mod_proxy_html-1:2.4.6-98.el7.centos.6 > t
D H ` p c$ƨ'6v 9Ŏ4
ASq#[m} gǪIl.E^tx|6= uz$vmь~ s`Ek3 6eՏݗ^-Ƕ|rjF[nH!6-C=jTȾwә &9XeFHGM A739"( 6O(OљY;"z6ց"Fo~5Ű _H)ӉGbҘ`%!lM0Yf>nH'=ȦP{~՞䃉 H"h*ITX$ܖpVr\t4rK j>:tB}ii~Nlw++~aU=woA]hGL6iQw( A&ڼoJUc ?:}&3qbmV B'.rl%0c"D+~]_]KУYmHdmp#1 $UE(kea58d4ab8666b7fb5e99df2cdb69e51d0c025175 Ѭ c$ƨ &FbK0'pS?u
k SeIXP 4[ntpVOscc=.IҚVɚ oi qzbЙ6|[ܩ0mo!Ϧ5GFBgp_=8m,Yv F 6 z ? z d ( , d / J c i p |
W
\ h w $ ( 8 9 ( : ) B x G x H x I y X y Y y Z y@ [ yD \ yP ] y\ ^ y b y d z[ e z` f zc l ze z C mod_proxy_html 2.4.6 98.el7.centos.6 HTML and XML content filters for the Apache HTTP Server The mod_proxy_html and mod_xml2enc modules provide filters which can
transform and modify HTML and XML content. c x86-01.bsys.centos.org CentOS ASL 2.0 CentOS BuildSystem System Environment/Daemons http://httpd.apache.org/ linux x86_64 p [ȁ aec c a2211995b7e55b781f68666664f0bcd84550ed9a16edee07121f63477dfaaffa 6a6d1799665914f2445426ce7b97035dc09607219fa419d4b6ec03344040887f 038d29637e9759d43e98466c7051c22197e11b21018dd4ac926780df9f33bf8e root root root root root root httpd-2.4.6-98.el7.centos.6.src.rpm mod_proxy_html mod_proxy_html(x86-64)
@ @ @ @ @ @ @ @ @ @ @
httpd httpd-mmn rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(CompressedFileNames) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.4)(64bit) libpthread.so.0()(64bit) libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.2)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) rtld(GNU_HASH) rpmlib(PayloadIsXz) 0:2.4.6-98.el7.centos.6 20120211x8664 4.6.0-1 4.0-1 3.0.4-1 5.2-1 4.11.3 c@c@b9@a a av@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[ d@[ d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @T TS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@Q Qޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']Q P
@P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@P PO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5O KO@O NNS@N{#@NoENdNBrN)f@N&@N @N
MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@L LMxL7@K@CentOS Sources - 2.4.6-98.el7.centos.6 Luboš Uhliarik - 2.4.6-97.6 Luboš Uhliarik - 2.4.6-97.5 Luboš Uhliarik - 2.4.6-97.4 Luboš Uhliarik - 2.4.6-97.3 Luboš Uhliarik - 2.4.6-97.2 Luboš Uhliarik - 2.4.6-97.1 Lubos Uhliarik - 2.4.6-97 Lubos Uhliarik - 2.4.6-95 Lubos Uhliarik - 2.4.6-94 Lubos Uhliarik - 2.4.6-93 Joe Orton - 2.4.6-92 Lubos Uhliarik - 2.4.6-91 Lubos Uhliarik - 2.4.6-90 Joe Orton - 2.4.6-89 Luboš Uhliarik - 2.4.6-88 Luboš Uhliarik - 2.4.6-87 Luboš Uhliarik - 2.4.6-86 Luboš Uhliarik - 2.4.6-85 Luboš Uhliarik - 2.4.6-84 Luboš Uhliarik - 2.4.6-83 Luboš Uhliarik - 2.4.6-82 Joe Orton - 2.4.6-81 Luboš Uhliarik - 2.4.6-80 Luboš Uhliarik - 2.4.6-79 Luboš Uhliarik - 2.4.6-78 Luboš Uhliarik - 2.4.6-77 Luboš Uhliarik - 2.4.6-76 Luboš Uhliarik - 2.4.6-75 Luboš Uhliarik - 2.4.6-74 Luboš Uhliarik - 2.4.6-73 Luboš Uhliarik - 2.4.6-72 Luboš Uhliarik - 2.4.6-71 Luboš Uhliarik - 2.4.6-70 Luboš Uhliarik - 2.4.6-69 Luboš Uhliarik - 2.4.6-68 Luboš Uhliarik - 2.4.6-67 Luboš Uhliarik - 2.4.6-66 Luboš Uhliarik - 2.4.6-65 Luboš Uhliarik - 2.4.6-64 Luboš Uhliarik - 2.4.6-63 Luboš Uhliarik - 2.4.6-62 Luboš Uhliarik - 2.4.6-61 Luboš Uhliarik - 2.4.6-60 Luboš Uhliarik - 2.4.6-59 Luboš Uhliarik - 2.4.6-58 Luboš Uhliarik - 2.4.6-57 Luboš Uhliarik - 2.4.6-56 Luboš Uhliarik - 2.4.6-55 Luboš Uhliarik - 2.4.6-54 Luboš Uhliarik - 2.4.6-53 Luboš Uhliarik - 2.4.6-52 Luboš Uhliarik - 2.4.6-51 Luboš Uhliarik - 2.4.6-50 Luboš Uhliarik - 2.4.6-49 Luboš Uhliarik - 2.4.6-48 Joe Orton - 2.4.6-47 Luboš Uhliarik - 2.4.6-46 Luboš Uhliarik - 2.4.6-45 Joe Orton - 2.4.6-44 Joe Orton - 2.4.6-43 Joe Orton - 2.4.6-42 Jan Kaluza - 2.4.6-41 Jan Kaluza - 2.4.6-40 Jan Kaluza - 2.4.6-39 Jan Kaluza - 2.4.6-38 Jan Kaluza - 2.4.6-37 Jan Kaluza - 2.4.6-36 Jan Kaluza - 2.4.6-35 Jan Kaluza - 2.4.6-34 Jan Kaluza - 2.4.6-33 Jan Kaluza - 2.4.6-32 Jan Kaluza - 2.4.6-31 Jan Kaluza - 2.4.6-30 Jan Kaluza - 2.4.6-29 Jan Kaluza - 2.4.6-28 Jan Kaluza - 2.4.6-27 Jan Kaluza - 2.4.6-26 Jan Kaluza - 2.4.6-25 Jan Kaluza - 2.4.6-24 Jan Kaluza - 2.4.6-23 Jan Kaluza - 2.4.6-22 Jan Kaluza - 2.4.6-21 Jan Kaluza - 2.4.6-20 Jan Kaluza - 2.4.6-19 Jan Kaluza - 2.4.6-18 Jan Kaluza - 2.4.6-17 Joe Orton - 2.4.6-16 Joe Orton - 2.4.6-15 Daniel Mach - 2.4.6-14 Joe Orton - 2.4.6-13 Joe Orton - 2.4.6-12 Joe Orton - 2.4.6-11 Joe Orton - 2.4.6-10 Daniel Mach - 2.4.6-9 Joe Orton - 2.4.6-8 Jan Kaluza - 2.4.6-7 Jan Kaluza - 2.4.6-6 Jan Kaluza - 2.4.6-5 Jan Kaluza - 2.4.6-4 Jan Kaluza - 2.4.6-3 Jan Kaluza - 2.4.6-2 Joe Orton - 2.4.6-1 Jan Kaluza - 2.4.4-12 Joe Orton - 2.4.4-11 Joe Orton - 2.4.4-10 Joe Orton - 2.4.4-9 Jan Kaluza - 2.4.4-8 Jan Kaluza - 2.4.4-6 Jan Kaluza - 2.4.4-5 Jan Kaluza - 2.4.4-4 Jan Kaluza - 2.4.4-3 Joe Orton - 2.4.4-2 Joe Orton - 2.4.4-1 Joe Orton - 2.4.3-17 Fedora Release Engineering - 2.4.3-16 Joe Orton - 2.4.3-15 Joe Orton - 2.4.3-14 Joe Orton - 2.4.3-13 Joe Orton - 2.4.3-12 Joe Orton - 2.4.3-11 Joe Orton - 2.4.3-10 Joe Orton - 2.4.3-9.1 Joe Orton - 2.4.3-9 Joe Orton - 2.4.3-8 Joe Orton - 2.4.3-7 Jan Kaluza - 2.4.3-6 Joe Orton - 2.4.3-5 Joe Orton - 2.4.3-4 Jan Kaluza - 2.4.3-3 Joe Orton - 2.4.3-2 Joe Orton - 2.4.3-1 Joe Orton - 2.4.2-23 Fedora Release Engineering - 2.4.2-22 Joe Orton - 2.4.2-21 Joe Orton - 2.4.2-20 Joe Orton - 2.4.2-19 Joe Orton - 2.4.2-18 Joe Orton - 2.4.2-17 Joe Orton - 2.4.2-16 Joe Orton - 2.4.2-15 Joe Orton - 2.4.2-14 Joe Orton - 2.4.2-13 Joe Orton - 2.4.2-12 Joe Orton - 2.4.2-11 Joe Orton - 2.4.2-10 Joe Orton - 2.4.2-9 Joe Orton - 2.4.2-8 Joe Orton - 2.4.2-7 Joe Orton - 2.4.2-6 Joe Orton - 2.4.2-5 Joe Orton - 2.4.2-4 Joe Orton - 2.4.2-3.2 Joe Orton - 2.4.2-3 Joe Orton - 2.4.2-2 Jan Kaluza - 2.4.2-1 Joe Orton - 2.4.1-6 Joe Orton - 2.4.1-5 Joe Orton - 2.4.1-4 Joe Orton - 2.4.1-3 Joe Orton - 2.4.1-2 Joe Orton - 2.4.1-1 Joe Orton - 2.2.22-2 Joe Orton - 2.2.22-1 Petr Pisar - 2.2.21-8 Jan Kaluza - 2.2.21-7 Joe Orton - 2.2.21-6 Fedora Release Engineering - 2.2.21-5 Jan Kaluza - 2.2.21-4 Jan Kaluza - 2.2.21-3 Ville Skyttä - 2.2.21-2 Joe Orton - 2.2.21-1 Joe Orton - 2.2.20-1 Jan Kaluza - 2.2.19-5 Iain Arnell 1:2.2.19-4 Jan Kaluza - 2.2.19-3 Jan Kaluza - 2.2.19-2 Joe Orton - 2.2.19-1 Joe Orton - 2.2.17-13 Joe Orton - 2.2.17-12 Joe Orton - 2.2.17-11 Joe Orton - 2.2.17-10 Joe Orton - 2.2.17-9 Fedora Release Engineering - 2.2.17-8 Joe Orton - 2.2.17-7 Joe Orton - 2.2.17-6 Joe Orton - 2.2.17-5 Joe Orton - 2.2.17-4 Joe Orton - 2.2.17-3 Joe Orton - 2.2.17-2 Joe Orton - 2.2.17-1 Joe Orton - 2.2.16-2 Joe Orton - 2.2.16-1 Joe Orton - 2.2.15-3 Robert Scheck - 2.2.15-1 - Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases - Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
corrupt and mixed-up responses - Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlier - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
when parsing multipart content - Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix - Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing "unix:" - Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
concurrency issues - Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value - Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications - Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry time - htpasswd: add SHA-2 crypt() support (#1486889) - Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection - Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency - fix per-request leak of bucket brigade structure (#1583218) - Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
SIGUSR1 - Resolves: #1458364 - RMM list corruption in ldap module results in server hang - Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
differ only in case - Resolves: #1556761 - mod_proxy_wstunned config needs the default port number - Resolves: #1548501 - Make OCSP more configurable (like CRL) - Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
after close - Resolves: #1533793 - Use Variable with mod_authnz_ldap - don't terminate connections during graceful stop/restart (#1557785) - Related: #1288395 - httpd segfault when logrotate invoked - Resolves: #1274890 - mod_ssl config: tighten defaults - Resolves: #1506392 - Backport: SSLSessionTickets directive support - Resolves: #1440590 - Need an option to disable UTF8-conversion
of certificate DN - Resolves: #1464406 - Apache consumes too much memory for CGI output - Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
using SetEnv or PassEnv. Needs documentation. - Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
when it's defined outside setting - Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
with absoluteURI instead of abs_path - Resolves: #1288395 - httpd segfault when logrotate invoked - Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing - Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used - Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting
unregistered HTTP method - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
in mod_auth_digest - Related: #1332242 - Explicitly disallow the '#' character in allow,deny
directives - Related: #1332242 - Explicitly disallow the '#' character in allow,deny
directives - Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS - Resolves: #1442872 - apache user is not created during httpd installation
when apache group already exist with GID other than 48 - Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
httpd: various flaws - Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
patch to set worker secret passed to tomcat - Related: #1414258 - Crash during restart or at startup in mod_ssl,
in certinfo_free() function registered by ssl_stapling_ex_init() - Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
in certinfo_free() function registered by ssl_stapling_ex_init() - Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
are broken during buffer resize - Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves
with mod_proxy_http and mod_proxy_ajp - Resolves: #1324416 - Error 404 when switching language in HTML manual
more than once - Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi
spamming non-errors: AH01075: Error dispatching request to : (passing
brigade to output filters) - Resolves: #1371876 - Apache httpd returns "200 OK" for a request
exceeding LimitRequestBody when enabling mod_ext_filter - Resolves: #1372692 - Apache httpd does not log status code "413" in
access_log when exceeding LimitRequestBody - Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple
successive graceful reloads - Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny
directives - Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup
on backconn - Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed
worker to be retried before the retry period is over - Resolves: #1389535 - Segmentation fault in SSL_renegotiate - Resolves: #1406184 - stapling_renew_response: abort early
(before apr_uri_parse) if ocspuri is empty - prefork: fix delay completing graceful restart (#1327624)
- mod_ldap: fix authz regression, failing to rebind (#1415257) - Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
httpd: various flaws - RFE: run mod_rewrite external mapping program as non-root (#1316900) - add security fix for CVE-2016-5387 - add 451 (Unavailable For Legal Reasons) response status-code (#1343582) - mod_cache: treat cache as valid with changed Expires in 304 (#1331341) - mod_cache: merge r->err_headers_out into r->headers when the response
is cached for the first time (#1264989)
- mod_ssl: Do not send SSL warning when SNI hostname is not found as per
RFC 6066 (#1298148)
- mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038)
- fix apache user creation when apache group already exists (#1299889)
- fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757)
- mod_proxy: fix slow response time for reponses with error status code
when using ProxyErrorOverride (#1283653)
- mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149)
- mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495)
- rotatelogs: improve support for localtime (#1244545)
- ab: fix read failure when targeting SSL server (#1255331)
- mod_log_debug: fix LogMessage example in documentation (#1279465)
- mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
of DB lookup entries independently of the selected DB engine (#1287844)
- mod_ssl: fix hardware crypto support with custom DH parms (#1291865)
- mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797) - mod_dav: follow up fix for previous commit (#1263975) - mod_dav: treat dav_resource uri as escaped (#1255480) - mod_ssl: add support for User Principal Name in SSLUserName (#1242503) - core: fix chunk header parsing defect (CVE-2015-3183)
- core: replace of ap_some_auth_required with ap_some_authn_required
and ap_force_authn hook (CVE-2015-3185) - Revert fix for #1162152, it is not needed in RHEL7
- mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416) - mod_remoteip: correct the trusted proxy match test (#1179306)
- mod_dav: send complete response when resource is created (#1235383)
- apachectl: correct the apachectl status man page (#1231924) - mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328)
- do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820)
- fix -D[efined] or [d] variables lifetime accross restarts (#1227219)
- mod_ssl: do not send NPN extension with not configured (#1226015) - mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575) - mod_authn_dbd: fix use-after-free bug with postgresql (#1188779)
- mod_remoteip: correct the trusted proxy match test (#1179306)
- mod_status: honor remote_ip as documented (#1169081)
- mod_deflate: fix decompression of files larger than 4GB (#1170214)
- core: improve error message for inaccessible DocumentRoot (#1170220)
- ab: try all addresses instead of failing on first one when not available (#1125276)
- mod_proxy_wstunnel: add support for SSL (#1180745)
- mod_proxy_wstunnel: load this module by default (#1180745)
- mod_rewrite: add support for WebSockets (#1180745)
- mod_rewrite: do not search for directory if a URL will be rewritten (#1210091)
- mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
are used and SSL session is resumed (#1170206)
- mod_ssl: fix memory leak on httpd reloads (#1181690)
- mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476)
- mod_cgi: return error code 408 on timeout (#1162152)
- mod_dav_fs: set default value of DAVLockDB (#1176449)
- add Documentation= to the httpd.service and htcacheclean.service (#1184118)
- do not display "bomb" icon for files ending with "core" (#1170215)
- add missing Reason-Phrase in HTTP response headers (#1162159)
- fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625)
- apachectl: ignore HTTPD variable from sysconfig (#1214401)
- apachectl: fix "graceful" documentation (#1214398)
- apachectl: fix "graceful" behaviour when httpd is not running (#1214430) - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
instead of hardcoding it (#1168050)
- mod_proxy: support Unix Domain Sockets (#1168081) - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
- mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581) - rebuild against proper version of OpenSSL (#1080125) - set vstring based on /etc/os-release (#1114123) - fix the dependency on openssl-libs to match the fix for #1080125 - allow 'es to be seen under virtual hosts (#1131847) - do not use hardcoded curve for ECDHE suites (#1080125) - allow reverse-proxy to be set via SetHandler (#1136290) - fix possible crash in SIGINT handling (#1131006) - ab: fix integer overflow when printing stats with lot of requests (#1092420) - add pre_htaccess so mpm-itk can be build as separate module (#1059143) - mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078) - fix build on ppc64le by using configure macro (#1125545)
- compile httpd with -O3 on ppc64le (#1123490)
- mod_rewrite: expose CONN_REMOTE_ADDR (#1060536) - mod_cgid: add security fix for CVE-2014-0231 (#1120608)
- mod_proxy: add security fix for CVE-2014-0117 (#1120608)
- mod_deflate: add security fix for CVE-2014-0118 (#1120608)
- mod_status: add security fix for CVE-2014-0226 (#1120608)
- mod_cache: add secutiry fix for CVE-2013-4352 (#1120608) - mod_dav: add security fix for CVE-2013-6438 (#1077907)
- mod_log_config: add security fix for CVE-2014-0098 (#1077907) - mod_ssl: improve DH temp key handling (#1057687) - mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276) - Mass rebuild 2014-01-24 - mod_ssl: sanity-check use of "SSLCompression" (#1036666)
- mod_proxy_http: fix brigade memory usage (#1040447) - rebuild - build with -O3 on ppc64 (#1051066) - mod_dav: fix locktoken handling (#1004046) - Mass rebuild 2013-12-27 - use unambiguous httpd-mmn (#1029360) - mod_ssl: allow SSLEngine to override Listen-based default (#1023168) - systemd: Use {MAINPID} notation in service file (#969972) - systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972) - expand macros in macros.httpd (#1011393) - fix "LDAPReferrals off" to really disable LDAP Referrals - revert fix for dumping vhosts twice - update to 2.4.6
- mod_ssl: use revised NPN API (r1487772) - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
- apxs: mention -p option in manpage - add patch for aarch64 (Dennis Gilmore, #925558) - remove duplicate apxs man page from httpd-tools - remove zombie dbmmanage script - return 400 Bad Request on malformed Host header - htpasswd/htdbm: fix hash generation bug (#956344)
- do not dump vhosts twice in httpd -S output (#928761)
- mod_cache: fix potential crash caused by uninitialized variable (#954109) - execute systemctl reload as result of apachectl graceful
- mod_ssl: ignore SNI hints unless required by config
- mod_cache: forward-port CacheMaxExpire "hard" option
- mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
is not configured. - fix service file to not send SIGTERM after ExecStop (#906321, #912288) - protect MIMEMagicFile with IfModule (#893949) - really package mod_auth_form in mod_session (#915438) - update to 2.4.4
- fix duplicate ownership of mod_session config (#914901) - add mod_session subpackage, move mod_auth_form there (#894500) - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - add systemd service for htcacheclean - drop patch for r1344712 - filter mod_*.so auto-provides (thanks to rcollet)
- pull in syslog logging fix from upstream (r1344712) - rebuild to pick up new apr-util-ldap - rebuild - pull upstream patch r1392850 in addition to r1387633 - restore "ServerTokens Full-Release" support (#811714) - define PLATFORM in os.h using vendor string - use systemd script unconditionally (#850149) - use systemd scriptlets if available (#850149)
- don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists - use systemctl from apachectl (#842736) - fix some error log spam with graceful-stop (r1387633)
- minor mod_systemd tweaks - use IncludeOptional for conf.d/*.conf inclusion - adding mod_systemd to integrate with systemd better - mod_ssl: add check for proxy keypair match (upstream r1374214) - update to 2.4.3 (#849883)
- own the docroot (#848121) - add mod_proxy fixes from upstream (r1366693, r1365604) - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - drop explicit version requirement on initscripts - mod_ext_filter: fix error_log warnings - support "configtest" and "graceful" as initscripts "legacy actions" - avoid use of "core" GIF for a "core" directory (#168776)
- drop use of "syslog.target" in systemd unit file - use _unitdir for systemd unit file
- use /run in unit file, ssl.conf - mod_ssl: fix NPN patch merge - move tmpfiles.d fragment into /usr/lib per new guidelines
- package /run/httpd not /var/run/httpd
- set runtimedir to /run/httpd likewise - fix htdbm/htpasswd crash on crypt() failure (#818684) - pull fix for NPN patch from upstream (r1345599) - update suexec patch to use LOG_AUTHPRIV facility - really fix autoindex.conf (thanks to remi@) - fix autoindex.conf to allow symlink to poweredby.png - suexec: use upstream version of patch for capability bit support - suexec: use syslog rather than suexec.log, drop dac_override capability - mod_ssl: add TLS NPN support (r1332643, #809599) - add BR on APR >= 1.4.0 - use systemctl from logrotate (#221073) - pull from upstream:
* use TLS close_notify alert for dummy_connection (r1326980+)
* cleanup symbol exports (r1327036+) - rebuild - really fix restart - tweak default ssl.conf
- fix restart handling (#814645)
- use graceful restart by default - update to 2.4.2 - fix macros - add _httpd_moddir to macros - fix symlink for poweredby.png
- fix manual.conf - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
- move mod_ldap, mod_authnz_ldap to mod_ldap subpackage - clean docroot better
- ship proxy, ssl directories within /var/cache/httpd
- default config:
* unrestricted access to (only) /var/www
* remove (commented) Mutex, MaxRanges, ScriptSock
* split autoindex config to conf.d/autoindex.conf
- ship additional example configs in docdir - update to 2.4.1
- adopt upstream default httpd.conf (almost verbatim)
- split all LoadModules to conf.modules.d/*.conf
- include conf.d/*.conf at end of httpd.conf
- trim %changelog - fix build against PCRE 8.30 - update to 2.2.22 - Rebuild against PCRE 8.30 - fix #783629 - start httpd after named - complete conversion to systemd, drop init script (#770311)
- fix comments in /etc/sysconfig/httpd (#771024)
- enable PrivateTmp in service file (#781440)
- set LANG=C in /etc/sysconfig/httpd - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - fix #751591 - start httpd after remote-fs - allow change state of BalancerMember in mod_proxy_balancer web interface - Make mmn available as %{_httpd_mmn}.
- Add .svgz to AddEncoding x-gzip example in httpd.conf. - update to 2.2.21 - update to 2.2.20
- fix MPM stub man page generation - fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd - rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided
directory names - fix #716621 - suexec now works without setuid bit - fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve - update to 2.2.19
- enable dbd, authn_dbd in default config - fix path expansion in service files - add systemd service files (#684175, thanks to Jóhann B. Guðmundsson) - minor updates to httpd.conf
- drop old patches - rebuild - use arch-specific mmn - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
- add man page stubs for httpd.event, httpd.worker
- drop distcache support
- add STOP_TIMEOUT support to init script - update default SSLCipherSuite per upstream trunk - fix requires (#667397) - de-ghost /var/run/httpd - add tmpfiles.d configuration, ghost /var/run/httpd (#656600) - drop setuid bit, use capabilities for suexec binary - update to 2.2.17 - link everything using -z relro and -z now - update to 2.2.16 - default config tweaks:
* harden httpd.conf w.r.t. .htaccess restriction (#591293)
* load mod_substitute, mod_version by default
* drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
* add commented list of shipped-but-unloaded modules
* bump up worker defaults a little
* drop KeepAliveTimeout to 5 secs per upstream
- fix LSB compliance in init script (#522074)
- bundle NOTICE in -tools
- use init script in logrotate postrotate to pick up PIDFILE
- drop some old Obsoletes/Conflicts - update to 2.2.15 (#572404, #579311) mod_proxy_html 1:2.4.6-98.el7.centos.6 1:2.4.6-98.el7.centos.6 1:2.4.1-2 00-proxyhtml.conf mod_proxy_html.so mod_xml2enc.so /etc/httpd/conf.modules.d/ /usr/lib64/httpd/modules/ -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic cpio xz 2 x86_64-redhat-linux-gnu ? 7zXZ
! #,#SO]
b2u Q{LR|E# 2t_[!P
TN0Є݈hRO0lÒ`L Xo-y^^.57ӸԲ
|3A94`<0:HT$P\
~=h;Hm@)=iGe. 4z0fUG7
v[ҿ`z&*ϧɆppHaB֣~
C=bbcP *$h>@;W[$L٠J 6[4}> DBz-zgRH@t}>NQ=5rU:5?orQ 4|}I
!Ћ]ycÊ`viee=NJSߔuA ep}Ÿw
rL 6P`ti)+DNrR_q-#l5sJ , QVjG%ʬ,V(ތF f'6|)0D8UL!uOu슞(y$G pG40
BGUb!
C >#*qu5x=8Ɲ,]> 뤘lfʫ9p9벀,) 5pŁZ% aIjnkVi !g=;C0aȟDgZ-dAeB$=N\
GҮDH~誟 Dj5j1}l8} 6nHsW J7!}$ n\pِ~2!(LXeC:RͲRј0@^P=
bAgu!
FIH0>aaG`Wx2Gl?'R ˷q^?RPgW|I|8 m,n+ 6Т42Dt)ٴ,d\vљ+N^7\%K=zzvފA`zZ;-3}AUv̵^*-j6PZdBtRq$e
P}6Bx0y$ x'gxŚEL|p.>%Wkҩ-s佁WSrwӄ+.C |ay5Yܔ }{ ߆)#i3G +ҽàoUWWUdfIDpc ?~sEBYd 6?/ƈ;!FD GR) VqҾHUr+*D40Vv#歨 %-d#!<2vPfn2`ǸLh$mҭ E tz[#t >(ڢpra8
7kD%ǞUM}C5k#In iqɋڥU\ ʡ\]ӁŁL_<ԷPRnpNta seСx/G? IJ>z蘀%;ӯe't2nĀ;:U"Yxuj
EG3k0Q5P]e4"&^|9*0U~ݭW
*H(k5<*wH _<:6NUSne;N*hތ (:# tF G,g %aQkR O!hO" sh5PfprnĜҫ3 ö cm\{@ =S>*XqYdUd,=RxeURϝB4*qi͇*Q
雥#lשr/{ +~-hD*
^EpG cmA;X3QoEГ, iѕQE3FڨԝPkTS?'>n+B0l+ P8Ïro"%]!E/ Z]A0[* pp -40'3WoYCf $g4 ^2\r2F~u2 8Hv!PWUg@{ōø8-^d";Cd")LoM}}1Ym n[JWzEjw L&[s^ я7rezPr
:R Mg9rcmJ}nM+gI29 T+G+t33ZB4=>m oAI:P3E,EՔAPck]`|Uq2s%6v A>簮p~ 5P{ bBͲ *h{o S
u#jA&3RWJ* #دH0r5QȊ|&hl`ihi_pӨa#*/\'Ue'a"n,tXb+&9o%ORPC8KGa-Ig"n_ +PS)fo#4iHt1 O3+ǻh$CźTҏHAo$C &28#ۏs)ᜮNjwL6-&L4b]{ڙ .~AsZl[^nMk 0
!%:GdyCFE> 0<mwz+ *f|Jᮉ$ؼ9o[^~9< 'w(䚵>\.?hcrE5
ˈrХ%Ew<6^)ͫ i0#HsG d:mnvw`jMֶzEU8߆jb-ònҕ0ߖ%U. d@
kOiUF*]}{l>tpܒw'A`4(XZ& m.` sJ1vxp[2C:Oꎁ* c(+hk ȿb@PxNcɔ|SNt'8 d5DÛj~5% ʸFOq^%ACVTD,sy|xyoA(dCL 2KX7Q26(L,VJ`14 m;ӻt"S
M6 ,$³fW^Ww ڒdp]țK; fƛXѶf|7ӗB ;tQ /yg6+sK+rF6(3h7HےN^Ď OH=32)ஏ=.S@aWM-wqغ"R:|GHP]fvYk e8 [ؚ7 j 5NCBer3z c8?`8nrgS]W#|:m~|44PѨΜ PR,ƋX_lVX~
LR V4Mv Or n cE}o N2M5gJ/+Xhl6ܘ; N][[etM k?!Bb[oDFP+|(7G3> `sϰ˽#Z'NUe۔# t'svS*OJ_pe ,^ [+s9 ikT"C (yS +zf
b2c}=c!~# y2 [<+xf
a\z]K2jtņܨ3_Vu)%GUZ
/ )a* Ua_BpRZ '< j,<~|l0 fQ&ބP1
r w{dN
XjsHR8Xʓ{ R7{n" JW TXM?+azG`ϤK_j
P"t#]>h3g$*Wak l#n$kQԍK[VŕL q{3%AZs *䤝j\V%/o(dSTE@͓aMB@7%#U'sqؿ ,w7 QX%ϹeuE7+:Ẁ ?3;瓅£iY80AT5ɸ]= Q4m<_W 2|42h#w1{2 j˴$Д֮="V_Mҽ$? 'GxwpS[HS ]BFb?̧dDΒ<[`J$`nB
S_J0#7H'5Ь ^5KLGi=\TwY 7Z-u)\p3] FpgP䨮{k@zJOT/ǩUۍ6sG4<$n49x5 ^3SP76ZwI]8ttA5yn`_TOB^wXA$ =gO)UlW Y8wOav ]x :lh4NaZS&(N | /sL|tMd ثR {|!0UQC =EM
<0d#6~_6ܿ*T
je/ PS痰'D {9J7:l$@v]w6͐(du 2!d7"j`ѧO@bR{FO(n+ mmrCsnҤ6Y`|m8Иkk` KH|J}v17n4KXAqa=&4ɘt
!QfO2n p.IOi gk`@P
Nݗ9&5.uಟi[K'(
Y ]ʥ^ #9&z& IXѾ` ,s(ȕg7TWr8)ڽ Ĕ"Fv(wXcon~EILBKu(J d* }y%r*Q-4֣-a)@D1"' j몂M٩%$|\ "vˮ
Y$9<>ziY:k]e7"
roVJS{7{OdV6^ dZ"@ ? +ZKITSvPKjP%3+8A7RUu3VYSOr B ݐ-?Ap [dSd(.p21Ɔ
ᨐx.K%-
g i9NAV=ȽYy qizRg#j =d-4d#q=>ͮǫ?咿"`>cApv_\cȽ0o*D@
oG790BlWq]a_ 't) I-!@e'f9X?i' .E/=1R ǢF-i7dhF?#,j32;>}< e6#gp"i-:p5Gd?+Y1P8z pl$6ݼ.@Nm,/Q}YOG#pvV Ki*+*ǾJC
\ 8PSDۇIZun9dtuMZM-nsS CεIﻒʛARznӂ;SԿrg֣ Ր](e Q)PEU
v+EHUnv8NGKCm ) ځ莀(O}JqƬ~#m-Wq0?~e8x ~CK-C
Q0\I](gH"귄S
dq4.c'B.:1L\Q!\zoV_i f;rS@usGҴ}bѳo 1jCCj ©? /hHQBw&l> E#`HS3A{&pfₙj7g": k䀦_?qcؐ&(TPqIGaO5C)`ڒ|RX\X+i\q=n;F?N$KE53V֖V <-:A;,+xҀ.{"l|LSZ #eF\rJczpݧH//FMN4J13V?+{ }Ex qc6D@^yTwy!fSvU2* C.֑^!o=߇:z$`ee1gpPCئr'`r;3ގkу̀DC_T%H]_PL- j(&5OTε"eh!
!8E&\JO!jkrL)+?}+?ڛL0gr:dvkP8vk@Lb.`<$_}] 7ǩ rK6%R}g+ިp&sx@Ԧ]sǟl=ma7&p=]Ux
M)m}p'lʛT7Eӑ7~G|\_ "\ ّ`
l H\]6aZSa[¹RE Hr,0gDwá
j C4K,/J rw s y;D'[0Pl{ݫPk0} MzE |4#PGV|\R cH ܼ#.j|Npbl24b&!6j<<IVT~ՒtIAk?f_۔ hoW+J"s 2Ɗ=JrLT,f]T`eTQX Mh JwƜ:hB?r
Ul<f L} Y:I ] )_oȬia,JRBfqRg {bt]vԺm>]n" d z-MO
1KBOm/SI!\^$%5:A\_?\¥>Zz\עBxKQ*bo VݸLuN"#_ʎYEx @#r٪hhv[x3Q>+kb
:rH yQ絯7:i>w2ԙsr}Dv
p<:ސUUlQ&=PY\Ӫ~Z;?!h42JRqu1G_/4SVYj0X
k ɋ`t7Y
G| #یbGKTykTtC}ByVK-Skt9TJ *z~ⴡ keҊQ*H 'ia?➡Cp@{IvNgS:f_YOߋgFJ( ^@!)Y (e7`ʒjǚd(ɞ/#]MFZ ?SzfI( #g < # | dTH:oQbW\7!7-yV8Rn;6/4 B)>D n7VZD6/L ƜuR!Z i/baJ3h3$Yj8Sӓ9]sG뫏uAP6D.Z' ^ɚ}>{Y~8z zKfE}WF7C5}ew*ti#}"YPj.q(l{2Eˌ2Q$w~Ps {dPsZ) g+jXUQuc"3=,":YמF&RV3:iFW)I`W@¸<^-8)a_!3rZaGXM&k\ 3d2o(HE䁑$4RX 2@^$6(2uVh{+N ;7KWTW* N !Ȍ ܿWp֭lzu{ukaj/ecBb_`/t(74LcԀH__ Gqk~(f \ ,ѰbwV+)n*䟻ћxx_w&^ w>:q]dXI[Dr$.`wv^ sp6) l 9ՃYpML!&:YU1ϻ[brǂ %:QVP ;O
@wcϜtx镓¼oз ]te̹Jk
NO]xF
{ "_QcCAb\FRHp1mAS'xɻ[l ۴*pDci
8k*bzLQ/R*sչH ;[PP+Wjy}cYgQI~ KpXcBI3(i5$ +l2P2nD.SZғS7xZ.{mb,ڒk x2!%:/=u}JײF`HH oʿ>Ǯӹ۵T %.^
GҫEM`(}(HM lw%*w`n2eyL2$tz{Hof)淛H|R d]RQ5I; M?JJy>`ekgLH죩^U\~hYeH~,Pj{0ڛ?ȷXs$6SH UcEKԛ92`}jMPω@x[ w(WWRBgYM4N5Sq@v;8jyq(V '솸FDp;!L6fhe^dj)Ux-`9K^.zOlpwKAxF.ܓ .]4o݇XujړmM<&]2ﲼV#0ؒy
v"p}2+tu - q29y~ g@S^ZȂd^ʹ [y`dkpځ:.NOf| v$nX:ڿ]J ~$A&d;~ ]|+ftxzG WO02J%a)Q˾-M_6NMVDwh8
n xm[U٣(v2uٮb1kqb!hfMm>` ζ Al``AQDn4bolveˬ9S#SKY "up'&d:0<8q_#C=^=ubHqV49+7AE*-TmԢ}V=rc!f ,uwv E %VR oђr'l^ .^(KCu
KKVCgZ mNٌ]P#4nRWE?*3[0<=2ψ^`3h~깇 y~Aj߀'ˍ%#bq)xt }7Q*8z_
ZpN0} }k\,Ҷ@ǥtN@K#I |i
Akw)t&>3W7:&d.um;zæ8'v 7劔iq_<6\
xESq!YJa3
Q}զ+8R? %^zp6e ()Y/kz
\6/ srn7ΧIyp=FB bk)5皁aLPfO7v:ڂ
P\XđR B+uUyr8BO@ Sry}͛SN;5gA4` ,@I1)Ihr S7ªZg,iE*C LMSͲ7 >W ]TaGaf+ڎ0yKA3L|{pGb.:gUQ86V4+ Aj9$v (=? CWmt
1X w MF3ऑe P 1 +V◆V7d0r.Z_UY0\I.΅a-%BV'}Njd zF>p4; E됣/*[.5OsӾO7mvC#fۥ erl&~FW-_y[zK|94jP^4i .,pJ 10U'mlYHKb҂y*rl>*Bx2s>x ~a9Hޚ֣8s*) ѿ52 ,`9
^ތKFJ,~ @O<6}Ȏ s >ǟsI f}H0lO@zbbl>ݭfOsMHS8˵MV0sF3FjK
zcdзĶ~bXu:εTe~eƗ(j_=M&c7v{;w X eGtY1XK8] yxxg MyV$=YsMb- pC?ńr~i娺ݽ$|%WiOW@ Evx!@0ԯ/T.EA+6[Iat 6']]j4guxR c003t^?=;23c.. &);H1O/͑?.9ř%ضy*/oD5I.7?Q}>#Yq X3Ӛo;c_Ir!dI{YjH?W50'raW dR/ yq}җ1l-IAJ+}F-
xQq>Q\3vm. ,f^9 $j= (~;jU:l1h&&ˬ+Z2!@FJ-KZL4]F4Gy\
Ҩo Y46sLP+vB k 2N?<}HGz~ k9hcd4,/H\ yMV9A/`*ye
¹
~ jU?~E|(Fv)Y \L6.-EQ(Wf>3URadW d9D?Nm̀%BOOyѰz%yACĔ#RuW,G?Jn ޓ jĦ'l N+vMm0kVQFA~bRL# fc30BX(o4{܀Nǵ
?[$?3
EkB !Xɲ#s̜6RI*ŵ}ex$
DX_]$+d+pϒxs FKkm dWk'530 UjoG79z.7ρT2Mb dl8p0 UCYS~P۹
'2xJ"7KIw`3
&wؑU<ET% 4vz!2V4imͿ t/IU(\$Q<3Q T/5noͳ ..RLK9hStg*7|\SX%= NsuyO z P& 'PuQt OE81b}bҦ, Y]-{ G-XVj^6֨!w]Ed+%x^@,FB tF[5R &HJ%CxQ$IּqBLrLф$ KhzPɦVH. kaaazݛzgl|Nl`6 :Y\7^eW7Fi{MmD~4UuZ*nT/! M:!W 6]"fMKk)ɜ
@0tp+ bp'' Ab|xw'y7ndM喝eKBqX7"%]:
<[nc{m U!䡊_4a SLs甴'X~>Ţ-93>~s{*],%
ohVpp BkXz~`}3~+5s=fᢃ0ʥntΓC${JKso0
dZg?8R 9Ȟ} 'n;72PrKg$L=F\Tro2َGq)
u-0Z h$i} 5'2FBV.Kzٌ*vV.DMev揜
{Mfv9`8B(-W 9G*1bV] `XGer (Ț1xY|D,.KFkWձiڳkUnPSVuCXΦ{Yq4wR$ $b78J{y K.̌ì Y$/a bxѬg j*,mxTŶ !IdqǑ,I/EIv{=$+jé9s\9-\
SU1vƫYer> xk vq:t%J: n2>ȥ?9 Jy}~\l: E/a4 $2,ͼ]ЛZt.GH;t&m{^[2hHyqLJ ]k4CJNUnr[}2K3D2\( RnxIW }ћY$tk_s˲7p|b BtևM@P=B$eD*VA`L53oVL̘KȑZ
66˩+hŜrg 2/ niwX!Dގ1a?> ڮfCgL G (wY(sɅo_1f~JWU/K `Ou[x0,
tyg"!0\ ԄMJ
hn~8>m &
UU 6Hs}uGKdsDm8蹡B*LL 7eA+zڲL)b>ZK ?h"pia5
Re_ ΡYs!Ȫu_Pu"@9hM5˱ ' Q *77}s"2ױ]sOaic?G
Yތ~5䊤OEe Y4Ѭ0[e`X^rξ و|\rcL$heKE{'. ,\ [2h4g!a{>F c*@|t!w,|##A ÖN1PLq?/[oM |Ɲ䕺 NWk_ӈ\0 [Z#w0`¿ 0nɳs8T ,J5 E<ŅZ}B3ςnLhM 762.l Z#☴]tjh=HI)
͡44;vJU{6z`JzײڂfP =YOw0@ᒨ3C2+D[`[,3Zƣl!o,dBɗg N |*$ n$n !إGꂩǪaB'lrH~y/ **R ؤecYG.+Bi)үjc "@h=}z^㎱N[VfbKy6-pBz/I`['㯰j]0.[e
DM`7/#FgGOڛC dE+bl )|L98yx4=k&JI%5K; &V?.^;!VA {Z밀
'UKUVzn~}`@,|0d{FδRK"ˎ^ ]CXgHq7EީLYp0K.Q9$+H}]7:v/z
Lt|&RFG6c6۹]7aңr.H8j-v<]X___U
! uWr-"ІO?NP2c:δyol HE82pVWYzcT3dSijXK=-^docUSkR;I?iw- V 4T;mkFQpUtus a躯m|gVMˤ!l>^3%P} 7 DY *Dz7|{
VEcWRFM
V,[> w W-K}P
_v î
]("lnH*CrT& 7Ja
wYl+*ÀͶy/mSL 3 i{|9/#6M ms=|pZ>\2f2|eu ۨ~8 ʶD-
\F ~!&9d̦$4,$oٚ6F!H@lKύJ`x&4Ely`70ڤm;>b?"hY59ԗ/ GP6XqS8
pp:Q QQIS@łVhT Y
WK:#4k/9/ƵlT I2OwNe |AR1\~#]ۈTN+=,:bRWψސPºw+kp 4as4~.ûq#6 ~)E9gV"`L0"MML+--ޑΠ8 ZD\aA"i`nI-Sw4~~~ZC$fup3[6r` ܹ:Zx8YN R_ Hr^c% c2Og+
b D~sK$mpI_EݧȌ?~
x#s5*"q H&6 GChJ'QqEtଫ|cj `#_Dj>> _!릸ټ7Pw iKhYe۱ӮzbkUY,JAZ q; 84j%6C p\O+ht^x+ms{ 8`˭W#h g#H@"& q U ' X\@9a{4mKfolDՈRG/liUjf%.R 10[W;ó1gDl> Wh(u>ߗqߐ˽ %L)X?bFTDlq輐ޫ}6Na@ vS,r-ʼn?I<*<]@}!s315 eA; sn{B*5:Ȯn!_pCjdo@ƨD ?K aE 1SP$ De1|Sb`_ p a
7^aM Q:{ӎ3"ݤ|/={ OY 8ʀ PZ;Vb$u*{muqJ} lt {FYYy3 \G0L 7C1s ,ɁE<ܙ+:XWm,en\/= P7,Ne (Oo>du `