From d63b8ea4d0ee559d045ff7cefe2be1431a6616b4 Mon Sep 17 00:00:00 2001 From: Evan Hunt Date: Fri, 25 Feb 2011 23:16:10 +0000 Subject: [PATCH] 9.7.3 has shipped; removing the release notes from the cvs tree. --- RELEASE-NOTES-BIND-9.7.3.html | 318 ---------------------------------- RELEASE-NOTES-BIND-9.7.3.pdf | Bin 70649 -> 0 bytes RELEASE-NOTES-BIND-9.7.3.txt | 220 ----------------------- 3 files changed, 538 deletions(-) delete mode 100644 RELEASE-NOTES-BIND-9.7.3.html delete mode 100644 RELEASE-NOTES-BIND-9.7.3.pdf delete mode 100644 RELEASE-NOTES-BIND-9.7.3.txt diff --git a/RELEASE-NOTES-BIND-9.7.3.html b/RELEASE-NOTES-BIND-9.7.3.html deleted file mode 100644 index 2798717474..0000000000 --- a/RELEASE-NOTES-BIND-9.7.3.html +++ /dev/null @@ -1,318 +0,0 @@ - - -

- -

Introduction

- -

- BIND 9.7.3 is the current release of BIND 9.7. -

-

- This document summarizes changes from BIND 9.7.1 to BIND 9.7.3. - Please see the CHANGES file in the source code release for a - complete list of all changes. -

-
- -

Download

- -

- The latest development version of BIND 9 software can always be found - on our web site at - http://www.isc.org/downloads/development. - There you will find additional information about each release, - source code, and some pre-compiled versions for certain operating - systems. -

-
- -

Support

- -

Product support information is available on - http://www.isc.org/services/support - for paid support options. Free support is provided by our user - community via a mailing list. Information on all public email - lists is available at - https://lists.isc.org/mailman/listinfo. -

-
- -

New Features

- -

9.7.2

- -
  • - Zones may be dynamically added and removed with the - “rndc addzone” and “rndc delzone” commands. These - dynamically added zones are written to a per-view - configuration file. Do not rely on the configuration - file name nor contents as this will change in a future - release. This is an experimental feature at this time. -
  • - Added new “filter-aaaa-on-v4” access control list to - select which IPv4 clients have AAAA record filtering - applied. -
  • - A new command “rndc secroots” was added to dump a combined - summary of the currently managed keys combined with statically - configured trust anchors. -
  • - Added support to load new keys into managed zones without - signing immediately with "rndc loadkeys". Added support - to link keys with "dnssec-keygen -S" and - "dnssec-settime -S". -
-
-
- -

Feature Changes

- -

9.7.2

- -
  • - Documentation improvements -
  • - ORCHID prefixes were removed from the automatic empty - zone list. -
  • - Improved handling of GSSAPI security contexts. Specifically, - better memory management of cached contexts, limited lifetime - of a context to 1 hour, and added a “realm” command to - nsupdate to allow selection of a non-default realm name. -
  • - The contributed tool “zkt” was updated to version 1.0. -
-
-
- -

Security Fixes

- -

9.7.2-P3

- -
  • - Adding a NO DATA signed negative response to cache failed to clear - any matching RRSIG records already in cache. A subsequent lookup - of the cached NO DATA entry could crash named (INSIST) when the - unexpected RRSIG was also returned with the NO DATA cache entry. - [RT #22288] [CVE-2010-3613] [VU#706148] -
  • - BIND, acting as a DNSSEC validator, was determining if the NS RRset - is insecure based on a value that could mean either that the RRset - is actually insecure or that there wasn't a matching key for the RRSIG - in the DNSKEY RRset when resuming from validating the DNSKEY RRset. - This can happen when in the middle of a DNSKEY algorithm rollover, - when two different algorithms were used to sign a zone but only the - new set of keys are in the zone DNSKEY RRset. - [RT #22309] [CVE-2010-3614] [VU#837744] -
  • -

    - When BIND is running as an authoritative server for a zone and - receives a query for that zone data, it first checks for allow-query - acls in the zone statement, then in that view, then in global - options. If none of these exist, it defaults to allowing any query - (allow-query {"any"};). -

    -

    - With this bug, if the allow-query is not set in the zone statement, - it failed to check in view or global options and fell back to the - default of allowing any query. This means that queries that the zone - owner did not wish to allow were incorrectly allowed. - [RT #22418] [CVE-2010-3615] [VU#510208] -

    -
-
-

9.7.2-P2

- -
  • - A flaw where the wrong ACL was applied was fixed. This flaw - allowed access to a cache via recursion even though the ACL - disallowed it. -
-
-

9.7.2-P1

- -
  • - If BIND, acting as a DNSSEC validating server, has two or more trust - anchors configured in named.conf for the same zone (such as - example.com) and the response for a record in that zone from the - authoritative server includes a bad signature, the validating server - will crash while trying to validate that query. -
-
-
- -

Bug Fixes

- -

9.7.3

- -
  • - BIND now builds with threads disabled in versions of NetBSD earlier - than 5.0 and with pthreads enabled by default in NetBSD versions 5.0 - and higher. Also removes support for unproven-pthreads, mit-pthreads - and ptl2. [RT #19203] -
  • - Added a regression test for fix 2896/RT #21045 ("rndc sign" failed - to properly update the zone when adding a DNSKEY for publication - only). [RT #21324] -
  • - "nsupdate -l" now gives error message if "session.key" file is not - found. [RT #21670] -
  • - HPUX now correctly defaults to using /dev/poll, which should - increase performance. [RT #21919] -
  • - If named is running as a threaded application, after an "rndc stop" - command has been issued, other inbound TCP requests can cause named - to hang and never complete shutdown. [RT #22108] -
  • - After an "rndc reconfig", the refresh timer for managed-keys is ignored, resulting in managed-keys - not being refreshed until named is restarted. [RT #22296] -
  • - An NSEC3PARAM record placed inside a zone which is not properly - signed with NSEC3 could cause named to crash, if changed via dynamic - update. [RT #22363] -
  • - "rndc -h" now includes "loadkeys" option. [RT #22493] -
  • - When performing a GSS-TSIG signed dynamic zone update, memory could be - leaked. This causes an unclean shutdown and may affect long-running - servers. [RT #22573] -
  • - A bug in NetBSD and FreeBSD kernels with SO_ACCEPTFILTER enabled allows - for a TCP DoS attack. Until there is a kernel fix, ISC is disabling - SO_ACCEPTFILTER support in BIND. [RT #22589] -
  • -When signing records, named didn't filter out any TTL changes -to DNSKEY records. This resulted in an incomplete key set. TTL -changes are now dealt with before signing. -[RT #22590] -
  • - Corrected a defect where a combination of dynamic updates and zone transfers incorrectly locked the in-memory zone database, causing - named to freeze. [RT #22614] -
  • - Don't run MX checks (check-mx) when the MX record points to ".". -[RT #22645] -
  • - DST key reference counts can now be incremented via dst_key_attach. -[RT #22672] -
  • -The IN6_IS_ADDR_LINKLOCAL and -IN6_IS_ADDR_SITELOCAL macros in win32 were updated/corrected -per current Windows OS. [RT #22724] -
  • - "dnssec-settime -S" no longer tests prepublication interval validity - when the interval is set to 0. [RT #22761] -
  • - isc_mutex_init_errcheck() in phtreads/mutex.c failed to destroy attr. [RT #22766] -
  • - The Kerberos realm was being truncated when being pulled from the - the host prinicipal, make krb5-self updates fail. [RT #22770] -
  • - named failed to preserve the case of domain names in RDATA which is not compressible when writing master files. [RT #22863] -
  • -The man page for dnssec-keyfromlabel incorrectly had "-U" rather -than the correct option "-I". [RT #22887] -
  • -The "rndc" command usage statement was missing the "-b" option. -[RT #22937] -
  • -There was a bug in how the clients-per-query code worked with some -query patterns. This could result, in rare circumstances, in having all -the client query slots filled with queries for the same DNS label, -essentially ignoring the max-clients-per-query setting. -[RT #22972] -
  • -The secure zone update feature in named is based on the zone -being signed and configured for dynamic updates. A bug in the ACL -processing for "allow-update { none; };" resulted in a zone that is -supposed to be static being treated as a dynamic zone. Thus, name -would try to sign/re-sign that zone erroneously. [RT #23120] -
-
-

9.7.2-P3

- -
  • - Microsoft changed the behavior of sockets between NT/XP based - stacks vs Vista/windows7 stacks. Server 2003/2008 have the older - behavior, 2008r2 has the new behavior. With the change, different - error results are possible, so ISC adapted BIND to handle the new - error results. - This resolves an issue where sockets would shut down on - Windows servers causing named to stop responding to queries. - [RT #21906] -
  • - Windows has non-POSIX compliant behavior in its rename() and unlink() - calls. This caused journal compaction to fail on Windows BIND servers - with the log error: "dns_journal_compact failed: failure". - [RT #22434] -
-
-

9.7.2-P1

- -
  • - A bug, introduced in BIND 9.7.2, caused named to fail to start - if a master zone file was unreadable or missing. This has - been corrected in 9.7.2-P1. -
  • - BIND previously accepted answers from authoritative servers that did - not provide a "proper" response, such as not setting AA bit. BIND was - changed to be more strict in what it accepted but this caused - operational issues. This new strictness has been backed out in - 9.7.2-P1. -
-
-

9.7.2

- -
  • - Removed a warning message when running BIND 9 under Windows - for when a TCP connection was aborted. This is a common - occurrence and the warning was extraneous. -
  • - Worked around a race condition in the cache database memory - handling. Without this fix a DNS cache DB or ADB could - incorrectly stay in an over memory state, effectively refusing - further caching, which subsequently made a BIND 9 caching - server unworkable. -
  • - Partially disabled change 2864 because it would cause - infinite attempts of RRSIG queries. -
  • - BIND did not properly handle non-cacheable negative responses - from insecure zones. This caused several non-protocol-compliant - zones to become unresolvable. BIND is now more accepting of - responses it receives from less strict servers. -
-
-
- -

Known issues in this release

- -
  • -

    - "make test" will fail on OSX and possibly other operating systems. - The failure occurs in a new test to check for allow-query ACLs. - The failure is caused because the source address is not specified on - the dig commands issued in the test. -

    -

    - If running "make test" is part of your usual acceptance process, - please edit the file bin/tests/system/allow_query/test.sh - and add -

    - -b 10.53.0.2 -

    - to the DIGOPTS line. -

    -
-
- -

Thank You

- -

- Thank you to everyone who assisted us in making this release possible. - If you would like to contribute to ISC to assist us in continuing to make - quality open source software, please visit our donations page at - http://www.isc.org/supportisc. -

-
-
diff --git a/RELEASE-NOTES-BIND-9.7.3.pdf b/RELEASE-NOTES-BIND-9.7.3.pdf deleted file mode 100644 index c15f7b4d5d2a56c6a65cbf7b876c781e8d497dd2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 70649 zcmeFZby!tfv_4EDA>FxYkle6=O-XknAs{6nAl)Hd3L@Ro5=xhJBi$iNcS^T__-(K_ zo^$Rw_x{eGA3W<>vDX~)ony>+$Cz_28YM9aW*`d)nPzab?ISV}zy`2>_!ya=AHaGK zz$$62Y7Jl&1JK(W8#q8(SG&y#)IHGQG5wgPpaJ2T|-d zMS*{a60>%;vamKV`YDFzAH;Cn6a!@cA?Kc>jg7UP!%s0lj(?B?`hy&>O1^T0|*x7zac@r1=PnCbi1Q0bfurj#; zjs0)c{tFuCZ_s`!|2Js=qm?+<$=e zQ~e^2Cco(n^tUGXg^T--I^+Clhbvsa6vp{4)PGemZzzoO@72%wFVugP`weMazpMY3 z!npp0`ng&D&_cQXsQ#b2=lUnzga3f(r|xB~ARQ0D%--J7*dAbJ1#mDmvj^B2TNoSI z8~+mix90e6Se~20xqn(h71Bt}0h-p1KP7ShjWx8nugawY0I*7!IYAmG~{G9-b8gRvbXp@o5iv6!);wUIG0q_4JjuroHWM0T0jitDjT zVj~DRIl$5NRedm964z%uT&|+ZX^~rw!n>G|#tvS{DEBxcvY>@cjC@&hhY>a2@PO35 zH>?Q{U{fOG#gjt)ys`(3Kp@)21Kovy(VW(VWy1iFB%n68!Dc!-DV6TgGY|tKFK};5 zVYJUzF8RfTLvctYtWi_SVMddPg@~{i(%C)^*1~su>m?*i^UU;|3Ih`+2&0e=jVc5K zndNy6Y6)s@jpq9Vh6y_SkH->eQ!pP+-AkajF@u!l{H$2cH9o0snU8C%s|INZa8O7z zdqli+5J;!DW!mJp7d*IM5_0?Cf$6v1*K9gB!Bb<=6qB&+PxHVV6yy`#^#xSi z$!$56W+llEvDim2CZ9Jq8=ch;^%`|Kjn&UhA3PGw5mbBR7ku}F5)cGBGkWzDg}-)9 zCsR_#g33uM0+k^$VL_IDm_nTYo_o^5JuI5zAiH6UR6N>9%F7G3AVdR^)#>@SdSd+j zF+9nLIG;h{L-&&GmvM1U%p>|5Jr!Z^=#q>MBOZ0Me28QzEX#dtp<7$gs6PAXGWdLN zz)@>GNJ`STd#Lv~CWAFIhFqZJeJgs-7n*kjh}j9b;f7pzWN}+gBr@rM%{_Ma^1eg( zy43lu<@X6M<7W*>l2e`)d2U+Uzj;0}vS(C-U1r;nuE4iFbenmd;NGWq6ZwfcIpZm6 zeO7U?+yH$aotQH9OSw&sJhx116Y*|OpK9P zMXjwIjIA8(0oTn%1({XF*xuUF&Jfb7d9IrlGON6?k(q&rwF^M|sz>62a0YH3b{%Ah z06R!Z01(oqAWaaNRoKeP8X`y=zbk!xO0KiwGAgAl3 z0Pt1IhumE?a>(ghlLmj20{$ii{7nk@n-uUjDLmh#@O+cP^G%8lq!j~x6#Hf$@U7U_ zD3Mw3IX-l_R)d_Gl{qr2h_#)OvE6k6*>qT?SfyD-wXdYILCUED>8t?SAZ{QFCmTC} z6Uf8D#R&v}xWOzSND(>N!I0-*$a}&N<^E4B@CK~!1H}z%{J+8i@o=+nbAW!qV&h`r z_eH*)Op!z;W{g)RlB1J?I3=f8x-$-x5V0sn%< z#m>Ub$@xFR`Zk*0fc1TB`!8XEfGj*9j$g1i*;u&##)iN6%n#!H3)*$#`eS4Nf39Ba zY%FXLuKc6cgCMmY48H0G{=U|KW8ybpT{Wox7#16tg^l|cDj*l6x^e$Cs$UxW!RK#4 z`%XRnLt}D)xmegB9R7#KICwZ&*x3HYn&0WrHwWPctnaMnzl6mNVqxR?r7{jMJEYEm z{z+v&9E}^;z7xv-5*wr$0zvG*RL0H5!UO&rmHjg354Yt8w*S7{=YX_DAY>5wX--Za zh0Bo1~+ z!{Y+}Q&s!npWVRr-;V$sY#4J!_ER?yP-EW zAj{ub^Cq<4YuYtC`fqC*JD80H1o|~_vV(b8*m?ei+I}BBuPNJqjExgQ#DKqu89Num z1qT1kVDP=e{pQ^MvgS2~{EuOAToJKf;{ZE|lZEr|M)g0q#W!Hx{X-pplb92d zKZpbPr^Gi$)W1o}&JMh$VZY~l?RfmiRs!OnK*kt|pAK;(ARwRX1_4i( zQ2zUo3OCtO`5NYM1fA5xLm}D2#QQ-wQjbYjKRA;`>)CQc`<{u|fjN>0Jvl^q68PmJ zyUy{Y31;(kr|Pts=*%!z+xTDRb47s$7Ter;65^hNdwRNZ6WoJK*O}xascSe#KtWD5 zoEZt1WoM-R_)&KXSH?+-S7A)?Xym_y#V4}$xrZt~+0M-+Gk@U#;5G3CtRgt}u zdEEPs`cw3f92;@0i~Y%bECVijzr_XGZA>l_C6vCp3>sK7`yCg1(s-^%gSX2_LkXA^ zo$Ov*rXiXUX&CQLGN8A(CW^N#-i2dSi$um{KF z85-uSv%6K9p`P^`*mHlNY^wRJGB@SI%h+`1R$A73{tVwDVwdhkDZP1H- z3?9tm=oFm;6GIC+eo1fK<`yY=S<;L9p#9yu4!EfWKL{oq-lR8eIWawtrEb#>@$r!7;{-D&})_amrT^MUH zaalID7glEHX#@9|AnYJKihFrB;p1mQJ}Gc-G@-K@J+SUfsf9`c`v!qkLg`v1Rx}61 zUr6|sb_rd;W~r*o(=YglJbe+cIy!Z#2X*OhIU$GNjZdX4d{R#0i!j&!%2{0|JC%*O zlZNDp`EEvvDi!e~?H$*r!?1L)@txW>t3VyVR(pVgZF{uG-7)?tL4zBWsT| zv0l6qvRKR{A1lZ;NKuav%aW6L5t?%+M1#e@b6|xrw++SChAQ)5^X_h)g6V`X!2MFJiGj!FAu{c8SDv!Qpc;+Ve~D}nXk^|<-a8=^uA3n3k0r9suFK{2GTfx~ko=@qRmeynA5SDl()|Uvus5mY}uV#m}F!A3cBV^bJmYIi%a0EU$qYOV54uLz2dW$&VC8U#P&$)yL7> z5mOyY+YS$3#Mpl5>M{Bmwz6-Ek5hF zvXXGCFK@^H7Wu87sNE(?Y8;l_k@5g$I&Hr#mT@t$1h;A8JNuLTzwoQCVS|XP_VxOY~V}=}hW{>ZY>Dz9jt3*GF*jxig ziZZt{oJkdddF2F5Tade)k}XCz8`*AI+Z9H(5#(fq=!P0s0*DoFyGbuQ@tg%tAfZWqOBID%4`z-OdL^RIXoko#2+BKb7 zMD^-TyYttXaofnv2A97Mr&-GjD1AX)CP%U4zB~Nd$idK(Czw_cp;z#$+xg@)Gh+ZE z-%1m{3gNzqBss~0K$aSQEbcJ}3Z3=~96#>U=sZ`3+L@;$qT&0SyBHVkGdrUPwf2o~ z%2$;H99xUz9?Y9O)O|E`et!Oed?y}Zjeto&#a4VeLMzI7v^93fgVj7>#$MhVpU3^< z(sPsNk^ z-G7L<{Z)vK4FCjOIRxKAY(OqZkOAT_a6v+BV8|Q?2L~q$2oiMQ;$VaDlq;6`J!;2# z6|`d&=I3X<%7In*dLote9;=#)^wmLc>fm6*%gXBP?95_jZ^&Y8XToaqeV){w)yUY% z*uvVz5)!*)fRKk@EbCjb{*Tx>Aeh-8aZFCo6+?yuN+7;0=<1#m$ie}-@?rn)*zJw& zoXj8*Syub+leE9V{@W12<>pzwGy36>{G;UDxpEUd?J^y!<9C*{Y_(92eAjJOq@1N)A3JAunCM9+S z^e8~+Sy0b)$a-Ksx^GtoXn(ZwZP{y0d>}1Gud@IU`1CwMm?_X5=-Nf`jqC{W z2$%?Bg!PBZG%T-$VeXza+?^<`(lo<3p&WSr7`FS=$8dL%55MtX|A-y#Z1{kG)hz)5 z3agr#E2b|Yt5jBz?`4*goCcG}mV5hK?qyr#ckLvo zsD@BGPA$vikm+J5TY7z%XndmWSjY0|>|W!lcZ&{<1Z-j^@H!1<J!~D1R&b;48Y;ak?UdKxb}^hH%NvRIP}bQ0%8W*U-}* zkLWgodN+?MHcW`Igo%^?iJ9nj3E>2>X62*CN?a-)b4+bjbS#tT30zm*1x+6u(o>?# z5J{@ssnJ3C3O-#fN6j%)?!s2lcM1v!*`XIo2b53m2bdQ&ORMf=vuo>;Z`Kt(L6a1W zXh~Kw7ouNQj|6`mjWJ%cT4&7JaZ%R5k!|X@3yZVsLxdP%h}h0qCJ&Qg9BgJp3u!Rk?ldxD!k1|&oHczXjoIl#F z<@2CiYNUjaAT+0^ErE_*Q~};_u7>>tO#Z8{R6IwVLi{BnJRTF0Efb>Zhxp^BDo)C& zBa^S5&28C)u<1W;rguVAcIPVX&E^XloJp%bP96w=BR|aLkZ{}t=o>oCjz=FQGZ1R* z)WXmb$7zp$PAtLAgQ+`m1GiN8F7!VrPbLw&VU+wJN675c%=V$IW9U|f z9UGoEn2EoF665lVaK**$>;PDj-^kBtWYF*pd9jhwhZEdT9-J5`+e<5@Cj+YpIYy`= zb9+8Altc|`)4(Rz0(Y(rhsG*Q*KDi9cS;*Z_f^>yTjDa-qy-U&{G1JN?fqaj*A(8B z@Ff7cFh!-AWF@8v!9F$)rflUzLUL0bICcUUp>=e=h+fbM1@Fp~(?FFks=1(ah=p_Ebhod_NwhD`9!iW}x%RD+ zW~z5nd)UM%lsy)cchxehBX^^3rOq$I&#j8s+*Yu&6h6po$K&IIZ5FCs=bnU)-9kU{ z7uPNCa5G~9Y;&KofsfNqlHH{od0uq9A#bwXP&D39bcG2R03YS-z3M`@jXJ&~8Y5#+ zj!m&B7l4ur+?{?;!X#wnw&CXTAVwI`YuH3n$3VV3`*|&kemsNbev~`w@Gu z5>$Cpb9nR!b(YoO@p!C8CX0JDal&*%Il#7~Nao?|eeCoX{PGIJ9xfAzW}S&}4Dx7I zD;nIbpq1=-rR?GK(UH4kZ$}LBC6EpdZtu&j62~URcqka}&ad%B4fMHyrSs&JW5_JtGKBOXaV`OrXpqDwD&xpPd5R$2E(_>|3E!Lk>CYPi| zwr&dU(q4b(ovw~Ni!xbX=hinh22zrIDV!V8H=!1Wb%&^(Iyc5`l-BMT+p%~!h^wlq z)+BbZA?2|$2T_dh)SK?aLqNsesAWlWM@6;*c?;tq{N>{WkAQ7j)=G7elG&Y45(|OY zWZn%E+}JaZIUh)6JkfB->mn_IRaJ>U(ODm;FkuZa*jN%@3`i$_Tx^o2WBn{>k-*LV z%cj?DfT`nOxiNnZqW|v3T(gDW+?eZN;JQ6hPSBqcL#EaKIcIjBD`$n{&x!xU z9seR{b~Z>988W5vJ8aH>qc9+3HN{^g2D05O^nXM=ZyMnT@dQH_mi|lPnRQ>Ed!n=oT0K0c zOF2HGCN<}o^uO9`TNr=e118H{1np-uKNPSLHQD6Z10XM!tUmP<2c8;v9M{<#8t<7n zTkUqCk#;2Fz%xoz?D(ro_~}z|mvi|_YmSk)Mr6gSme&-*W2TaJoGWC;We&ZsRbIM} z^6+A%S^=ZtT*QRlC1OOrbZR%f`tcI4y1M$-iJJVP?&uTRT-abfsdnLLRErO!IqAw- z%F){Umk4d zR;Vx_eD7W!aiNb@1HL;?W!7{slJ0Iw@o9LEI;@}^Q>}=-|C_c?5%^l@@1~={p953$ zBk#-IvV8Kf26onn*j~7rc0~!sc}Xj+?UXT5{d`Z~O43Ik$v#4#^cx^1GKjU=f`I<56 zY<(lQ}aie!6e;Rug5Ew=DU30xf2i`7Ed2Qn)l$Q(Z0|2-Befa?CDCg9+G?omLwyoyr zI^Nu^mf=JMi~@y>x1*09pfd8FN8B$#qj{0U+pRxgqo)3-GH7g2DwA6_2B|HWO#6wM zgK(l8n9Kt)D%O#Ur4Ku-?jJ`j8HH5!q9!FJ@9M=Lk)RKzMjp z`Z=6;)0#|ZiopwC#wSeYO1aFqcbJJHc!Xcj%16VFOMI5L?GdM~B+5gzqe2&LoIWi8 zIaYz2_Skcf)KJ+RFj7U!4+v5Ols0`atQQF%m|8!z%q$mrF|+FW9;f$RQ*mzD0;r-l z!Y!<76q`W!?7qlqW7|8#J6mteG2BgLeDZ{`M3&yWTd}T`X}kk@jyjmgC&fR4rY~hY zYu!uB-+pYH7Eo6}%CaP>N3Y66H4TJ^X)110r;|)n!XeNygb%qLANn@xUh(6~gokf? z&;rZak2pug6E!$zKXy?1RI(Y&DTjLDp@+$nx5vSCz-307S7e*-chKBJ>c1nM7cE@{@~TY=f$6AeXsFh!OPYRI!)i4%#MNFFV}*6}Ud_6z zurtx7`X!O6IOQv0d^+mvqbVl(m}R{VQ>hL&MWv_i`BovFDk;;pquwhuh!SFfa|wM# z0|Pi&aMf>fY$kFR6q69X%s1fW_Hh&G^=@YyQhr??U5fPdkL*S_OlGCQo&TtxKT0DA z9{WUac;|G7D&Gq9Avr4}5KytvUQE%CiD6oLe+o-jiOx(UM$qczK3OG^aQmSr8{tYv zHrz(lt~|jRaG59s>R!hT)R-b$Fqc&J1fw$8$gySKM~-cQYzVyyzUPj(J86B+%=3wC zB$1*msm=@mFhO=dyk~88s3tK$niGbWKFtS3UqA`qocGaqN1eu6kGHs9cccZA%s?cK zzE3*2r}(`$ZE6FOw-TfLfx=zA^MDmqi7zXhrlMT>M z1EWAxcy!;Cs0=lTg?qQDdvnyffOL@;6p^k?M2-9=mTp$_G2D!=jBPakm)*mRkF@|j zJX1?Sse*Bx@}$1FsP)6?eJ7`rv*WEJxOoOPn$x|M&la}!r6zI98L^5-)95rO0-~jO zX!Iq)c^A}2sTvPEKKI#)+M=zy0`P_8)j~ERfle~8|#Ys3Ao~w{PGrWBNu0a^i zBfqjKb=r9!1Nu$hY+9m34x-IsXFb4MCV|!Y#c;{FhvvQta{>l$GjJq~P&e^n#u~R_ zd|A!;anj3`rKJxa%zQ=l3dCMKe_AMsNoC6PWcY32@%c0V?f+*l{{CvNvW9{p?SDe!t@%D)d$-{f{TL*iHb>>9woiz$A~_AkO* zKWCo*WoYXrY5B=8Ad3tBCBrBn(6OK7+N^JES#9Waj-gVX{d8}_s&@0$C(iM)+KLaa zXn4mcpOZ<`^f;aGz}}Jy;;8*JCO{1*eCr*zkYrhpCg}W3`B2}(X>V;QFC$*9=MMho z&4&Wd%S;(E9>$uqsZft^W+c?#o0S>-{zu? zpX-lmhrCfJRF#CY)H63!-Kx&V5MVI1uqrT$OvBXEx_X&vntow*XE3lObN-2TB}L~3Gsmm2u&k#J7^eaf zPZEvNd=(32ngm3jIu$*92G8fPjilML%8*1HRO8k?Hrk5EKm4J4TUod{ivBC-XBboC z512v<(8ww=;m(l~Of)%BTjipLzHi)}R7%8KBO0LQD+?Y{rpnw37l$sk>lu6=w+eUa zFXB1^@+N{-DF@6jlUBslbE(eml#O@Kwg^Cvhe(nHRvW~$^4e2d=8CvGP2jjl3%GdU z*zVSD6Uxf_7Ms(MMu{zv35C8TRgN9Q#n}v0@EC&)c7NNE@PwR_IsUPc?;AJj!N=3D zKCuWRP%BUtI>T&CGj|S+`7gJx*hd8m0&+%$?O5H}gW;du+awrhq}uFX(|R%P^);3U z92d!KR7ke z6WT(?><*d08thO?v@U)21ePeLx=kUgDNR;VN!9OVxSWwqGI9!&_nuSjfeBKH%C^Li5+))mtHMm(L%bxZ(-%=kxKVls zXV_Y~ZzYL~qv*ITXO-Sfz@Qj4hZL)~!mloN24JZh12X7&e7tCeN?{h25C{sZ2QO;^ z@7_7a4FK&Q)r#n5VT#r7y@+WPoYQ=U{Mf(@Yv-WHT|Zir=pv-fqd zKAXjdPSe}+IK(h1jL+Cb0a>YSx63hGQ2`|vHXTg)w1?xL4@4uoCAR6`$YApGJ^Abl zNR2G^Ws}b#s5Ha2{{ ztS1L10{c8(gKQ+35X?`1;him68oLO!Bta~ia5#i8sduRFHoiyrjKQ2NFE1E|t>#Gw zCZ1xHAD*{p=nTEvoDO&)fu4wuI*r%Em43n<>?N%GvNdlJR`#e^rcN4I7UHbyI|!IJn>H1=FzqG2)o4CPQ$91 zgO37C(Pn<_jLp{OBGOvf&a_PpsboP^Zhrfsj&4(PwT(}k(;`Nms2{v?oIFc-I^AsO zj%S-~1TJ}juII_8V!xotR$KOEzp>GZhkg-9Z^tAZ6loH*?E7*QFUZp-uuvjc<$>G`f(EK> z_xl!VSzKNlyLP$7SBFVV$&8IKzDL}eyUTFA0Mf}ObSc8=LAINjtt5BV)8#)y=};C$ z`YWPxb29SV%=Mp$%J+!VO`>uY8u`Bwm8%%a53X@dRIUL0JE8&!@cd6{zr~S2SIg@l z8)p6#kh#fD{+#i*#O#o@*PM`;$nS}Pklh@=vc3_J`AL!f_lxt`Z%$zUpi7*Ph~K}Y zOIaG4SBvu?0U3;aYUr5!^EK^Iu8-MLzWF}oQo+8lYn&zQZ=Q|vZWryKJ}q4?;HD49 zw+B;8+Pm9>kGJbSJ~?1=`qXn&_P$7Mi$;1BM|`88Qa93AS#3;LQ&l+;cc$jx?zvht zq5)P%$*fot+NIW4r$}g+J4Hc>?95x|?A>MUC{esH497=tAZC^nm(*4mBafvgxYPk( zy#?z~TFU9&17)|#eW{Pf=>zJhE>q0=w!xNYd@SoT;I4z@IPM)??DvD~)O>fbR_}#( zG=wK3tGE;eRja)^Pr`mSizr{u+bw(^ej%csujk=SY_?D-BQrykPQ4|qCQn?U{AykY z$Dilj$DP%aT+1BWrPAf?;LT@jd<_>Zn;~s<%I{BA_R5&9zZZn3 z=4uJ}$gEd2kQ~{%TlZ95l;2WfDA8Oi<-j*w*b)?0T32ofk~?@E#K`LJq?OGhkgJ33 zf$|9IA$p{pjH$qQF>YZYPL3VID1kSf%RtG4%dm!**~(h6vxrLv0qiqOH}3*A$G>5wMEN)a|hSuF~0HJC_qc;_{BT|M0}m-~6?4w4MT%1H!SU6a+p zhOQCD?~!cZNIo*SDiuSc88Y~M|n}-t*q^?a(G zbS{r_Hxk&lT1?)p)Dc#yTkTN?>A8g}^J%kF=_vWFwPSzh79{r;s6)j8hA$fr6HvvY zvk4#M+`m;V;&Bu#RMj#^ep%sDi5M|cO``iqHBptVB_(t4J^~VwPwjpeTc1kj>3&Pp zJi;6rQrtV`2yvi%f7so7%W3AkUhqKK&t82j+N#~3w?Dn)-Vw~VF6!(}$1wivj=sX+ zSuaInOloXwubD-pku^5>Vq5y9pdZ}6u)M}y+}g-{)ePeTxw0X5F~?}{$LTEHBK56$ zn#}h|NeaMEx<$*^r)D*H#~`>mCmjyHMzhFYWqa3`SR=Uj$x`^+TZ~+3<4ky+= zQ_p?Ry2NqrMKZ8;An*OW&8_a1Fn=p5W4_U88O2s8FHi5I*Q=*tk8(0Cpd8^_&=b`+ zkUd;&*W-@Lyr7%u$EE&a!2ZK>n7XIq}sJJZ{jRmrVhGd^6;_%r_{@UoKu^m4GaN173d?MCIyh0{>!j0sD96h^);8 z*)j3|AO9;I=v=jI2n|LCvVZ5L$l4r`eUt2vc|&%{YA{ZSO8?DqmFDW;gw&Ov2P7>I zWWtskQc)qBT&~YQuDKwSz}yh|R|f}VKlxQ2SJzkXK{iBwd-v-8$9oVNoRF20H|0P! z$b1w2L+CZ|D}h%)Ae-B-gkE1m&R2;+5WzprH=kb>^!gt1&eb*eD*e^6%(Z{Y9OSNA{OyGna?eQoFO>3-TDa)0&wO3n|x zfw;cam8)mh=7gyK=J{utA8%ww7^@~t#xiejr?gB@b7D+U2-zUhCuP_;$H6&Q z!a1XFN6u|;3&RMLuTE_@2yA~k$(jAK_hOHE+`jMa%EZf975ON&;g%s(`cG?62Fpf^ z7%;EBH~SvwM3a(6-{Z`Spjx~CD~IchazeJp;7CM?-=0#FCgBRh*yQzTX0)rT|6pe%)XU@xJ|f0D zcvF+Ez?QBf^%0VN^-1I<@0QCC8J&Fhd11gjm-Cf2j%Ne$#26PR-UOEugzel|*?6I7 zPAO0*X*9^S!Bk5H)ZX)6IqZ{-ic4O8@4n*sd}ZFh{2Fv#MD(Rn_TuZ4)UUW&WAFPF z+D0!ep)dEEpk{OlB)zfbin!bRaW1^FUQYOJ@_&5_`!(@3$^~NASHw{McZZe)k!b4H zzBa|S7p+Kk5%8{1%%egW_U7JMZ>A?RFOSXn?n5;@0TAb2W_Y1vH+6S4@38`z&BLn; zTJ>J7ev!PjroUITG%I%YlDD=zu{0?b;h?eMjhD%rdNcH)eFrzHWAXxeKCO$mJ^aAv z=vRnMFORkmO6_b9U{7a|k!|eGF45m#2F_pP6j&fb`|(2|SToz(Tuz^QxqmH3{R+QQ z?^pe*O|Lcs3FuhtqFwaW?gE#~8QyPJ^~-sCBj-ix@$7RnI5((1<=7R{z5r2+VfGOU zPXB7ZMRtVx>7-)6bcL)VEpd2gwb0owBa~e5jS2i}PfI!Fkn79c`bqf&cJ8ok-FC+Q zIOL@Wow6GBS%u>mN55$3?E%LQdIi^U#qc zsDF$eWc?h^j5Oqz< zaZy24uhk^U?r&%z)wNijuE)aj$lPRfhO621uZ?D1R1Pur(mAMB^8IER4`hH}nwtTIN_WrZ;65Z`w zO`29mLA6(!c&5>vb6{gIRUWIP2GAH;wnD79-ok}qme2T{###0da5mEWQgwMzp$kXFCHqAkX?k}R}!zT6k z8ogcZqBqe8-d_lyG`1_Qr3KHV5DOymNM+rXd9E|bkmvaslX}agrK&AaR)F-psp^g4 zWKl-J%A;Y~Ip;@|55S0M6>P|4;dcnXmir92Fv=5@+s)g0PUMB?*{(+u3Ng$l+FOz4 zd1K3aI@&4t@YjmdN@pNTuAU%2x5Xxh-!@^vYrhvVJX2;VdM|)krR$E37H%nTme3wE z;(bq-z){MYk+rmF)go|+lzu=yBGbZL&gq-}$by94orM+?clSZ3sue``xN(t|!`T5; z*t@h(;J8`n8)S4k-MMt}Zo4h)N#@L}dMKc$RJxqGJNqk?`sa&9b4p0M)>H7b+9 zB>7S0_-?(dK7C*5Vh&aheuB|N|L%kHm42v~nJiBw5%43D^FR5wS${%)%UkKA$AHf1 z|D<&?WhjP-c=;u}gsP%u^@Ag$7v$Izj+0!)&#;y7xgNa3yl>~``!35R%I%qqZMSgL zJ_o9$X=b-0V+&=Cb9hyWXaa-Qc{xXxBE3Uj`B_#kRIzc+9v*W6dVW(89aM-W<5`52 zM4PU+;La1==2fA@_LZJjAu-y7Mev)xb@mg{w6fE0XI&TDq(7)qs>0g%_ClNc%$MH2 zI2s|GPgYhSSD!f9XSC-zeTYHR#xZ)Pc|=H$~~5DFpw+dovtEIf!$Crac{@e6NgHuuK$~1?3<+mKEP)VLc#@ zHWaU66mkan8uphUi>==4ecl&VAg!Wzr)amNZ^o?ujcSCDS+wRHN@TpzsfP)Iwg~CT zy|cq{HjjI0aW57X=*ud)Qs%$d*xwVzIeWLU$TIUrE}?{a8Nh&?b4DoOd;auJYwLS{ z&iDuVtAR$euxGMop84yp$*|{h^5t>1!F1TtZ{J#F3{64BWNl?5-R~K$)jppf2rWHM zGp8-T?LldBl2vawXj&|zZ>($yq=9yg+qM5B3||t;D#5@LA%O3>qukTI_U?Y(R2ppk zbWf{A9XxycGw4*UhcSD6@AP)D?yh%mVMg<|VL3$Keey?%ig@owr ze7NTvHmP{8WQbejCm2+<-8iPL6*N4GkHYXe7s}NgEsw)dl{^6IBalEBAV=_^lPy5kwar_%PuKP zBqv!c0V%iBZTkG^mZUUVmiUi7T^uu9zrHlxa5(Z9kF0lQ%jgt7UDX{fe#_JJ5OZR+r%XXip{!OoqN-HM(EMs2PY4vt+}&2!)yQ5gyYHn$HZ5*&pYS zFJ;37U(`ipv{)(qLRoG)o1EJ6(>>6!;?{w7-5X0X1e!2(ZPo(2x;Q3TJtSTym(WAr zvkQ(}ols38rO#HDw1?4ATNk?hqD?niMHZHwdB(xJ$_GpNI{{W~I+Fo3qlK}gCp-1P z#QWrEpQU$W_XG=~%9eNZ7$1kceCL5TnYqI{ZMP$f$>ws~Ffr*|vx(ko0;BXLmCE}< zDrBTux#Wz42>wq=R43K9TYO;oBJPust(KKmhHC`G%7?Ntj+zW=*j{|JZkSs5Qbzew zEkH%r4#O|IPC>=AgAOH6wP3CeY6mK$t@K2 z(G94iAUf(bN=)&d`1RqX(Ph2kd6r<$rqAwtMH3!Cvto7L?6@~m+t0=7IhmfD1a-XQ zufk~qcy2dFtum@wd9blRyq)e>?^?L7+qlzy%LIFxIY^&0Mp7QfSh&YwknFUd5mXZ~ z6?}Oa-@O@=uY3~XcEY_~`;K*;M6h5LXcD6Dq^QNOPP*<191Fs!xNCy2l|anERCK~hbsS!5ArIF^&dNS)euyz$p!2yUdE*s)n6iJ( zP8=*}KZZ|;%WQfa7pyIHdsQ8(32tKK60}W2AAX8u5v;CK; zdtq6DDwUzq3KUN8>dM>>Z>$O}Y-zDlLlNIvI!oo0wuf96t>x%V?#0f$MQ;E7GIk6CwLUev?2%130)dZ zN!pdJ^ayvU%Xz3K7rz*lAYUbKoNxaCy*zLUs`ac-bTz}NzZaPdS}=cbW)3&~CZaQ- zY~~YXL|5m-Cvi5#(ma`5AD+HPR19f8h_tP--v%W5Jc-=#h<_CGE3#+lc5(7q4~wh9`^xJKFruP3cTjd19+_ zHO2$iJlO}at3Et)blk7tK%TFCFf72m%Ax z=CkF6vIr@T*vpJBmfV~}eT$>45ylALN1RV9<68=i7BRf$UfOv$w5Vbv`(I@ZZU=kvUdx!dTtR*-rMkReVJtNOs(~6O`lw)d9m$(XxRIqp~!&3@& z4T9^)3K=!y7xj+N5Ze=pNQW9t8m=^kd7MjJMFs|^bVW}W)sOQt|K201|Jg%i}+=>_#Rx2^L zEl2~x^F9ixC|zlJ)@R)ioGnROyHSjQ=wZv3H=DVLJ|P)qr_!{!I?6gtxh$e+=EOhU ztd%y#?+hZ^$V3`3Up;%;2Rj}3K-20N+6!iA_nx=@??O z$a5*6SmY{Wpb@f*y-C!aLDmF)qCsl)ccs||m3yqOU}0KnUq^?@!8>NYMJm~pVA(;Z zVo*Y{JS%jR>e_G9sIoL+r3uqDdWtIZSz9j`B%Od0g+8w?XyT>&vP;3$PHhN7 zWP=^DS9*(*B;LL6<0+wE^&5ivt(0u@Rwbbl)6a9f6!($#+$w3<>9#5w@J9Ai5J{X* zMes4=@QsH2_330u7vtYjRw1Cw8M%|>e|Rt^AK2$r;demNFhCF@aCo~m#l6&1B3OO= zzCvzHs5%(BXb)bFe@jICvy*lM!E{xj!~5pc39)v*v!L{xZCgOP99 znzQscGtBuvEo#{eN~#EaQHowdaov@|Wr*j|ETHPlvCvMjN^9)aaqqZ=+jzj=mBGNrxJJiqH^ok_@KilAr5FcO7E{3Nb>tcWOZBukWmtCfBr=8K}c zMuOC=?8%#U&0FUCW%BEW+>f~!hL~LMYukR2)}3z=$7bj7oj4?-mkI(eu|&srp}x~L zV&brFej%NcmNsL7#npV4=&}0|?>XYRuey93orq5@Q6<#tPaJ`6rIsvS@!F2Wppq~%IwAIj>oRJT zY`@JEUlZ{%LLLKfCXJRA5ri#?7(y)BgN)tmRdI`MBZ-ZpX6_kTl+rGUCaAW+DJN+9 zy+*vz*@p1xkf+^~YO&RvhDTCk%t;)ImjU4@$jt)OSO}QhoR_4y zVl{I*8ZQ+UXdXx7PkydVu$|nVSdd;Sy7zvz=F;)mNRzWq7fl7ver$wR(oxJ{`QBaK z!T*o2cM1|^3%f1Lwr$(CZQHhO>~ih0ZQHhO+qSFsxqo-u+Yuen>+OqNsmIJ1a}IXt zWw*(pqLfeim$qWcWaE5~F|ES4FC6PT3=#Y#2*jnHXA9K1s@6;D6KjNeS=E=2_I(Wx z1ei&AJDv*6V_R3<>pbx+hq4L$O)gPK-sn86d!)QKchibo7B$!-z4)b>tJ3j0jPpMY zZO$r-+#GW3yNfr>as;qfNQp`v9xobes`f#t2<*kuAzvDnph<^a&KI*S>&vX)wlmRi zxf*bbtos+|$4@0b4dDH*;p~y~`b!Y>FwAw&aMFEprt{@i7eI@Z`Zjw>2cASXn^#bv0M?3)P^11)@cC*Zrok}dbd6l z2xXEz0b7mi3QX&TuRe=y`ZaSDTLEUH@tEdz0-gc=#>_jP$3{xGGu$r|`T;KhuAka5 zGt94^kC_$(*_rc|wZ*7`VxQHPz|;Or-9X~S9@uIm$8CPP?H??HegL79H6`K)21y<} zB6VwZym{JQ$!7PDNQoQnq*hN`PFsuDg_>ntG9wLSV_p`&enC0rmid-dI+7{UaK=$= zYQMG9vY%II-H=zWlw$XfsvqpXFKk+`X$UP?F2qRX_OTNKFp4LzM4cZ-^$%PPE45$I z!|}D^i};}1Y3M_WUAvWvW}y+1?_V>4CGZX!EwnvxzTIB;5j*o+D8(~UL20S!CGca{ z6`Z>voFGjuEs{*!6lh@oPhz>yQ{`RV5^|ADs&@x9Ou|q@ zicl*<<98R+1e-}@azi^hp=7V$5Uu-n$C9d3UKMk^@6tv>jCBWF(4Ku(iI{$|G$>t9 z6`i|AL1$Gz>%h+Up$_K93=utie24CrYAc868%q7A!s>|xJafy2dchQCU^LYe#=%mr zh1KJ9TtuN=h5tvq0D_TCpka!XDXnrF5#-jF#K%VZJD_G1Xp=1K)X|!!t_6Xjsw9;d zHIX5B-$p-2UT^46R1?ZFuLox3{YKN=vhRlGNSq_000EPtt2@DYeoD*sRmIhATEET8 zj;Fy*%cgwInClBp9)m%iOOFBnK5`r(Om#NBRKCP=?$6958n>wcXEeJ@Hk|PndZux1 zN3#i>HzCgXz7rO=m8~(hT_ULcm>c#Fm$|@{rSZiQGBRt!co+haS&YxsqU@n8kTUK1 zmh-ECR+r$=xN=VaQ50sd^It3WOp5fQ#ws_|e9DPuo~@DQ0}#=ZLm?uR6;(8?ljOt4 zaAe@){K{QRItRN$wUeDt@fStX?`sBR;?-$Uq+q(ornj}r_znJ*LU2nuY4(EQ^zow2YVx*Az#uwTR#b%vcMXz z*v3UpFZ}?X-R=aX(q9|KGo~he6sd|qy;I3id?k_RHgqdwmzN?j;aki-P<@Q?K|6|D z-V9XAeZRlChC)&-<^YFDJ>+C++V%D(Vm``EF_f$v$MLOypfbMIvOt_}qa%*ZL~%=H zmIJA71^Gw3dz-k~LU)7|br=tw8t?{GfHmF4k`+6#W?Sr9M z4m=}c0CQI*t7eh`5+N%x$k*>#U;SGr1($cU!a1i!3qvy_@niZ>OrH*&xkdL z0O3l?qi~fJ1ta;hJg3fE=$dH;$=901@`eB=+XI#&CMxNga1ZIlSWji$^;p=Nk*^?( zwQ3aw$L;rb7%F*Fw*_gORLD2F87GF5V3Skj#VwaT32BC%lF_q6vOKKhQu+D9B;If~ z9I6NykrY50mlo|r?&y-g*%NHQ98lS3DQ@$8irWyza@*o!_IXeRH(;y+T6m5pa5(ik zgZ4Cz!((5ZQb+(02d;K^eMJ}( z0=#j*Nl#yLiy6p2aLMJsr1~A!ea!c(8$V%(iN?inIFx+B8JcM&uLYn^j}EB%M0Y9y12dH~CYR zgLezYNgf`QRg#70BNrJyt%z?0e7OmjuDavlNQ7aa2%Y3Cx!SSEnsPE*|vO!uXaS!o4S?e0y)^*?X+JiXk~mlhQsoE8%4t zZuxWqx#j5vvFlD&X`UHG(sj)+_V;l@9Irh$U3*r~kVBXJ=xgo^uEl_g8^$_9cWzN5 zVe9APQ!XPRd*S*M+M*Dy7Fwz=aTcIZC-c^gxO}k0$-``yMaMJ#cE@3kV8PmwdsW+j z3(=&!ONt! z33Erqx;|nS6JSO9Ay1UE-FMom2(@|6Yt!hG>HWGIrSkjcOA?$*?uN(kk=Yr9U$?*b2+ z_VWv^l1TeDW2V=aP7h952>LhMWn`>((HpT9xN%AeV-72q-_E3dFp0&$i~#jh6Lq(VIHA__K!%UNW<5su!bK1l7`cF9C{YBylIVVj8mn+a=8#`{ z)|4RkMH*bM2eCRT8x|4oZ&H>6oTNB;4m18S`1?sdjdp_2!M#u+$q)`$Ri_`Nym+Ne zzuf9#?_IM1NlefkPW13eVyEZ}ao$rnHcO!v1HuvZh>>n*wpe<;aTftd$r+eBri zz{--uT>?AM%sR(RUO+Sy#woITOHjJq9{@{`Xv4wu`iztP!B0KOt2)fKJgpERCoGZ? z-DGKfACfC@KEsLrTpMop*lZttn9DZTVuSq$qs{0)dqXqDDvZoCneiVAmA{--2&Z+v zY1c9!Y`Ev(K!7qGxIM^TRki~mEx7RMIwaYs>_4vFx99AoREC>VOn6o|8-8hkw)}ok zM_(5byZM*}7cDnp;JGGdS-#NH%pJFfBGVsatdI_3m8hL{@)bBkycJ}*2jPzQwuUgZ zFMpn-W$fZlrxddF>)p0}s@JQ7kY@P0oz(Fi1tHj+PO^te&mpa_nmAYv}? z{w4-v7yi8?ZUNQZhcJ3yJx!u>!wHG;7RQ*l7m_nV5Ou?h0{+yuUagHjC)&H1gZ0tNn>_uy%J`Lv<7`xK-1fY|HHV2?j?g1`{hMs6j7 zF#%K*nWxF!`VPKeLS3H;LwUNIm0GzN3vGL79sy204)rJr_y#$TW{S$MFS7W33bcY| zD6R|R)t%Kxi)6j|HsB93+7f(vRP|2~tJ^!Xvm0wy0ZK{gp(Af*g)Htm-3QM-78=}EVnfilOpfK-jcm& z{g|X_l{$cO$dS0fhkemRS!GUWZbtXcD5?gMp7k7SU(Q$>M>n%wx#kKYXLQM=?2yN0 zku>S~_=T{;-pe&~kVC@{cpJmvgBgz6Qe(FiTUE1eHqMl9VDAstOmuq;MNH3m3Xggf zCE6Z)2o=k0GxA*i#P)ZXgldPYR5%}5LhO9%ad5}yZ?Hh3Hk@|2qSWIa|ED!fYqgU!#H>p21<|Ik6+^yrEqu(pvj9StVJLw8;Wr5r20uD zrjm!@kUWxAURrcDeh|yJbE2c?72CLTupW@`Z@?aJ3LxTpyl;d|Vg#S;J}B7ho+!*e zc2nC7mD(;osCW@}UxAujo8W-bU;+`&OHi%Gi@k7Y_Zx&1>%k>abNXqHc3p>OBXoPf ziinE5EAkzz9ZxXPPz@5Qtfu#!oKE{Ze~d2sAxFSk=~KNn$=3b=WljnmG_8}Q;jGqU^#tuWnk(E`G6l4b3V3w^iPGXX2+Va)4C8vM}#6<(UbjL z5n=92l9_R*mn~vKQ$Ce7kTxN(BQ&&y7Z#iXbXGI`n}Drfs!UQFoSmvy*?M=2AHkX zMbdevBnV|@MSN_>nDK^qG)4lslu-WwVkh|VDU>8s2-YQZ6c;+*m$|C(SleJ@8_KVs zliQ^bFUls?z8v$vgfOCOSUU3SEWm3oHPthm9kXx}^#uQhz8-aTF&xf3(%QT)0#|L+ z@H^e_xQ(&G%dVf69M4hu#kam9RdnXYY6?WNa##FnwTau(l^#vHhScAo`W%sxyQJ1? z)44yn9X(Q4Ua^5=;l(0h?);p`zrcRR?8kZ14D;Jg$_;`PiGMhf5ZYQqmNfR@iq-DE z4?}-8Bf;?c54&C5vrgM0kF_L#6EbXozstFtgO<+A8C*^BU=cTmC1(_BH?i{)y{4X> zl_go!1R(?3kW4n<&tHM_Yoq^)^_8WC8R1Gr&<9m^*|||EW+{$>R@UyRg3uNHoWV*R z@!bosP>pn?a3>(ED{IqBts>4#Wc0HJKptDX(;bimp;~Y8w)*|ckB$4KZXjRyOuU_2 z_RwMN@@k1di*E75yJKQ{LO{Mzo(UHFAP`hFC*DY#Lwu9Aa_K2_!7Wc$JVhnw9H<$% z8Ti>$&hA0+&M!gMCyh;3XMR^7i5o$5h4t#9cQmvk0%4ypFwkh!ryMx zMrkH>E?KLI@$+CTB4E*C2dS5j>{fsy0v_0`6Tz7FgUo}gDzl$ntxKz(B;p=sPN&{q zrX`HmfM)V*w(v=X?;f&Vq+@x^?9jH5=JFs|#?xEz3iIgX%A|haTKwi^5DDoJ!k{Q* zCJ9ZR5gB7YbRV+K`GxeQzbAB&vV8m;c0`cMqnknOY+didF7D#=K2RzKfcl{079a>4^U;l-%;>^U| z#<7gzqn9F+oY3|16>qe5B~Fq}5tu$)1EiDCNhGXxt*A|+3dY4u%uOCMH{5UTfj1o* zQPb%%((mT$3^Wd<+RKFFN(;JOCZ(Jy`c0O@t1>Y!$q6c)bqu>b_v$I=DT_gK`Pz#)%GE2Aly!D@*MTzp)c}@V z_!;hI@c>Q4SEGz<=M;H~|HfYtm^_wRt}L^q>Nj7d$OjL(%TubKrJC+8%ku%&=%Nkn z-S2M)hs*w`|7!`~CH-ld-pDPliWB=c8|n5aypUG4QK>WgwR4j^3*j{)$~8KGydIA-Eu47Bf(ht{4CEcr=(b$?&rRHZ<4Z!yGN60N;{mpZsfz^BdV$ zTjynBZGcf-0!a#f|FxD9L(;W4VQ(fc(8Q_Oz!u0oLeq7~XesYH^_yI7qW|54?NhuY zkhP_%(atA5E+S?tK~1DX(Qp=>J0YQi^j-dXqJKdfL2HDd3Q=T$VLmCNvijp&0V_I> zW=LNOGj6Tw>>lz$nMb}%h7Wm!brJgg{5&XEo2}#G-X0Cin`E%bz)No5C?WoC3b9yJ zno9OBndqS-zh%meI8kw}TXU{Gz@um)U2_oFYjMzAlvqS^r1tcdZ&kS|S%VBX*2aj> zABS!a>7nxzxvgGvz(#rKT({p zf~>fT61AMAt&yv%Sc~hUU%$|9Ig4whH|(K^*PB-VR!(f38use{?tp zU{}gb}#`aF8^zQVY^j@Y;_LTqga{pA3rvF46{~^>$|7T(J|Ko7|U%`_9 zjZFXdoc}ZZL#7$oSvdcn@&AQPGqL{D3H`VJ-Q)j9MOp2xs-k1~0 zK0e!<7@HUx09OE7&unimE|m*+6-O)dgtS&+&Au*?HSu(1MHaAa--P6tL2 zI1vCxC!pWjTad%5j+HK2;6tN9O`PNd%B zt&9v=;&(bnR~==@e)*zI^_xYbfujt_?JLp?kHP^V)i=mR=B zFfqS)&iUm1U)(ed`+wYYF9O5=!An(P1Or@3qWTT%MPCI%ktxnTc?p9XRG z5e9XsdvkxgRr!X^(UcVu7Lrc<>D8?9$FAst53CGJUF2^0r4XH;Kj4S=4@E?Fegb)8 zXmGj*z*y(h*uCB1CeWip>-{A=-VN0FbyZ_=1r6o_{J3>(tozaZ_UHNK!u-+3kOX%Y zkLn!}+g@JkKk!}nQNByv*n)-eBY(S{{MCErpY@;RK{$hC5!d;;wwS>;O3X>#*NV%0 z^_3Cw&x=F-@GeuH>1lhIjT;0lFoNU3_{uj!`;l9{W z*|P-9$LF;5C;Wg?C1?MZV`x;wlp6W#)-=0bHLwBBONUmS9mA-~TDV}YQ4k^L#_+X{ zYfI4XZAgGNT)imn|JXFbaYff;1`+*HFi2cc^xdg_VNX1`8}3DK@X-o+=6r}i@h#5%Mf?7C5MnfY$xaC6m=j2iAIZ?9+|>Q?Ek}IhN_*jOy>yEy7@ImNf@`~mdnHiec zjwcq|-O&?s5~YfNk_rqVmH>bJkb`qiyc1-TMVUA(2y6C}B{eH#md>r%cXRmzEWuaL zu#*Vik-h_cD#))eZICMELIt`Qemd!iA>^= z`5QgU@&O>pq0Lk+;4kz*6-otHWdzOEW9XTHLQ>%(qUefMeAujY0&@1)XH0_0Iq4so zePDY&imTH<9=ZjfhzeU;e41NSjE^wO^lU86zR=D`=|mCiXIyl2OKT0{4cZQA=86nQ zDc*sU#3?^r#YP>xAJIS@=Wd(c@g}<^=yoKjUE(I4GtHUWEe zX#0C=N|qzUvHFISIw&V?5&{^$!zczDN5*gm7Vnx};~w zXD{JW1#M2)i+JYJbjlAp9}d4QHXiK!tS$k!idq@7V)m!tcMam3`~29}8lZL+!n}HI zfIe{k$V#YBfjS2CgZ5u{tX+Z4C}O!#8N40g-4=2Q`31lsS=W}$Uj@_7{NlzLWiOxt zUah}zTN4$@c$xXT9p$_~z(aU2dr!tS(tBi^eUSkL4T}-)6p5TWMte`5N7#A*9o11? zT8rIw2W%aimjgWLnn#WNQf?}tX`*b>{`g0Q5<7Mr^ zJyV)*P`qK5W7>V-B3j?oMLDhx^KLB% znRM!XeIt&CyOw9-!@CXIFE(j%M27)e4PBhx)Vw;}(%I|GzQ30iCPt$hR__i_d9~TA z%nXvw(>UxC7zvo=_kdeb%34~U0RxU6C?^)9Jjn$XUdt&OrU*~-`>6ZYN}r%@I*kd# z9Mycn1ysy5IXYNxy>Rzg+E8RRZ}(ps%dsr7)P6{yvr8`A?Y6imMf(v+{aMg(5O9UB060u z(2@CxCLt;9Xq(+`ClV5=zp6P0SKMW$O=fN$Klqr^SLtpbBhEwe>NM_2o+I*?1;J%b6WeH30RK z9U4BiRim$`Hu&axL1P$$ob7njI=0+{jXA_2=Ph%LvKb>!r73S^WjgMeOhi4s__DEF zjpr%p}D_hZOWtXiTU26TSp*%n#z;-f=}{1Vl9J z607O;0_8`hIwmP}lHu9Z_GhO&&p8cj4Jj?!nk8Lm%imRIvqE&EyL3GS0(0M*i7Gz2 z`hylhJ!lLvZ#f)oSEHPU^#{O10O49>rJtDw(RFNBCK&R0%5z33(%@q0cemFw@# ziL+pI70P}Xo;3Gv@Q)NMx_{hH0LWFZnlPP>1p>ZjW#zlFJ*!zJEO{~eQ{pqz@KMkhte|XukaR9!GWP| zlL$A^%x1Gch`!|7001#JrH>wmOU1SeI$2LTF)Bk_LFwwc!^Y$pnFu3Oxi<|wp`tAI0A8O;ASd(iX5%xf zpYhIPJdLM*>~z!`#WOP`=N{_)zkk}CiWe)wj7 zk}-mfZhICMDoUT5u6-DmWXHFkqw-n|`qPJ}%fU5F8|uuTIhNqjb-90Ivt`rxEA_=$K@; zx&&;F$eKRTKg7a2e%XfCMo5*#2`baNE=V9BrTM{f0+YqLxbepnYAMlAxEF!rw%XBz zDJ1qSi`_k0IQ=78#L(U2fF;k7xfZq|ea*dP)l9g9IEXM+<_!>Xi0zlB2gREQ5HQr< z79U7-N=vXq3I>TF5BAvWy104<6=U`8gc)w%Vf2k@{ z6$4elz>OOHyuwa^6kK4@eq-Xfns8FyrgNGHq!>KA&f5f@#4X@&~m%JJQm6fk7 z@=Ln8^7#0uh6_yalXs2nZL*Zt<{{Cqm=iPvs#;9VJ=)W|VtVl6rbwpc9~v|(+vpK3 zIZl}4TeGGO)~xhZ1>fyGgAE+SIu6`g@eOvv-xHP5DOGPYS_D$fk#SQpoH}B+_Ex?_ik@Q9hw!cOFu-z)#miEG>Iq9s2O0s%BKjmCYaGVPH0UsR`6NWIM2qBwcE+EpOz?cwJ$~3+?(_YM% zP6PPwn$}`+IwE%7eA7YeUKWanuwYgeC>?$(u>07au@LW^6Vw!uzs0sv-%_Iy5}GB$ zBd4hqZ4khwo)0M6%2sMLt06Ki825&=8(ZJIGN{l~DIQdy80@S9J^tvCwd_bIG0>Pl z76%Q>HHa^Krj_dS1_S&~)XrvW<;gdx$Ev$E@DR5&>eQGcw~859Y-O>xip3WrE4w=b zlk!!asCT%~xVfL2FYjmm_$}gwza6w43tz7FiQi+$WBfV|g5kR3*ajBPh!Tk|ix@#3J-WEu7 zGOAK$OX<5j=C=2tkBH%Kg&o8IqL#rDGjwlnJ|S`MXGSu>u`oVUqjuo!UD0UMw{pVmQxXmk+gR; z0tb_{khHQGyc9qe5qmenvTXgN-MObiGFq=^!;{m+Bfh~>$Ahi9Pmnda`CSTCpQ{ia zWGj%=T?5W`+zhlb-uje~=Z#<5B1X^vw|#DiRzN{9MqtbASH2VShY9UMs?e3JO}(<6{0? zoRQc;W~#U7m8$y|ttWr8eal=H0sb@4Ipbf}pNse`Y=V3`=kqOM_$g?h4e0?p+d&T< zv(8HI0dhQl0$nc|mlW_iu-#^W zBa@4hEQd*Yz&X0Arq?~mLuni#NB4f7#;ocsvm#cl< ztxn1&`dX^t!6Z}LP>NgKN_D*@$Mteq*UAg{xdFV_M@lK$swjFTwlUjv{hv(_)0Ul^ z9r31pYgGBCA6amW*&qyzID6OqvDgQreHbEElhNT7(b`+c>sv+Aw_;#x zuco5hXxh#UJso4UFIAba92NIiqXDW)EZ2y`5O#*jhJh?Ltb4A6fhs!LpuPr^GDB;U zP*|V0=S1~7YWopL`$V!yr|Xqrs3u2*%b*?IG|NkB=I=YfR{(=cmeXNnv0EfPbUvE* zxlx^K$HH2{>M#_bpr{AERQzUMC~mu*K}SorKNCYe&zm@8 zG0Wh*yf>9$c6N<2uGW6AP%`g>l4y;$L4@EwNGUU*(>)j0SH=i^==s0+!nnuSu9&U% z_1+L5*0O826i|O=T#J6pDMqlIcJ6rA7(@JwNnS978)_(;QvB9Myp4QLt)=%x0f(#f zsQf~9ECVC0*PuHsiN|7{g5>j`5Kym1^>MFZh($oGTu6q`krP^<#o-zozIfLem4>rdkpgJuR>=*w$h58G=eOQkuxiSb8HDMX~X7%_y zKfMe+?ueM>2}G1HHzO`^{8$@vF#C>DuB+k+f&vz7cfdJ?9<2)WIItTO9M2_O1?s1$ zwh)iAl8&UIGg_u4AaB?>@*4&lrSPrK7L=?6L@1hW8!ybAyhvp1Wu+=7Hp29cgX5hP zH!}dSc8UIJ^V0I;0wPd_)s&p1#LfpooS8pOwnB*)V!}$thw2yimuI2Ci+l}L0V?Yg zj8$=qbQpYAxwwq&Xe5R(`*yZI8c{8fonK6&Pn%@4_pMO6@d74nCrA)JBgo3 z+M?j;{)CG7`2Sg-ybw}sK%2_*KD1V#uYD*LCzVn^yH|AthMDQyom=)p~KQ&XEp_%M-r&z>uNZbD>8@&2FxQr zxUvJ<&frzQtq*K!wT`~zA=v|gBX*~B?)V&y5O)tl+Q4`}bag~eA}Dm2N4Q4VVjjcZV-&?p@| zrQg%t9Pu4&AG-8V6>blwVC7q5lPxs0xA>NfQn`4Ee_!6x{M%wWsd*sNff8~#m{bTN zJ<1;mNWP4Eke%K|o4wq8oK#(9{I(pQn5AFZ6kWnyhL-vZ==$ZPV)F$M8ijYE@Xg|8rC$rDg1zW!sV ze`{p<+psZC+;vkGoy-ZqsBV$Q_iw)2V@bsF#C~2Vn=PVqGgSO#Wn?urN4eq9PoEH4 zT&?;?-+M)NImTG_agEeTTEUm%p-jJd+& zC?s24JieNSZ+;Qb7RAI12fL-Q-Qx1S`AhGILH*7SwUe+itxWreE-WV%aC1_gp-npr zqE*HqYJEVhYh|lBA5&*F`laRBJrhuJu5Kzas7LHfCx*_hmHNEtjQ{ zO!3Awak>=sh_K9<_?0`M6KXqQL-=nrmkpM`%IZb${D{3Z29AKwhBbA_R3C!~Whd@p z7_So%hphA^Nn^)o`QtM=b$9WX(;dEDj>2~8s(mX~kYL4-WQ1;NX{HB-B>x;Cm0Y-m zC3o0+#XIWns^dU}IEXd)+S=IHsT^u!j@2Qti5ST70+rQ=b43Fp=wi^}^TYQftwPG6 zld*2v;#3HxC-#N-LZ45f&HSXCIW-WtEumH1qR*bAVE0XY!$_0O2|NyiT4ON3TO%Y% zgq}f#&WRr7a18E0+wbjJ>xBDZ>26)ZrKp;J>0GV52z)!h-IfIYSep$5&yB-SX!fwq z&=85J;vlzNvePtC+zWlgGlyUPxKt(6S90FcHg0Ctq;6EozCVGBFK7PD@)`cC|p=yl|ycqCJh*_R2MqrR?k03 z5TDbi#ifzM+`j5w$Y6`p#sJcpgrxV%*UNqsMxy%$r3tM5aEjxX6JNv z$qD4pf;HYRv-#)4SW0j0=QlcINwxg5pdljnss!;DOhP@3q9(h1%NgQ7g=wb{x^^#5 zc1E20V3#0NuqOCJ-ADWi_7Zc;bfF&zX4>2!WYoxDDm8TBkmfYC^a#^ptXU;uNpG!x zfB;5}A=-PthXw!+^g!r#LP)#BuY=1ZS0)85Zl500FJp|y<&u|k!+qsd@Vslv`UMQ~ zn5N-Q`zN%SZI+a&eU!rXZU$c6-4>}J-cvltY94_hzxn72SKb!vZm%#E>ww$Kvo;gz z3xdYw;#gtqb4l1!x6A+o5vUvq#$=zDtrog5)d|{{M>jSl3yy15okr$Zc-wtB6}OtQ z;va~d1}2#kh&hIC=OOaJQ*vuyUVPUd6nE|(g+CwNFZ(>oo8UfBvsmAq(U%FHr#fU{ znTyvgl8t7RV7lqmVDyZuBvx``?~CsW&#Vvz&;y1YlEQb>(148rnC)5Cpd;K9#B#n~))F{s9p6)aPY~lC5>gce^IHrt8i1^Yw=TcNxF3uT>%T;1$0BCgz zOm?Gkw}(zAnT z>y|t1+M@x^ z*xy!cb=eD7n2D-yMi?7FgRVe=lRies$L_EgQlP`^p`P;h3Oa^ZHQ~ z^{zZwFm_7+$4NDMS@WpboQC9HgCZ@%_YS2uA4~@BqZ>t8;AGse6S$zX-d%0)4x z<72w+KW4?hwF8e%UT4sQB}tC$#Y_z0o8-!Jqep8TK!xvZ%JyM@xU+ezAqW#vzQ1b1 zdD4M6fGLpsp5!z=T&H~<5FFeI6vZ5>D3kF8v7I^gYdTZu%pGWFPACV69`x6^AC$eF z7~pdQD%mg$tje4bH%y3)>+f2)zdQ(Ml0e(%yJ2!8=~Y31RRTdehs&7zJ}}@u%UiF4 z3N7lpzbGMmBMjxZ);aVTpINCvFZPJ~z+OVJ+BJFKP56o&IQ~%DcJjwfX&jAJ(q1?% z!`C{#yIuG7tpYNeseFYNm4^3ic}9yKJz;a8_|l&Wjcz4I?ix8Lq2*-5tnyf1i=GgK zse#tB5wW;NM%E-J5T#$kdrb2QT=U3x^L1H-i{&V=u;BXjt==k9i^Yr;#V882t>(;u zpOQIMj0R^7V+e6V!gAw^9l&2?7*0uT9G+~$@6TZLAl^aLyPUo>q!$m48A5O=A*hLy zI+wkEyTL*luzP{bZ{B&XSBHP}7bi5A8o!%%^fVA3X!k#r+`!GhesPH2)q8ehG?2Lp zS-F@TA%b~u0a_H`D>j1D4BV*Za)oBnQc(Fz(PV537?NWdCvg{KNo;zIf4yb6Om_3F zJM4DdX$!a-GhJev8P8EPFIbXJlck-4LDi=8f*v{c@F({94@gx0K{6dmt0dRD9Zg+u zg9-j%?Y@WS!LSX2*||y`4aGS5X6|NHpoWLFekk3yID4Jhl8;yRt|!(rgfoVrOWL5M zDO#Wyy^E1mYKRd%!Ya~K?8%)XOqC3L% z8&x14M$VrGB$HUmW^@3NHhjeJ=nDP8{KCK{6d*?tTvpN`1KU)86T0av!g5RsZJT4U z?){6a&eAX7iwug5ZN7SLQQzguZSE6TeCTnAadonHYkw$Sbk;CZQlr^x844GDd?0ne zjJaSTyzmHH%`1kZTC{_^Pcg)XvnFktJYBhJ?^NDo*y~_aPE$#rW$_rs)~}GGrpTbl zxE%Dl&RqJ*=L}Hx#HL{TaNwsAtRV{&iYHW79^A=pN#9Y%t3oQ8t(8iitu^ILa{5r| zB^jA4Eq%hvq^eOV0&n;ronXLGo~>fVsgG8FM%qQ7hn14Y8vj9}R>iESkJ3M3bO7y;a06t=Ej0^ukrPgDu3y`GS7O^INKQ z5YYEs%cp%Fk6Eg_C)Y2$^rW|?qdHbg zHiKhhT{_qTo>q%NzqU)9m>Zy%#_O8*fz{;IqR?8`ua&IQ+Cd8*)~f%=!jm_Of!>d z4Lm>%PoHegB^&-tvF(0bm^_To45*GcT~@z1x}v*_WABW-`s?#I`})&dPY#EpUC~Oq zy*`-!c>^)Z$jCHoJ(woT*KfIJP=;~Yh8bou*z;%mK&o`39J4}WN_yi(G=#{skSYc$ zy|t=4zAkh4HC%wW!b5t;fd2;&8I^P8%qbQ|D{H}NN`gm&M}{C%u}KRt9Nq|mfK#eHd0 zh1woH12TpVW0NIl9`tM*luZ>r3OUwx@eeV=$Njo$df~o)+*kx_uM`;8fnyH#BB{NX zTUh7ywcT0{im-LYQxOI{L1&&s!BKR-x4{ZkZRUkW$`WXu!8Qc!#Yo9ng+Be!-WVYemKU_8r_hBKJJVPTNVU-h0?* zZZs|VXLk?U1XJz=tJdnCc%vm5>w-=jl$ySn)s1b|i>59sECntI8=PZc+*%P&ce!y( zQ{9d^;xpV;H8S|=Qb%r#J$4H{%3*3{#;y)eQoLCEA4El6RpsQ{m8#(<|AS@$#)A$) z%(^9P8j5%4JGj65SdzZ10a6sXJtKp)_VADr3v+$%^%+3xy6XK#R_r8kQb~;eH=MrFt(_d2oagS8EFIX8JO+?H1@K zWQV5q-MXA=vP$=HG&kEXaU!XU_r~BM$INAM+$q`mXYyvGu*&>>$uJBU9O9*0`cFeq zli6mg{)ka9=I=+w78$r*OavktS9yT`o{>Dc4J)nzwRMkq*?#n`9v|en65GI4En0BX z-KAn3OmAUPmmJrqLZF{2iv5~j&;|~A62iY)gCnWeo}Z9QC6sxny@@WG(S7)^{btbA zVSjVBUdb~#H;s9%et>1XH)m|qI()0lrx}-?ha(P9Q)jVV;5cpgyQlR|Rj0Jl-3$9L zS9w?inICFsNo*~bxG9-dsgb`QWcYMF?DXn2bE4}z0mG)5W=2kV5b;M31dsG@#0UmH z1FLh7vA0dM`0;j|HmWJQRisJi-xbYybn1stHr!Bti{NVoqv@}~T4~M0GZBy?6~f%= znBSstKgrW&6Ds;?R)}Wjv|tJ~eqP#6u>Gsj z_Fy*&t<=2lnPgfpq1jnC*t_ozcH z_jG9unYbr8!xl3~npC3~qXos(QY}JJ`F1Jxgcpv8XG)%zu&MI}ULWe3i_7y|rJ?z; zbr43#)24l{gsaZY6_^kmsL)?1f3Mo`Qh=2tm=XsFUGVp!T(zT!X$4uSQP4TSRW4(Y z4MpbHUbK^5R()|pV9g(K$9h3TxVn>@z)!5tt#Vf!y5Hn55AL)-+^l%|c8w8JXk?+E zsmnT$-mp<7fL~By%!NNGewq5}k2LkPQi)htE~$03ElqR*=GC@ae0(s!NdXHP+Osjz z9F~a2+csZic|a&gB8ADl6oy z>E6_rWQT;1hgP0Nq^!cr4q>qpk+-C$3zp)k$KMjKbNN0LcNFh4hGGJ8^#I3q6P|H8 zJk!sllTD1iz_Pt1tY?N`!##x=@8n?omp|vC`WHdtLi==({KBum`Uea?JGkT!(cC#$ ztIIijueaFWPik1T(hQ}IN{B5aQ|y|Sw8FJy_a;Zg8b(Ey86n1QF&>6AC_X7>+*7-5 zzIZyu)bs=xLrVFNwr$(CZQDHCwr$(CZQHi@KHHkpx9{BBJ?Y6z zQh!!bKWZgaNhRxh-Zz$RK!DHGc%BfWOS^!qp%#~Dbj9X~jeft{TjWeJf9~8d+w^jF zy)Yb>;I4A8rC5@5FtZV+$BHQ{EwF|k03i>1DG!Ut(j03EkH^r1brn;eY_0mEcn?GA zY=JDF*FhA`+>#&d=fl7G>-fZK#bR2pS6GTPAJVc=&s5;L0P7%c-Nfg}rjD$lJ($hq zhfLsN^~}&VvABgzI52^;Xji5GQ7bM1;k5a>_qJyiZl!~)X&MT*|FWY+AWO5fF978RO{u8$3(q~PST75C=HP^FHxH-|`>gX7=R>B{{$y>3{v`F%hce?>KzJ{Dd- zabT~)WV~*8mwE+NaYUdgPR0wR_(5y$QnBK=CmboPO1BTji?@J$8Ng0vS=oHpI+Eh~ zCOm%l_T5vAjlF?1$X~j)U}{0T^8W?0_!Kfi;KXRjxW|hGE?jfy^OEf{KGjFPBeyH_ zdBA@^{TmW~br_)D#CzXN)pglmc5E@@;0;d`71i*Dn-6 z+!XSah*{vXTpR4|Oi0=}payQQt*#Hstnlu{dLi}@I<(V$7F24aoH<9vDl7(81ZxE{71B{o+xm%TNONj3F=fU!zK6|bZGk;MtrpZ z=pE}GvY{|rtXK(JcAx0OGCh_d_lEL3m?_NU``gwvWs}s#MQH%+7oX|^OCYkhgMa6PP zm{=qqS?TcL_%i2UmIf;n@}YHB_EmCWKW<(sYWIS=9=J!0R!oHOTDu@_0*%DFKWY#D zKD|@%t16A_Z6Vf|$DPjJEH2l`Em6vP4RM>strs5aD3;G2s+_~Aq$BW}JVn7nlE6u* zk%?UUn_d`>l_b#%UV@v$mtZ=khfqY3>Qby`@R_Z!2v!)?m{f!EDc7wc-vVwK-hxzd zPof${=*~66HfjCLbB;Gn20*ioLR^hkyN}1ekQ{>+3x-HpOXy-^Q4fTpzXS*3WAFE# zjoa8isVqJX>`ITQGA_34$ic5T_v+4#`JGMH0(x%I*y~Fz&YUqUGSflDFriOL<8yC< z_$c!-<_$3=LFK;=d;ZXG!I(vS;*&RV8vtk-fBZEke)mU*`=ZOrl>{+3^-jON>3;gR z_y)#L{<7uAhU+x=tYa!>3$yPM@zxhPUb#IESrOqc`0nWh534X@_u~zVPO@jND)R_R z76!AjZS^K!1{#;LqwM)2JxLYmj++;jLRL87}0JWFQEeFxpeC~F*_OPkEmOfiLYw#cVF0Y3*JL+Q9ALW(;xZ3 z4VB)$TD>WVL2pGACz6X5UW5jMvLR8&fhA=G3A&g=nd6Md%_Yffa5=FVkCu=k+zv|K z%Dmw#?IqUfqH?o9uS&!i1fz$%92$0E@{z9izgmBho7ySS9E`&;EfYTCGFt9 zaryYS;6NKO-I&qI6&1Z+cPZ6$-US{XOuftc83Go+Z+T-;Ro_XG8eF$gX)V`?M#*GR z>)YSh075bahMa=q0ob2Icne7B%QVO6^BG`gywpqbf{IP3MR=N}K{vk=A+;S}?doTH zfcIwTRurv3xxb8qvzamFB0%SiKE!o(EVU-Annf^AG^p!5f#a4*IczP>s z7bR-q@6l55ni%O!6mAgG_n)r7P1MvwNJDS0hH5%ukrPn%yg~*o7A<@4dqb^oX73C2 zX+=|R;+<;)8utVT4;w8rx~uDa$mfwZzHBi3<~jNx!LrShcdyWl`_IF6E6M44M5WW6V7%`dsvVMqd6k?{L9%0TB21IO+CQk>1(OvRL z#)VES3JUd<=!c?!^fmSMiSixfKE`{WNZIOr;<5;@$4IG-aVA(to=E^5#ve`PG*w|X zNMv16xZ#^}$Rsn@8*7`ZtGEo2zv^>}KytkJG9PFyg>c_*6YmHByF_%WILSSy>E_h6 za$6YsXl)nF>=}w@M+4{vwXVfu;;OloHRR*I3IL}R0%+%i@hg#joWl7}pF0RbNsv0z zfD2fB&7j6Ok>Rc7scCB3nTwCCHyK6LgV%b~65)99km2lLrE;mTv?HyWw7zYzGD`Oq zz}_clES{JOemCDodh=o1^*Lx@hM^K6t1oTvma-!l}SG8kmBAQ?SX&K;1 zCPqmlwe*1bz(lmdiUVO3XB9$$(4EuOAU1mV`XhwJU8H@iq&Q?B64*=j6_Yug!y@|3 z$q$5|6g;)Q0U!8C*c}ycNP%3Ouzrb(mN=JdHLj`iDFYY8We-qH+ zRwJdZs*5p$>Lx~q(F^eE2k_YsPXB+RF8^z}*#8%GQ4&!RQB(a->Y`+CD`(FsLn~`) zV)_4~UD!AXXqo>7^8ZKLJ}2A1G<|x(|MV`L{|w82dl$CI37{|#P*=!O5G7qNfnMVemjKiP}sKloxyZ}N}6{D-Ugp8&?p-qnfT{C{;Y z*8e1o9lf39KL+!k80P=xF#myJOx^xz8E4Bs{|^x3PXCAA<9{bG|Dyrse9e z>+>Rhx#+#vMW;6E1)l3?-eoivqd^k#AjJYS<`za)`;5LkIW)62z{MW8I9Fq2B#JVS6^-5 zvu*&;+QioAM}A0e)a)&v>OwEEZho{jKbJp&6I+~|+?bqN>)gOUVkzio-)%fOGqBme z5jQ3e>ag|9-`18k=EslnlD~`JA@5bLZ1wf7Kpa`^+`q_E^B@K`2PXEm`w#3d`V3y; zQGO){hbD&BFL{^>z&NtgFgP(avf0@`gI^;*W!%4-nIU@AeV^@4vWH&A-khzwioQ{6hD?5Iw*4$3Op5!T9}CFt}RFBb!>Q z{ik;TUt6(&U%E_St^R#pU<9yl<_j9w96!I_Fg7&Ryg%}KzdKqp$9s$4{Qi<0*k86$ z{xuu=R_B%%zp@qwBvuD@Ml|*ZHYRWkto1)zO@0%qHZig|HMBOeKTe-@tw0tS=NG?O zavR%&~zYkiMp%BZSn2&wrWdo=5Qn3KP_Am*m1o_pd+Svf)7q8)tsVkNN^IzaFWK4sOj3;1=ICS-A)L zE5CJnez`6`*wNuN2{{k^MMcLp2G(Ehn?J($ahu~K3lH=Yzghr(RX?v!eW$y_!#l$e zX08*n;neF)ywpP-aLo39lr*gK;{aVahJVzHoE!`MVsz{DJ>THOOMb*{A#9ge&eXfc z4l};b0!U5{Ebv2FHSH@WQ~_(@5k>t7AIU7qu~!TUa&GD0qMchT>aIX9Y#C(LJXeNx zBtb=Y7U3bfFXYI?%dgC#{D{_s{8$djy+HJfnnOAM(iM{tBzG1zIWHC`osl;dG$b7C z^|bAOgL9~KIL?#kfTj0Rng>tJ;(f%z$B60g+t=F2sYY$oSh0>vQrYEl+)2}c497Ka zm&0JD$-J5E0rh|W{gMuKRI*byEU0gY9*O8)200R9o=og~)|Ey&qpr3_hwaY3P}8Kw zX+WzNmsONDx)2$m(bgZYJpMWqhStn1fE+!n{Ch2d358Xu$ir+i{k-l?LeveR_~rUz zj5^WvMatNjGt2j;z{4xBGIPD%ZfM8=+fFn)yHHWPxQi1bn7w&zaS zMcb>T(`!*w1L)xF{jYf}cxJJbdjStt80)YXUBF~{vkbN#6p^Tnz#)vf+jlX4DH}n^uAs`dKqB=H+vC&jAYc)d z{DT`ci}Yb~*I7p=wYDvi*>i8^0YzILNlQ>Voy*S3Cx-59j{_9$)kqnozkz|$TD3O0el z-(B5vdW43P8n7`yyrh*0-W0fn-Z4vV6h5e~E$TUK$Q7M<+cE^9^to&4wUlMEvXS!q z2HfMrdTv%Tf?b8zt-xG;M(&>7L=1>clpmAIBr3kFP8bWGT)*2X#T6E@io)M;*mFp7 z8t{=s^(ml?AEx=(=O4@askMuQ9JL-WV2N^*tD`gwAxhORI7*`t* zloL0{);QcL6;mbFA}C;NYW0H|u`%*r?d`0rbq_V>T@(gTxjbZKuAz_74EZ1zGKz7H zU{bp0YxwIFiqZ`(G%B>KVwXKtV77jk72lo*2S-HeYhXLPN4yB5oS}?qq!9iKgg0_| ze6$3?4AyA8=pYyfY{ZkVQ;QC6pHLQ}p^PBum8ok5kcx)(?e@Dy{%=ac#&~Z2)9V?#z z2~Y1#P!Zc>N&vZy^_DIp<28W?maE8P+zQXY1P5?hDI|mLx)<_&9c-4*I5Hq1#Nauo zJ`bzIMfRy_hI;uCs{m@LL&tYcPvPq@@P6Iw0z7VTkUo zVwD!aUWE6uGQGtI!q-U$Y+!Z&ER{MME?COAkGT7VIiI3gP{3o`%kY1e$yR;n$5+49 zLb95r&#_jeE6`m}LilH#7AQr4;5#Gl%7({-yR^r~Y+L5`dCBVpK3$gGJ%mu!{GE^X zCoz~k*+D5mLsyq#m4UB?2|E<6p458tpozJxxs)14<(DAZmo1(PMs;v1<@A^KPZQ~g znbjAV$%2^ED61B;6mkHi$J|rEQoX_C>Y!D@$h3=C}*aHMTUe z-T@I~D(_QUa}4jpj-Q$yHb^pSjRxaX=Lj)sdQzIrpL&N0mY-w5{VgKD*8z0ih|{Z5 zn}k3g(*e6qxY)Qel_m!go#|NwW5ezkwovhT3wJiW?<9=-NeqE{mPQ6&cRqp_!ch>Y z9$=Dv(5tz^EfxM({Vp+47augGzoR%^LB(GlfskEr@qH0QDfG2k^NiXy8yoJF_kMim z#np|;M^W_R34-_FJ+Cf$_NGRwdlwg6qe{o>QMLK*qI;bfb$icXVV`Y@7r@mnuoT<9_RLpUx)(zHMc#J!5#Vf#w$HtGN_*bgiCrr%t z`m|@#vGUP;b{E3Bnv;)_r=XJ~cI=knR&X-B@a@dc%-9E;VB48m4sp`IOc}3hN$&3~ zsQ7tl|15sl02N)swh8gaxpZ3u7@FZKeOhLBFoE;jP0MRFQQi||Z=61@i;7vDB0rg< zZ=iQ&{5@2yN<EV3;{-M zazyEZePrG{pY%c~%y?Np>TPW>{I*PbAkgRY5S~RiHF-bKv4Qa*hy2rwjCEtPze%>3 z*br7Bd49*%vVLwxQQ`_Vq{t8GL(9^*vFRvj{n2|Itd)o?xclI#PG*xXNTm>Tr&Aqg z&L%&G5nJ)1D?B>J0P!0CKJ{~71mqG;Q2oy1C2UzD9M3XWX`)o_)9fxoQ@-_@iHKWo z%^IFYB9q~mb5$eRZh=Jcfiy>uDjZ85mDNL>>qCFf;ReYrr1^W*S0xzahs=@Z7|?MK zLDx>lcmz#~CrHWGjWheW@s*svDI2)c{&Uivb|=}8NKgMW^fv|ZWJ8U8m2vWHB%UL}(gDalIxJ9fL7U^9>A8d#5VDn=! zh$1OmvHeo)`qpVj%&9b`+3(M_i*fFg_Y}F+tJ!leS(Dqcljmj;%-yN{h^PG1t}bn0 zACr2jf*;u4Rcq-Qe=bEPEV`4F7Lb>FzSwh9rOjh!PH@^un`|euH+r1THF;WvT%)?v z3@x-rd}U_bZ?XlM^^a^$tK-?G!_lH*Mrlp&FRp}$g7Za3G+M&ZN4SUL6s*6eJidLk!mxtrk4g22crTo83kqDV+DC zFhXHOxmak0&W8qzR(h8J6*Th9X%5P(tG{9gyNBeU{>cUIpLP z%vC;my_cEkVF=9-ku!r+d&xk<{@4N(-E^Z!!_X>;g^}avb8PZ@#;nZfp=B_zqXUa* znyqo;0&tx|Hf-qB@54_+&8WQGbuya$kuyqy;wLA_0HqmEqP~>nCncj2?$twxA@1;} zvEZ3YNZIUqgi);Q|&|GyMvGxLOWVRug>uXiem$oUqvD2Pz5p* z&5_vzsR(kiZat3f@87u?NKQ@c{(H{zAx#SZvov#qCE2;<4wX2nYN z`=^mK4Ns6gWN2Hvqckl2Q&9joc&#P6WoD&h-W_k--OsBR@cO+`>Pw=Z9wF%$0aK0F zAIDILdP8dL*Y+oooRK%hG`z+xNm}J$>mU+5!}nxVxZaDf&2b}K#XO7-^Y!k@dNvI# z4S+}6eSgQzq$geb#h8w^^u{!>d=iwpCa?=ZteH8P%E4zd){(ikb~GgL=H)T)$g}0G zmOYRg>CQ9s$~$JlYQ7mb%UcsR_cSl!hB{^X*}gu%p$*LeQ?#{o??S>nt<+u07oWPF z&;-9Sy*?EEc1UkbiZndJwNasLT9lNMj;<5_uAW)ml3@uE%ysX;Azcs6-ENSYBx2G0 z7x5+J-e9Dvvi1I-3hK^ilE1LilIb>8AFMT>He7lMM1Xwpw!JH>0zU7TYt!iEf)mB!i+yi=H}`WVqd zsq0t?v*TOQYr)#fffNTMtS)JPh)pjQUzmdot_@;vB#}&TZ7Y43M z>CsO_>Dn>JCOm^e0*!p4BV4{(Tf{BCfDA9EV0YnfMD-kJB(GK+a^u-etS81fQ}vOD z(WVA#vtM02*bw>I7SjLy4**Zw2R-c1qb_1o?uvR4DRznMHZ(6(cSsCJ0Uc{N)Qq9S zuHxAWuiNL|b0gW!R1h!c)@VpN7Es$gT4;VjE^Eoq`B~-Wf3?nlwN?OA&@@U+AA3IS z3M({aivoNU3!p;_)rF;ePW|nU5={Hf|Mxb#HPQ{Z%q}zbsk;qO_REq}mJ`6LNM1!; zA8*QCWW2HRyEHj>`0u9$Q~s=vK?|Y^j$OZZnWFk)Wz1>S)@JLH(Oru(${u+r0LHE~sm&UN410E;5Y@NW})NAR?;S;Q7-?w|o&-ghp4xxVLvF zo2@=dwaLq2DVuy{T%$^y+k(;fxKAPBg^s97c6PW$?#^+hbWhkR+Tiq-+oY>Z7UShl z+}+!Z@L&J~f^nLO!z>Ev`#ZSYF$O7*HK_Ctw#6e=$I*nNdPEYFCOFrS+n8jhLeT6m z{#wX|Fq_+DVbUVUWtN-933wr?czKq#{dB9K6F;|+A{MG$&r2{K*%iTw2Zq3Eo{h`D zE4I!GUd%k3;VE;?dug;;ARhJQw)e?1GB^J#>p(fAQQfht;La$w)(%asGH4s$sx1<{ zN=6|CF3oA~a7p;)LweKjZrVh!5e9iK9mB zeegK?d*~=skfn}{va_)p_}D$C)){)S8nSy=Qbs27EvDu4$b?F~Bb#Ux*FT{O>P$k5 zhv#W%l5l;aZM#i$!BII>q9@ZBQ*@v(oBFJsobJ?C=1tr^*MnTtW9xoRO7DGr80iu0 z^A`JgpvUyd#E~)B4XH;4GxwT4cmmWr@X}PyLY}O!2$*xXqCS^E{SUHvH#WQ#$L1s~ z;0&SzPb|$%UnLdm_^*M6K(z|aii6JW<&^;fL$oE7hzu8!j8VvufZDR+Rl5b!)B?s0 zr40kN9t8LS9kOB;HbS*D&V8+?gzy}qz|lDr1SD_Tz~l(S0livUH4?!|S9yk(sYV1Q zclvtllr+qd)**s{2LSeURCpm#7Rl+1x@!L|%~BTD1vsRXg3oU6L|M;B$A1GSMdhcv z+Bd==+k{mPOSgK@#42?(xAVVDS<&VKkMuBVU;O)Sed97k!$AeYNhx&Df74rU69&#Od_&bQ=9tDjTiTi|tYy*=zp(fjfvh_Ut*rGv_Q+RF)R z*LqHILb`7WJoGOw6un2&mOMQsR`QY#5%|EQbs@sA3EM%dE3vC|=|+ZXPOHZAY!Y)r z55ega{HNX%gicz**RLRg9cp?41ix(^EmQNMz#(EC!PL6^fI5oKyHFKIsi){wRs4=I z*gnk{w||*)Z=?po9xAcSVKUbwlJ>9!vEFgI7qf+elFB>U#tVEK>J3q5kNSPsC-Nqi@4y!d!jhe`W&-rK611f@brJ97#HeeL$QZ%MO>j&_~un)8#? zH_>@)IImSg3zSJ6SBj~2h3J?9PNB%K`kYve%&w24h=^K2P1MUTbDeTw!ti84 zPNH&L1J7xHQn3!+zKv8yDMUmH;cQ^cAh4$RxWz3(KJtmk#1Ek_F6I+~5UOx zRTQ=O>A&LW`>Qx-8i8+mMdgca=?_%|hNPgu*`EnE1s&i!ELK*$8eK_%0eqyegPDML zT|GUwzTCg<-ZJSNr&w8)R_$}X42qBtmZtn$saIPYF^MuWU#%k)`8DLDktXWG&U&`h zq+(KM+-%kkxe|BaO+X{>%Y#Veb_?vT>mcNhBK01HhisRCl+Qt7=^-oGSyazV=D^5H zCgiahtK#WT(32YAi&X2JObJW1m9|BoDuKiYj9|cpMW!Xj!BF#?rTD8f{zjp zdox?q)FK06gHQOLtz0-TYl)e4eoxW=B+oObR)O{yr*i zV1yEU9SB3Gwr5*b#+G@x(fyLPng;2gL@-}!IJ&+&X=Bx34f8u0@Tv|c`h0LZhwoTQ z#ePGMS4k*!D*h=VEH|omemE#v&8n$wku zQF=WarIvjY3u&-q{A7#OZ+eb4!${zk@>Zc@8XMi~v#@6z{elZk8FTX!vOvWy<^4s> z=GAn>F&t38Q(9lz+Fa~YEIe@vWb;0Jk*~J`*%Kc9ov~mBz1DZ5UMney=VA49=X}IX z26=D!X8q_tyxaiKQPWCOvW{p;AZ?c~Oe!-?*%d~dNN9+}W|qY?J*8M1yy;Jq-wF*f zq!m~wmOgiN-u!gGewCRDJRX-BUc?P{rMcN zvZ4*w^=eAD8jrafBL%<&Eb3PcV(fq)VW`5)pr7Gm9aiTD$9BCv%KCKBo|E&hskcK_ z4NipGc>VL8R#Lm-y~Wm2`^mE{Q`^{YRqF|&o`CxT4PyEG#%36M505)4ga%`15Ird* zs*X;LWp~=H#y}W|FFL=7wsp(~_A^7s_?MnbC997HjNcU47-Iu??`Z46jR+znlEG$Z zgn`m#-3;6QU`Pq;8w3-ID5Ww7Z_;G_C_$VEL2rWY}ZCWojmoXOC$|y|2}TfKKDkqZFiL%{#_dvJ&_wRmK-K! zK*FEB&jTd4Nj_M<<{aYj)UUmAVC_Mt`M8~H%J-53M9rq!DQp^Q&_X9;IH_@M<_$>P zD0C!dy{k#bpU0RHv%l9+&uoXy6BH`c`kvz@h{Q);uU*hyv* zP6{>e!qu-wGmc`2&5lE${E}wmHMmguaR=%roxM_cu~uueP9gyHbGrKB8xvA!9TQZ2 z*Zb!2KyP3>P?)91ZFD5}_sBoQ_6ffL}n z^}r=QpGayJ1GL^_U>&v3I-lv0rgK8{T?Q%@TdERk6blC9=?G2wXku-i2oI%k8nSF}gz%XzGW zwOfly_#gHg+}L{A=Mlas@XjXn4T14k_Pd3{p`HN5PFfulhca} zc)GA3mqN*5)vSk1xyx<1Ax{xpgYV(Zb zh#876N{e=mn^%!1<$@zFX(joN3`M<)i?Bu!e(NM)P2r!=^?Vv#J0$CVF|~7@oQ1D8 z$`#^+K{y3W{01#I5pR#W>1Xs@VuBFduMv%pZvA?Pj(VZcrJK-+s~uANjC*Ng#s$&@ zS$)8bi*!Ay(@8dgNw!Y9H@+2^ z03L5!u`j`Box%~_N4R$p4NV+20zyEg4qYFp67k(NcxjidcjjVnrTv;-MYHPdr+xMm z2;~uOGF`ClZv;6{uod5$aW|Z%P2G^gEOb3>+1JFXkReHpESao=y0y)9)@^Q+07>VX zx3{&zAb|3$C2^uNi7c6SVm*~0-B1&LkG9dWVhhKY{ZV6y)3b(tvB;uOgPcQSr*j>g z-(PjUbH?H50ILpGVqeqISaC)rKCPAGOCMGzgz6S420kB1ZAua(_wf}d2=Nq~tfElU zZ?x=!bbXeAV^ehnKeV+b$P#YUt@HOx^%GBnFDVO(p|R$s@j*Hfyun%Ci)>C?2(RoRwFCY9dkQ&9>0i_Rbxo!GtL} z2z;?VWa*vOrz-K=EXH(brCJf(9O>3mH&9_~s5+)zi=R}}F=Z3<+0nLooc%N{K0Dpy zo$4FzTjfjksajkw29lo0G{b_O@px_}3=!U6g4?F;cJo)zE|n zp)SsxxM3JPJ=>CX+I9dnLBP8p8^!gm5-0s~$}ZgtNy`)V0R9{pp!XKYN-+v6E)b}n z9#1nZ)tE`sK|fbqsptbjpKa1sKmQ(al}4;pK?3mLzSM4j%@+nKi~H1|flybl`|Nd7 zg(n4el@6!5@woC3G7c4mlqYVR9OTnR@5X0GM&LkVEj`rtV z85C~PXVtT`_X1X%#QHG`Yb;}d8+#9ukIfeo&*j0*WNwF$HxiSqM=y;J{o%?MInm%I z@K2cp2vt`*@a&$SqYuNro5LkSY#o+)=mHK9CQmm_c+yFZH@bvc zfIEal!MMuSinxqS`bU)I9f&J-H1}*P$FR%Wy*hGxO)+v2Njxif!;zLN91_xSsk9JU4B}KsI)Ty(d#-B z(Yn59E8-WX#nH++xtuM`%G?V$q0gLGFlL`4515Rqm+uo=OEY`dm-#$jP`g)2Ig18# zL&v$@iPx10T$zYhBl`f{p;m-@v;m_jWV5jf2u2IWOF8Znrk7Oj$$)dQ53#^HLnrIl z=Ng3h`1Frg0*N6n)OqLV_^Ji2V*MMZZ%zCdZN-W#x8jhNfNI#s``6NB$rBtZhAYR- z@Hs-V{?fG@LDz~2DaL~;R{%jCrW-pOMZBC%T9=%M?Ac+I=HJH5s+^!2$rzoR&Ca7n zOQNR&r8e%5p6L>E{r*_UTOiAT4q+U#546o=!T;T#otsp?N|EVMpFgeNK*DOQFX9|)gG*-L3~v?h1OR0{y1y)%NNd#Z?@EKzp7 z@}ZiYGZP?WRp{9 zpWpb!$?_v_P7kABg|L#4DlkWNd0D*Px&g6!0lO5P^HAKd;Xt$&!rqz6kj0k$!LDtq zkmBEtIjxcgi#dX8hdr(XVta^YpO;knw!*Q@B_~NqYPf%R%9N3IOj-cy9}Q>O;}v{3 z{U?*~r<14kLM01w`0CTDOVNj4mn%@$8)50t8V}+x9mW}?>j3eM^cL_KMB|8Z%CS=8 z2%{Y2)bG;VG{2&3$rtlc10bWRgZsm+U97pLweA4!VuW+U`bB{f@B}5aznSRSngD`3 z9=^FgkeiX)&0T+8q+&xIhb5>SWv%n0(V{~Jl~p60jBdFhBLvenp-mRTbPz-p^NU(v z@t`G=5ZOX2#BOD$kQsrCacI%T2E@J155-b;NtZ)~EWUJ04eY*FxY2)nM*i5F{2LCr zgBy>!y+e_8zY+`$SfQp*ViU@ke#n*VBotl?F`iPTL0@lc;OYyp34dUh+jI6c>lx92 zaX&=aT!&b-Wy9zik&VP|GFh$A-z9OC}h{MFUHl1#~9hxsIX?(1iU zm68xmXWM$*B%WTjAgj2?`!{s@tZC~Oo<{E%!W+eCRKM2fZ?*-h+arG?zZEe(QK&K} zY5kKsQg8T@u5ibG8%R3kX`}NCRsonjnm7i$iOO!GUjhMlLSS;RwbmS{sxxvv0A)le z$eKxGf#PGKtTmpcQWrQ9W0{ya5W*Eo@IE>bs=3N?V-s zaj(w()KR6`Yr7tDH`sboMD;$16n@^z= z`Cs)6_-PtzZqy>B7so__w+M(oy6&Gp9z6!Jy%9h4yoUNOnto;W?{)^Z`@#a4?NBhB z?YG@NA}9vBg{ke6Yy9WoO{5v#ABPA@J15b`n zoPt)B2;mRvrso{7Mvw&Le78^jgEG{2&iB5zGoFaoKAz({t}ez34Q7i+Lv6b zvt-A2S;k?#Y&alsz94eXbf*0KsWs><{J1-*rkNoPKr6Cgkj!gvN$8P}IO(kxP`{da zxADA4{QT9b|e&$Z`V#ZU+0?xEr=?XFi8I6#r2X8EMd zP>5PhFnG_83~(BM2#E8-Bd86td~uo5IF$d+W{>6roSo5od?9RCZ>D!6Bm55C-@q$! zuKq?rILpk{U`QbXMg$F)WQpIYIp=%-9pK{_Q{*^@4&e+DUQ05}Wbf}PNici1lQ{{g38D_)KuP-N5WaBKuM(xC-09PN z+mz6nay@&brgDjja#G=Nkgb1ggHE0+E##T3GvC- zCC!y)6VSX{7y4Ji2*=-1v7av}#1D!ujqv$9yR9H(Y)B&YK8pfL=AvwYgey&@SD11l zMAxP~Cpnb))yPVj3agrD+!D;lp)EdQ@Tn<_qdxPica_j_R?c_^~Sp3XpGMg+{;>8Ub z=159@KEtS@K=b}X^rjavJXtRHN8;wAlGZ?sI_>+nAdQ|elWlv6ibL`NO>wU%)AL#S{M#jQ^9R8D638Zat^^Ms#u+(ZiywZHcv}(N3&TwTk?5$1 zKuZyxB+<}6@rt%| zLRFLHmNQ4=AEBf!LKc{iUGvqphi7Bu7~%>z$@bTCtf{hq1vy0*T z*KV(FO2dhd<&^tY-01PoNp~d6eFtcF2)&@h-c@Xq0$LG*&ORmSx@#1)n~^I5OM~8q{i6LE(n|REU@m>wuU6KYItafQf~M1A93gC_@DO5}QMB=8W!{rn8`pn0lteH{z$U}6>p*YYeVoB9o_k%H+({EV=(mlXIII&6lQ5+Qm zjB^D9i;&y!#&@|BW_nkctuCuaZ&n_fzf8P;+}NZdlEer2R-|FhOd~(x!w9WuG*+kU zh`Xlu#T8Q7imrD1O`6~Pg(ag1670ouYt`2VIxlGb}l!b zEzJQs;5z#2(wXzq$ik!brj@B&9=2)z8~;KBy^4jSL6H@de~G_R$Q9Q4R(>hM6B}u6 z6JlvUbzd>P98v$zwa+Yj`y>c5`xxF82h%U#)cw{R3@XC(U{PbGvneh7r{u$u=d=FB zDq8pKjcD@j1n5(YJ@YrH*Q2PYHp1Bwi?r2z*h%D+ha<#Xg}8I{j+xRfzpSwiphXXP zuK-k|fOk^orW)IkbD&w78TD61G_B2-*fao3mkS%_3fy06+=}{G&);CL5!M^X>GzV( z^~aBbg*u^3FQoX4Jp93wkES1K439?0(Nk#g$%QWp!J>(XE$|(lv5??H?6#Gb`ne=% z-)njY8`3*VmL3CbDUk-eh$2C*fO;QR%f7< z?26bWl}7KfL1-Z9zMN%2-%{Y3pMKX{P}`U2=Azd`GeBOG7D373HNY1gCorHv zGvD%-%WSJ;D}!_|X#gh$#iD_@WDIT+sN7GsX+E}rncQ9DN$nw373bnh}Ei&E#D*@wd1u_O3eAXv|V zd;MI5S+pe}AcX_Qe_KXQaIO@%GWS;R!%&99K9NJ2(4|uYJj3ReaYgBbAYytR*N5hW zM<_m=L95H(IG;m{642&0;ge+nh~75zO9lSn;@{xrutWQJ7CQd>fN*#RmjuIgA&Oc{ z9^VKsc6_zAAOip)WK2Y2UP^+zB6gLfcp`~vTT0pwV6+;7Ywbt*YG4X8Z6>2vD)fWi zwuclWc6F8e*I!S`mtph3r6m%|c;AqQR3zOEA*EcJE6IlMG2_I?b^sf#PNRt#=N!76 zQ*f;bA{ikPM{_*LSS8--HExP^D9$-zenX($4N9nI4N{n5*nAxDP4tNtS#2QT)k@N2 zprT`qD4#TuuGc5FV3~0TLZSc3l&s-bKI>kxA|z(t41L)im<|e1lOKcM2f?F)ZkAJ$ z`-+1ngb06lrpBcfmhx$(E=hA+bD_P+?5OyBCcx(VtVIT%A3$SK@jTvM158&os346> z7CVU4j>M731}-5eHjnJFrta zDA!3>+`&*XXW@o9jSf>uSBxkl9L0OCwP(C}8V|IjyFBV6q?tf{(xNdBH_`|IsYO#C zC%%eD!pHH1I^OQtm4xzfH?CuM+;TL=Ch~MSgt7|WRQ5&k9UlvD^sj)`J|$zfLeAFN8`Lc=k1x#TbdOdAzsJW>eB3@$_@E9U+<*5Lie>I6I1#`T1S zu%Z+!o|q8e)8!MkZsGB3UEzUEmgUCiu}Im&c?5+%qK-o2BR`VfY0UdlljA;MG_r}_ zOWronh_rpKQjV?k5Nm;Q5#YIW7Baw5rAz#t?E=h>xu zhCa)>Q@%gyq-ZUDCia_^O#Cq947OOSRc)0;E6=z|oXitsp)c@v0cGVHvYX`u;jS~f zCl!1s_(w+me*DrJJ@)4qK7Bf)Id74e6I!fELKL%~oe3VmPD0NO4Noq5uov$$RGprl z=OLczb|H)Q1@f(ShdpG1T_rMUkC?-2cX9<` z*>scjKMjM-OVdTR<6C#Obstlrwi0T=X{Z^)RLER2+FlMbzG zj6E%&-(Doa*Q{^kx$2*Pc@M~HU3d@NAG0?x8l|EcvKFkyX^Wg-56PCiPMJ4~T1^ST zLshv_QbP5SP0Z=QwP$=h_DX@KPLc7E+4_$7B&h#_jhNAZYzuQ^6<#KoaoWa} zk5i)X9xk?)Z8$4!aDhJRXNGs1nC!n;%^=s*EzPyIsuLGy$*sNZwfQNA;1Fx84bm)X zW&U0}!nH4-nU=hrM7>sg>$o)C^5NBsiVPXOz=PDY>YS$9X$%{*# zq|>h}K2Cadk@9cCGe zNOWWwhKK(w2M6)deX5sS=91szQQ}NIvOp;@f3M-z92d^8!6GqIE)W)H+{3yb_J39OCGb#gZ~Sc{k(3tuD7%>bow2V` z*0Pt#Hnub)1}TXODNAIDLY7p@R(6u5D6Lv(p;ENjLW?E(pLZ6Snf~|p|KHF3+-9CR z=Q-c=eU|f__ul)w*Y-chJwz+=^}W*T;J0mYoNh7hD?gT!Tf2%kKs)C6b?!Jf1N&2g zA}jYEpYr1VqqI1hXW!Q`0bOoAtLqY@dmD1o!-Pt6MTRBU>907_w`*I4Ot4r$q5Ak{ z^U@)7^6p~mp`RI|4%ge=CRUlW9NcEtvcz99Q~K?Bhu$IcuO?!@*FWW(iodw9&!J7A z>)jR7J|)4PUE!v)?d$t;8a^Jezr)?OMsVF>(KSm~IgA)JST$_Ey9d|p`8exVn0ua5 z!$YfezJrbJdz*Ee?|cz_|KnY~=tPd8&b}W`#lqSuPA_85ay{DFTJ`MZml3|p+0cUw zN?5#;eB1cPiVr1QlBJ^wUFH+pB~34naOI6ImS{kW-n=ifc}Tj_LpBM!Axbo+blI-V zw`XL^xB1Q-oYYZ&Y?D<~u|2$b(H@tk3EkGj52;P@!?z-(C4{3-Ud2>rE*RGsSvUDz z-A|xFvZrU}<13R*rPn4;CEfJQUL#y}?&|#!vbX-g88wrV2<0_3!TB3%5?uT)>2n>4 zNgMbIwO_4{Zp#l?02pU*hE|nza#pE8~(xhceu3 z-7U8UK3JQdHPSU~Ycp|PWGY40d-k4W4^q8VN}{Z8`%S%l0l5Beiie&b-Gow2PT?JY zBzLF<7q?NmQaCp{rzT zCrN_072m#(Nv(6j{^H@1dSV(|jR@YdSKcbLq(>lr*4_BM;n%6OsUg2i19jZ2P^EmN zZ(nuNvoOrvK-rLsx$kD4aNWN7^>&hVnADG*spjPa4qRql8U|36?aJ5j2-yU#+PAwz z?B%_6crBziZM?C-I#a{G;(m?ml={9jZJzN?v)$x?YK_We$oABLP(hFW*xty=W_-4(ryn>OSeH zt8nqHpzxPAyRT@RY}qEa)A7@14GlZrnq%>kay0|gs_mbiC}v+4dZ$=dQ{lErf@D`J z@*z99H!U~vROwiC>x_x6v^ z263&OJ64zmZQSi*mi<%ST4K?A!Y340wnKVXYuV-Z&&Gtlhx4TBH4H3m$%@^vN^AMJ zv+%2_JY2p-lB7isVf4bt5h97`X}CtfV)C({d&r-%ZF%HXGD^2s`nQNpsr5`&-^?71 z5zSn3RhE<(-|%$Wwq)zb!bE)^#irH$A|tZ3Ra|)wYOd`6eY6d+Gh!ed*|8@m4RtS9 zaR${qWOvD4Bt2w*Aox1yDyM7^X1VY-L^yRM>Eklor|7F^431&>K45l zpKko4PQW!ziMxA1HDmuMc2R@S%KQnv!CT9gc06icn_~(ct5{}kx31t|=U~#KpVN}g z;?l*d)%+A5CzyAtjf%T&(Y~1-A#Z%XP+{`eCGTPHsKX1$ zyTg2-&4a>Q7eb3gjn;nf3jHmbuWz-f;$fS<$&tu?*Mj-3m1|&4wGmlW#xdD1w_mS! z3yv|H{Vpe6YjAdW?6Hg*<#~Cca29gQt%sPewugy%F;#Vre9(}PQc<#C&S0~8vb^vL zgEB|YPLV~j)=GnAUt_cbiPl{G#>NMX9KH={`k(FZS!ZTO{*W+T`_?7*vdP<|o-Hy* zDjMvKRaN|oQa8L(RNgHiB$`+qTzjQHp?KDLgQNKaRXq=dto)d*%6*b6H}#K1o34Kp z33VNBx~*4L9T;Mkb))pNz4+uGr#cP7;oncXaFrx;glk1Y(~Tch&99f0YOnv&y`_8$ zim;2QVDpkvH!j)0b@?*)@a}G9k=%)x%s?B*NF|=bdwGI*k3$H7#|uN(?>M0uqAD0( zB6v3KN|TBV(Ljad9G@cf9PxC(=&n|n>rXLD!SLiCH`DI&8-yvz8J1~^^_4VgUsx#n zCPm`bT6e3Bc}W$&pBieE#+<#pJz}|R--@xX@tG@s4e={&Ar>@Vak}wZw3Lf_VtjA- zM((JUVsaX`l|J__=enplR#Xp+B-@)U*PM1}@o)~)X(6J*=fpels*dVUU@%ts{VdgV$W=1cb##&)WKr8 z4^o!lV?4>Brrbf_Qg>{2pO`%Ff&QY}xxThw&yzLlQHOfAfYYqq=DC)^W@?<*{LPMpUmKfGH^^6X-sOtO-f-iBNQ7Z#*cO3B`_KAbjLP+s zs2F{!)&GX8V_Ddy<~z}XXU-k?ZBr0$C9aV*QJ7lVwt_zmeNUmvwm45{DAM}U3&NYs zB?mF52gbLhS+v$fzi<(08$ey@nx`S$Q z>5ShR`TF$ho(j3yacKUVUrGami}?8_K1qBuS$89+&$ZS;>x{O@dvmG6rMMP(!u5)n z4+R_Vl-z&3FT&#L=Y2_x^Rt0%Kbl&{MfEu(P6wbW7=lnD?6ZYPU%tUU8;sfgdxQ0_(TMV1LZmDh>!CmzmxL_D+EYST13DSl+(?5DA|ptPh0bZ%Gh z%n*-Li=dz+QrMojGe!49>q6C2OSF`(8s$1Vr|B<5x~}=ibM{lzi;GX66`Jbv|G}0y z+|x`jK2D@KC*AEz0vvpp4&F109PbyzNCfEy8aswwno_r8vmS3cVuaC|>n zVbnC0kpEFIB)l3)f7x-qmY}qlz=RLjIL*?XxRSiw6?rqWYD0ZxNtw+SYKEF8l z`i0p2njPYo?WI2DB&67^3GENpnMv0xvw1KeL2Wd^uUhpvxorDdQqgGTNy!_rvgfpZ zRu%p!6?i;m!#!!hTVN{ctf^9b;QH+rNp9P8L-G9E-=vD21ZQdz`%{laUQ${-ad997 zU22WsJC$E{G9|?9mYLBt?w98E@rr0<|6p;_9U(8vm_{CAVb9tMj~8Z(@UEGVmue-ZONiu}4*>Fh4P+;bP>_y@K47HqUAtJAK#Yo(p)fAj3M zOq`-w(5QpWL+n0ki-S9%huvGkT1F z-x}~%jq}gXE@*#nUU)og+wTzG(5FeyhBr#6M`d?yFPPdc)|C^m>)}O@(^DavEO@LP zm*w|19rphjr_w@MVBCFhuT!z4t7x8Aj9FMr(VKNqrBuq|OA2-xx9~WTeI1^Mx_|js zXh{}^-}5{oKIQ3s@Xs(=WqYk#AIwpw4Xo^0OR{r0=Z zAJnQQlNEtVU$;3e_i7`Jsp~mh6dNjB?|AR%kX49BrC_AkncS-P<&ikad(v^ERVIhN zLS+7a2f1kOC7+-F+A{e$y7JB5J6n$0{w~(KqBHi^+~;Ybm5)BYRN{N=#hwjszf)|_ zL1!I;Pxv^vy6zA^x994GYQ)w0nsxF=)e0qy&d2W5DJzq_>!q)`R5V#^`Q2rmjrKw{ zCvH{XH#qfIVbU|-H$FHyo*f&ERn0?7mTn7)KJiRSLpe?Rnp7Q@$7Hq1tLFI4p?)@9 zuIld3(p&0|35|DdQ8!ko@I5AU^zHYS`lV;HK1^l2UC?$%;J`9t?xSc|)R<0<-_<=1 zEuZT0h|zqdO~5&FoZQBo5Q+EP=d!^+J)jf*uGJBVjxoiO^ARbb$Wcvlzg zDD1W0Ja7j5m#4F7*^SRne6=u-w(`HQETGUjbaDS(={@OKhv9*J317eyy0^P_?;E-% z(fajdeVmeZ(%=K4A$A>KuV;3!n|{`G{GL}54^MZA2^jobl6SN9OZ&><*UJS52SND6Fthv>J zPg{KYT5i?1Sd!15!PM-ymj{H;yiyowgj}y!n$9KPZq}19C@kw^Yzbf)p7x1HpS^__4Mhb}# zny#wol8&3+xf~~~(NfZI>Nql9{oIqHqs~jRcqD|zGlef5NR~G}PK>XnzFMul-Dly_ z@w{_Cc@iE_5zk}RKiTB_&32lauzh@_Ys}$!T6|zsHg>74brvedN}H$0Uc2pCfV|dHGAp$jmy!L332Y@JQ2_a<$bx zJh$;BD~#L2hZWq7y`!gu-YIX4y=|~?_K`ZbhVagkvdN9=?aSA0Cygm#Ts>s0d-Zm_ z&R3SAUcFhhk*{-v-^|-tQ%1!+QdD0oZoOOh0C5w~l6~Qd3))pLo=o)~EpfB93B0C>RytnKzBM=~ zi(|tk??;R1eY)5E;8gF@1sOMIBLqL3-f5;FJal5w%h>O(o-!f%QlZt>tCm=7l(Bs$ zyI4KEu57S7Izd}rPIHKSYU`lz=z`kA$GaTM0Jbq%(%HShY5SJlJK zyD&s%^DYc-Uh^&jk)?ST9`xb*+q?@6Uhn?T=3PYaiu<|VU3j?v*WAnMb&>S$U7JDw zE+ga?S`RN%q#5Yr1;4=FlJ*LF8>B7L4r!0vf!s-ZoxQ8SiyO(8rKZRFxP)9z}F?fi>(V;AlV&2aijQ?kU>aVOETmEosaH1xfYtCz0p|@bC^I(YmhD_fK!&M(feWq=i8c0>UFX90){>zQ)NcDgJ0oz_4oFpQv4BUESlyVNJDS`04f}m z2pkAiQy0b;GzMt3^LD3t1%Pc3=wq3_0wk~_&37$T)&Fm#|J7KK9W30i&=NEp{C@#U z{NG^VA%I|nh6XQgLc095CBEbW&$u-+giBM9{Vh)7)o#MtdNI9*VI3(}nkxy_#x zgn;Ni_SgAo0#;SvbfVD(R53XIrz#x7UCl}R=djMx%hLRk1`(nsN*E$zXAHeeO*Djf zI{d$yXaY8bC?-NY1H?ZyG0@WhLUd;5sfB-KRf}gZrHjBb?C?*u4Dd9yoM>76h_-M1 zoM~{ZreW@zu8EHJFF@L_tN?Lymcjj(Wtd5azHtUabpOILz|$Oz!3o2|m2vYt4996c z+?@G9+fkZ>FxX)(M>8Lm-F!3w+cxIRhh;S%tETzpqv4sK39+2!V>-Gn0?TSXrdk>w zoB%m3hMlt*hSg%M!GvKfL(|JNCL@j+;AuQFz%zNq&f}Su^I6%!%o&+>E`hwo;F+=9 zUk{-P*e1^z3Bzh6R^;gU+%oB*BWIpMG~~=L^c19wo`)O_GsCv{oL%Wja1J?RxxdJ1 z0@lgsx!|K`(!Z0LcBT0jnz1b!=S&08k<$$~FHQdlLVD!sBK|MdrO`si`Bx2^7G_Lv<}Q2T(o^1m;-+jx zb@8VvfD#N=i;(vNC!Pu#e5cuh@g1W84!QXQus}eE${2xz1++~v1bA3LV-nnKOuhGd zQ`r`zuY^}%Jsx4g*iq6TK|mjde(uT#kld)=6tW_W6Er`j17`?f8O@Ri<}ek2p0OF` z7#Kd=GkIc zCkDDQSHRH-p!wK*)Xbj&0Qmsc(JW-+V2$i#&zpd!amhsTR}louu}oXcmjkA;G&n2^ zLn?r89MdR&#}i;Zc+PDRV2j~7jKPj<{@&mztb3au;B%Ilzc#>x=fp}-0geFCu(D9f zHj{O2Hm{&4rPD0uQkeGvckrsX= zvMwzy5d?Zho0olPwF+~2-9V}r#a~_lX${v#;7@SJ@&O?YKI!|DT)?GC-ayaP#hPTV zj8efWqZL5iN^uW#Bl*kwxqHB3v`+}z=cXe$Q!6( zP-rv?gCd|IoGKntMiJ#uC^;|=K>uGuto>d5{7CNLvf|Z$bN0@>OHv)q~se*?&uHG(W z1;idd7jWq#xgdfVv+*h@6_mm}v+egMdGMluJt1Dy++Uz1$Ai+x12HFq6EFN1g3OfR zaq#iWB7-0lTrjc7z!wNOAiGSJLqq5rW48m{$O#}UzRea0e# z@I?5o!6HKe`+@w!E`w_`Rv8hk3i1Vu48jxO;9`*heFPAIY%(l-e`A#qF?e^bHgq zPChL9z~K&GcUWW)9t+)d$SWz7LR1IQ#$wDkAoHLj&Jnp9|rLoLqr*+4lzY zariwN_%1sy5RSkZ3*eCmhd+Zlk)10v0c0nR{X#@`UQlQZC#Pr(M?OFk2=Lv9jXyjm z_uzpWJI^46ao8N_BeL@X;qdU?gJlgc7k)0oE`uN0vC1$Q_{PO1!*OE4K=AF8Z5)Ba z9w>||C(l?AgzR&%7!JQjVX;JZdw`PyE+JUg#X_9<1*AF-d^nIL*yrN@aR%V9@Rf^o z4IGX$=inf??q?hK4-P*Y=y1*sb=c0%>xWHt^NBGD22EvzP91%np+gxzRgYR%G z`ry>W!3#)-CG zpb0qm%Emg507&JKVK{0efQ2K@(F8n)48jsQ)`hS*&YVq9$=Pj=CgM4AJ6e@9 z-moYfM_gh-S;xL#;C>u+6AnvIWw$ScA#&s<2#4eFT?hi6z{Vd0Vc>_=EIdPCGDpln z5J$X05Rv2j096D>u7e0DPRs-}CuRa>ehgCmUA%os{=6C*2&9$w0TQkFMp{xR;4wP$ z@#j{u2L*fs*#`bs3R?{j4jTF>LktRUKt!W;u~>Z!*b5%LSr?-V=@amJs``3bi2psr b5uv5U8vs9!q1F8m0S^&*Wn?y681nuf@Sen= diff --git a/RELEASE-NOTES-BIND-9.7.3.txt b/RELEASE-NOTES-BIND-9.7.3.txt deleted file mode 100644 index a0fcc53d17..0000000000 --- a/RELEASE-NOTES-BIND-9.7.3.txt +++ /dev/null @@ -1,220 +0,0 @@ - __________________________________________________________________ - -Introduction - - BIND 9.7.3 is the current release of BIND 9.7. - - This document summarizes changes from BIND 9.7.1 to BIND 9.7.3. Please - see the CHANGES file in the source code release for a complete list of - all changes. - -Download - - The latest development version of BIND 9 software can always be found - on our web site at http://www.isc.org/downloads/development. There you - will find additional information about each release, source code, and - some pre-compiled versions for certain operating systems. - -Support - - Product support information is available on - http://www.isc.org/services/support for paid support options. Free - support is provided by our user community via a mailing list. - Information on all public email lists is available at - https://lists.isc.org/mailman/listinfo. - -New Features - -9.7.2 - - * Zones may be dynamically added and removed with the "rndc addzone" - and "rndc delzone" commands. These dynamically added zones are - written to a per-view configuration file. Do not rely on the - configuration file name nor contents as this will change in a - future release. This is an experimental feature at this time. - * Added new "filter-aaaa-on-v4" access control list to select which - IPv4 clients have AAAA record filtering applied. - * A new command "rndc secroots" was added to dump a combined summary - of the currently managed keys combined with statically configured - trust anchors. - * Added support to load new keys into managed zones without signing - immediately with "rndc loadkeys". Added support to link keys with - "dnssec-keygen -S" and "dnssec-settime -S". - -Feature Changes - -9.7.2 - - * Documentation improvements - * ORCHID prefixes were removed from the automatic empty zone list. - * Improved handling of GSSAPI security contexts. Specifically, better - memory management of cached contexts, limited lifetime of a context - to 1 hour, and added a "realm" command to nsupdate to allow - selection of a non-default realm name. - * The contributed tool "zkt" was updated to version 1.0. - -Security Fixes - -9.7.2-P3 - - * Adding a NO DATA signed negative response to cache failed to clear - any matching RRSIG records already in cache. A subsequent lookup of - the cached NO DATA entry could crash named (INSIST) when the - unexpected RRSIG was also returned with the NO DATA cache entry. - [RT #22288] [CVE-2010-3613] [VU#706148] - * BIND, acting as a DNSSEC validator, was determining if the NS RRset - is insecure based on a value that could mean either that the RRset - is actually insecure or that there wasn't a matching key for the - RRSIG in the DNSKEY RRset when resuming from validating the DNSKEY - RRset. This can happen when in the middle of a DNSKEY algorithm - rollover, when two different algorithms were used to sign a zone - but only the new set of keys are in the zone DNSKEY RRset. [RT - #22309] [CVE-2010-3614] [VU#837744] - * When BIND is running as an authoritative server for a zone and - receives a query for that zone data, it first checks for - allow-query acls in the zone statement, then in that view, then in - global options. If none of these exist, it defaults to allowing any - query (allow-query {"any"};). - With this bug, if the allow-query is not set in the zone statement, - it failed to check in view or global options and fell back to the - default of allowing any query. This means that queries that the - zone owner did not wish to allow were incorrectly allowed. [RT - #22418] [CVE-2010-3615] [VU#510208] - -9.7.2-P2 - - * A flaw where the wrong ACL was applied was fixed. This flaw allowed - access to a cache via recursion even though the ACL disallowed it. - -9.7.2-P1 - - * If BIND, acting as a DNSSEC validating server, has two or more - trust anchors configured in named.conf for the same zone (such as - example.com) and the response for a record in that zone from the - authoritative server includes a bad signature, the validating - server will crash while trying to validate that query. - -Bug Fixes - -9.7.3 - - * BIND now builds with threads disabled in versions of NetBSD earlier - than 5.0 and with pthreads enabled by default in NetBSD versions - 5.0 and higher. Also removes support for unproven-pthreads, - mit-pthreads and ptl2. [RT #19203] - * Added a regression test for fix 2896/RT #21045 ("rndc sign" failed - to properly update the zone when adding a DNSKEY for publication - only). [RT #21324] - * "nsupdate -l" now gives error message if "session.key" file is not - found. [RT #21670] - * HPUX now correctly defaults to using /dev/poll, which should - increase performance. [RT #21919] - * If named is running as a threaded application, after an "rndc stop" - command has been issued, other inbound TCP requests can cause named - to hang and never complete shutdown. [RT #22108] - * After an "rndc reconfig", the refresh timer for managed-keys is - ignored, resulting in managed-keys not being refreshed until named - is restarted. [RT #22296] - * An NSEC3PARAM record placed inside a zone which is not properly - signed with NSEC3 could cause named to crash, if changed via - dynamic update. [RT #22363] - * "rndc -h" now includes "loadkeys" option. [RT #22493] - * When performing a GSS-TSIG signed dynamic zone update, memory could - be leaked. This causes an unclean shutdown and may affect - long-running servers. [RT #22573] - * A bug in NetBSD and FreeBSD kernels with SO_ACCEPTFILTER enabled - allows for a TCP DoS attack. Until there is a kernel fix, ISC is - disabling SO_ACCEPTFILTER support in BIND. [RT #22589] - * When signing records, named didn't filter out any TTL changes to - DNSKEY records. This resulted in an incomplete key set. TTL changes - are now dealt with before signing. [RT #22590] - * Corrected a defect where a combination of dynamic updates and zone - transfers incorrectly locked the in-memory zone database, causing - named to freeze. [RT #22614] - * Don't run MX checks (check-mx) when the MX record points to ".". - [RT #22645] - * DST key reference counts can now be incremented via dst_key_attach. - [RT #22672] - * The IN6_IS_ADDR_LINKLOCAL and IN6_IS_ADDR_SITELOCAL macros in win32 - were updated/corrected per current Windows OS. [RT #22724] - * "dnssec-settime -S" no longer tests prepublication interval - validity when the interval is set to 0. [RT #22761] - * isc_mutex_init_errcheck() in phtreads/mutex.c failed to destroy - attr. [RT #22766] - * The Kerberos realm was being truncated when being pulled from the - the host prinicipal, make krb5-self updates fail. [RT #22770] - * named failed to preserve the case of domain names in RDATA which is - not compressible when writing master files. [RT #22863] - * The man page for dnssec-keyfromlabel incorrectly had "-U" rather - than the correct option "-I". [RT #22887] - * The "rndc" command usage statement was missing the "-b" option. [RT - #22937] - * There was a bug in how the clients-per-query code worked with some - query patterns. This could result, in rare circumstances, in having - all the client query slots filled with queries for the same DNS - label, essentially ignoring the max-clients-per-query setting. [RT - #22972] - * The secure zone update feature in named is based on the zone being - signed and configured for dynamic updates. A bug in the ACL - processing for "allow-update { none; };" resulted in a zone that is - supposed to be static being treated as a dynamic zone. Thus, name - would try to sign/re-sign that zone erroneously. [RT #23120] - -9.7.2-P3 - - * Microsoft changed the behavior of sockets between NT/XP based - stacks vs Vista/windows7 stacks. Server 2003/2008 have the older - behavior, 2008r2 has the new behavior. With the change, different - error results are possible, so ISC adapted BIND to handle the new - error results. This resolves an issue where sockets would shut down - on Windows servers causing named to stop responding to queries. [RT - #21906] - * Windows has non-POSIX compliant behavior in its rename() and - unlink() calls. This caused journal compaction to fail on Windows - BIND servers with the log error: "dns_journal_compact failed: - failure". [RT #22434] - -9.7.2-P1 - - * A bug, introduced in BIND 9.7.2, caused named to fail to start if a - master zone file was unreadable or missing. This has been corrected - in 9.7.2-P1. - * BIND previously accepted answers from authoritative servers that - did not provide a "proper" response, such as not setting AA bit. - BIND was changed to be more strict in what it accepted but this - caused operational issues. This new strictness has been backed out - in 9.7.2-P1. - -9.7.2 - - * Removed a warning message when running BIND 9 under Windows for - when a TCP connection was aborted. This is a common occurrence and - the warning was extraneous. - * Worked around a race condition in the cache database memory - handling. Without this fix a DNS cache DB or ADB could incorrectly - stay in an over memory state, effectively refusing further caching, - which subsequently made a BIND 9 caching server unworkable. - * Partially disabled change 2864 because it would cause infinite - attempts of RRSIG queries. - * BIND did not properly handle non-cacheable negative responses from - insecure zones. This caused several non-protocol-compliant zones to - become unresolvable. BIND is now more accepting of responses it - receives from less strict servers. - -Known issues in this release - - * "make test" will fail on OSX and possibly other operating systems. - The failure occurs in a new test to check for allow-query ACLs. The - failure is caused because the source address is not specified on - the dig commands issued in the test. - If running "make test" is part of your usual acceptance process, - please edit the file bin/tests/system/allow_query/test.sh and add - -b 10.53.0.2 - to the DIGOPTS line. - -Thank You - - Thank you to everyone who assisted us in making this release possible. - If you would like to contribute to ISC to assist us in continuing to - make quality open source software, please visit our donations page at - http://www.isc.org/supportisc.