mod_ldap-2.4.6-98.el7.centos.6>t  DH`pc$ƨ u%΄[=o24S;RN͖+#0V}p0>KDFWPty"~x:@ؖ\*0mX{KDC([\ڼ?3As=TD̿ʎw>՞RdetE©Xy),`j|Q+U71t?~|tUlHڈ˥/TsauCiݡIDxl*22juXcwBs2{:Ww " ڻ!'-b'58nCZngTRrL0|0>X)~ >^EsBQFb;y^{93ya ;\\zm` 9vCtʳ ̢rASdn'smK1^j<)WsZkAd O탛H7'#gqhؽom1^7{\|9#uc _新f^UQuryV)ŻъAd쥈&mkZ5Lw`N&P`BGoPVŭ8%qa#@3]Ҝ⩛;F ylK)&I\ b-ԓb80gi@ ^ f)Cb~*8nWF0wtM_rSE-v/$p=.@{k*BR(( ?n,(+jz}@#t^&slEex/IQ]dsHhzOK}-@\;*'*|Jӈ#hl`p []kE]{4Z @x9.>2y?yd  ! X 6OU\h n t  C HTcrD(89:)pGxXHxdIxpXxtYx|\x]x^xbydyeyfylyyCmod_ldap2.4.698.el7.centos.6LDAP authentication modules for the Apache HTTP ServerThe mod_ldap and mod_authnz_ldap modules add support for LDAP authentication to the Apache HTTP Server.c x86-01.bsys.centos.orgCentOSASL 2.0CentOS BuildSystem System Environment/Daemonshttp://httpd.apache.org/linuxx86_64(-aec c cbbbdd396fe056e8ab167abd7b2cb5145b42210bfea38452968ff02a03493fc8c525b6061acfdc1d94c618828f7cf741d61e0e5a609f67b05363e9c7572a92d01204e65c7b78cefe774082ed6c8161e99bf12b32a8379f018d6414df93b0f4e6rootrootrootrootrootroothttpd-2.4.6-98.el7.centos.6.src.rpmmod_ldapmod_ldap(x86-64)   @@@@@@@@ httpdhttpd-mmnapr-util-ldaprpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libpthread.so.0()(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)0:2.4.6-98.el7.centos.620120211x86644.6.0-14.0-13.0.4-15.2-14.11.3c@c@b9@aaav@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@CentOS Sources - 2.4.6-98.el7.centos.6Luboš Uhliarik - 2.4.6-97.6Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)2.4.6-98.el7.centos.62.4.6-98.el7.centos.601-ldap.confmod_authnz_ldap.somod_ldap.so/etc/httpd/conf.modules.d//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu?7zXZ !#,۩] b2u Q{LR|E# ~>"0:LN)ϐ9d-t7;!čMP~BZl~ᱨ$|L#',X8Tp*M͍,x7[qllenrz;+Zx+#L䲸&AE ȚEn>#lb~3禙"Pܧsm%u6 .s_Y+u}Ӏ*}^ 6+s.^E:>CЩ~QMn7?M>iB+oSo\>h7cn* eH %،PpTP|ڪ4 H](ݤ69J ilkbҒ<=1|q%N?{I\ve tw=/2`VIor$/hr!+ ӣdJ}@![^fIOqo7ܚ*&P[Ӹo\]kٷ f^.-ެТ~2\HxKN2? 5:sgxv B$ 9E͇s~c[ kIUΞyI?{X\ZwPw<(wIG#xr \&Fo,{-"T.uBS/lU HsPBAi2$kD)=X=4l0HG6 _." D&f/+]k-($w_ݡexs2?xt pSٺjjG]8{va#ӏ{ *ĹPPWn?DL..XXM~[YeM=AzU} _SV / V{(-H ܺerE^B"DW.,y=~ s4 SwyoY=k6_Q:]!ukKhu (ӭ! nU,}ǔo0է4;SԩLU6B/U[G0d<`|'0CwvK/Nٸ;DܝaMzypV))g $f1Է^̓Q̮^il C=MRPDKyf{nO5H~$KbY2Ms-idrM}"TCU|BL=xSeM!'p5+)A[ѿd593x.>)@?>;5;[@ !jm#tĺm=oeo;.uH,Uf&f%f=A|1A0wLCzX扴Nypi4: FNׯ?Xz/ _ 1 _r#1ϥoz.r>^\M->(n($q㪏:B%' 3P3ϩ!q!ű;Cc+x j(KbA WdYJ^amyDŷMb:wAꫜ佢=nIɚLVvZD? )ﱣTbDK|ȍ]MEeN*ً>:!d =} E\;_.BK[{3lQ_8v3ڐ;0FYQԐ4'P=*B~I7tSݨͼȋ&Ut:"`;Hہ;߻71R /aVE3SqÈ~X"%S@:us'Vy,Է)䖻1,~`06I?/JbTxY|$Ru1/.}RdA#5+LͰysI+uZ!K#B#byEeLvenmt-D@9Y W*>Za9VDT G~$n[h(_t!ZR:@eĠPn?PR'Lof\ߚyK y˘R$q乘_U>1PKy$#KS=E-vM  A$ ioTxޑ^N^?)pКgZ~O_aQJ@u;L>%y$^RCۃy|yŠK/ v ΂bsl.ZYByqi,RS5n0p]+-ziurb2DaP0quFCIY- BTlRD_B9)F%xU S1q9 $C-[)TE<^whԡ|X=^/,@#dDn*2]M9-#:^=B9o{6)b9E[8lԔTaLW!H`5umvH bn&8P#Ǥ=&Ms%, JWא [}s^= (0~>4d(cxk!JK@:a(+U^UIEw)$kŽ~#c~d #!jH?EcSbGD2.pBOq@d=L(\IbCׄzMmf-aw #۽уB:p1#ݕ 'r}rp ʋ~Gu!5[~FYV ԨM~e͞G`Z7TV=axv3;6 fԟׯBRJAmc_`c١Zg)5? ^CHk,1*:f*x1uTj?ұl3QzzwƸ,3a(qLV?`;[3qn/}tHn^rt/fˍ(kN@,0LYzg`qA#(Lo;c'Ml{hMM@1-S]z0{@b4S7`j2lL Ib:d 4TuiS/^ڝ~3q_3`wcff;!wl*{>bM?c|m )e"Q#ÒS5}`b8SHDhn8Զb-=,(֊m/~8ܮ$CPfx^>*S{OΑE#uXیK{Q OA"rW0lNf5]9Sٴĝ'ނz2h+ƵjŴP&ٙy Je ~NWxD;,n:TO Z#ÿٽ"ز}Hmx8E D-{L`'3fNeqǾ`>.f]W_cKCnX"rX@ްyܷ(kSzQ7D/-g')V—=?ʆMcG˨H{Ά;W*,BJ 7@@绷hD˟/ 6cۡ/ք/elMA hK{,ʯ(?PHmp1p[Ot<7bdu( &/U;mnO# #d!|v/{Z?vwRl3 v4^e33BX[{0yp2C'c1FfC1@*TRW/>\:ɟk iVXmu D] n^:W‰V]ώ Y @a*{lȒC#Js4 ҨnJ `F4rd9  лj[#mB#>fc'Kb.'!pWnȿoT 8"k,z?1 Imu;y%2)mUw`8*۳#?/4ubX蟠P`Ciz ~|D1A@|yՙ`n1}.EAhz xב>fm3O|Qiq@_T޲2O221d1h*vfJ}hf?\ufH+B:x4GP1jE [vӖc:.Տ'/l 3>BҎ%3+Q/1ѢNJ3uÈ\l D4Wo$X OTNHp;%@{P}!7h-DC<8aI7g? /n V)0EY*k"̄P{S[xϴ9 ,"eWpfӟIT?\^ np\PO)hvZy,M4?`у5' yA@A&)ǰB:gb|m~נ.!?疸3 ܠa\|V(Y(<NhHlG9+b "a*u' ,/N[prY- #@fO e>PWx3#qC|uhXKQc"TgO,',o=nVm rYl=ÉO2[^`RS0|nHaFĒ=8mb OI75԰ϑ+h尪u0՗8'd^x@5O'Tgte^jk{/]o*~r ͔6k{-4b6_qsȾ-@}QaAnÇӸyyvO6DO4˫X"hTItS "!%'YR{g*u+it 7CZ '$J!b{(Qê$?=FS$7{^+{r I3Z˱Iկ~)Cr$ex +i͖_s\ ӌlJ="=e;&DU--vY0G'48y;?TT^ ئHj$ΥG1-W~xrt}C.JYYy9yXKI. 4Q>'ߐݎ&轼/OM;'BR!VfK/xe?788CdQ޿z7֏O"ѫȻTK. R-BsBpj o/2?85`-qR0]$fHq !LO#:קw"L>-Wy+ tE6>ICG.APu$A=$._eu͔Ө9^o4d֒G:8ŋPG)7dL C*fȾk\inX>'S G(;gO3y}a^LcF*$L܌{  k# УMd*I3|9t+o<k3?oϟO)0(cIn N>m;3 kM)|yֳ6SWo _)-`snL$~U7Jt!*m_L^KP\jT_ca6xcKZ R;7",dOZulYDz4脼ZYT=9t{"yc*w7~Tȭ`,K ".} KO֨)!~)yS0NtU@HFZ7NnŒkk]aq݌(.K?[َiEUciR~\U&6)CSG2dvaJSt[v 5f9jf{~U^"sY.lҟDմ*WǜZJQs%%:g$L8bݤDNi$C@?rf$кɹ9]>i`ia΁*եQw)Z/3/WDHC. / vv'8 #jV6K@)Ϗ7f~0+Kj+6{ &::AsruG3ḯɢzȤaE.}Rz_gdN5K[OK9=)#?;h~vbIZ3EJ!t¼Kb_y#v{S=wWji`XW8_@< |IQm6뜬pwZWBe~m"PIwx\շ3H'[7:9 :'6`COz~3cjLGSƒ'y,J8F7ůOбsftخOUXbo iނ XuFwyf:KqJ^J}qK<# Y[,00uzT:NC Re˗l #}q6ֽbT8aqmcCn0N֚}>>࡛oͷy9+=`1tC-| rdOꖝWZ]R1<"RH{ C `P iU:IVy%IjQ`:,E;A{TN6۹Yվ D3E$R sl馏俍>N.%n N/$'8'2^.~?@Bo8"ne#5G/a> 䓱9[鈝6s |<Ko}(9T:9^ݛq1N&V:$^D⸾ 'g![}̡̛F:sE} sׄ\y LfƳs )ۮ:pR Q|HPvNrc+Gs΁󦞑y=(ѣ׶0Ӑ `%/u&#QϝQk[`4n˩-A̳hD6- zYCǙJA D)9?햂~/q^kj'u5n"t\ 86Z@KJyZ+-&t ]>r*`ԔT k+59/TCվ3FTv+oIx TK#we}\*d$sHmK~ި5@Vg·1=o,Jc.6-{jc8\Q Y=5u ߨmKe{ 5{(wp~` o\"Ek\ywLYK_8o&J8\Vj* L uǛo#C\~^p߹حfbBXߤ- Ԇk5hЩ ڊ`$j 1-Q9:*ӫ%sFQrZCo)%1ч@LT#a}(vbb,ε>|nUlAw>PcMVjSw7_b !.4UPMps(.,U__:37*mVE>X^7ƺTFj#$,pڤٵElQJx*o+Pq{c|q1(yh<`/c@oFuL'k~9kg`$I ױ#q`IsL Mu#`"XuH@;=˛`ȷ*e֯moGCp+mp^QRѬ1LoQt.m2E]xCu8tNᴚELISnp>I3O}栣|\DYm}yӑVUֿU ugᆩ4 i`s\A ׽U9䵁ؽ{2x-3o3d5Z75ӣ.w8P*e7݋hgJ<;ch~ Ad'o8JL)s)%M ALPЖzj e(oRD9baݹ=TVzH$K'% *M78u,} Dai|i <6#V_ާ!;/]FcG,AnvSPMmhYe_yD ; +ޜ|ED. u 'l%aX,6T&G%\yYl~|,3ɤ]lUAZ"$|VDk}Q 2Q J(rYN?jbH ve@5R/@/$8֞Qf ׁ]EuFɑa䨠?3.sk>vZP7ts27S71⪝_:]5~" My.d6I}Y>AsɢE ^2"P"AKzI|詧LͦhdܛjeOQ WIR?75V25yekEğf+3T\N@z♊,ݒT:F`=DiG92r@ е:u '=a0Q}IρL4qN|ן  Rc o S%M5d@}}k5&'ƱJZY2N$'# r` GlhrL\QwhI<WK&8(VJ CBZi2 4_5e"mBY}%>8Qؙwv$ =`T<AixV.B &LBʟmڀ,Qx]4\~QvEr898KѪi{oݚ?Xk"my_}UL%"Y&8-}3($ woոEf TB1}&z~{X[+糘;K@xK+9>H]yK\:^|^+6vy鴷9IvA6vS%@ oj`I:R;(\n*2_ƻTa ޛu0o⫳W4Cm"1/k،Q)$ j"NhةE 묠6xgJ-35 /Cr0R= ޡ^[͔ eʷW(x]`+|LO;K)(KADI2neK_I R4Գ$ C@< 0oh=77 kS87aPd`W6o~n/܎\T1@u Xss}&27SR(fJ/(OVKZ<)@}UAĿ%O5>jڢJƌ31G1Dg |Lhk)5 !dds{e%P7?H_rpr"oWBNBnun fӝNEo%jIaӽH|0q49v&;D SX+Ғ1G>: %1dI.co.ye]nܚ³sC "%7 {%c} T:Xد~5Zb1hu@[xF׀.ez^s]-pi}%8܍b# 9I0YZF@;X\1¢Z| Ye$!cGPM# V "z?fUK7c*4#7f ҅AB1ep{08*ȲVh1LB`Ⱥ&}K:cg^cnW@xLu_)o0FL6!7@#[03b/tpw{LJحߍ{zCkjT=!}$wn= znqQs3)(w/[Mp 7# zkNcd$WL0?>#ʼn@B ҭ& Okm"I\*(0t._ٕRt-;ce%m Lg˷2Ӧt;ؐBYj"~]>E7.CY2vƀL.z_5E,3S m,O|R{9݆#77X CzyeYqO{hG Mj/ȹ'Qd^]lن}$2@T`ζ[< B.,O\iJ 8e XEkX "t y&'{+Qf fN$W@ Qwc?3 z9j?Qk#kpTAt6w@ɟے(hʼR֨?ֲZ/&~"6s~2f@,  HUW<ӯ޻8rJ.+CTT3GwJeͽ]6"tއW+y}^y{Ss0w DV`'!fD{_1 ＠)wo/bhme1?.tVk2sL\-/g[ Ba[)0$/-݆؜<KG2N럁!Ofx $a6:mN "6jX#E͏TRmoRFUH0s"~oMl1}ͧX I +h>DuEJr~?CEGì(&wK8a3@=pz)!lHVBܮePS ?̉9),Vpl'*F|Ԡ4AS,U~:/.}Q`ݙu 0sYImDskscI V&^J;~PRow0!b6Hj ,e  L=D}b:oh0ٻc8-uJFUEAiL \+㹏k>±t>iG(yVkFΐfph' +:h4c}J"Zm67|P9YŎD\274u~zjN·QUX-bL,}mCPoi|Eix绬9lMGlU{PK(=7xvpl-:}n7@PSW[0Ƞl_Z2 C$iza:um3NDX?{ctH>xc<0O jr&X{TdAtu#se ?8rY^]Ha|8vpՆW|!9'eDȃaB)L!Շ5Q҂ LKxɥ=mcrw KG)#K$Z\^qW"e 9>;`Yc,0\jqs9K*HB Ord'9*) ɈW#rPذ)zcih`h<^dᵍ[g(Iy HfzF6q [r/Lv'Y:>S5xUfg~}_Ц+3veQ 7MkR]T[,vEK OuH'|[Mlt4 [C_[!' < BTTd_FK{30R(LQ) c@ʑ1$m]8=6\:\i! ī@; X?giF?XمRֵeײ)VVӚԸ$|J6M6&KrZb\/H!\y]4w䃹 זKT=Pg?M ~7lt*ݫ7$@0Ҿ;3fB͝;MR d-4Drr#\#L< +@Re >rlc>UZ&{sH-JSĆJ89fi7F֩9ZMILh=d'<.)TQ*"|ʓ!j#e_2}}w\(Ҁ"٤j~k`O 4(zIYKs@K{xA`k&.֌ʏl'3 f@lI4c7xLb ;Nog.LU:WU~Xj̟swKĜpS3s]?K*!å3seWnyL<gH #G)S|ތ auHOb]ND#SW[ $0i6JmTQL Nײ& zV;7h}`Y;OR+mʳ9i#Lu^YwH\%x'#xY@1Ţ݉NKdIX&=+o6gsC-_ xݮ=0ݎƨ}=7nf$k*˟FQMqlWjg}UI( |TBLT`/g͢ ˯!OgYW2Du0:0'7z/荆ͤc7]ȒzT5Lj8q"o(I]O?s>^>O<ڲs4*R}k(ݸx.6/@lH`?"yU.jtV#],* ~wyPJT%&,Рn]EQV8 l#!8 mv^LwrX T׃q÷Q#iOWAj"ZQL)QF=& ڱR i2=IV9DǤEO=&0q``Uti;u T:]&b&6HJBȎ/.BcOb >d"=C;Aۘ0;ެk|̅w9]iY5PV&E T<I2 >+>\[)C?:{噦԰_!Ǡ%#/ARcNʸX)_+ V_Rkoxm )%wmXOb>b4ʩƉ q{ymLw[/8 y;X,c56AjvU#7n#ƀjKE}{;(WZgg$s+/=|\(~˰D<bو}ןv$+PUa8mԛtw a{_4wYm]\_OtRzI0ñ"Nu_뗄BfhA}TCQJHktf> 4$l[?`#/A 푙V: 4j֦,0tDe$Ϙ ,q!y.JO<:6bx˥_;Gq msL}z _ ` ,Q)%![<&{YfژkyW߷ ^ Fn[,U,Sn]3>paj9:">š`ɮ7r;=,dMF^0Г9qjI 79[X#^t4d @BǑ1-bp@p9* 9]vv((u"5btA qZy4@VE`"ii2P0G}K{qH˴OŮFDB(U}a2z;,_;}x kȘעM c3qsKJB( vwZPvq @vn`KC( "Pr5ggypem HB VP*Gz.M U]y׺S@A##ʈ!NNAy|$ܻـlmDov| o%RKv@9K@"oTJS˘gXB+Pa]܆m~LKĞF^N2l@oS/j7q̡%٤4_^B,s%LfYP !{`pWX~H8(yޮ^>2\] 2M@qLf,F)V˨ӼΣMTq\!"Ul& X56;\qMNd$<0x>$-dݺ"mp.J̈%vbRQojwL!!$bVr{C nwBOzGJr@AuDn#300d`Q2?r?cߓ{cqɰz (ÓEk/(1^#4Do#W^[1>SNj+eVƱyjBS$M"9PҊVWW.%KK /!?XC "jz&nG3?U $B1Rd#Сe]Ey_[ N jifnqԍF굚)e{F#>Պ({aHNz*\ VqL~U њSODR@sԠ颃K1½pC* -6Q_BX*av b\ }Cqq]70!D[<#˄t jr QnC (G;^P3%29;Ag xDGyMӃL)3l .1\"McJ5B%8OPXQg, Ln'1ꎖ7ч/mO㧭Ovk,Ҧ~۫H~H`֫2b*蕭2>? #LĐ#Ӵ-?^.1/FKo%^}]<<v`(LL̴Œ46&|:P?'[ џcRs)56&cUkxxHcn"@aC1\οj@_l5IGEMs)UFL:A0,C; C`yLJ=Jc(M?#}Q4j0s2#rGg D_ :Un;'`r ~s`J2J1.g=;4Aɮ { Ga>w]֪JDlf꟰c6$w - tWƪ][PeXXelX* «fwih#?!«aJwϋҤm ҨcB@lCcd]w&Χ[ޜ>'7C3~q\O]*vLFP":ʷEǠsWS6ӜV[A/{r=X}J]"|X\-'u[g6XKivvĈLĕSE=ZNBtE''Qˮ ^"gHfq p(MB;hݽ$}4GT䮔ڈ>mcz\*&vc.< g(]Xu=uzCQHt E[)1YFF+9NK5O墱E".k]Rg%/BcH"/Ncw}r7z@P8WP7"3bG=TvX0gи?,61g8JWÔ.)¶#Ɠ-}#Rls{=7Z7nJѺ;ch( =_D85ڍ6S` :f@ǛD `LjNmss_;Hi߼â$eKn&0P/ٜ[饖GZFdTԒQO˩F # tCr)'+gסCC~ M./5dqIA&"{ѓG%Ѥ@NÌ ·GS1-j7_יr^*XqJGIJg~,o!{p5Lçmuq_Fk,rI$#̅4z(h ;[4_MIJczhhϿL|c=o}K=Tc+k= ;j@b~tSIڦp;wjtsub?4jidDg%Ǒj~z'ӓ(bKvd#yyr5a)gM3ͪXcdaj}y5W: eW E)~QY0-Ag9<(޿ex;)vF; E &ٜیe ׋~=J>" ]|Y09zK6{{b'g ^r4}ȵ`Y|O/m%yt;0D_<,|NZ*+ѡ]OepHl"5ňw-`솷o[S1مQ53RNA?2m**R4ȱ-7nO1}egRx$,Y>w]Os;?}0씖8 賟*Uw͸_P}MF)=N묧x"aH6}DVkfrs$~p `j8PwS(à:=+474ՀV'9S^A` 8tk=Se.Z1ܢX7Kco_e'ONZ{Ic_˧{vSKab]n<_/c~C ={lԉSP`h?KF kƯhh:o|@ !Kr=AaGl 43Ah%d$?|\l›jR{\gKA=au 2s%X=zBO Oq5m0V|wnz.^<"QoUo@D;O#׭`"v Emo!9(Q/Ef`uB3yv!.!YT\cy)~ *B_/ghzjC'JtZ :;~U,(qC] J5Ng#;sn& :ϰASm"Oڴ^/XG/b&]PMoqzήk˯UG2q,yTć: ̧E^XJ$ժa$q~1>_C"i&gd(0MQ'Bkqo{( eb/š)άLߓWDsۊYfRjnU%a'*d}1>D@;R .~Z|-1/ % on>h&6..R*խPCʢ[0"|GJR3]y& ex.+-c}}荹TwVbnȮ):t:Zb6y68c^BFjM>E]c\Bʹƣ|4nFi]Z8+ ]v N HѶ}XA\+-+sNmvK `cu-gy𷱩xD"'2d†n`SĭoJuNYIVZn_L%ɂ{I@4Bw5\\4zgZg57>2K#@MK[pǰv/%8"g".m@{)6-[-iPVC&寫Ll+LO(:ɖ@Lqaf>nun`ߙ>vӌkFZ(|a4MHhl?58dnMӯPewYFv{>`=UV_=7jVBսv _EaN#Np߱2͆@hu5>hS A]k*C8O;,v `&E|AlHAO=Y6Wݓ;AY]ߵg;SՎjƅ.jk _H2pn[o c1CӦt\N{ yBȟ`bJ*P"Sr@zǓFqImE:˃gY3Bw8坝:,=P _r 3mn.Gb#)zT6,"]ZWuT zCpgJmV(z-{6Mw wuz&suGǚxg㳺Nֽx=2K 2 43؅Ε8 ^\$3T=d*DOoW9 =`Wja4j-G/Y wMՕٓVd 9^]&(N3.&Zgb'юbIz8Ϊu{K&FE,(4P3]EjnNӪLYv+{d'ѪIو7\~w޻#`PPΒ7#[V9H ˜w(j a! e Zʕܻj/PzBn8GPeNE`AtL0Ug -IUī1.  E=[; Ma&itNGG8"t#S Lfbh|*\TE2balHGBq`=veP*K/_E7d`ߞ粞GG[f\Z@'l%4&WEjX֩rb'&aMR M8:E|^0CV^=_H''Ic5hOujLgn.W_r3ѮJBO> fHc$*XV6ou."|z8p {=-Bi--SW<N9 oS;H"9L!l* *…:\,@KLj}2Kz6'!5.h~j\b#yڐ%)h\>H䛴&9 z@@ 4˼k*'.oéTf[w3X6Һ3Y((YȌuX[t;X {"FǼSkD泡241|:(X!cHdMyW,)ԛAzY;t2ifQ͝Ȩv;7Yrŏ4d {Z(Pc,wK%+:>pRAɟi ZB*ۤ ̢WI=Z~'fv]vL(r%Ƃm J9W.dP5}w HItiC rWdegT|gv3 /{|}eO'u ̳UH :RZ ' yd:bk$r zeO7uF1 g=mpu 3Vc+i:{V%!$:A`8*zwq;E][ N47fMŸsl]Ү[)v-3V3pĴ~@ %?dٌ\#OҪ}7V7{َqBv uE)Dq+>E3T~\LiΫ[C"-G @ \MaeeT>7497/?^c@8st{xqF~Ǽ{F8ěuObxQ s78G"\x˄9iO"gl>ߚZht^vhf!fG+1k]Kq>dab }I BM7$zO)^TqHF< `:]d1+]NL&_w>7VxEk (z:@sԜjYH.vN"YCٶoKF2yRR\Ng<96"2"*,nj@#7sJhҔ`Ө4e~kK.DG+ޢ:Uqgq; ^H>ATΞD+ ]n@񇋒)8Yа~bt =4)_/@.< 3qJZ exp:xn/,1h)|E b;p`7mdK i1RNf;Z'YĒ-[mNtϻx W4e6N!W{ˢ.eJ?E FE2 R꺳 NT `|; uE9SJ ԢGׄ/ǞD~=\K?KTiRf|RamOQՖ:GЃ ئmXz2@w:]7)5,=?hOJXu ȱ`! C%jfc-*P|i[q=*9q@'n9wz%RCi"ST,`@a .|k+ZM\\^:}82MNzL&BT;#C`[6d= CF5ƨ09b #Wq[pq="\z 5Ne킕T@^4D*Mo,k.~ VCmd_g$S-ԿK"uT/YjƧ85kZ-i'D1be3lF~r\5L^!:7HFeM誟҆A0 Y``5"rX)[ ̢xI^؏^moTO|d6)k{Jt 1 geU:4\3Ft^2PoDoy,b5_";yuOxݴI;GY(,9n 6m)ru%`7q=Vk/γxlcySev~GPW |DkHft8ǂ$rI1oyT#tˀ,|5PDCK1\MA3J]zM׳V.kDܵ*G3wSi=]u9 ٪`K 4l;vC)Vr=B|BTUHx*gp2f~ֻ_Gay(&퟽kji++̷aYځ׺ÃwޞkHt˓i/D$ `mcJҊI+R4nS <$a/ydSOe΀?4kFAYjXTBpB 7⨹\謇Ă&m v!s9bt*Jh(KKB!\ԦXګ3 2ˆ(lgQ;M @,/B)ST'(DT >|*W^B.gG2DY?E&; 퉇:YHN#^ fA 4,gLjP+,.Om6W& _7;Q!R&wozM7W{^_!]}=X9itLt=_ p*"CWI3p3KCaRخނkZ_S=K"'4W=RrNEfiUAm {Dv b{F`2t"V^6nƪ ? RRs# '|>(6j}d[A،®/)5R!5sY+!OCR5,,O ^ln~?X*}HP$X]E㝃@d ḱk:s 6r[4Io37#6YXy廆uL>卣A‡θ7AYorFJʪ5+j)=$e Vi0ޮ_d<5UcÙT<q1ѿLe?H,Soz_ݡc`2(뜞V5ZE^뀂@[azّ֗{&7܈]A"צ$C S(`Hg^+ (`f̲ ~E{*$}vFD17fgۃm_)3e ւG{hm=L]N2@> u Gbȶ4E8fװMIfLmjݱbwdc2OZ;P8ސM`3< qI--0 Joݗ=fUsETv7>i9J"&֞<~-{lȫ9{F=PYIc?(ӋSouImj͈MSijjs]6)Ț8l[iGxk, +Jh)?nSM$G=7+,=)/ ?MJL 08q&]l~:-cLit4҉pަM^)-PQ+2!ҵ)n 9k[iF ) 4:U%%8, w,R*RA9,6jICJz[^r%$Ǭ[ t/-(7 RŎ4):~S&e4XxCv Jul/mi$ǑohN\#bbMrϚ({I[m|( nW@At\&U'OX9pm!KJJ+;Sj9en.EzawBU^cr3`t)" r3.pAغ0B-e/6 r# @)i 4艢v{@G^ pDhJDǕ} RdFGMm@Y. Qm:`cX_]7=EA;W155 FMV ex!xdZ%He/@>hۜ]BP, ˸a((l_j1 ~QWiti;7Gl[4ws`YX#ޡNwhUېk=J̽$;ZƯYURorf{B/k6Bz+3r=gXyZj͸j5uu"ްlZJK<82OO0 U{+4m6 >r>Ap :w:pEel2YfzUDxIfTTоBA#PH6IC6USED(b]'(V5=&[H+6l!W)t)$'ԡO+)(fh'یaUy2dQ6p|Y*a)Ht|R*:Q@9wCTHXl~-Jg;\wdy^*5n]Mo2/´XþF!DԾRdHdD,bwђw}їo,Ńe(VzuYVoe摳sNX2$|Dk+&MaJ18"OX:OВp͡QU`6rȴ)NjSv6!k{=i>@Bs-&{<^JuCVD3}IPgSA֓9s-nӾP?^>}zvU8V5.L_R>A߃l˘S)2F$ŧ'ȬɳM}dY9mqPq\wVʾsbh+NM|#!"]ݶ2Z dHd#cvSu~=ϖ-*_Te@pfڒqQpE iF|CͲ{0ˬ{^- 1Nİf1O8R(vf?+l/Qq0,Xo˘G|* (Qcr&[F#r)Ko)i#Gs#~}I~88:@v~·/ΐfE/.e8ۛL4ط#jp~62CgiL=3rxУCQ$(> h]mQ uP b#E*`65/ZGchЅ΀.@ūDyF h ? 7V*Dtt# B*nvlW}Gɗ`r\U[Ô}(`|D7iˤָ3KΫH3Tte0Rv8ZGxU@3:5?Zlu΂eϖ&5djֵhf}L8Hhf /szP|@7}U |)]z^M2%7#DJ^"1Ub:Ow(鼏]D9fR^S'A~o:*r5ǐ klbZz 5údžUþxоqmj_:h4¦Q励Lkvσ"˴p:]׵KFxź;6嬼 59/|C]M4B>;@Cd3#T0{'㩱CYOkg#5&-,/YK5C6֚[Af)AuU4F^;5&wYK5suT!cWÌXL QG) TxT&+?u׮vbd-29ۂrU~DDhR:\mG(:a&s<\@ڜ`ZٮC|{$D(Xk ,x}n,]bt FA.34 "_ۜO5./r vfL+DY|,y Ћƈ]yބ-ޖ[\~FS:C* (٭vTfħMw,E^cA؂I! 9&MR>=,nuFh>Q^F= p=v0No &bi͒ԅ6h$j-t詆EpRI29g_e=ݠCs2-o4=CDͩXRgDaF_BS _ܪC5+j >\p`6H$w?kCHݤXR=bѷeZyڌ,<%ݜmdžv1#'1W*.I$Lc1l_% ӠH,5eaXF.v kmۓ2M|t5n T5%j[NČڠs &$Вݏ?m O!_z<7|4<=RqjF8Ԙ=p&Xu G~jy0 tjE^ucn޲"09qJ I SIUU508&Ӈzg٬NFA=OYP~ K e&cȈG|"q}gqvRR_~fGةҎU?B4S0EbcQe=R=/Fȋްβǟ&g T@Zz*2X.˷u+RkЧa}k]il-Jk_*c2$iLVoK`2'|;{~hgC2Ofe*i-lzWRGCyuc+ GGr~|ntv=#;Kc٤L=[hfg:7ah7AEN@B&7EVn.E!'_x|%P-+^ >I FPЁ6;1gOcm5>2q9q<^3ibSRSXKQN & +zju e#-l9vʮP?,?^ݚc@燠OF ZXvXr5+&nч]`+vB]@p߫GsVSϿ" md>Jp4\`V[E/8lfqt*] o !lC?J=*P8O<=00\ )Sy݉`[ŪD}*j$V@^\tZ>~pPՓZ&(>KY~#oK"ES%)8axȴ=oũҚb Ogr`_e#א(A/Hc:*p̲Y buH/Xp^9b-i/jӺDN$*ɹSbcEi҄ke%e8Fm3H6#Zy5ᒯm~w*tq=9o1ak͠;ȽMV! j#Sj-yƐfJ0qsoG 4{e]Tn}JP?~+,%e)>=Dh-+p"P|u@Q˞iݞ v@ FəBlhWhie-sSڬ2kbEednNkۙx^zZI˃S[Tm1S xVhJn{Jtɒ>MN?x޷ӈ{+Dllk&W❖5:ҖcSMYcP}sJ'>6?1K;}`E2hg9b\-|ѩdt?"S0sd{tg=#`ru:K⾲~`{Pt)\etP\ e&B3,cokwNxDN]f"ϥ/خu;/]}ezȈGVkWoux* pZ>AL(mHlg3Bu,œnl&/H`b* nHmtԔ?7`?N4m'yoN^ 2cxuhv3̝7m2r-3iM(ރ_l@ eVxv~Ls@e/1Y2)Q* $$z=JH``Zu4fqAn~B[;%a?>Z{Ν]KRf(&2ZSvv*ç<=`3H~q$`zRdsC.Qx{!ӣtS' 8~i@k5 9MNLg`!9Hpat|{hŀ H_}&{kuuf(1^=ˇ,ǜn:rN5Dygٿ ~Yorr&:7h)!euQILCqѲ.=7v԰mM7cL$f ?o]º89[6ŷ=5OPPJ{Vk9j|ЕЉlһrWng-/aA˼OjOC_4'.Sjn|`pR/jٙ{Ejf9{"w e׈b`xT=}twRH֩V뮖IIPQב1"'ѶiFwSr+qǎF>.Ɣy@JՔ "f- ,cu;Capzt1 5h,Zշ<i,JhK)|g7ت2p Pz; Ro4 =ĘWI2{UbX%t})fE/wˣbϡh@Z)"xbr8crj2)F^i (Odr*n!@/)9j*() &'A,%@p~R݊@; !@tx}WrGi&7yo?>s'Z& Q$2ݽOz7N\`0^|-0n=pwDӦlKhxQ\$L:v_}Oo@g[UЉv.U5Ij]U;>rXagUaHg zcH*[ ":#<$zq/n23 9},/Ce}1 2D퓕Ԋ M} ̲\lIj u.Y͆z|ZL׼ huBkvd͟γ>&;~_X5dnpws1oKDB?j/V 8BT7SnPߪe4W'|*ie^`,P16m5j_ v# `cDy?|);r*$8xK3Jɬ;094SkuR7ưZjJ#FĘI(x308څ^ -l d_f͈M=#+c' c^F$S?U`]w$n:=>NqcJ޵Osh:o Ogk\>睧.@E !ϔL*#_6i r 4Jq; ]3BC%lgNJ hC || j69p-Q`]d͘yqaƬ ! aV2U1x·X'lZ+b Zf4їmƇY8-OַٙEӜYɾq ^Pm9_x!$ҋ9F I?O]Lf[8YG n!mo1f*vy3Ek*`'B2]/Ұ2KRKoQiȡL/'YT$|n^wBU)!&b\9:|?bz>aH4v{z+lҨlw)֗$=Hcb%9ٽ OՐgοF``|! ::qC;tli\u(lQ`^:bEaX޹h?JW~C'x:U ܡx/X VQ$ vN9 j-/ p=]Jˀ!Oiy/A,-Bȭj|ey>MB [ްiy-"LL&2gh\16Bqfj)F2b u XM2ept?Hyf" )=C]k.0lHLԏ8`>xs鍾$_ [{!LmμW),|WHlv5A