mod_session-2.4.6-99.el7.centos.1>t  DH`pdv-$ƨu"=ZwIrY۟d 8ѕ[ D:@AE 8,KwAqqZYZe[h4=N~4PiZJ>XK\A+k.Ɵo9Q0(J:{YF~XN3nF+5{juY~n&[dhqg*{s:4nvacQ.=xzЯT5} 2M'=t?ϓ ,)}U={?F=5z"V?qaF'@$hhQn*"頾M 39?injHF2v&Gg$;qip1A hAyԤ{W8XYSpI.ӍqeX [1,5|at +$!ˍLj! H$XaJlWs['=3? l@BYVtY:U=:u(@8-FNZ/$zn rr/]%81d1b56abd8dc809b1ca842049ba1cdc81dc3db6dv-$ƨ\c2%CK4JQHC+G83[a;g0Snm#,Hk:xp?2tW)eɁ*wHg棾7j1P ghkBNLzaf&rbݒD$ԮMZ_m%j:o>!>~W"])L!VNƓ~|:[VW+B3rL:J>K/>@*qh7 B@&Li 4f yadB@cxP%9 G~b|ܦ oSȲj#Q4NgDݎ Zl="ePtME_/沗Xrno/"S W0)pDHl5?D2^I^1j?P$m=s*&.m0w{[_ y2k=Rf͇4#؇*>Bȡ>2{?{d $ Q +F_el    : @Xv(Z(89:*GyHyIyXyYy\z$]z<^zbzd{we{|f{l{{Cmod_session2.4.699.el7.centos.1Session interface for the Apache HTTP ServerThe mod_session module and associated backends provide an abstract interface for storing and accessing per-user session data.dvx86-01.bsys.centos.orgCentOSASL 2.0CentOS BuildSystem System Environment/Daemonshttp://httpd.apache.org/linuxx86_64m\x+\Ldudvdvdvdvdv51df0ceeb7dae9922817f4af0554f83fe01d6268025ee08260aeed69be3953d18ce123eaf585da1ab728816281ab601f167a56289fb234ceeee2b42ec6bf6ef6e74bb7895ec509b686ccbcb3642a05df2a6344dda15824f1399d0a367d3511700345fdd1b535fd763c7801455b63a5b59e9beddc87bf27ce37e6ebe8dfe27bf8b21064c8ca90e0c5f739a9a40220e3434ee8785e7566b046c89fc26ea1cf44c3c27fb84a515e6c14ec5c8bf8428e9bb91dec333ff3de142a1c76e758005585b1rootrootrootrootrootrootrootrootrootrootrootroothttpd-2.4.6-99.el7.centos.1.src.rpmmod_sessionmod_session(x86-64)   @@@@@@@ httpdhttpd-mmnapr-util-opensslrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpthread.so.0()(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)0:2.4.6-99.el7.centos.120120211x86644.6.0-14.0-13.0.4-15.2-14.11.3dJcd@c@b9@aaav@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Luboš Uhliarik - 2.4.6-99.1Luboš Uhliarik - 2.4.6-97.7Luboš Uhliarik - 2.4.6-97.6Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)2.4.6-99.el7.centos.12.4.6-99.el7.centos.101-session.confmod_auth_form.somod_session.somod_session_cookie.somod_session_crypto.somod_session_dbd.so/etc/httpd/conf.modules.d//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu?7zXZ !#,ᢧ}M] b2u Q{LVٴ@Bjix bvh=;j3#'9oPKB.n5)ݨ(dsE V4']:$ עBC{dW`FpC:$HPjKO)h Dd|jW\TXCC!ڑ9Jo7yyO; 5|:Ip E6̟$r,/wl=TEt=5+2ܼLù˾6Z0Hm{;~B=.7*!$$}*CaE\mYZ9Gzϣ$ޕxxwgP%zLYkoQ+ +d=-'O%XSχd g+8-¤^Kj*_a3drsɆ?a@uFa~ݹy#]\/k9& <+־c\ևoeVZ*<h5/1ְ5ߍ0?bk:/֯Z}ր]ovN_c^.5]UIBׇdް%0.ANW6(“䥲FJ\R䰙|e$ё~ײ~8^)vnFAuT( %و9VUھ.p1 ;HcxKqSGUyf4bP(j)_d`$ذ?6!V2,3Md"Lѫf s@MfѦ=wz4 wHNsiwAVn-؆tZ/Pb'0%Ĉ s՜ɺ M_9(}L*cs:qy 6=ݧ$'8lygc ^<6R]=D[M4?ε_ۓmF}z9yEȄ|5i5t5EG?Ԙ>nF{,LH2N:f>TY?4z1ڦҩc\\KqWlUǙrk1)JL1փJB1„H_d8\fX,wukB$Z"oHv\ +mvmuJ2Nhv|2muynFho-p6%4Wܒ$NV&h>k+Cyϟ6d/}{[e f#2h);EעV{w,ca5Ӡ zbbAVW~ՒY~`:L y*>3]+6eȮO#3 IӖ2aȉnmƅ(:F•mjWf=ĞFgԗi< \ uc@cq\@߾}ΑWtoØB>@#(h75vis&v/,S?J=OyÂGM *i ίp|o\WԫQp X&ӯGA "g .N>/ʶk# OfJy-RFhFfQt;nՒKI|ѱK)n*\R\ҏOHh*5{8K~rB5}<(].r ` #}s䣮y ޾ ,jmV{?I*['|&NoKkD)+ f^n'J*Q?O>"te|3KjhESL9z_fgB9ƻ5U|a #)V"@P&jB׾@*o@f@C\Hץr؆ ;3Qæ96(Z#wH1p,Ύ'ㄿ Һ:6K -(/˧QHzNuY/D# wdO9:i{ywC[sx`#)M֒҄]b-S( R 9ΟN RG]rmUw<4’ +C;ioޜYYϙԻbjXoC cw79v_88fg#d9OA~44E^^ө|FMfDo3ه˯T\bvXn|Ĉb#_3RJ$bHT*.?YsMM4 i݋s? D0bW:F&7c)>y"#:"f]<$Q@?y8 r\#ӓ+ |[¶xeƋ}[:}RMJN=BsN]UterMqVȴr$G DQ4$]l|q6퉉 h ^F86+y$ qzn.MwS7bzrEk˾*WX?x^F9{OwV<}ug-,NWuU0$X6U8b^iBO]DnEdQ&Ʒ:vdDi&$ TwKˡIL{ɻs˦ԭ&l?@Zm3sp%rp7dbkuVp<)& Ws2щ(&>\_K{X(G#mSTؾ R8ˈ}d0~W~.K`~le5.,IYRkn^Ay'v2gZ5{k01 m7rn>=2D f`WKW#3탹gxPؗ%Ψ7O] w_]<33&+6aa8h"GD+fZ-hB_) "Q4˪d?u-x' yD _)&/yK^V"g>UE6Aq% gشm+ W+Z= ^˷:owU ;v.x _ׂ͝&yI 'CI/>um;' f Ҋ*Fr6a2X3Np]joc@^*O>yN|me[*!/-%&$4SʼnI$? w 4Lw/5gETl-0j> L:ӔOiḖ:ŤY}#e|^T D/CS`SRN[h;cM4W6v*ʅ7ێ`:WInvzN=̑&ѪZO/I`_{}[7 r(& y?ӵ 6^hDfKւaʋ+.55+1V\9c;V}1-tq 6s!xT<өߜʦ.m5jz1ZKnc) בb}38ű5 4oRY_Z0+ٖƎ2]w67@<{$H,KE-_J0WnŴ8=c;V*2| 9!Tέp뗞8V"pп+"s1gɯEVeoKߵU bg7¨ hӨYYlT"r7zԞY 4J/5)$y|R>ݖU x@[82<6@zd8l嬽#DasC/5z7&̠o}!d>MyY ?_P.1_N.# 3Wx@($ NӤ|`Zt O >>SΘ40sie Q╪KٽцeAɬ-4O-@8cl[8 M^E&F(PP~)]HTw֓IR2$X ^J^Y<ȼw\#ꉲ||π^BHimd +#x~z5Q$< :\; [ /rz3A8QdV9BKk HJ_u юs&lq6( QjT!'S8Fdbym\2W# 3NSzr%ٗl-*c&e;U5cR+gnB24VXۋ7ɦ;LO~{Ƀ_orBy~L?QX;֓Atmh1TWy{5 4(D#[>ȫo0=vhLe(셓ZBbN8O`N# [akH"j(&}U;8 EΛ=o.B}m}'tGS5(;׫DHzy!:^^$㌣R X7oO<W]g6 ||r73Ɏjd8vR2V@%g8׷4/jϲ1oEyN kD= ('%u.Q( "h=qwJ@ToR arlo|1aG1\V~;RU }d83x rpR7& p9h/Dh!f7`Uԯ8=!nݮb 1fJtk lRb|4Jp3-yzl`-Xa*i ޲ mV =] 0BSM$C9DDĻTL "1qk bD+ " Li=Nإ->ez|)Jޱ0y)KiZQF 9" K՗\,%0HBG޼~|>$}ς]uyoV+RФ(5eR7k +qvO VQQ! nA{Ե7G6.rtΊ",m1\x # l[/Bؙ&RD2C$6a,T3=u_:?6 Y&N<8 yQh@24I;7$~B)< ^)}e:w62) Tj'oW#[\$m1]s M{B[4)ƒZeP pȧ`:?h*U&2hE]u$kp?ZM5L8V`2p"%^kKj 2 S2FF FCLHʜg԰.CndxgQR"g6Y)<yYq'8XJشs%XA>rݕR hb1A5Tȁ]4YD78C_mIIi W)x2hwR?E]{!Ƀ,+CU{ [Ou> tIvg]`o ʧd)˭Qbcp4A|uz!]ws5rX++E/bzQ/Yx!q_+~BPB6@ g=NJlENC8Sk@28"Bډ@@+M^ Ŏ˧”,J,lԇo_29t3ڤRcoՋbvGL(dcLz&y@ʬUK9 ~Lrzӝ0R3qz!]G: ĿiPy+H4 K1qw`)Ј߀!ґڼ;xŠf*k*و!LgW*_L( ˘ edbD/NF; N$]Oȱlpa{$wnKW<-,(MroFfH:0oV}i4ۜ518'v3  QSQq {;_Vv䑃)٫5r^CQ}2iڜ=pK0z8W?# tR(W[P~pU.|Эb1(ѭԽ@y찆5̈(Y$AEXwUXHm\lI'h4oMci);.Ma;2,-g`.9e]BkZO:5I^t̀Nb Hp̨3r"6j*S@_|ت_./\O"8z ӐFHsz* " d^ZYQ<~]h1m mc!m}} >n.86X5?RTd Uߊ q䢥l;@{N]P( XL}3fhɮ>ȷB2$,/,p cxƭΑpJKgN|TLa@πv26s#sZNK`pQa0DCTkfI*Dx|5l*gLz\,IZNUoQNOȤˠwtT#?X1_~{{< a,)y^#?|iNf8> Ny0ȪDfs11T98"7w;R8_ɑɟF;s+9-?UfHjK&LI.I'ݛ'*1o]58/aWxș|7v ҉͐, D6KW1P g XVYISut1zENȁ%aM4Yj3! D*7)8z =t fHHL =܍ե0UqI\c\ɉbXx$64,-OwJ.g`#j9r,%RV~DfW?; "}-$fg X2~@yX ]Y#xp#`}|H7[3x}c-b޶_V76[^Hrt!?2}z28 &Ga׉^j.}ddIB/E%;}5ySvfױMl#˔uғ6zm֭hJG4..O͑ͺI 7t0Kz$LU "cSǂq2Mto:P&n4: \"v!|x&EI>҇""xs7&+sK{o?MtjO>c[+Ln9-x9D1V#$J_Ta`rN-.=mĔx6.Fc ip~Q2j\x%3͒s2<'{!ray$Eq@mto"X^ E|]AYZTWJ@3[)ls(cÁ1 B6#`%0;]kc [@)^Edã :dď"APz4L}Ǿ}X@ _6TW y'sLq"hƫrbR)롐I?R{槒"lF{Uօa<iJڷGo·4)ND (?',@ Wd6X\8 @c)0K:: )m^cI`/V%y#|){7&}F@m:#=ݨx,tX.&ݾickAcLuԢR49"vucg{E@$w!= wvDNp!hn߃iadjxecQG9ÌZڽpEb}|ϐ1:+0d l!M8X進/ &Dl7yPQCMTLer` ߃ZlÂKlSO]d 1ʤ^t_bt=ta!B-;yGvE@O.BYf8AKf鴡Sڙ*=yG&!D½ ŝl"EQBHEE~2*<P3[!eb aˮSSCR %0aӣ~t?|d$3. 9At ՇbV A(R޸yEoEwV;*eUf0rV8ex#`բ4bM]M:łVm]{>xW<`["Մm8x_txzC7+>{a-|y65*v۫'Hj"wnp~[_Fqh%{>p!:5=׺"2S4=A3"wɇ5Y[ Zj}5Qzڭ yb qh~/>!T0]Q*^\/F~n[H<U-f,IQGJ~`QxTnʛa{݌Bۖׄɺ|_s`[|h#p)Xj-}gdk|K2,+@W>6fU6%b+KKoBk.¾貯g:ч^fpK~r@ 9ǵckvvf Ӻ@H+!g;}wn\ X'æM3!vaUHExGOr 8ȚG!r3RIRe%!#/n 7dSjҡ;2,HK œrn>zlȊdg<ZfQægLB .Cv=mI/q}L8JI=Z}+ I*MI>6);BD0cL 8p`[Ȗ^ xJ74撼.`Pv܍u@=xBq\c:a;RI$%Dbֲ6µV19[/Azmlh;x P|W13jR:%YtIzl ,pe޶!7ypAohwZs|HVLim;6@9Cgc#3ߪײFmbdU1{1"~ͶPDa^4rK].ĹȵSikpb ܴwR~u'z]i:Rn^{Ҝ= (>JPixz<zt&mﮪ{@f.sw~w W}c2V7^dunŷlo>t\D>`e0rF%Dj̄2WI_Ju $}+D1eJA[Z( u-_VD(^4.8[&tbvjKH21ߓʯ*ҏ s+*$$-@K iycB=Aaк |gt!LK\ՅbmP) WѪ J==A( GGS:a@}+c-O\n8CM%X(VwHLl]=qwpyN/1*?rEhu%Z\4|ea/-:wO݋"=nK$bSiY1g0{$X!="y9G|d^ƲPKD>92Rp( C([%sPu+B;:מ#29geߧFPè[9bȤ!Rfn|qa2OQKELN McG{$y1r#?Cc'*^%=w`8D599>ou"܌] m\1dXL Y+kMw(h=vy/>O|Ey<_` znȈB/5/?[4u&5J.hzf8;>+ 3ݯ}Teǒ Gu$MŘOQԌ2!#/8Qp8efALk蹑@*?y_)mC>Hٻ+l0<>V\@9/} yֈ )մ~N!N>.(e# LJ)[oT n( UJ[^ 9 *h4Zx4㏿@"Zs06U[G"eK/;Ζ2,l8 9_Յ xU+ M'Ԃ+}Ms $yj¦y$Eo("{-r …[<9U@-,KK!8JVKRwA8_Q<)Lp,<&4KAr_:d'm RdZdõ؅[}b4Fa*Dh]Cʅ?BӪo#N%[ l(##:\qtL¡{< J}⍚}Z=BMA<~50n ]-RNpƋcN+3˫e <孼޼6Ҋ ŚACr-K ftCh,f((j1 .a[Ǡy*a"Lj@_O HMşE;LT@[eQܒj]ǦqNago#5ZU㷥BYj'3=Ϥ0==l`$pXŦ7fz]ʛLKseq/, .-}t3&MPiN T۰'{ d{B4b&W=Ŷ&֏9BJ|(FzEWB2ls#t'$͙ /T<4r4q^m3S"_p^{Ct;$&$>3Ju6F@qQPĆ]aPmwNIDI[+1 "e ~ݦ)c"`#_E8G\!lxIo߈G@0sy6yFv"2l>5\~> r?s5P7uq1bs/Jn_O|.`"2K׽4lω_]e]j?תH3[JjZ3~b͚ﾒ]r(H^LIfITH_n^%}푛)Z8f`Ds1׸ďgJ*)&w7u?{k8:=%3h U| iMج*ØB67גÁM_t \)Έ5qo!!b3QR M8 Y"^7&lsrN @~"4D^2ɇM+/Tr^4 Ko`0I x h^@tm==kQ)}XQ{;,E inM3,$I$ àYł4-32Rc8T|eQ&=ґtz{~1Nji+#s 'B+Љ()x'zFrzrle.c,*`~UT%\5Xn-ьR 3_aןBl"]@OAҘȚM,,>p#04!կnK ]šH9K_ o;@714!E~ d32+z!/Sx(\d):Uw~q;<Kڮda$ .d\4ܵEo o}?`±=b~zj0>W/K$3;ҽ&n9zT^ fJy #Kћ9iPHCʞTqDӌn7}n)ʤdZTUd` >:NO}$iw?za|)yj.۪ :ݮ=bV Lk_#n4w`0g^ǪI#jumָ,&챘D 缜'NLM§cfu Ǵ7If`B$>pO'K= (oֈJ"LKO6 +,N;.kH]6+NcߒJE6箬֢V3VњkCjo4gB}PGfa:Nu:;? Eߩ.Lm=hͶәr]N<9%'In)w{X &,.(rA2:z^m" OL(7}H7 __SEΪִ{Ztm{|AQO7XCW  X̧ Jh 1:5 e̝4ƜY]?7ek{6ʚUbsPȩvז0sѥHv*z`9hՔEACƾUho4g (_#[&-H7_6܀ד^4Óϧ鬬^>sʥq8"[ ydoz%rf5+NfP .^b;VDF Cg~9!Th@g|%"||͆ɭ`BA/W]C89YL@ !lC,fSae;'t/j&")4Na0DW 뗔3- M5}2?l_ CKnX"wLGWCV1mBvF8gs3dYV8$R.'G |}sV~լ\E}P|m% Hg9Z([CB\Ry/iߩil3QqF蓚[( [r9O+A?YJI2+gM]fDӢRPq9&x ޱ[:eEO;zWz 7StRn; | nύh. k:qNs=/OTݫ"Ty q3-a8Q8@3FcZ/J^3ʀ-M=U',;h$ 2'$z+ͬ25+H.Z)/#p V=ZmɺБy=PDk.Brk+~7)e\H-&?Bjs1ž9jK+Ud#ȮEnj Ѭ=ZZ]8pLW:|37ХӛGLWCt%B )Day1fSJAyocl%'ַ?8R@G}Ȏ萵ÆXw߹0+(P4 VT**x Gmh1io`-|Ѐ&%j6>ד|BTAw@UEQ]ᓛI{R2[(:p(0sx*|=E[ i)-Eժ,yIӘSY#KnHȃto8d/TiupD/Mȫ[-I ]2op8"|zF},vqk:YkzWBqWpWLYNã?K℮Uؤ6!:,:a}yݹ-ߋ;~~fcu7m]>Crz+hH|%+g+٤2(g'n#h2U؝CTLԛp=dI?q-h*YMw.$%1;' L,U[Vmʝ 8?a;dz0[~ (m6~exv\GLT j\lGYܪ Mg"59,/lYS+蒊+d,2N Pu?I8ɗMxpWMŧG2# ֝BvKZ +XSW䉟 e:K'Ǡ/R]96+w%O\7 @F/y@<&2k{'].c C& b>ku?TL%e(ϥB;>|jf0BV>H#O;qρBDxF,>'O?kNf,M-F?û3l|O+y`ك O)$eO4X^MO (8|~ y,\yBל^k?dW졗mg ,GBvg`Cml,վui&"x5UjUF NLeAw1Z" 4J8Pk&|<|O۝?؜eC:YSŦ3IPUq Yꕛoɂ[A l BC~7qr짘3X~U42h[s #GlJFV_/ ;xZ菭@ױmz&—=]umUY%#lbf |5y3*xm[yԐ%3NeA8xSdbI GCAݟg$-vZs݋Hj6E. D@?Rʣ7ɢBV f@25A##<ܑ$d쟨(ۘXzSZ W 볰za<GNj<PuUdEb'驘kbܶ~ Vk*ON!lG[׮(bzH9 Ϳ;woA%nV.L$LeW-ف&~8!j{ykP-S(#"h>ܵhsb0b/u/2}qBu2yʯӐ=Fy6:WGO=Ȓ{&U#r&ڋ]n_7RLVLƘot0f`m6_KBYcsTtm:;1Db{P|m\fSCZs~.î6Pҽ/mbֈ~[eRjl 13 hEYB{rY1|aڝ$9yZ}Q ;$Oْשk(-?4D]qjOu߲5[5Ȫ@= +eBK1Ur~PGX=| @Qg2ч%b^ \ʷwdJWMU }'~)7!M$#wBeXѡVP׮:?Dj"hL:%L2򠼑DuP(Va#H;X8%65KEuT9;iяhfVwװ_E=Y$%g]n@q8.H`w?Ո*'|C,2"L{r"oG 9Jx= H')-.mREoYM&9/MsFmHcTxԺUpn%@dK-Rpd0}=}<;`}3#SL -+իz"I> !ZBK6:DB-;n`;次]u@f9k_ |Egv a0>x$GFVg28ʐt?t I5J9WaZp%[; T.>eBHZ K*{eח35#szkՙdLeDJvY$]VOJ13UԮJ9 ݠ)`<4v4H((x'Egrt%V(pk7 7 H'YpsVn u"=,}'5Q#mɘ+j@3*5wWh(𾋗FBrJ+ Xm*vUCU/[燿#&)&enCkNQX,0Agj2wۼjċ4dGqvI;ë 61@z`0\= _)ت(PHR/ʟI,u`@&wwћhW)UUl0-;X@Xh_R37l$_QBbkp aPC*&D6(8`;Á9\:}k=`"lxV RU,nF?Rx"XL<]BCޔgMsI-)rMʆFCٓ# d砏<_{Ẁ!81;<)gEHτ7g?萧 o Բr7dT砭nle?FS{iW=~F7eY.~ EǴFҪcnÚ_G;%tc3c/Pj6=e£3:aNEm8!b+\GqZ8@mL $5O ~ {0"VDZhHOOciR˭=S]lmEHtw7P'өe-X*C \dl9mWWh` 'k,A#~I1MHNW#%$zVtN1UQ@<=I:Pdn֍P"@-<:k6b=B??;iF"J䔓 [B_*I{DzО9wlQ^ʼnM2´v̓7Bku*rUF+luU$Pud5؅kձj~8$3(*q혗).!vthſm*Ew n6ċ.bbRL$MlP~JjjT2sPH?֑h5DV1)J6?efUA.2Y "@PŚZ[/ J5ړE#d{(QTD TgHG=Ql1i+D.m{ZdZ u M2U:9x[~&6{\0\|>bq V(*RQ)}X҉DbhQaעB(##@+J恷c`"voR;–⁗?-ǵ00݅gugB8eHvHYe e0/@==59*a%V-7uڃd4By7gn`/9Ep$GyAжe$Scdk=4a{K4cCK$V d68E.-n?Eé&u]* ->S~ 6x&`XH6k) @ėsԚ*S=RSexfHl&*{;^_h]2p-jUoN$o)W™cYQx={t~c]9K[|f1o9idnk@&qQm-۔2L~]= O,lQ}vV&̳)11êj㷽Qۯ=3jD,Z ̞f0G+2d\mwq ݵj]GI/AR9qY2ZX,l{n6%X^f a\;Η `;+'(c{} 28BN|V{t_WQ8%XEkv%yRZQa@TMe#J8& S(lIf-ҿB$ s @q-G 6$+ b!n3*.IAq lg6;<ʚu_E 0o+|7b&?g;`9|~lwjn{ ](гd$'Lz˴7j? ffoi85wLB`d*J5yvaJq(om{KIiے&LS:|6:Ar9>Or©XEtOQ7t3#/K+n&sĊx+G'98KNUh4l|wf@#C "7}'7$3eGgvm1nl)4LGDgr_kHI&l kϩ*[YrV'B*>ՄW$P8@ );fcW#RϺXd_)aX@:p/ɭ p!3OA0#P'%"@#Te.pm =z,gqwxFbq-ƹvzXY0E Ƥ{Iݍ^}}Q3!2bR:,9At,h6$10HDB`5+|w}b;a9X(W@'S3.ڇ9Չ cnlકgO؞?O5&n%U9!l(&,;7Rl)jV1#Y%*GA}K̗<25ǵBc]=a>{[xm1pQݟ&% U7&6 H)5R7HTAT@?|p!+y2hgh#MCY^ܠɗa:i_Jic'c%l?9h%.R/cz漭~:Iu9ȡǠFd|>ik< W*AhY4`!) $zw}$X^)(-sGPIdpTT (/0xY\w8 RLQ齲ǝF L|G?a]Z ʚXrhi? l Bn_oۑwPJI\ڃqlٽ{a 所V֐3&!<)[c 9z*}Q( 8+֭A|gf41`f`eo^8;YH jlQ:ɖh`130Q MWw > ~ahŜqb p.y\+ I]`ahż~@7B%{"%F\%6 -`KGee bң簯 d7#Ԙ([@Zɬ}cIAjj6y([,ՠ.~9_Fqo;ƏkeBAA؜,Ls  t=W"ő O쫋5AZL">B*&X~^h"HJ*BM)~J>΢/.6H7~pֻ VSU|3T!pIC5y:Km\0%>u@:3b[SAfP zVM= -EeI5ks%KZl$,:)@*`+Z]PNR|z 梶m.4]M OHc}V"5ʙGlk$ʰ+f[u7"R]s҉OWK׋?W)%NtV^uV݁U"ݫ﹨ F +B m!{]`NSgĈOEFNtXnfqQDqMs ;11 ($"}v:nZ*F^&N$B">묍w<2pQFTꦆTͯMREnA$[a-’YvMxDq4`'pRAAڍE;.yk Q7C;V .śʩwsiuno 2៵gvf *tE?ZIҶ|BSjt<ԓ\)n*@q[o̩ 1@rF?IJgy^NS}^C)zRO4p#tfC-6 `(f;09 Ō^=Ne@3vZ$?0:"5* Ϝr\ZMb@I6Jۥp:LƲK8{*R fL'_(N^Fop5ٰ%rO{D&_&$]ٍMFEEo Ht (ʆR ^}if,'j򄦏GU JޏdsW +q٘,,Akn#T&Vclv賽 A󌅧!!/FtZ] Am2ɡcmOT"VrAAƥo3=0a=%YM4E]{~p;ˤUJ-^g63DC"5hlnbP<1Э9nuXahnZixfD,kyT Lܺ8wF:~kYg+yW]Z&î^GxTp3nC0ɤ,Q[~_=oKrI@ƀ77{t).3pדIoa>=@CxJ)O\ nhn;&8g3a#|KG9i̡&P ym0f[qsީ\WyJoLBԹ d[55+07r"/ U~amQ'.("0 h3$ˏw]AÄWj,kZn!nJxXb+N#B^0ĮeuރwSy#kx‰ΪWKӗr}& OIȪ4B?4Ɍ_D |V+,>w*r8mewrT/99wQ*|oADd`HD:@Tq_YYѿV2u-zga_x, I8b,ㆺEў Ơ޿s] $qD;7Jjw hai(AJ>V<FStG^z c(?ʋo9-?|^y.+3Ņ#Bh`\Ra_'Y,* dNHT }z`jze)F İ9DFv3nJ@IڥmO c8Me6 ?|Kk;$ƵVS0MIsZ0N/A?qُ 5bD!ϙR7YkxJn!I;$/W+Pa ~2P:Pz 3Bjw}ee:@59!VhU'f%sj_3'j؆Xб[ԉͭ7*:jme[`'|.QD!y@|E k˄ݤ)Z6JST1:@0{7B+Eɋ]9ʦ/^~ݚٙ&]1uĕCB|&:`HzmgM=$օgƊ /My%Nrˬg`#\У#fj6W-qXFXnIP9`I2sؐ4\ 2y\m@/ߚteVRDU9_ oX2od YZ