nsd.conf is not used, it is ignored when read.- Update to upstream release 4.1.24: - Features * #4102: control interface via local socket * configure --enable-systemd (needs pkg-config and libsystemd) can be used to then use-systemd: yes in nsd.conf and have readiness signalling with systemd. * RFC8162 support, for record type SMIMEA. - Bug Fixes * Patch to fix openwrt for mac os build darwin detection in configure. * Fix that first control-interface determines if TLS is used. Warn when IP address interfaces are used without TLS. * #4106: Fix that stats printed from nsd-control are recast from unsigned long to unsigned (remote.c). * Fix that type CAA (and URI) in the zone file can contain dots when not in quotes. * #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM chain, NSD leniently attempts to find a working NSEC3PARAM.- Update to upstream release 4.1.23: - Fix NSD time sensitive TSIG compare vulnerability.- Update to upstream release 4.1.22: - Features: * refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal. * Use accept4 to speed up answer of TCP queries - Bug fixes: * Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. * Fix to use same condition for nsec3 hash allocation and free. - Changes in version 4.1.21: - Features: * --enable-memclean cleans up memory for use with memory checkers, eg. valgrind. * refuse-any nsd.conf option that refuses queries of type ANY. * lower memory usage for tcp connections, so tcp-count can be higher. - Bug fixes: * Fix spelling error in xfr-inspect. * Fix buffer size warnings from compiler on filename lengths.- Update to 4.1.20: + Fix memory leak in zone file read of unknown rr formatted RRs. + Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.- Own missing ownership for %_tmpfilesdir- More specfile cleanup: + Drop SysV support from package (and hence usage of fillup) + Don't redefine %_rundir + Drop useless BuildRequires on systemd-devel- Check group existence before creating it, for real. - Stop deleting users from the system, it might remove a legitimate user that nsd unfortunately shared its name with.- Create a system user, not a regular user - Check if user/group already exists and are in system range - Do not ignore return values from user/group creation - Own the config zones directory- drop insserv requires on SLE12+ and openSUSE - nsd-lintrpmrc: drop most overrides - don't install config file as sample - switch to using user/group names _nsd to match expected names as per recent rpmlint changes as not to conflict with admin created names. - update and change current owner during upgrade- update to 4.1.19 with the following bug fixes: * ignore fallthrough compiler warning in flex EOF rule. * Fix warnings emitted by clang for --enable-packed. Alignment is not a problem for x86_64, don't enable packed when the platform requires aligned access. * Fix spelling error in xfr-inspect. * Fix 3392: Fix regression in 4.1.18 for notify lists with ip4 and ip6 targets.- update to 4.1.18 - Features * xfr-inspect, it is not installed, it prints xfr files from /tmp made with 'make xfr-inspect' in the source dir. * retry timeout between sending notifies dropped from 15 to 3 sec. * NSD sends 16 notifies simultaneously. * configure --enable-packed reduces memory usage, at expense of unaligned reads. Saves about 17%. * Save memory by selectively allocate precompiled nsec3 hashes, saves about 16% memory. * make ip-transparent option work on OpenBSD. * Save about 2% memory by changing usage count size in name tree. * Fix #2871: Increase number of sockets for xfrd transfers. - Bugfixes * Fix gcc 7.1.1 warnings. * Fix writev compile warning on FreeBSD. * Fix #1446: A corrupted zone file "propagates" to good ones. * nsd-control zonestatus prints wait time between attempts, for zones that are in that waiting time. * Fix collision printout of nsec3 to print name, hash and reverse. * Fix #1567: Change crit to err log level for gettimeofday failure. Add defines for compile without syslog. * Fix crash for DS query when parent and child zones both configured in nsd.conf and parent zone has not loaded properly.- update to 4.1.17 - Features * zone parser parses type AVC (it has TXT format). * Fix #1272: use writev to put tcp length field with data for outgoing zone transfer requests. - Bugfixes * Fix potential null pointer in nsec3 adjustment tree. * Fix text format of deletes for CDS and CDNSKEY, single 0 to represent empty base64 or hex string.- update to 4.1.16 - Features * zone parser can parse acronyms for algorithms ED25519 and ED448. * Fix 1243: Option to make NSD emit really minimal responses, minimal-responses: yes in nsd.conf. - Bugfixes * Calculate new udb index after growing the array, fix from Chaofeng Liu. * Fix missing _t to _type conversion for disable-radix-tree option. * Printout serial error with hint it may be too big. * Fix 1228: OpenSSL include is not guarded with HAVE_SSL * Patch for expire state in multi-master when masters includes broken master, from Manabu Sonoda. * minor manpage fix.- update to 4.1.15 * Fix nsd-control and ipv6 only. * Squelch zone transfer error address family not supported by protocol at low verbosity levels. * Fix #1195: Fix so that NSD fails on non-compliant values for Serial. * Fix to rename _t typedefs because POSIX reserves them. * Fix that nsec3 hash collisions only reported on verbosity level 3.- update to 4.1.14 - Features * Fix #1132 for SERVFAIL zones perform backoff, and remembers the timeout on next startup. - Bugfixes * Fix null memcpy for radixtree with single link element. * Robust fix against missing master in tcp_open for xfrd. * Fix wildcards in include: config statements with chroot enabled. * suppress compile warning in lex files. * Fix to try every master once, then wait for timeout or notify. * Save backoff timeout into xfrd.state file, this file has a higher version number now. Old files are skipped silently (causes refresh) and created as new files upon exit. * Fix restart of zone transfers when new config becomes available.- fix tmpfiles-nsd.conf to point to /run instead of /var/run - add nsd-rpmlintrc to not display some bogus errors - put log files into /var/log/nsd/ - put sample config in documentation directory - update to 4.1.13 - FEATURES - multi-master-check: yes can be used to check all masters for the last version, using the higher version from the configured masters - Support RR type OPENPGPKEY from RFC 7929. - Can config key algorithms with the digest name, eg. 'sha256'. - configure --disable-radix-tree for about 15% lower memory usage. - for type SRV add A/AAAA to the additional section (if possible), just like we already do for type MX. - more extensible edns option handling. - When tcp is more than half full, use short timeout for tcp session. - Patch for {max,min}-{refresh,retry}-time - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173f - BUGFIXES - Fix compile warnings about unused result from write and strtol. and signcompare in minmax retrytime. - Fix #812: fix that make depend fails after distribution. - Fix #817: xfrd update failed loop. - Add robustness against unallocated data in nsec3 trees. - Fix README spelling error of BSD license - Fix multimaster for not tried full zone transfer for a expired zone. - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0. - Fix malformed edns query assertion failure - Fix build without IPv6, patch from Zdenek Kaspar. - Fix #783: Trying to run a root server without having configured it silently gives wrong answers. - Fix #782: Serve DS record but parent zone has no NS record. - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.- reword description and summary - add signature file and basic keyring (currently only contains signature of the released version since upstream doesn't seem to distribute a real keyring) - remove redundant nsec3 configure option which are enabled by default - remove obsolete --enable-draft-rrtypes configure- update to 4.1.10 - FEATURES: - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down. - NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size. - print notice that nsd is starting before taking off. - BUG FIXES: - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. - Fix #751: NSD fails to occlude names below a DNAME. - If set without nsd.db print "" as the default in the man pages. - Fix #755: NSD spins after a zone update and a lot of TCP queries. - Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser. - #772 Document that recvmmsg has IPv6 problems on some linux kernels.- update to 4.1.9 - Change the nsd.db file version because of nanosecond precision fix. - changes from 4.1.8 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch from Daisuke Higashi. - #739: zonefile changes when mtime is small are detected on reload, if filesystem supports precision mtime values. - RR type CSYNC (RFC7477) syntax is supported. - take advantage of arc4random_uniform if available, patch from Loganaden Velvindron. - Fix flto check for OSX clang. - Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux. - Fix #736: segfault during zone transfer. - Fix #744: Fix that NSD replies for configured but unloaded zone with SERVFAIL, not REFUSED.- update to 4.1.7 - support configure --with-dbfile="" for nodb mode by default, where there is no binary database, but nsd reads and writes zonefiles. - reuseport: no is the default, because the feature is not troublefree. - configure --enable-ratelimit-default-is-off with - -enable-ratelimit to set the default ratelimit to disabled but available in nsd.conf. - version: "string" option to set chaos version query reply string. - Fix zones updates from nsd parent event loop when there are a lot of interfaces. - portability fixes. - patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new defaults in the ssl libraries. - updated contrib/nsd.spec, from Bálint Szigeti, with new configure options. - Allocate less memory for TSIG digest. - Fix #721: Fix wrong error code (FORMERR) returned for unknown opcode. NOTIMP expected. - Fix zonec ttl mismatch printout to include more information. - Fix TCP responses when REUSEPORT is in use by turning it off. - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. - Explain rrl-slip better in documentation. - Document that ratelimit qps and slip are updated in reconfig. - Fix up defaults in manpage.- enable zone stats- update to 4.1.6 - Fix compile of zonec error message on FreeBSD. - nsd-checkconf warns for master zones with no zonefile statement. - Fix start failure when many file descriptors are in use. - The servfail rcode is not printed with a space in the middle. - fixup file descriptor fixup nicer. - print failed token for config syntax error or parse error. - Fix #711: Document that debug-mode yes is used for staying attached to the supervisor console. - Document verbosity 3 prints more information. - makedist.sh print on pgp signature creation. - Fix typo in zonec.c inside error message. - Fix #701: Fix that AD=1 set in a BADVERS response. - Fix #706: default port 53 not opened on ip4 because of getaddrinfo hints initialisation failure. - Fix #698 formatting errors and typos in nsd.8.in. - Add --enable-pie and --enable-relro-now options. - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. - Fixed checkconf test for reuseport setting. - SO_REUSEPORT does not work on FreeBSD. Enabled by default on Linux, not enabled by default on other OSes. - Fix that notify from nsd-control contains soa serial. - squelch SO_REUSEPORT failure on verbosity less than 3. - removed hardcoded interface limit, --with-max-ips removed. - SO_REUSEPORT support. - Fix #618: documented need to list ip-addresses seperately in nsd.conf if there are multiple, because the source address of replies can otherwise go wrong. - Fix that for expired zones NSD performs an AXFR and accepts newer and older serial numbers. - Document that minimal responses only minimizes responses to fit in one datagram. It does not minimize smaller responses. - Fix NSID response for short edns sizes. - Trunk contains 4.1.4 in development. - improve nsd-control usage text. (23 june - added to 4.1.3) - RFC7553 RR Type URI support. - Fix redefined macro lex warning for freebsd flex. - Fix that formerrors are ratelimited. - max-interfaces raised to 32. - removed unused defines for unofficial tsig-hmac algorithm codes. The TSIG algorithm is identified by name in the config file. - hmac sha224, sha384 and sha512 support, patch from David Gwynne. - Fix crash in zone parser for relative dname after error in origin. - Test for zone parser failures - nsd-control addzones and delzones read list of zones from stdin. - Fix task and zonestat files to be stored in a subdirectory in tmp to stop privilege elevation. - printout names for successful addition and removal with bulk command. - Fix #665: when removing subdomain, nsd does not reparse parent zone. - trunk contains 4.1.3(upcoming). - Made log message more consistent, changed 'axfr refused' log message to be more consistent with other messages. Also notify refused. - verbosity 2 logs axfr refused and notify refused. verbosity 1 contains less log messages. - Fix #654: Fix contradiction in notify logging verbosity level. - Incoming notifies have serial number logged (at verbosity 1). - Fix #655: Fix contradiction in verbosity for zone transfers. - Use reallocarray for integer overflow protection, patch submitted by Loganaden Velvindron. - Fix allocation integer overflow checks. - Fix buffer overflow in config parse of domain name, reported by John Van de Meulebrouck Brendgard. - Updated default keylength in nsd-control-setup to 3k. - Fix use after free after zonefile syntax error followed by ttl or origin directive, reported by John Van de Meulebrouck Brendgard. - Fix syntax error followed by too many TXT elements parse crash reported by John Van de Meulebrouck Brendgard. - Fix origin directive from unused old value and subdomain parser failure, reported by John Van de Meulebrouck Brendgard. - Fix b64pton out of bounds error on invalid zonefile input reported by John Van de Meulebrouck Brendgard. - Fix segfault on double origin in zone reader (thanks John Van de Meulebrouck Brendgard). - Remove dead code domain_table_iterate. - Fix segfault in zone reader on invalid input reported by John Van de Meulebrouck Brendgard. - Fix #642: Change 'zone read with no errors' to '.. with success'. Patch from Benedikt Heine.- ignore absence of the systemd-tmpfiles command- update to 4.1.1 - RFC 7344: CDS and CDNSKEY (read record types). - per zone statistics with --enable-zone-stats, config zone with zonestats: "name", zones configured with the same string are added. - Disabled use of SSLv3 in nsd-control. - nsd-checkconf -f prints out full name of pidfile (with dir). - Synthesize CNAMEs with same TTL as DNAME. - Fix that expired zones stay expired after a server restart. - Fix "xfrd_handle_ipc: bad mode" log errors when compiled with - -disable-bind8-stats. - Fix #616: retry xfer for zones with no content after command. - Fix char used as array index warnings on NetBSD. - Fix that queries for noname CH TXT are REFUSED instead of nodata. - Fixes for wildcard addition and deletion, speedup for some cases. - Fix that failure to add tcp to tcp base does not leak the socket. - Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE. - Fix spinning NSD with lots of failing transfers, due to pointer comparison using void pointer subtraction (from Otto Moerbeek). - Fix bug#637: fix that nsd.db grows limitlessly, an off by one on one megabyte free chunks, created during AXFRs of large zones, that caused the one megabyte chunk to be leaked. - Fix casts for ctype functions (from Todd Miller). - correct some hyphen-used-as-minus-sign (from Andreas Schulze) in man pages. - Fix zonesdir chroot error message.- update to 4.1.0 see /usr/share/doc/packages/NSD-4-features for the important changes/bin/sh/bin/sh/bin/sh/bin/shs390zp21 1607174987  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS4.1.27-bp151.3.3.14.1.27-bp151.3.3.14.1.27-bp151.3.3.1 nsdnsd.confnsd.conf.samplezonesnsdnsd.servicetmpfiles.dnsd.confnsdnsd-checkconfnsd-checkzonensd-controlnsd-control-setuprcnsdnsdCREDITSChangeLogLICENSENEW-CFG-OPTIONNSD-4-featuresNSD-DATABASENSD-DIFFFILENSD-FOR-BIND-USERSREADMEREADME.iccREADME.svnRELNOTESREQUIREMENTSTESTPLANTODOUPGRADINGcoding-stylecontribREADMEbind2nsdCOPYINGChangeLogMANIFESTREADMETODObind2nsdConfig.pyKey.pyNamedConf.pyNsdConf.pyParser.pyTokenizer.pyUtils.pyZone.py__init__.pychk_versionetcbind2nsd.confinstall.shscriptsbind2nsdnsd-syncs64-mkpws64-syncset_versionsetup.pybug390.patchnsd.initnsd.servicensd.socketnsd.specnsd.zones2nsd.confnsd_munin_differences.pdfdifferences.texnsd.conf.5.gznsd-checkconf.8.gznsd-checkzone.8.gznsd-control.8.gznsd.8.gznsdixfr.dbnsd.dbxfrd.statensdnsd.log/etc//etc/nsd//run//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/nsd//usr/share/doc/packages/nsd/contrib//usr/share/doc/packages/nsd/contrib/bind2nsd//usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd//usr/share/doc/packages/nsd/contrib/bind2nsd/etc//usr/share/doc/packages/nsd/contrib/bind2nsd/scripts//usr/share/man/man5//usr/share/man/man8//var/lib//var/lib/nsd//var/log//var/log/nsd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:15253/openSUSE_Backports_SLE-15-SP1_Update/aee33069a04f4b3cb8ad7a2a13397558-nsd.openSUSE_Backports_SLE-15-SP1_Updatedrpmxz5s390x-suse-linux         directorycannot open `/home/abuild/rpmbuild/BUILDROOT/nsd-4.1.27-bp151.3.3.1.s390x/etc/nsd/nsd.conf' (No such file or directory)ASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=6ab920d7b3b1e3d6e7d02c802ada0c8b6a1cbc39, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9990eed47dce8ae15a6926e8c0ba2b8cb729e1b5, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d0799442a073cd8e54f1caea6f47bb648c3d7202, for GNU/Linux 3.2.0, not strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=0e7130b7f97326ae03a9e53153164f0ffd527796, for GNU/Linux 3.2.0, not strippedPOSIX shell script, ASCII text executableUTF-8 Unicode textunified diff output, ASCII textPython script, ASCII text executableAlgol 68 source, ASCII textLaTeX 2e document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)empty%0  RRR RRR RRR R RRRR RRRRR R RRR RR RR RRRR R RRRRR RRRRRR R RRRR R "[ŵI(utf-8527af7c4e60b72143052b98b45d6be0141e4d1acedacc9ca802860a172305c04?7zXZ !t/]"k%]eGT! _,hֽM,@dDa]U,17Nٔ4x; <(~+ 3 tmvJA(ãրa%JAԷ?O.QDQmBE/OIJugE`^|nݯTo 42S(tZ*O:Z T/>!Wt)e~#O}P¾aopXb^Y٩PPe|!OMr 0V<ό\h s.n/%UȲ,)(ʆX7>s_h\~OԷ-ΓIqDl ;.;vǐ%V 2ҶP>6x7)Rt2e;L<.Xfm{`zU^hbo~\N1M#/›DFt24ӣQo%![ CtHZr=)0%ԾThwo # bGpN5!ƲPq;ɐm/;^ n9nQn# :9T G'f(&"t#zUJ98XLt\h zbvm4^QMck\s*Dfӧ1Ie̘YTևK*a,_/*+C`ZmbZyEzmIcBG^2%({NFYv;3nY3ܘ c'xp~af=<^I?h?(2挶[ L2:qf q=ִ <Gapzm0_Mεzy.lVϓ06Z=P.M_P,b}>m;![}窽+Dאn'HC|]$Po=W_zvKLǩJ|0d)zZv=*Y0mDKm+,,`<doP~P. OWm,:=t_8 q.Kro"# p{ cgEf>_) +G,J#Zo%&#yAkormiJ=X 5}gByp3 !a}]24\xt/cC :uOEG3„ 8~#b|47l (^o^DU]K Sշ-z`s=y;74dK @~ghO%|:hwҠbu[Ͻ/.r% Hԩy]|{s %XҜU6?:H qӘuvuZ$̟0\viWH *`F;Nn"kIQXtM ~,֌o`SěVߌҌMD{ѣ orp)P-3%c3%,O#;϶ WʞZn)_ԓV'׬>Z=g:O$o3>H|#,q"-ϥod^yx]PrX^h>x߅/`vazA3f}:FE1WGƓ9~F an̓3J}{F=~ZBɎKDVuXXڡfhN},ixGuOkeY[79rgpJ9DujnMrn0GǽfzG.!d=L˺{YKBsi m13/d3;w^Q)UĆc:ݣMwvΫϡ*h1]ZqHw7aeP^}IleQj<.8cՙ/_KilyhXIpߕ>bxu ٝasOQ|Ylg;[I 5 Ug;o&,@ niɩ"HrEX򛚔sDa4=Y# d-,'oQ ]d!(3Ap٣"_C{v 9m?L7lH- 램C1@+6, ]%GQpp+"IfѤxٗudkj;u:.#^}HH$읒'Q-qnޙGg&`h#E9}*pv;m hj,)<僦DWq>3)^n&xG#1=8⹤҅0+'w/GsmFGȁ쨡 9,G(I odD3K}?{02u6ٶ]Oj^.έNHK(WҎ ݧW潭kQL593t{lQoĖyQW:U&d`Z~mn>\4 oR1 {a{O&"1|J.LaJ## J/dGRN]꽎_Z!deB>ˆp%z# ` :"ʙ!C/_ 8t`ՄzO)A ┬zع GEZW-KK݁"b*"-ߴ2T:ǤOsK+Љ;pXXFВKaTgw{VJ'sPwZ Ǖ\C|FVhϓKl+]ž &aLiꞗlBjz<ֻʚp QsAuR1b~VzHrյYm-k(?-fe_3xaF` hIJEGȫW;5\DY2,ۏyĻM=fI#JiH6M95D,Y8ZN ױzDrۖU #؉Sw#XgBm^,) b4 bTͪ-Ўa`U-^G'=&M啌Ƃr틄8cl_) Ak^ұ&*uGIw.~ WgU'l|{PK/՞K,#TAiW,D_[l `8%QLQS:EL7)W3a׌Y|g7%ٖ͋&FnOX>4~]4j1 %y nNهUS%3=in▝?^b t}=k*"3%\!J9): ,PSv 1~Zdrc}hp =uGZ2PnjmRy\IH0ˊ*Z uG;ECˢڰ+)PӬzCF-L>f*!9p;yI/RUPǁKKrT#O/'AF1|vx߼bq7͜> Nw^O.l\ydlG>/irW СzsH%YHVq`yniWK#RqZMVHpB0ߦ(-G Cx$Ȇ_2 F-"0qtx<`,η PiE+e8Md뾀{W"n|u/1PW#"Ӳ~Čp@3XV ^8`9k\KZvڎʾ.B`->#f:rJOﺴc̝,wbhanɫ%f~{ qɿ&[|,<zY~Vu;0Stk^2KEsɧh( 4̘{FG̿uY \~u¹&d4?EO,UL:_DStJ 0b2,XsR@6uVB o :[= |sF&&Gi6[-xS#Y&9}I m_]`(QaXZYߙ}T3[[v#9pis6DD6+8 {l"S;3P7; ͸8qv[5辥z1 brG7q QdZۃDAMM` PFsjL6M?Z"ql$w &8D䎉>,vNdT8~<\a 1en naBEaQa-a?o w<@@b&YK &vO]QspQ)Lsg!& d}RW@07Kyv;BCY؃4xp :Ӄ~^ML{L/ -}ԂGAIM>ˡI~hSj:ہ ǢeȔ6%!$XhSGj!"Ɯ!.!>ð֊li^͋%|b^A`&E-,gИ}L}pZi)bN$C~e^"aQaL^(n&h8ʅƣE4u s;<Fy8Ԁ|1chV.vrl ZBa2SH 8uigIeIL)XHRҌ9y8A #mX>S:9ۯ.9ˏ$#pO/na~ۚj!ruN4g"ebCẼ)OF 9i(O _-N xwXE9d.IQ!PP$ <0bDOKVy'[wH/u->'t \\ZR\W&hu؄_å>2nrI'hjh}DܺGxo n~5fAk a+JvupʯJUw2dszꂁPK5cK ΔB $fx+.8|'T|2tIo_c0MZpZ+uGY3@^rem[ 2 =#R?S7NÍDXsaĖIf+|.vѠ;Nr6}L3Me{p~*NFFcY߄@s|I ,Q~"i`^M۶Dt#*-w ??{Y'V=f7Љ2^L^%J6ĻQv 1.xV{!ts;V>'`E`X=cmc= r[Ez_V78ͻ0}LWقaQKH 4m/뫖Kv.!rV(]V9V;}y?P!ވoU#OA/0dXV (Z ǧ[wa0$ͻ#y>-,/y7;C.~.L*O%^]ޙtE$#1xkkv0 H˹a ŸtKj@c2Ů& &U\|ΞK;~_(fPbD7R QJoJ#-!EBpV| )r~Bh`GӲԠ&UMXz n?IGMA~AS1u  B#sj=: WF#Ydd4]2*jW5>]Gi 7bT''^*k?kuC7>@==ՌbT^EJS° FvOr\F>c3nΓ|떹-f[fn1χY`U7Vro8ajOC.=Yw\xG! ?Cj шLk |VrSjO_<{ U@1_SWWS,rh0Xs*"g΢-~`r{!p$J0etqNL%DOr:Rə^yXnZԶ=٢;Vݴ2f+Mlwlch'.}BM!u'XT 7]>a['3FVC%o9ʕAZ-HX1BWH8ʚ&g+@{],*8FC}OZQS&OxL/xZɁV ?M~ eP7Y/I3S-1f {)D,{-z [S=t<)4 F3o^+yCcvUi )%񅦗p0MMž!F!4۠j""w=XBjb8,\y/+!AΖy8m O7$;=){gocnhyV]Gj u/+4YIB)q"n˟*tGY@n9.zX&V.eR /\6(.-GMcpA><τ¤)ߗVE$c{^@DCÐj`'[s)Zf A˯_ &esƪ|vH4ylv>H?'0?|pz5Q*f_rY\ Veqڏ>4@R7޹6-ېVĩpWi'ñ(GO(nZĐv Rȑ@4~QT:k{L L_("dX{POLbüp Χg;r_-k4p?n4EIdF& %w:l%Jfql<0Jno5],y?(KJ~tKz > ɴD(I3DaOSa4fEԮӖؘHg-z J.@t?O_޴=!SԌ y)Tk;( ,LŬԮ/ā/tPH5BaNq vl5FiȮȻ`N2' .ʼnb'H8,+QDDY`jHi8n_w(2p\ Pc-p+-M,7i{'79S*i..dDG5͵O} u—?[X/9}$$DdO kY;%Ee@Rɐ&r М uuӠ)O2k:dW+*8rƃ<ʁg+/Q Fȸ>3:H;S%>2)9N-݆n3$*\N\nkX_>G+^ŖOeOp%Jޭ1ʛ-2OIodLS|à2]l@61StUwLh~<{* BBRp@Vɻ_ =*ir}ݳɘoB B#%(lGʎ#\&H6f{;8E0*+Z+\<.fYgy`~/@_WTt8~H$B8H(n[=7>cXi;EOQeC"d[cfr7L.䜇Xa+] gPnw q=8ZD<#GJt0+w#[T0dSJZXiyS1QRʋS~ >p!HMbjq&J-R?ї=am&g)c6 262JP&L4q} ka|k_,8 /PON8(ջΆnz#F ILBlkq}g=m~.D&h#M ɾ2b+>t6;ﳍUZ3յW? so>p\=: 'xV5CjJy`L"_Q>N/lbCC|/%31a + yBHruJ爻$ ze_$\X686gc{mXQI,aZFzbԀI$o^"f>+:f?)D;f'^cm@fQ5=ٝ;DZA$AW}Hz!:!uڗg[ߩ}[Z; X9f7ܲWaAJ!aN4bS}e5$?H_c\}ͫF$'ÙW;=a˵1o'G YBSZ'jWEHW*X]W? &&5"6]fk{":eOw{l3,IWS <0j0έ+;b^R~JI n%@WSLFne<_#GvyBmmx]%eD)4:Hߛ_S*";Nε b}: 63[=Li>h,Qu_K8pXlK%8Qi#g[[k!mNِ̩xmΪ3:)n'sSF0<ti k wLK K* G3uQh Wz}˨C 2m͍e$ E5Y /#| V:)٠7Rkia3@80Am){ER Sj{-̮&PTX6Cwb>R@.;neQfJ?r-I_s Oz4UjkR-.6_N B&-H2P/%ُXtuSdbҹS4]"R*;]W h:'C>I y8Q:>,IbǑxsiDw&Riy#z'Qe qT*NNK2{e5A[Ť>zwڙ~)CqnTߏbȊMЪB[#!9bW.R-.9)uW.V~#;ƠUv8lt-N`D jqf7r)XFM PN7ȴ +stHfv K!M+KVk ds:trU@{'>uX6CjS!]\YR`xy;3J1ƴD-EFFFL]HtTikX(Eqܫ452[V|bTC?5&U4ziC#1Qa=F(B1UMMR޿xrP`ita_Ri؃Ba nzW(^NLLU~@YjU S/gq5ӯ܃ >0] ŸT1Y)A3.]Ee 0LJR∇)| ]d>0UTb/(ckk/u8.%7@P|zhjb]XZi?D[H Ɏ[`f E7/Iq?W7*AhfHAji^ځhqɥGt;WVZP:R[c/}ԌG_ZCgfn>*b!үEyd%oE]ezjذs`Ѕ-Ldu| } ?=Y޴XR~prtvlSiRWx8)e1(됣Ɖ !EͲg@h w2x+ ZO=i4 e>W)3 P#;ޙHW`d~iޏD RsIĦNfOJ z&K2bL֏z8_ ])7:J".=#avJ!kNi{(pSAl{\MK6GA}W%վ|uVo}Ng̞t\=/F$г?fH!Ka&qM&4l8)!}6PK;MNdVq &lJqZ ASD5󨍴b#֔8%\5,W0CjĻEf~ǪᒛA-O(Fy !zwuwq,tjyL[v}u$o~>4Xd~Ld<:iJA!iR `.iv 9wc$Yu3 <ovD&vu緓\W"e xyD>/֮BXWfP[4DjY2O6E0pQ[ 0@)x9еT|e,[V LStip:V.-|"^!Qajhx&Ei*XesY[f!M,N<]7F*?NѬ,22J:/mD#tiWFI`wCKZFE*"<şXu]͊&,FK&Cc[7ь{5g7ף!y9gjpغ( Ε2Q;Cx˚?Ls;5l_1=Jĝ6&&"j€srPm XPy&)eLB!f'߮;$(T/SOg&ZzlڇV , ⢹G$Ghʔ,_^rg$ym/S٧XJͯ:*^V/1ۆg&1E9en^=vX15aC?>EKE\ df̝:0Y\.d&kNmqX;'lWW%Y>gQϠ]ae,jź\ıgP}|*idr%"UY &#*)!Daн*q7}F4wH$)C #o76bs!/P2Ɔ07Aq$4Ss_8't⛍u 5Qp f*d#-(r G1J4 >A1]NJ yVIį6Jѥǘu&`Ϭ\]k*eppbJd#y~~q4#legNYH˛{(0WT=pOdх˘ t!h!'垭V< cp}訳 6^xWL]ԉ9XKJ}y'~MQ`b+=5Zج}6#.( # EBa`$:?ٳy?L󚱛j7*kۓӖ]a-.:J}ewH _Cwުrou΢N]ЕRe:YoM("Kn>-MWGRV/٘$fmOz}{he~0=w_ 0(>՗ȄE>]}h$*Ҍج b>0ERl!ش,26T0Z=y"-R*k6 jNgo䄻 4g.duxlQߝTM앭Cr.&9 ~#p~ E\cjث9DKV?>t&e7#V>8e#Ysf&:ߙ9{ Ҧ(Aքr06\??ɓu(8r{?rG׻r6e[thѣV&%aa@K]:ц twM ygA:CnO;N=Wsd nw>W$R fUsyA*{:U Hk6}%GR"@,zY)М5{z% %yUQâm?A]ӃH@9B1EvXiW-Iz;D9w{?Pp+ 2v:z-3Ouk&WNl<`Jh"7 s4cqv 6cDشGIAEpX^,द5C@H(EH,]0i鱻JB!(/JVD[Ial>/K[kpaf}Z>E3s k}ˇgDq{&tmcl|HdaRw`Wz #aEa!\+ >s TRmOm.낳Osi% d8E۩sczY2X%^MGN^u|S _ͅĈ΋\@?xJ@u<~[WՋNg4s:nʐ]We4ަq S^b15T>|R h_5-&eBi#F' U*!hnsF5,!6*`N ʝh%?LTj8]K&tI;֗w *"9H[ݺxPbM"E{XiЉFa\q{`T'f 5ҵPs‹q~V[>v}Zh@Q[ӱi[俆MgFBZ9Q:UC tof>V[0]RjA9 `lo DTyΐ=z;NjOf_UO(](w!+$^e߿'&߁t!`e O '-Ӌd2 X" (Mo(g7 ]pDp;eu"HTI_*#VzyX2L'噦 "][PC40l;_3?%b$r|ToU)C)4L}H;oeSMA_MPs5tοЊ>&|j &=d#Ub9֚;׺8C eԿnn?BHFVR'Wy.! 弇sX+G(_|WR) %f~W[Sb+KT "imZwLכC62!PZ4(G%pXvq0=*ŕI웛˼ivn˵cf}AɄAz/.'#(FQ[MH2 Ϟg7oayS;kDc]!|7fQ^' |Հ1qpKN#jۿwCdj^vA*jU~eJS:K5Zv#=JJ ߿Zp]r  `lM.n|S?V(Wr`gvT`dWM r#mkn;sdi?)"#E ^cU\cG9&tz2;J?1P jS{LohB}hu;MsZ_ gTpzYs<:Q1^vo{ lw/qѡEU_ypxLIƠ0%4(,/GO$GgKol*A:0!oG7GIb#ULچ/)izd<]qp璉 9鄅a'e tN F.>EPg?!@= 7 *Y[|RDTBѡ~Ȁn+{}4 AFƠd5aEZe ]'K@ w8},Cts=m U'ӟcS&M_75-dT0؆.z/j)ߣgZJnʫ`N7^$3 1YL˼B;5˺7 כױT xXgJS}+]GBa wƾa!][ڿ53mcp{7IB7?riB"Xl#O9\ǿ1CoH} eZ.crvm #gJ“kGNtTN0/?BEÜA1*UȻOwu;MV!<2Xgo߭z>(^NÞHD8(K.>:+V`ҡ`o JY w⃬Ro},FV"*_)@:l΋ć(]9z.-?H2Fk+Yj'8GIGP*>ڤufsaHXA7p+Iv%>B*=52$A!)B߉jeEf3@O4;|Dtj'u ZͰY7o WCsyO6@ F ,0 ,OVzs_>&\sA"ƽt!79To(WVpyh#` T9!!y477^I@0 W [,osN cz"zĞU`˾f]~.wc`;mj=q;p LT?ܰ QVB\UD=^RH*8B(Ftق@Z=  ,"}ᛛu`XG7BH|Ʀn֒RūTM- xe<"~K4*y}QpvŒ"H8)T9㢚MGBkScy灙59j Ŧv-fsڋ vmPGC-~-pǣQ`!g[fUjVY?t&:3dʗiԱd#g2ߤ02j i1$7X, 5#V9Z+MpkF,v21vSĽTuBB+yZTbθ,\6ylzN[~Z41CfvU+{zoWr7)YaaEgUr"`ܚ)Lwh}n6 ԁ6&7 l!]qᳫ{\~c0YjR?|vhǢCK7pfD$Cl)hb^IYػw>LAW3|eDVAGH{Uw||;کl^9#!qNX%eGVtc·iaΩaM9mQ ׈>LdJ F! iﻰn{o)eD,%: ]'Qvj;=↦)sѲs/Z6q̨3-_G=9" OS\RGA bnNvα[S0pL]'gjub[#gc @}&PqwzgyIɚΕ˝Ҥ5Fn)$_?+>7+{/MbJ^ ֔Z(U3cǽ"n]bf%.1e,1H}cv1l ؓ3dhR:1!~>HW NaHHu݉ujy YdF\>?pm4{@p4HZbR/-T>vE 08J(Ÿֶ!j zp.wj`cn{pYևA2ur[xJRn7\w$yND!`w|)x9BZ]e6o0mA~q2:J{%ȣAkiVr '<w,CVz/ ?\ jg)a 6?%iך9ASXwc/ryt$G2׫dXr"QEWWJu{A=6ߣ18]’\9,e[2&+rnRQYit/? 7;7äRW^A3H![KǻY+ˈ>OG蓬qe8dvC ?!3]KWrGA2D^ YQC!O@A'6֙OV<~Kay8Qqz>Sf28aH~.X3B ?ƍ0_V{``Y[cEI1\_"*oSZ՗<0R#.-€9~ioW59V-MMa/ sɓ񣇢yQۙd/4 5ҥE7ίf3V)lh+HAAK%aӬE$umjL^Lij~q'y FqZh+.AR e`vj?hDx/KUIޢ%. j"vx3%-UBof%8E5Tϝ#Ķlo)bjjoZ6gg͐™_DޠXEƝ{b9wNzSoҪ$-yލ* hWu9Lt;eZM[9$DZSf9nKaz `EBR)6yF5 5(߬JeN\-ܪ| 71 #X29=r '4AxjaN=t W|o}K)Q PaQLK*Z]$|Ar#-02lH4#F/ @ -҇W v.k3x䌇2oZQ~"C/+;l~iZy&Y~N6ߡp)uzKq0yp$Z7P:G?&NVhQ+~)I:[Tni[a:FuOx.L.I(]FD+9JVægaͳ6ܬāM^ފҺP"Yˠl Nzǫ4^&PC`Q,g(o,/LjD'kxpdQbؔa>{oq/bgXƦQ3jxch?I8}{+#^ yWVOde`xzBC/?T-^!"^s22GW[p'd$9 էM6I;kW`}0 mԴ&?_*|⼄4ZAv7;@ i76$M'[Sִ=[=[,T&厛( z1,\bu˦l?r>wjG <\ǙSV ߝ,[q`#WNĎ|+ERZVx4pivԊ\q>iB  D璲ÔP}SݭsָV"F D Ņ^hz~O$y=cIL\Pܬ:u^Fnōƚҳ[h˩" >5No*On56:Gڂ͞>2J4"Siq_8JZq#_j3Mkw!?OWdr-=l/K䒂8]\ŔASRxyU?͵ׯ5r#GY݃}]k9r lR"$( B]m8(H8`0KST%N⽴SFISٟٯ "h96 gEC1.t|Ľqƌ3i͘ 6)2RW(KEI.`>_%ԚV;zv+;o"e@UZ,+,|1S8`Pk@yd#J-/ _8Fy@b|p(qC2dGEMmV۳Y 96Qkzjrqs5f` U= kmuYPCJzp*} $zyNɤBAq.Lzƒ-? _[{,㾧(Xh?,9<5KR4!nk8Dy( ѦU̠uO2h5~2M#s0C Җ |qpQ&p)XRL6Q \_D3'a5"M嬧f\3*28(@l=\0B"(G&\ OhݐlX$dtSx=fvMZq:R -BpK>##.X#2Z2*91,VY.&64 08\aƹDyIX97]mˏj%HE&jg6mVHc` 燱tڄΆޑxrrM++:Tn"n( U?*⅕2bh ܶ8ڗOA%(/C$syzX7gsj,5iwq<,ᔍ2m!ǁ2D siU2wt{Is̶Or`8n;Ρ`ia0p#%IPo8˄*+'g1#SdVŸ0꽖9|O~^H6a2 r=}`KM8 c,3ƾLj{@(; 5cf|PaC-+~fbi|_w/H]-Bqkmڠ},Ѭ(J,+y}GҌ3Q3U囪P $W8=!qn#o\bݔ?yD拋O~Yl_D'. n! 81i5/[Tcj\Un]^׶c*-\-M nTYg p]eS%9-4 S"7M9]f#5eO/ڽ{8*%??,BNrJ]oe)mhX'~>$<.PMv/QN}YD[o78T(?.{sJGtY?O2^ eVJ֎{BIg+-T)#ipucXl;A;7?}*#BPm*56PY,St ع &: fXWIPʍܐ y*r1Xo,:Yل`V'Dʬ=Js |!q`:qIp.n_z% ^*)p#*O}zc(É[;}}+w1W:㮝 D_qpCf+SsXecGގs""5A7&NjCC#i}~q:|+{mN m׶řiiE4p=!4v!bM&+n Ȣl~]:Fb!iH{ka C놸7@ ?/֕?٥iW5u.!0`rdtӽ8>*2܋r8I8S 0_ :'1Z^m7XƘz16?Y+xDtR'jVfC\݇TT|l~kfkmy#V r2̯(NXItJՈ e®r\{ce"L>_N=("|ۙ[o' 䬛j&u#an.F&>Ys;rGv?Ed=^!$8/.w06'Hs)n6MGNPfVз!W6|kHFc(BR-MOƤojv|C@GD79H{Cw;۰i\ .'3R:lckyK{-QHn0<.󡉼"A? aEe}^th1"PPALS$u/}-ЩuL *kE a#Du:iNZɪb)m_$~0 .VddBX_ @YadUE{1zEr$^DQ !&"순 qƐ`+м;tbL&v G-ա #bh#kObh7\L},yAvJ؄3vI+d΄V듊4&Gml MZ)ʣz\U@"Ҽ{F4GR?G90JBsT8?8Ohj`XT48A&8:yCNsaOjur)[PLܜ=gB7Sn^^{_ _'x>r>"О?r'SU_ z5آ|[!q򯹆Azt-j{ 0B3S7aDtY]91(3j%7bhș)ן60 Wɤp5.ӰEr 44̔(' %#mmT(IיfhidȔl{X?bL5 0FSwN%ᦺq:-%mItE˧^-,esciׄs#` [l/ľa'B( Gy+)";Q''AU!V%[7` Oe0@a\"WJ/WkGuj'*cv5w2u$҄ d `uvoJ ]=G3[r& צ7 縼z"~*4nn|?9EV CPNm?{|SR(!WtU3bCa`4tjhϽkϜT\DD](i^)j&XPl7f /:9H,)"k1Bω`+\VoB ߢr5,aCmĺN\#  bq W9ށ1ۛ,y!w-&w9}\E/^̂%uc\VBHO3GŚI/T^gaZ@AQ61;M'oUIA7z|,?ąkC"U_({ JW.D章~~/lAD3R#9&PAdJ@t54/q1;{/&l|d<\I%ը4~|ʜsÏjz= "閹g}|xKԋK4@-9Z2+:xɌY ģ_C>ZQg>BdH`J  P2cAtu`)nN$~%L^,36ߓJ|=ׄ6u-H{rRԬWh^Sßu~?cվebG r;x`okyÖ\O;t{V6U{Nǩ 9b(~!yy<Ԣ3`G`NϪFs&o\ǫIv?(JRgU+ O *.Fesa N"F` NrdE+S{J򟥸^}>@jd\͇Bgsy o"=X']|4Vgw: vh Uq ֏6d0x >+n( <헶I2XL oL%,'0A٭{G\ R[4Vᢼȫ)4 9/&\5Ex`a=}huevWij]_6xaQڊF[ Pivԯ$?a7D/)ZfnٌǴ2v R0eMrw ɌR,q0.PW~Z^Dzk;?0ykUE΀! 3:"cL#(Atc|$dUj\^Bc>\j6.'8_6utjΉaYJH/5?~]VU,)gw%}SgҒT"5/8X6K]TIEW|CJ@өiea,ERU{:,7)pY;}vEdA.W$)A?')oZau82MFt=^Qk02(R1Vc[I)x!l (R*[u>(dum#u$;>fr_k8wM2Ev1|h۸则21~8uƲ_5]6#Ddw[:| da?Nb!>>;r,iď;\Z#a|+dGwk8@ļBP7Mhz"/yZΑߺu0W/&ܑ&:z(mI(eRI&r zrA!.;UZ=|ΤuZsw#Kl)y?bd́줸$Õ~9 @Y_Qk%x{+1c)PL u23ku#*Q40#’[RhAߎh='l1ݏw.(7awAcqΊe} ލvX[khx$A#ha/^"(<޶Q.#^0\/QXէ&DYna4RT]`]Am p4H~ݾ@ȵk{zcyLg)5m|Bv4Cfv)N6ǽfxőz$?4ӥBfFM,;Շx'/w/^Soå 3bռs򃀴T':J*g"P"5x13cx6Dq{[zd\.W3VPp`3ʗ>"Fډ[\51N-=<2P'F!Œ)`%k$Oʞ=Ka.{EDM!`wsZ ui6ca(:ՐNh;?h_P84 1".JŁK|UIz&wd#~ }ĺ| 32efхh~1J hVporI;Jfg>xTmϡDlcCrq~~A'V^@ۣs.~f< &j>TXЕ4iⲱeq8#jP%T6xK#%.oʾA,{w4̗k_A@Co-;,K!.P*Wr?F~;Ds_-wx ^dPfOT5SrRW⡉'_Vbɠwy;ki~}CD#ZҳnwZ(;7kkep炖 +QR ? ˭ݙݹ{sf<ݪ{OyEKQ{X;\z?+/&l׳DVѩ wx..O鼴|`n IL75y>PSm3Oc73 H:ٍ BD׃pOzYѣj-P# >_wzKDv:Y u$K&YauC*G1V4Q%mehX;rvMMET> O^ww/:fjeœ^y^`dS՟tu;\/"b9.x+!}g|zV~]c [c.up!֪FaY(u sMc7w0G|жe > fD80YO0ޮCczifBkrSnf;Ua;0([sL_R60n:Ek2j3d저Ҵ٧e(R2ol *[.  Qzowk؃7CiR;=xVegK¡ޮ{WōtaҙS8pKtVY=&7h)zXAضf[5SS3[ˏaO1Ą R K}*G2g@RW`Yn1 }SĻ`=A>p[DSϲW>dPJzgT틻%(D,pPx]t&LIְŊ i?ʠ»G5JfFRŐMC!y'(+tdd9ĸ Ӡ>o2UL.ƹۖ?(uǪN Mގow ^y+=XFx'EؖOeҡ豣dQLooRFc娖/fܚ﷩^epNZu@p>WBpun fL\#;25 q.W'cvÓ4եo>,. tܹ00p ۷/h~[oE^0(Q~5Jӗv4h;kћYUn_"{ӄt{ƃ6V[~Usg7UI18by/"ݽILƫV*nkNXlPkk?nYQɉx^23$b˩Jdeq~>^ԟ@xkE)4@g (' 8 p_tXjʈ_*|nD_Ty* (v/8_ieō~ea}(ʭeTw-JF/AO`bΫWо Y IQ^ࡊ}ʯ00ܽ*d?:ʀ_Rm1uDv=FK+R&k]\{UH!*Y9!Ba-`3RqiOSǡ9_6BD?N#O'ȶLq ㅦ#I}V,IF-u]ι?2o:S5.u7|(f ]tw! y%f@t{s/ǀB`Za.RXYϜӧ% !)~;#LjLgNŒ$O/e^I])Wv?ߓ@]HcIWX#էҢyNe\L%m`F!ʩ!C2 0K j§*A}]u ;^Xwpd<.'.Qx(ѶUvu?m=OG#J?$z %#%*Ec媟=*I3kD Cv/Aߠ?%aE& @₃>V,EM 7cJf.r=/_%>yFTj}cɬ¡I\ rT890GbΤ9+4u_B=b:㪟vHܿYhCKOE!T9d/rKx_ɗ_D"gk_sfg~H̯rB(L>kq4sD l+{P_ʭvb_c~԰N[ /#oT>jwLpceuBkcI9rLGZjn? D?o0d[%n~[e Թaq0:K0=G,~~KF^; W:+-𶿃 5v i9D?y jT- , ג2gEf?if|3UU{~0hyd@ һttAޢ`#˷~%'SEDCY~CZJZpr! ] ǠJ 8lùw, |t6 j۽Jj6g2(7)ECBŒ+!F9nmEV1P0G,~#$~h.Cܚ5zDz &,8Y%oqx^%b8Db̒<[v&f4E4Pőkr>6S_hyٷ ,א([݉#e-s,˻="ŸWnF9_! >A=*Qp{㜂WlNiѻ ˽hm1T1!vk#λQꓡsj T,+'xxF&#djYQ֙g"ش$3!< l:M>jO}<3G%B|q&C4vOޙGtG Dyߋ?rCdj ԻGiV 53R791lKW,@*El}b!5DPkNN/A>뭬/)( ?O8\ZB;; YG"ȔW:Vl.@6ݛ]do %#B.LGwvoc!fRM5`xI fk#(z8@zL({n)7y`4NN/CeBӉHp~w^᱕`v Wv9n`1H_fp`&3όN,?bbN;ʬdbgw,LՄċȬ`rͳ/ГG59v[Y2PˬXącd~"Q)*e# l`#nR&-2f늞&VzӪ]D$jCY"yNsFT7F+OV?z;zn=6HX̸2$af:oph3  79UwcϤ@;SQ-Yq+<ȥPjd7o98k`OcQ;ǒ a9*{7˧:n"3'I/ʛ{;KdPet. S#vo`Ƣou"TK(Knx pgϔq(#@z!!/~h<{%s# J `XeKIuMVJpywJc= uȕvЙM·8;k7t& xtkU ~ʭJb@uuR<W,/ &EWt@qV^)fggRrzwÐ|=Z#ѕ&&q@lk C۴i4f,eMes@;رZT,n6,ͨP q)Wuh2ӅVBa{n@WMOx(ӣnB [&W m27S!gyP" 2}mHՐ\v3-MU+ה:z2w֥z93&oAkiNT=s#Ivfr#slE1D(H մdq^C+F;z>jD,<8& Sˏ,"=:׀Etj S-hFٮ13kV-`:5o"K>4(Zs̲/;G&X=z(C05LV́-@bdPW'd+[mǼ~+ ,вX<Ո\f.5 E8<=ĄD6{]4NABY*ɭ YZ