nsd-4.1.27-lp151.2.3.1<>,S_ˊ/=„8(O҅Eo`JaYWHMB< vW%Öώ$#sRRXr=>Fp?`d   B ! :^|] = 8QQ Q 8Q |Q &Q &Q(,Q)Q+V+xQ,,#-d#/#(0L80T90:3C=w>?@FGQHQI4QXY\Q]Q^[b6cdleqftlvuQvwQxQy,5z\Cnsd4.1.27lp151.2.3.1An authoritative-only domain name serverNSD is a complete implementation of an authoritative domain name server, developed by NLnet Labs, with the purpose of creating more diversity in the DNS landscape._ˊlamb70&openSUSE Leap 15.1openSUSEBSD-3-Clausehttp://bugs.opensuse.orgProductivity/Networking/DNS/Servershttp://open.nlnetlabs.nl/nsd/linuxx86_64getent group _nsd >/dev/null || groupadd -r _nsd getent passwd _nsd >/dev/null || \ useradd -r -g _nsd -s /bin/false -c "user for nsd" \ -d /var/lib/nsd _nsd test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in nsd.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in nsd.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-nsd-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-nsd-update-$service-new-in-upgrade" fi done for service in nsd.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fisystemd-tmpfiles --create /usr/lib/tmpfiles.d/nsd.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset nsd.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in nsd.service ; do if [ ! -e "/run/rpm-nsd-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-nsd-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in nsd.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable nsd.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop nsd.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in nsd.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart nsd.service ) || : fi fi+Dbb RR sl&;t!p3 PG< 4>=E y \ , @-T :'.p*0D fA聠AA聤A큤A큤A큤A큤A큤A큤A큤큤A聠A聠_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ\RlQxtRCMmRpVL;\-D3E;_ˊ\E}VL;VL;RJD3\*[2\*FVL;FFFM\*FFFFFFFFFF\*FFM\*FVL;FVL;FFQP"aN)K[2[2V2ElTEI˝DJW_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ_ˊ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@AAA@root_nsdrootroot_nsdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsd_nsdrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootroot_nsd_nsd_nsd_nsd_nsd_nsdnsd-4.1.27-lp151.2.3.1.src.rpmconfig(nsd)nsdnsd(x86-64) @@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shconfig(nsd)coreutilscoreutilsfindutilslibc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libevent-2.1.so.6()(64bit)libssl.so.1.1()(64bit)libssl.so.1.1(OPENSSL_1_1_0)(64bit)pwdutilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadowsystemdsystemdsystemdsystemd4.1.27-lp151.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1_ǁ\\l@[#@[qr[^[;e@Z_@Z@ZZZZxG@ZKt@ZY@@Y]XXx@W@Wt@Ws@W1@VuVV@VUV@U.@T@Adam Majer Michael Ströder Michael Ströder Michael Ströder michael@stroeder.commichael@stroeder.commichael@stroeder.commvetter@suse.comadam.majer@suse.deadam.majer@suse.dejengelh@inai.deadam.majer@suse.deadam.majer@suse.demichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.commichael@stroeder.comadam.majer@suse.deadam.majer@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demichael@stroeder.commrueckert@suse.demrueckert@suse.de- CVE-2020-28935.patch: Fix that symlink does not interfere with chown of pidfile (bsc#1179191, CVE-2020-28935)- Update to upstream release 4.1.27: * FEATURES: - Deny ANY with only one RR in response, by default. Patch from Daisuke Higashi. The deny-any statement in nsd.conf sets ANY queries over UDP to be further moved to TCP as well. Also no additional section processig for type ANY, reducing the response size. - Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds nsd-control print_tsig, update_tsig, add_tsig, assoc_tsig and del_tsig. These changes are gone after reload, edit the config file (or a file included from it) to make changes that last after restart. * BUG FIXES: - Fix #4213: disable-ipv6 and dnstap compile error. - Fix to reduce region_log_stats if condition, this removes a debug statement. - Fix for FreeBSD port with dnstap enabled. - Fix to remove unused code. - Fix #6: nsd-control-setup: Change validity time to a shorter period (<2038). - Fix unused definition in header remote.h. - Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big. - Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets. - Fixed radtree_insert memory leak. - Fixed access recycled variable.- Update to upstream release 4.1.26: * FEATURES: - DNSTAP support for NSD, --enable-dnstap and then config in nsd.conf. - Support SO_REUSEPORT_LB in FreeBSD 12 with the reuseport: yes option in nsd.conf. - Added nsd-control changezone. nsd-control changezone name pattern allows the change of a zone pattern option without downtime for the zone, in one operation. * BUG FIXES: - Fix #4194: Zone file parser derailed by non-FQDN names in RHS of DNSSEC RRs. - Fix #4202: nsd-control delzone incorrect exit code on error. - Tab style fix to use tab for 8 spaces, from Xiaobo Liu. - Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails. This sets the msg_hdr.msg_namelen correctly after receipt. - Fix to not set GLOB_NOSORT so the nsd.conf include: files are sorted and in a predictable order. - Fix #3433: document that reconfig does not change per-zone stats.- Update to upstream release 4.1.25: * FEATURES: - nsd-control prints neater errors for file failures. * BUG FIXES: - Fix that nsec3 precompile deletion happens before the RRs of the zone are deleted. - Fix printout of accepted remote control connection for unix sockets. - Fix use_systemd typo/leftover in remote.c. - Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu. - append_trailing_slash has one implementation and is not repeated differently. - Fix coding style in nsd.c - Fix to combine the same error function into one, from Xiaobo Liu. - Fix initialisation in remote.c. - please clang analyzer and fix parse of IPSECKEY with bad gateway. - Fix nsd-checkconf fail on bad zone name. - Annotate exit functions with noreturn. - Remove unused if clause during server service startup. - Fix #4156: Fix systemd service manager state change notification When it is compiled, systemd readiness signalling is enabled. The option in nsd.conf is not used, it is ignored when read.- Update to upstream release 4.1.24: - Features * #4102: control interface via local socket * configure --enable-systemd (needs pkg-config and libsystemd) can be used to then use-systemd: yes in nsd.conf and have readiness signalling with systemd. * RFC8162 support, for record type SMIMEA. - Bug Fixes * Patch to fix openwrt for mac os build darwin detection in configure. * Fix that first control-interface determines if TLS is used. Warn when IP address interfaces are used without TLS. * #4106: Fix that stats printed from nsd-control are recast from unsigned long to unsigned (remote.c). * Fix that type CAA (and URI) in the zone file can contain dots when not in quotes. * #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM chain, NSD leniently attempts to find a working NSEC3PARAM.- Update to upstream release 4.1.23: - Fix NSD time sensitive TSIG compare vulnerability.- Update to upstream release 4.1.22: - Features: * refuse-any sends truncation (+TC) in reply to ANY queries over UDP, and allows TCP queries like normal. * Use accept4 to speed up answer of TCP queries - Bug fixes: * Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones. * Fix to use same condition for nsec3 hash allocation and free. - Changes in version 4.1.21: - Features: * --enable-memclean cleans up memory for use with memory checkers, eg. valgrind. * refuse-any nsd.conf option that refuses queries of type ANY. * lower memory usage for tcp connections, so tcp-count can be higher. - Bug fixes: * Fix spelling error in xfr-inspect. * Fix buffer size warnings from compiler on filename lengths.- Update to 4.1.20: + Fix memory leak in zone file read of unknown rr formatted RRs. + Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.- Own missing ownership for %_tmpfilesdir- More specfile cleanup: + Drop SysV support from package (and hence usage of fillup) + Don't redefine %_rundir + Drop useless BuildRequires on systemd-devel- Check group existence before creating it, for real. - Stop deleting users from the system, it might remove a legitimate user that nsd unfortunately shared its name with.- Create a system user, not a regular user - Check if user/group already exists and are in system range - Do not ignore return values from user/group creation - Own the config zones directory- drop insserv requires on SLE12+ and openSUSE - nsd-lintrpmrc: drop most overrides - don't install config file as sample - switch to using user/group names _nsd to match expected names as per recent rpmlint changes as not to conflict with admin created names. - update and change current owner during upgrade- update to 4.1.19 with the following bug fixes: * ignore fallthrough compiler warning in flex EOF rule. * Fix warnings emitted by clang for --enable-packed. Alignment is not a problem for x86_64, don't enable packed when the platform requires aligned access. * Fix spelling error in xfr-inspect. * Fix 3392: Fix regression in 4.1.18 for notify lists with ip4 and ip6 targets.- update to 4.1.18 - Features * xfr-inspect, it is not installed, it prints xfr files from /tmp made with 'make xfr-inspect' in the source dir. * retry timeout between sending notifies dropped from 15 to 3 sec. * NSD sends 16 notifies simultaneously. * configure --enable-packed reduces memory usage, at expense of unaligned reads. Saves about 17%. * Save memory by selectively allocate precompiled nsec3 hashes, saves about 16% memory. * make ip-transparent option work on OpenBSD. * Save about 2% memory by changing usage count size in name tree. * Fix #2871: Increase number of sockets for xfrd transfers. - Bugfixes * Fix gcc 7.1.1 warnings. * Fix writev compile warning on FreeBSD. * Fix #1446: A corrupted zone file "propagates" to good ones. * nsd-control zonestatus prints wait time between attempts, for zones that are in that waiting time. * Fix collision printout of nsec3 to print name, hash and reverse. * Fix #1567: Change crit to err log level for gettimeofday failure. Add defines for compile without syslog. * Fix crash for DS query when parent and child zones both configured in nsd.conf and parent zone has not loaded properly.- update to 4.1.17 - Features * zone parser parses type AVC (it has TXT format). * Fix #1272: use writev to put tcp length field with data for outgoing zone transfer requests. - Bugfixes * Fix potential null pointer in nsec3 adjustment tree. * Fix text format of deletes for CDS and CDNSKEY, single 0 to represent empty base64 or hex string.- update to 4.1.16 - Features * zone parser can parse acronyms for algorithms ED25519 and ED448. * Fix 1243: Option to make NSD emit really minimal responses, minimal-responses: yes in nsd.conf. - Bugfixes * Calculate new udb index after growing the array, fix from Chaofeng Liu. * Fix missing _t to _type conversion for disable-radix-tree option. * Printout serial error with hint it may be too big. * Fix 1228: OpenSSL include is not guarded with HAVE_SSL * Patch for expire state in multi-master when masters includes broken master, from Manabu Sonoda. * minor manpage fix.- update to 4.1.15 * Fix nsd-control and ipv6 only. * Squelch zone transfer error address family not supported by protocol at low verbosity levels. * Fix #1195: Fix so that NSD fails on non-compliant values for Serial. * Fix to rename _t typedefs because POSIX reserves them. * Fix that nsec3 hash collisions only reported on verbosity level 3.- update to 4.1.14 - Features * Fix #1132 for SERVFAIL zones perform backoff, and remembers the timeout on next startup. - Bugfixes * Fix null memcpy for radixtree with single link element. * Robust fix against missing master in tcp_open for xfrd. * Fix wildcards in include: config statements with chroot enabled. * suppress compile warning in lex files. * Fix to try every master once, then wait for timeout or notify. * Save backoff timeout into xfrd.state file, this file has a higher version number now. Old files are skipped silently (causes refresh) and created as new files upon exit. * Fix restart of zone transfers when new config becomes available.- fix tmpfiles-nsd.conf to point to /run instead of /var/run - add nsd-rpmlintrc to not display some bogus errors - put log files into /var/log/nsd/ - put sample config in documentation directory - update to 4.1.13 - FEATURES - multi-master-check: yes can be used to check all masters for the last version, using the higher version from the configured masters - Support RR type OPENPGPKEY from RFC 7929. - Can config key algorithms with the digest name, eg. 'sha256'. - configure --disable-radix-tree for about 15% lower memory usage. - for type SRV add A/AAAA to the additional section (if possible), just like we already do for type MX. - more extensible edns option handling. - When tcp is more than half full, use short timeout for tcp session. - Patch for {max,min}-{refresh,retry}-time - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173f - BUGFIXES - Fix compile warnings about unused result from write and strtol. and signcompare in minmax retrytime. - Fix #812: fix that make depend fails after distribution. - Fix #817: xfrd update failed loop. - Add robustness against unallocated data in nsec3 trees. - Fix README spelling error of BSD license - Fix multimaster for not tried full zone transfer for a expired zone. - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0. - Fix malformed edns query assertion failure - Fix build without IPv6, patch from Zdenek Kaspar. - Fix #783: Trying to run a root server without having configured it silently gives wrong answers. - Fix #782: Serve DS record but parent zone has no NS record. - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.- reword description and summary - add signature file and basic keyring (currently only contains signature of the released version since upstream doesn't seem to distribute a real keyring) - remove redundant nsec3 configure option which are enabled by default - remove obsolete --enable-draft-rrtypes configure- update to 4.1.10 - FEATURES: - ip-freebind: yesno option in nsd.conf sets IP_FREEBIND socket option for Linux, binds to interfaces and addresses that are down. - NSD includes AAAA before A for queries over IPV6 (in delegations). And TC is set if no glue can be provided with a delegation because of packet size. - print notice that nsd is starting before taking off. - BUG FIXES: - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl. - Fix #751: NSD fails to occlude names below a DNAME. - If set without nsd.db print "" as the default in the man pages. - Fix #755: NSD spins after a zone update and a lot of TCP queries. - Fix for NSEC3 with zone signed without exact match for empty nonterminals, the answer for that domain gets closest encloser. - #772 Document that recvmmsg has IPv6 problems on some linux kernels.- update to 4.1.9 - Change the nsd.db file version because of nanosecond precision fix. - changes from 4.1.8 - #732: tcp-mss, outgoing-tcp-mss options for nsd.conf, patch from Daisuke Higashi. - #739: zonefile changes when mtime is small are detected on reload, if filesystem supports precision mtime values. - RR type CSYNC (RFC7477) syntax is supported. - take advantage of arc4random_uniform if available, patch from Loganaden Velvindron. - Fix flto check for OSX clang. - Define _DEFAULT_SOURCE with _BSD_SOURCE for glibc 2.20 on Linux. - Fix #736: segfault during zone transfer. - Fix #744: Fix that NSD replies for configured but unloaded zone with SERVFAIL, not REFUSED.- update to 4.1.7 - support configure --with-dbfile="" for nodb mode by default, where there is no binary database, but nsd reads and writes zonefiles. - reuseport: no is the default, because the feature is not troublefree. - configure --enable-ratelimit-default-is-off with - -enable-ratelimit to set the default ratelimit to disabled but available in nsd.conf. - version: "string" option to set chaos version query reply string. - Fix zones updates from nsd parent event loop when there are a lot of interfaces. - portability fixes. - patch from Doug Hogan for SSL_OP_NO_SSLvx options, for the new defaults in the ssl libraries. - updated contrib/nsd.spec, from Bálint Szigeti, with new configure options. - Allocate less memory for TSIG digest. - Fix #721: Fix wrong error code (FORMERR) returned for unknown opcode. NOTIMP expected. - Fix zonec ttl mismatch printout to include more information. - Fix TCP responses when REUSEPORT is in use by turning it off. - Document default in manpage for rrl-slip, ip4 and 6 prefixlength. - Explain rrl-slip better in documentation. - Document that ratelimit qps and slip are updated in reconfig. - Fix up defaults in manpage.- enable zone stats- update to 4.1.6 - Fix compile of zonec error message on FreeBSD. - nsd-checkconf warns for master zones with no zonefile statement. - Fix start failure when many file descriptors are in use. - The servfail rcode is not printed with a space in the middle. - fixup file descriptor fixup nicer. - print failed token for config syntax error or parse error. - Fix #711: Document that debug-mode yes is used for staying attached to the supervisor console. - Document verbosity 3 prints more information. - makedist.sh print on pgp signature creation. - Fix typo in zonec.c inside error message. - Fix #701: Fix that AD=1 set in a BADVERS response. - Fix #706: default port 53 not opened on ip4 because of getaddrinfo hints initialisation failure. - Fix #698 formatting errors and typos in nsd.8.in. - Add --enable-pie and --enable-relro-now options. - Admitted axfrs are logged at verbosity 1. Refused at verbosity 2. - Fixed checkconf test for reuseport setting. - SO_REUSEPORT does not work on FreeBSD. Enabled by default on Linux, not enabled by default on other OSes. - Fix that notify from nsd-control contains soa serial. - squelch SO_REUSEPORT failure on verbosity less than 3. - removed hardcoded interface limit, --with-max-ips removed. - SO_REUSEPORT support. - Fix #618: documented need to list ip-addresses seperately in nsd.conf if there are multiple, because the source address of replies can otherwise go wrong. - Fix that for expired zones NSD performs an AXFR and accepts newer and older serial numbers. - Document that minimal responses only minimizes responses to fit in one datagram. It does not minimize smaller responses. - Fix NSID response for short edns sizes. - Trunk contains 4.1.4 in development. - improve nsd-control usage text. (23 june - added to 4.1.3) - RFC7553 RR Type URI support. - Fix redefined macro lex warning for freebsd flex. - Fix that formerrors are ratelimited. - max-interfaces raised to 32. - removed unused defines for unofficial tsig-hmac algorithm codes. The TSIG algorithm is identified by name in the config file. - hmac sha224, sha384 and sha512 support, patch from David Gwynne. - Fix crash in zone parser for relative dname after error in origin. - Test for zone parser failures - nsd-control addzones and delzones read list of zones from stdin. - Fix task and zonestat files to be stored in a subdirectory in tmp to stop privilege elevation. - printout names for successful addition and removal with bulk command. - Fix #665: when removing subdomain, nsd does not reparse parent zone. - trunk contains 4.1.3(upcoming). - Made log message more consistent, changed 'axfr refused' log message to be more consistent with other messages. Also notify refused. - verbosity 2 logs axfr refused and notify refused. verbosity 1 contains less log messages. - Fix #654: Fix contradiction in notify logging verbosity level. - Incoming notifies have serial number logged (at verbosity 1). - Fix #655: Fix contradiction in verbosity for zone transfers. - Use reallocarray for integer overflow protection, patch submitted by Loganaden Velvindron. - Fix allocation integer overflow checks. - Fix buffer overflow in config parse of domain name, reported by John Van de Meulebrouck Brendgard. - Updated default keylength in nsd-control-setup to 3k. - Fix use after free after zonefile syntax error followed by ttl or origin directive, reported by John Van de Meulebrouck Brendgard. - Fix syntax error followed by too many TXT elements parse crash reported by John Van de Meulebrouck Brendgard. - Fix origin directive from unused old value and subdomain parser failure, reported by John Van de Meulebrouck Brendgard. - Fix b64pton out of bounds error on invalid zonefile input reported by John Van de Meulebrouck Brendgard. - Fix segfault on double origin in zone reader (thanks John Van de Meulebrouck Brendgard). - Remove dead code domain_table_iterate. - Fix segfault in zone reader on invalid input reported by John Van de Meulebrouck Brendgard. - Fix #642: Change 'zone read with no errors' to '.. with success'. Patch from Benedikt Heine.- ignore absence of the systemd-tmpfiles command- update to 4.1.1 - RFC 7344: CDS and CDNSKEY (read record types). - per zone statistics with --enable-zone-stats, config zone with zonestats: "name", zones configured with the same string are added. - Disabled use of SSLv3 in nsd-control. - nsd-checkconf -f prints out full name of pidfile (with dir). - Synthesize CNAMEs with same TTL as DNAME. - Fix that expired zones stay expired after a server restart. - Fix "xfrd_handle_ipc: bad mode" log errors when compiled with - -disable-bind8-stats. - Fix #616: retry xfer for zones with no content after command. - Fix char used as array index warnings on NetBSD. - Fix that queries for noname CH TXT are REFUSED instead of nodata. - Fixes for wildcard addition and deletion, speedup for some cases. - Fix that failure to add tcp to tcp base does not leak the socket. - Patch nsd_munin_ from Philip Paeps to use type ABSOLUTE. - Fix spinning NSD with lots of failing transfers, due to pointer comparison using void pointer subtraction (from Otto Moerbeek). - Fix bug#637: fix that nsd.db grows limitlessly, an off by one on one megabyte free chunks, created during AXFRs of large zones, that caused the one megabyte chunk to be leaked. - Fix casts for ctype functions (from Todd Miller). - correct some hyphen-used-as-minus-sign (from Andreas Schulze) in man pages. - Fix zonesdir chroot error message.- update to 4.1.0 see /usr/share/doc/packages/NSD-4-features for the important changes/bin/sh/bin/sh/bin/sh/bin/shlamb70 1607174790  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS4.1.27-lp151.2.3.14.1.27-lp151.2.3.14.1.27-lp151.2.3.1 nsdnsd.confnsd.conf.samplezonesnsdnsd.servicetmpfiles.dnsd.confnsdnsd-checkconfnsd-checkzonensd-controlnsd-control-setuprcnsdnsdCREDITSChangeLogLICENSENEW-CFG-OPTIONNSD-4-featuresNSD-DATABASENSD-DIFFFILENSD-FOR-BIND-USERSREADMEREADME.iccREADME.svnRELNOTESREQUIREMENTSTESTPLANTODOUPGRADINGcoding-stylecontribREADMEbind2nsdCOPYINGChangeLogMANIFESTREADMETODObind2nsdConfig.pyKey.pyNamedConf.pyNsdConf.pyParser.pyTokenizer.pyUtils.pyZone.py__init__.pychk_versionetcbind2nsd.confinstall.shscriptsbind2nsdnsd-syncs64-mkpws64-syncset_versionsetup.pybug390.patchnsd.initnsd.servicensd.socketnsd.specnsd.zones2nsd.confnsd_munin_differences.pdfdifferences.texnsd.conf.5.gznsd-checkconf.8.gznsd-checkzone.8.gznsd-control.8.gznsd.8.gznsdixfr.dbnsd.dbxfrd.statensdnsd.log/etc//etc/nsd//run//usr/lib/systemd/system//usr/lib//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/nsd//usr/share/doc/packages/nsd/contrib//usr/share/doc/packages/nsd/contrib/bind2nsd//usr/share/doc/packages/nsd/contrib/bind2nsd/bind2nsd//usr/share/doc/packages/nsd/contrib/bind2nsd/etc//usr/share/doc/packages/nsd/contrib/bind2nsd/scripts//usr/share/man/man5//usr/share/man/man8//var/lib//var/lib/nsd//var/log//var/log/nsd/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:15253/openSUSE_Leap_15.1_Update/f281c61a11a53f276771f25abf0ad7c6-nsd.openSUSE_Leap_15.1_Updatedrpmxz5x86_64-suse-linux         directorycannot open `/home/abuild/rpmbuild/BUILDROOT/nsd-4.1.27-lp151.2.3.1.x86_64/etc/nsd/nsd.conf' (No such file or directory)ASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=862d83625a26f40de03c68631c612cb82f2d3e14, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=20367e2f7e079118943ea66705a38f53ae6beeb5, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=24ae390a699ee6f65d265e2006bd4f8eb16623cf, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=a7be29d3ce7b880eda566a032477c3daae7f3db9, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executableUTF-8 Unicode textunified diff output, ASCII textPython script, ASCII text executableAlgol 68 source, ASCII textLaTeX 2e document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)empty(4  RRR R RRR RRR RRRRR R RRRRR RRRR RRR R RRR RRR RRRRR RR RRRRR RRRRR RbzU$VԽ2n?0K)E5@  4b+Gz:'Bc( pekz`5єT~wC.Z\k"D fF*bM=| ~}(efp0(V2lw-6͏yzH kFZll P^: P\ Gy:%׭$= 19>^$J:!U7"COWYϵ9t?MլQr(eEx>iV=U[3Z~kQ 'lk>!xi<*WP4mqu/\b_c`n Uʖ5)p9%4aѓ~*{fSFtܥ90x~4[]I9FyI` H|Դ[\Ŏ%+fO5+^6XyN_wEqqaOG]s=aб&M/dU^I zh)h@tj,.>{C&zyb\-# |sQTWPL[j-Nwc/mibxq`@$v-D%%,CszIE5T$ܟ*Ekn)޲NO0sHw<]va䇩_e!X@HgcOeGg+;jtzi3BH+)W_g0\/Q9KPQ?u`fSXq*QHiZLxk&_ AvJ]6n7)" ~;Y.qXczkV1FI0rp5{|y4CЯzc~_Ǹ<>UtUÒ~!nY^k6$1:s٠鋹6_ ->qYnĞQ$ x2-#CpD`.ʈs myg8әh%|NEFQ"PDLbucmZ'$CΡ@z\T-gb*Ca.N:k[Yj7QAN^U1N734[8}Wdo/q}M JlxBt֣S{&& FO{UFd[MhfpAtMBn~N'?9]?yYj@4EҚ5J{O1vˍW(u2:S(K,pJAIDl342LN4xw,o r$$nF_"+W`=#:%{u_F} 2+y]xI XasIxa{ܾnx5 = O1O, A/`x{;kE@M1 f ʷIއr"ͦvRIbgN=m*~+m wR$=|"+ۼQ4'[dM Z%D K 6Lr3\('"+W?sU4wט "o ?p"C ζR ٮjyUV,?aڼ$wA\\Uoi:YiU!wP>Г9Qs*ಀ1S Gď}{%PCam.nWXw-`,'jٺZ:UOA+Hd4j cjlp$iTN Ckf]^RNB֯i34%ݷ }RAfj Mw{?"П>yx@UueMk5DBl;*|R;ʝas2FdžQL?Wp$!Yz 8:zR3Zw*O~(@261pQd//6r܆Ngv&8u 'mFO2e0nܻˆC ?ؕ4ߒ7-*D'3ҕaEȢPGD1g~q%J䯛60p;k|$ڙF^eUtDȬpoM h`J:99qp~,/FQMD۶&Z%5U!g{Yӎ_nc[ţ#wq7w^I. B<ɨ2W?ۺ?n] 5^`cPT~إ (H㼘iBF}P)?IP0fy}贂Ioth+!?2LT1,MU_A ,?8e~t09v \|.6"قee8w+NB1`%LfO+/r@ wjᲟ皍G/ 7;FĶ j&x׿5Bt^ 1 D9]ڦ\( c!zѴ8Kw*rGxH%BKL#F4нb;}}E}F;fVD Wv=b­L[ɹsZ4®s9( (}:{CӬ8 ءByA~ jlR0x,ېVcvWC~`"Ϻ6jru?M.&r"5첈Iw*McԧUj) @]իmjGPrp]`o-<=ejXO (Ua!" 3"ӍHjd9G9` ۿwv<`O,L9v&6 6K'h%Cm7oU+@2q\x=u|wځt(&p5uQWFw1 l u- lZn1Y(ATc[OVnj?@V䒭w#UuQ. PԔ΋5#ǧ\M׹m%UstL-@>ApQ,rn TZx 8 VMK鶽Uީ)'.Lޚ%4m~k vU}&. B2mNBۇH uNagW@۔LMp 8ãȟݤԡ >bAH-|ޏ;gBR2Pջ}emtZ\C^Zn. v\v84Oݧ2o^8c B?M Y%A2ܧZ !=T<ԻwmR$F\ RZ{ؚ^%!G* 7XZ ۻA8ZMHnra0xSAQծ-}*h!VKRO'<GG`;OHfһOٿv$Lv'~h7$5ŵʚ\ 7b&ed2.?JjG9/hQuUĢv8Vw}߅(~zdVd#0Uz eOi-0"kbͿsЗzː. 4egڶLM:F҈f^ d.·u7%Q/9MRKN'`Q-6H8=2;s(g +AI. bw|[{!L0(:PG;Qr ՙ;x|*i܇yJ [gEh." oN4nj2wwt)Vj>,{1Xyf R""dfk'N[.ǼyxoHȾUk4Q8Ӭ0.T P6?<[1}րI$ (X$HF@' +@q.Vw֓h7ueFc*m9f ],FS9P\?ht_In7"~CwST74Wsh_X+E?3 >Z4<їm}K[64lk1uh5 X;4a>(&($e nD*6ؚ7ר998ScxpE\Yp *X_8WWSx\5ѷ_yH Ab W΁QbwWdn&DKnu0uf&x^Ƭ,҃r%ADr#r7Rg;I;`ӑ*xr7q&~k<2˼E BdxةU*_F(v=FBh(`ᙼVf{K+Dҽ<5]"!xQ__Ȅhbσ4%ٙX&+bS#Fz;(ct(I9O#hwj+Pp#vLt 22dj*nutwUԯT5ymI<ʮpAqP Qgh,1QE r'G6 KFh< ߻ehpTKyZv+bP,EtʐaA7fM`I$ZkFj}NIPHyvrbp6]yV0gH_<)=l]1J~Oj\ʨL CD*0<,ᙙP>@kқvK- Y+ `",W@f&y{s j1~.w֯CaJ݅56KZh)FHjװƝ[gc#!FtW?%szw'e>3y*5Me<م&7 Լ#dǺI-RSFv즃Uo/ڕ-nE`ko9X~2@`uJUBNpr Fm͜ӹl2 K4<(kR<_{qXz]IuQcgr%SٯVV_R805.aiT--*#q>_1svK$bvlWЫh DjUͤ=Ȋׅ} w5z]b+d4^;E6nA 7nJVhYg;b:?iUo{4ÌϏ`goV?xlt\¶'wyEey\.Y@1B옼*тWJt=4ʱn_!;c|A,5NI+uv;3|à0Ŕ#,s6.qy/MkW^_>MEȝ2v[I=ycgkrvt{[kj`MıhQn3y9pEӉ->>Lۼ.)]kÏ{) |g3̽fԨ2L.55GF~ G1r AiO&Z)J’ݥ]I9'%ڿj0ՇA4c|WhE%J+ _Tƺ- -5ЌsX3:Ss ki`;$}"WVhe3v]L)a@]}{J}$Örĺi E|ղOs=}Nٔ/c!kq*Cp=v+~*u):7b}į3QXr#&ƍJ! lH °pN5|Y6.CX~ʧ|s%i9DN^6|讣ݫW>kY@ǦB Ll%%$PaHK z\r!J}vc>De-`.j_VkNu, -ŗy&Hex _v0 B\X+&p2.mANR<`S3=Vu;m`BK|dBA:wлΔքsDcØpK&V1/&^G>p5ϟa~3l4ʟ)ħkd3 j]-1P*v6W>oи3jBWlPM/Yځ?Π=Z̈U34P8/Nb'XOrD3]'FJ'۪ /eGjJ Jq >|lS);LtIkUQ0-XeĹ}=:y"tn{iWdN&pGޫxol8ȥ' gD%.7=svn# JJA'| %ޜ&qkW3ncٯyZHyo?>{ Ma&؉$[NhMqUV0{>&izk؇}]6/mn,0U82t'mAys GAP!D1-]hu\e*6R]v~mt7ɔ,Uqb\:LNXqJ+ D6 Gϻ'Ϊq-[FkSs gYZW{Jrױr0w͹GQ?#.73Zgw_;Dٍ9U \uyf-V{uYhoO 0):L[ ߬b 8M9V 4YPJysT Be,=S  ?z8̴v^-ol{|>쐴)d8=jN="BJ YmX:D_WCb;W ys37`9uM5dW8jsEM|l3yX[ L͡@cpRz m[8 gQ"GݝNn<'Q3 5z_xf8jyy<r:\/n6,މdď yM`{31wUvoKo .~nD+I/2H𛣴n^n4X0f^++rliW!i̙oϟb\e q05EA-0!gV\$.r+D+Pz0GpEMrnX䘚CCb<:;*)TɃ_@cHGTS8, 4@_tL`Ͼ!Ufg2gir 2{+Ci/Nc?EUX-Nu_ԀߪTxCHV4`4{lN_ps! &h׫< Ll x"j6S( R^_փ{g>>)W%jsdcD1po| :ӤOUg5|"_`on"QƮjJRƂJ"g6<Q軳20S\ɵV3mf¿o8X,̨NC 8KyE?\ ) UvzQб{4uᾺ۸:!GgG,d`HC;|;;9mSm`4e?wzE;v3=i ˊ@ۢ"ІЭ@C FfgL"U&]bf6dQx7a Aɓv鷚z)?PxT'شmEZDs^?UhUuN7a1g*ij@~ ޥ q;V*vP[dLx/5j$=W`)a+[>nh}EJy͔Q9 / WyQ5h;7EWnUi}$1UKS;i toMϸ|F<{[جF+6EѵHjn$ц *)OocxSjצE]%ejNcg4v*t" qce5s@H2yd%4B{'/Ώbl9gҲ$=NIϟR'f V,DơB_rU{,Q^k"дuӇWtUf}9X s®W90#(NIJڧ~j&L扇ʧItIqVZG2-k`_5Ol#{cDPv_"8xNj* {?sN NyR\ 7¡A4埑%HL"áe[S0vQ~Д0 ϣ . ڪ2ۤLg[sR,HF#TNֽ 1 [R)bov7&Z:eJxDovgbľ#;[w+X8Xc[U; %1G-@34p\:<쌒}2S3?B60,I7eP<&;r \dpP!Y<=ބaJ萍3OЧR[ѦQSN! MR7Z%P<p V]a6Yׅ5^c&* x_HL%6|<Lz`ja8 e`YJ(DN:/DA?Њ9h ); _[ቜs -(ɝ,0^y)h =&vcAiG!Srp%dR6lVa*MDc!*gG%6|^3D2g< (K ]+@Dl)N7++˴p{G!(3F9+'uK2^CM-%'PqPGR/ٓ/:XZY|'WIm Y,u4^8| 'wE1EÑ,հt;C8."GC)bۣ($ӫ0 0{7bS3#0n[p9fiK&ߧah7{QJ|qIp5S–;T~>5=r2d>VAT9.[±vnbq Ӿ yp\MdnU?"v]m" `Adi$o7 @D7&/5UH!)RB쁴"7w#%j/ZZuRQuznsUޜI '& "[[WbBՏp{T,ۊRධ(9"5]ʥzlhSrM m#zT:"E;xv[ٓ&1#z,ps/]+[`axEټôrZĤ|'@.^S˟xMe5\ŵJ 9 a$:2RZk^% 7vR?vo,C7jplj vT\!oy 4kʹEq]“gHpg=5j켋+N?O[ ؠ6. ^  ;Ж.ej L5Kh!H w٢`RϹ ]! ]˜J| FYƞwI׻Ǻ}}q9 o?*B@~uli"SKD;bGsMF:^+ M,5KuX6!W局*9(Tɮ"Yq;IlH֓t]}wfS-UޢH'젙k өb$rx9&^8ѪW`7#`#?!HIj2Q .g U虽 | ߉mF{,$'bD3+c(_çS;)yct"֢,R[U}B !D~(%8^|}D1I| &ѹ@_!GpH'}kF{(ΐ1unYz|,&\sl\:?QU3 {a`ïFi e>r\6ܬ !|3>,Ŵ#;?2,Fv`>#?H[I  $kTʢ.~`a(tu{F8Pl$׈K0D>T&J>_ekTF#ۧ ''_-T䌎ڸcDam*j5neI*(W0lnށ˯֛Bg^BoWJeצ׃iSz(RxphT?-onluTv@ojUJZ1CiC'(s:Yv<`oV+9 {({gLD!QEEϋ$"[\i.vjA32JKw.ƛXzK\J@GMUڣP1aW ^?aGҭ =۪y'B2~)'HzkTh g??y)aR#|a^SXD'm_JMWɹUW"ξ3--=<^ݹq&r@D?%,P#J%oGI}׍IijmnkLG)qĈܽfg wiedH7 L"5۽"jBrl~$*7)6h=EFi#;K0 EX4Ƚ@t~-qC{w^V@f)Ta^6 &j =4vܨud@tZDr-+nY) ˿j&) K3]~H(s8KI,M6c"x2*mD#RѲzs;VƟn:(Wl<+ V1 :DݧF:3/= !2>$W"9PuG*N>7t?yldDbv++DDz&rLyGMOe<F}Su `~ z(%hNH&~ՉrzܦS{ 5^ǵ&ј.?Z!Ÿt!g1:Z(0U*\d ݠs}I w.,(" -}| }~o^>,i 0ciK{)D)8DI;O %sDIX#n6 9x.p}Sʹ &hmu巎pk-+ܫ}SZo̽VQUDOHi@xvoBQPjH.[KLdX~gYRr,ob'EwPZH̪* KimN~QBk]? ۞tػh?Z 8tE4 QCjAGҬj وwӽ__^~8(PYdD&8] / 1-w⌃'+nSbPk,ܩEK=h_,:QK`.ns-2g. &ϓѢz6 twM~ۺș uC6rM{^8 EE]drt`5.Rd?%?|nH !9hv{ٺ_ B/-+o$\КiˏeI_|mR0\Gp5iR 3S{[-S|rؤlm6Egr׮q_3/>q\;r $9s6*Lz^. _rn+k<leس@5t ́[3ksE526a8UwZah,&CJaܷ'CaIas%\2;ɸΧјxјrlC"=@[C:b$q q?-¬ LBLQEH{kcߞ/$s3cBZٲxWF@$r`Sq$*HF,lnݽ*g.&Pu)"<]|tGF|%T@2hG7ɢ=>݆r`qBDI-ҿ!gW +e,I&Iмt;@b9nyDӫCu܇8}ڷ#'%G7DRqBkQGhXb-,7]>=ad)/yB Y{,:v ;o658#H(-  n K@_IIϾ7tt'kUGf 9Mh6oL@/ȣ1;ccؔҽ?$Sb ZMk3 !#2QЊ1;ϛ2%@Wl{L:T+Sfw={ptҭ}XSRhFty:qs5bZ) n*B-q;<8q5`W;@)ȇG&@+օ8$PeN5ASE(  03j9Ht\,LH0iL]fn:aLxj 'l_I Fy,mISJiX {1E9L+:v$-g)0MY6ɩ9$;gQEeðfEdG=iK(?^qz 'pJó#·?(v;ЏZTy,l(j Ŭq^`aF,oXB ꐿ!52=flF#5(K98v 1w%x2cY"'zBw2 r"=[j-t~c%Om2i "]從% rEG&0kR6.h⻂n$, z`rH 7UM3dZk@%|ׅx0fLj9!> +SGKy@$Ym;nϬcs"e 0zq(,3Q FmDmV$fLCAYN7.?i :Ќ6[. 򐢤_HLxbJʎ}Y_k1 \,k f.uIFn1}OA4B~qP>.my޼hy" B87`aI-W+bHOafUnjWm*WRZJFgCu#acN~O.M5 )o9GDBk'],yg"k {)wq|V Lr` u'D}fN=}DaKʰ|=||.̥1Ń0@ٿ~}F[8.nOvG0# {xJ|.(%EBn?u(6eN:@h_n#WLN˵CF?kx,S;_K0_y )0OٝO]Nſ:q1ɣc lJ3 [s$Ogd`oD$.OJBNV*ނ2\t p>݈ 쫑XRÓP O@v߾a폚58~4On ͅVC7$9Q5 Ky`e=}ic|N} ijj0vhhEw:d9 j +gis,BCk:;)k{! bǀ.mtdE@{v,6iCՆz܁PrBMnG1GfGw໱Pc)FdsI:g8F5pd jƆi5qYT%b) UG;m(FOpR C~bz5 Ր]>751QC8lY6iqDޙ2Yw<$zP2;=!?ʠl5 <4˃׆qc% {ɶ F_S_!Uw'-`戽P{mV(]} I,{w DTa.!^t&d"xALZ )*](AS1"9߽?pQBU܇Yb'QqUJ@C+sd$j!e-` 9gF]h^7Giɬugq!31MZid—Ek`c ʦ I<f0N)z2}e>"èUX>lS~]\ \b\9cWOJ\ ky9UŬ0_l_3XrNW{("NN;8hy{J̕GK0axSI|n W1Z>Rl<_Sf O\puD7@H;%Sx˝2$hEflm >E t X;.cp@՚_;q:e7xXR!15pFwPNM'!; P*X;.-hT9-;?:hmq4vDgMPEyKRvOV:N) '~BE83_Ϭ{X p% <& LL OAc{ϲDJNٛW-1-+ZDfzjJ!q؞(z䧳&gp>$įn0v$\nh ?>) 5qSO]jY3'eǦB %HZ|\? 1gf`sM|#Zzhfmy>kT7Z1dpN+.Q7F9-n QtޠYδgB b⥴F@iX$VCVFD_&ر{َ˷χ,n/0BKzJcW;y,=xM\Kt!ʖfY'85&}1N|'YޤC6HUG̘>N?f"O n3H" QwFy Udm=-e6o7?c /pA3QpH{d1'[;[ʮnB -I;RV]HK(W,;̵7HS lDu x ҇D3aI 8P]-ĐS"75bf+|p sRU E srލ1!v7I2{Dv ,hPʱ5$-% m$1ч ]Dl *E؎ki;T4U2#DF},1@E hUt/r/o]([@&~m':{%jO34X#6wM 1GR. NdEq@|ʟ ?Lր4Y*}tq֗dC =K<1pSQ&InEnҲi|_=>2ˍx݂_QwL9e FOTifTϾ1|_{  _wRVă-9anj0h~:sEΒ@R=/?mz+;DFj/:bX/j)6 Snj?{S7i# 3 ȚÜMESf]u.z9PJ/a,5{*Qv f%7 {`xND9GVMU/#ıt[>$!lds4ۖbix>镯a.>*ճ:c2D63HclNQTLAne[m]+{L# {ҶgI{:!aHv 9͚w|'KTqD_ϹKz:ZMŖx~_dge›8mkI<@6r|-P8|QnrwQ,>=i lۧWimߙ5{=sfhd<)_m(^Z+{\2TLMd]]|5j9}ŕ.whkA pS({,nY3W:9}*7R4H`rB20 "vKayHwI$Sz9_E_+GUn0(Z]5|c&#?CsBdmۍOaﺱ 5RbۃEE'6-leۧ|N|nbΞ"lO8Eàѷ(Y hs9:o9@VԜE~6B2a<\Ï;nK㫢t0"[;$3ޢLvM$:$'zLάξrY6\Éq7iȯ!! }9% _.VS7vZWv/$%ǶT NJiF 4-#&OQxRwfA'T=@L~XSL%go/@DzRiJQ-G1b^A=Ku[q4%x)K*Ĝ?|Ŭ) 0 P>M~xjtp74,\mM5u肌_t _E^I*v+G+TurFCm/Bp| <Ёo1 S ΐ.ez~9Lj[[hwKeC3ߋVX~gi"[c5s 0MsWj RhTv=` )hXǵ#aubs8sJx >9x];]H޽+~{3ImN>rVJ}ڸ(:ڙrcQ?fژ)C nmڈroC|& ]^p >;"NM5x-;N>)hBzF2`LpZTΰQqH-1إ=& =e.hm E5NvxY s7$mqOɽk#2ưԒixM@((hyPZP}2=NuN,3$g3N5M#5aHF1l: %dEos뙌od['}١NEs5Uێ}7|\yޅ&)㞬RHs[Sz2О[E1\SRi̸_Ս$X:Mf ǂ9 4ƿ:]a/I~r,>dh6js; $-NtbeL2< =A{5x' xžnLτgm4B'Hz脇xVHݞ[7ZԼ=Gv+ ڷ Alr]B 󒑐3'>&AfU{:-x+dd&n` (!UQJPj}4x [~DCI*FdۗD 7SAjF҃YD`Ca#h#nz`;˹=g9)6W'2F5`S$EtzAD)4G oɝݡϭi} ^8ӾPNW %Lns*_%Yr~+vҼmyaOF徆{%[*0%TgM{Fam@|H}Ywvyw&wz2}׉)&xsNj*|t,  Pc Oϋܻ5o14Mx0Åk-ZїygQ$nfOgk.P. qC)b{tv}yrYPgstPNB56ڳMÝ/n&`g8:9)+NA!0vQ3:PrUkd4)޽z&Lz}ݓA{(|PD`rUy3<0FgѲgG ;n] oZ\6qT SNWP}"30F/۵~rV1ܷFAUgxHfs*g*鳫lp (~56`JnJ|SgqxJʃD`lE?% ^91em]O{e.dL*M"ik'MQZ6$cn "O.O|^4jK}v<@^]1bHtK(wQReGf5ƷwBJ605YRĐ '@8n K wLߞzRUV:5I nc:5%QLYLXyp>m'N CW WgSU%jc>/ʉ?rǽG=fJ=VO v,(S45!bJT?N3{j/,\6}+q1]:2^VLͬX_|u1V`s0s3v+9៾Ba.w*e•/y靼]˯)-Kަ-g||0iSߣ[^QM] SIp\YOՉ 9ɬYh o&D@YMz[}h&G!NR&;d}1$} G+ <_ Eh.E?e(*R^uP;"MHa݁+npQjqJ ؤ r![p7 e3&L0jdx x+ï E聩_/E9dBxXNeՇoMM JӭB9핤˔PvY*XfS!/^LHo.]ߞ\X]Qfm:c]u/I?()n#$d$TfE[Q@SXt].d `#)g3`V\AtS9Ca9N%~)w_ `fl^}9(PnҔtؙ&A=CA~jY#HI1՜Z4y%Zdy$wRz&T5ЬJ&7J8?)MP?rd@Op՟boW J|moW<,cS/6'meG(PaJ<C({^HLduᴷzᩡ %Q,zH<R;\߽F5$qD]WPچ)߂[r~wUUBNWb牍cГ%vbE.G [f:g*jBғtP&8޳7̃;,2x7!>UJ<n]\1Qs@.rHeP$$(ZB[Z]@@v~$A8u\ڿ7 jacٚYK͋fB?H$ a=W>:!!{݀ e+EM)6p7V`֓3 r9S Ka!XC3Kս"-/Qjk/|6wTB OL4 gGy.HcS].[1Q  &@HB$)eM] +Xf)%>3qEB2Vgp m?B6Wb:1 wTTGA {cz)og׈/s۞s3 'TaTR $-c,0^VD/5bTvlS%.90h۟(vkeP÷bAs yҠ~]83I : Z ڦ^@دPW5m`q7mAXku-q1srHbV^P[,7DR`I螋5]6__<&5ahKQ+&]Up?ܤfWZI5hq64C'{vTJkxV ~ZP)]&1i׫N clk;#RΧ<_6@WJ"Kjp?oH=2(8WFO$ٿ ?諷Za!EW58P}lkD`Tط6Na͒%#\F;{:x(zWȉ0Wr*e9Mӓj}x;E8U͆߈6c%H-rs:W[<6U^-RcB)bn]K 8J{瑵/~Bvaے vL,IRw"9\&y3f]*a7(AI]:S-WӓXkw0Znf 8!B3#P.(*Rc(r gָ<ZM]N+` h;nJ1R1@NzX[-mCp :`(Zd d8 T/Mbd9dLE'ڋRϝpU#¥ܟ B\o!Fв'X />mk}mR8`i@JN RK+V܎O(]0IéY+tNz3TU^̋>Х;<(}VGn r p$ tDf) D՜<á#!Z% wWαl&h)"d +nW9SW]Abܪ6r:BK긁t*{g:E?F5K~g:}qs\ВS9@J^p0b}xKQpB!Z4u60Իt"L kmO-.z?K k'K3J3<@ޑsA% q_ .A5iуV # Z@tnu/k#GЌP] 2JIp)Sps'ACpL@Ity+̌o'i_uz-岝d L_4R_;&^ ++KR+>p`ݤΙ:d@}^=WAk,4@amZJʲ9Ȧ|I $'¼a2-:Ok!kof"l r&H,t4f5HÖbFjaPa?~*8{uν \ű;iO/#g4 W(6b(IgO%Tr'1&Y`v]h~;rPK}94Xf\AR^X#LP2uj#+OES7Ke',N@*@G6 :C1@=xN> vA[RHqpd^@N/vi amޮ'?Ỹpnb90Xi^*zTqR2j6U65jۿʾ<2 Iօ5C^ynQKSמvgHAJUϟm.ݻA|H+(p,P8/X>q50Y&acXT lW=ڴ.=E5J@)+pnRj+^w;g4%(o8R7 Oi R(Âz)423lB7h}D)XJ_[SZ.3:hf*I_D;{<¶BAFM:ￂe'Mŷ$4$fQ4rgpRg3ex q5Zc(ijM6;Ib?1Ň[.Poy0#=3F]MJRg?,Vy)Gň̂TPME[hB [Oο0fKoF{y!،O{%J:IFB ݯ*w⒩QgŤK;*®weo!+m#a+;3.ZU=Zmܾg~XenUٴG'e6A6wQUo/f7OG&&j<Ϡo!,:5r"♝y;gi^m5XmʎkW9Tھ0@яWȓƲJ i.dtYdV0FLK~f _d3[=e C*DoK\ WU/I]בb\T*p8LF#VaNOB#uC}jZeVAuQ Htۃ=ԟDkA0]_keb,xTXs $YJbTO=`A5q]_',b6 +*}r/ zVOdiL wKN+nD+<+)WPDT&/Յ+^EA (LpYoQ3H -<_LoUc D;21xn>EuGLio6^_9KN eN?[LlMId7˵/Z Pc)#_nl0zge0(WQ4fR0&R~&ØCd," 8޸Y)w,@fP۶h##H1Yi;aJ0Х헋\@-_3;m- om*ē5Պ6ݽqeQ($~i=ճ s'J` A?3`䖁=-g:H;7'BTd;u{Xlϻu~aMMUڲ YBܙ eڄS8IT:ZQ%&_3aAo ʼnO:->^˒[7þkz^޹=M3ȵR`zxMg,'͵9f%)Uztoa[2Ast|GR]ж )u(iWJa($KP׌c;G5]%+ރ΄Kc ..Sqa:\j25ɀ<΃2&z"?.ܛu(Qk߬/d-UD%B刼FGAg⃱mz߆W0 ܁ۺF:,Dt@EX 1ۀJC7_<:yuSuFx ʎAɹ@<&Tk^iX4RndeEQjTv8.mYp\PW-6z5Ok1tÉ>/놎dv= $,t p^#U'o53NgQZo;}fe_x2f8s;7F K۪4{QA)wd"ŰM[giJuz3|T.H`f'%u's\L)bfqtнC#ĝ!?.m uӱ QٚwN#IB ;%ߟ$60$S+~G;_#{Z[x6I cҏr}Q-r(puOfm %pKKGYJ?::>R6?|-5q5Ĵ9S4}*/xn,gP_d#I{N 畀.>*Ԝ:@[fR_,7jR䱈Cτ+۱K^U`cK@%BrtfbGPmXYEMyɑ_HNudUjar.`# 1qm4^3V̥u [=lj1XW>*j  Se{x7_ڮc-cͬ&`^>6"ouo~HbVS/vDlBt+no\bĭ"bWdɎ{HB f@3TYLRnB tC`T#Z> P2gQ99>w20{k彗]4[ZY7 dFHḦeMr田Zo;mxpCǛX{O/w)ix6v/15R0nʔҘv%1Js۹5hǒUFKrD%AWnePw\5Q;doЄmٖrgaڈNP[L)0?BVay^ ׸/((Z'hj;OQ}j[-U/VYAAQcI } '{5Ajx Iv{2$8uTLҩ_:n-{؆ +)d._ Vwf'NN b⭭2'SZjel!iQҹY@9~gh뉆gѻ) "!=~K׉Î2վYK%c0UBn=W~顛K;;I PjFǮg~ Ąe}ےV %Gv"FȐ^|y. d%(y'I}鉯xD᚟ ᷠx6o(瑒v/> * cl2eh>/!֧I&:`PY#*|B@4Td %S)AގQ Y[S!Y6-Go"4õL> ƃB|Cbb%`mtK45ܣP Rq7`GA`Ky~(g<0 .,rp2gaXn$FY6^BH, HШ ѫ{+"K3H&s˜jǧdy'o>R^ʸaSʕ;BV)z\SbM[*i]l0eGI~ҩ ")F3چul([@b5^}:|>RXtѶvnq7֡LwOvdlUM|U>hBXv쫚fƜb Åog k~&a)1l;۬ U]ؔvO2 wcZFKa *egF鹤 +8N"2aƷZO8n2,]4>O:!eoN)z=H@<{ha_ RIsD m>t%]y7-PۡC8Gib"KG@pdҦ pwFZI7v(^[x{+Aj[vZ:gs vD')^f]ܫj5£kKSDBg_95>2=vzkQst A^/Id7lnNy<+Uxx3vBi /]7[P*\[wp\s`|8+cK^dk+z$ed-xYGP6b(:.},! >` fa4pҀCK5eު^Ɣt[k"ZFn8ݙ΀D3Mx7+ wd3F 9c!ZHð OxҨO*# VBBzIHWx^N8}t<36lqRi~P3F`btEOU ̽?HLA7l$z۹@FKCplѵ4i~'Br.lvg nz`U!IB Q!I$3{D~Qp/.oϕF2o)@i/!I,_,p `Ƃ=3liHZ[7%&1η?Hhigt*q%U߲ kMy*K-n13^)Llo4-*P`(n$n˵ Ӱ5aG䈘{B)QEm}7h;![iNW +X*g Rs5-2̧ק4{-^j(|.[@a"vۆe`ҁ3 ] ?{9^Iц8F8J,\m2EC|!GH-D .% =S AΊpYPn֓eNy\lP|˭ .#ˤ'&CbNG݅NRP <`/bQMKBDMLȖs7jK Z3fzcx\В>I5_ヴ]pE{fxY1UHΣB*Bֱr$[BD@3;;0Te޹ ͱk*p*J[d+`5dsG߼ Z,]rT*^WYu":jD^#RLOsZ[8Gu_u5|*.7-l dL_(t3FKFA$ #:2Ƈ%bH"?bXI;7r$%љ57sJޥ 'ʤ2J~#_?V 嫡"cBԕORRK_#SiL-X\k$3F?n\_Oya#wc^kj>iă »W>8Dhi]nvD_ $[G~,VR#E(G5 #ZѠXBp.拪W2 Cтekfg7p `Er5o nWj;# 86ǪE8_Eo$i vo#r*po'J)jpUU:v0J$ .a4 A!6KhffG3*BQ^sWǔ -!ٰFa3*a=$7b /EXsTi)h97xRT !Ȯpdp$6L m0k?˼}PdX1~~x]>)Vב9Ŵ2 h:k / VW8(w y0@bovಐ8EߕmAu/~/7z DW l<;\{yI-~lrvgwW7.|c"B%'ǸSycT'snXH]XLއ /WabN %{0 [M@;'JM32KgϖwDO)d,S u- _'ʯi˥GBŒ- Ejlq-֞2=N 6cS"yzP@ogV7X.~/gT+Ơ IAX9S?߿/YcDؼɃZ)xƎjAM|Z瀱6ؕw"~$l2e!kzbTvoEHIh+'TtwZhzQ{RxT6f\,w$`a28,&FUYޥpp;qݘ[)g^F܂bLXE@S T3UG#+־msyo[D%VFev`W^ ùحt /Yr"L -9/ʊew,R%ng>,\[QLz%<(q)q-ωZ)oU`^_Z\_I ]GqH]u,R?_x#6Sh6~Ϣ [:;1 ]X3hVdKNkO@1Wab2$:4+U)ny0=uK$lsK^d3(xRok^aY֍\^:2D ,lct9jleO5nZkP ]c2NRe55T{"E4bG:]LI O'P%*`fo25v'vڛ:1^_Ē o洧UlO#Hན' OPeHcq߆2I"Ib8Ǜ.IY"zig8t'wryƬ7:6 6dE"nVpndgI5W 8fsY6?}餗[y-h5U)Z%9mzw7K6?[5rmu[/c> `C f%:ln@yJSVd>=U[ ^ܢ&Xݺ(XnTeΜj-`B[^*qMBa$D!i\Hw]0LH fB"k_נn+& xH^tMZ.7&![܆Bi9>GZw) %(ʚ0?61Wh@m?PLk$7n3\>Y*u\Dt[乭 5Q>eAaf):WdѩP-~;:Rs@DK& c,j8$A6jF SZW9s5*}EC;McS=HYWl)1ɯ نntG)66 EJ,/2 󭏸%6ؠr.=Č0玴$uuNfFՑ,'+mxyQqsg/NMW ~ֆJI~<ɱ6OΊȐ^H>8Lj:k"?3oϴcw3c-qwa| 7fx~힆Xz@*;agzuu)XR-ZmRAQT|ٻM?G@nKV,=믮/-%xݺ3ȩ.YQ$ƒ;u9 'Gshxr?W#x,UcyD_'MC"b~}|3<,5)HepCRQh-9}lp/#*R Cf6piO[*Mѵ|~7 {3DULa-l&1]dp9zVO-45/Ld=v}5"*HEk""5i uWAө $7Ie2AFQu,jKdGL\[]P9zaFn[阅>cYA^q;EaCmQA݊>dΐwscm"mrsi3"g=a#UDK9C8\(PGWJJ|@sJKfAL'(ɋz.BpmN,>#ȓpI$Oø^p8Zj>ſDJz ;P'2J'UjX!"縄A5*k$Yڇ(F }`o4 Fzt}RʹD!z[A=lgA:uLjlPjO0z i;CZsDZm=OPpʉ룲}Aã%nh)'*z|Q3m&7$C]RYu(?8,WjȼH/#M%Z5BĬK(\_*!63WCj.8?1( ͦ<#6r 8tеd$3R,MV +|ݵmOy41>8?;]:]*LJ Sҩ_#pи=\mꪂ^DŽmPRdSEizkl[-؆.p 7u-1VD^cW%ުկ }),Ǟ#Ѐ{ 7n)" vjC};p4O\|e[gPun`I}Q@ U׉XW[_GR[ |,7Q9EMܰ&(ˀ٪*ޞfM rC] uoPTRM e"$WÇɶ YZ