mod_ldap-2.4.6-99.el7.centos.1>t  DH`pdv)$ƨBh̐K}a.a o}%%ż-2[Luн3~ZZC8fƽGż:=Ag,x׽ϊ^-!x[WleDLMSHV6;2Y`1v}$;V(ΥA K 1Dh6Fi~]\`iXXւ=Ney{0p~MM/aJSq5>IJT2 M{g>`& m&7)~EqQ|"bLR3{ςZ؉T! &mIpY 9]) Ug r0Ac~bwV؆L.WV(s47|In^bc65aaf97a049bf9b4d1b22bfa336d1e24dc15fd&dv)$ƨ{6i9{g ]hPD]-xelD¤E: WTykk|jr/Ţ.ۖWmlt cZTtj%=aʥ)F0 L{쫢DwAq *jn\E%G%wɦa1m'g+ uD1*jXxҔ+H;+dcQ=nx:! C%.s/;Cu$q5#Y5{J9trǏI=羀? DR|Tۤc=6ruNfȄfm;R}NisyȂ7xF84k}irX,>%T%JZg,Ah*U$Pp,y6`^9M1\#mֿ22opjU72`񮅋n"p;O?iR5awQxRT>2z0?z d  ! X 6OU\h n t  C HTcrD(89:)GxHxIxXxYx\x]y^y,byadyeyfzlzzCmod_ldap2.4.699.el7.centos.1LDAP authentication modules for the Apache HTTP ServerThe mod_ldap and mod_authnz_ldap modules add support for LDAP authentication to the Apache HTTP Server.dvx86-01.bsys.centos.orgCentOSASL 2.0CentOS BuildSystem System Environment/Daemonshttp://httpd.apache.org/linuxx86_64(-dudvdvcbbbdd396fe056e8ab167abd7b2cb5145b42210bfea38452968ff02a03493fc85fb1adbf47dc0ab885761d70874580c46b09038029c2236374bb5440998235f83730c4421018c717798baab69ad56b181bac30f7cd6c77923a12ebc77c448669rootrootrootrootrootroothttpd-2.4.6-99.el7.centos.1.src.rpmmod_ldapmod_ldap(x86-64)   @@@@@@@@ httpdhttpd-mmnapr-util-ldaprpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libpthread.so.0()(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)0:2.4.6-99.el7.centos.120120211x86644.6.0-14.0-13.0.4-15.2-14.11.3dJcd@c@b9@aaav@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Luboš Uhliarik - 2.4.6-99.1Luboš Uhliarik - 2.4.6-97.7Luboš Uhliarik - 2.4.6-97.6Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)2.4.6-99.el7.centos.12.4.6-99.el7.centos.101-ldap.confmod_authnz_ldap.somod_ldap.so/etc/httpd/conf.modules.d//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu?7zXZ !#,۩] b2u Q{LVٴ@#Zve,fJpYwÑ;M9GAb ˙ICSPlhaVd%8Ê`vQNbҺ7Ul1"X IOT+jZ靾IZylӝ` /#>o^3[VK3\P#Pge9!`U sI|KЕa#@%l&k{CY8.8^Ep-"0$2N`():ZӀxWlxBy䡫~4ҭ ƒ9ԊAaɒU_pոsGPpS | "IfDR3Fr{$YѼNMhOwC# BR ?x ;$ÔyJ'VLq5?֨д?YQA &M=@3n?=F:kv<TQYuI5.YT#TnܷZYKI$>2(sv(#sJ|\jЮH]Jv:MRbe|nȱo=3Y`rAFd6n d'w*Չ.4~T˔- קG!i, j$͏R%M gb9 ۵ ?qwھLq>*f xgkzWM]9l>(|+7o.\DqYAOC7N㤄b)%cuHq23%'_3Џ=>Dx>y:߼w1U}nq 1*ߣ-!m ^|i&TJ)K~O3/T;Iqƥ~Hƺq d?/\AnaQB{,C-HnTBV 89s 3(C=a8N3q&ֻPp[jѹ쨎7%gjGm;+g+k)캾Φv'6K3Mˡ) \Z-ȓD'M^:K8cd@OjM:Nh%7(_L@ ;#9q$?8 {=|j4 i)VSbp]cCbޙe0- ʪr@Zk< Ӽ*:Þ=0Q I.oQxHOƥ4\V5YT64ESw/`4!wq:VhKQ^%(hF;G4/Q{ } ifzն+u nqAkͽ0EN,`uS$;hc.Hb6Uc»->dr,'[qH2}C(OUAn&PF01՛MLkIvˣj"1K誏iܢ}3CQm{@ ). њ,mUHx.t*E  ̼O. 毥;5l7n`{FY Tī IjS+]7J$֦2#|,5ತ n=?=Tk3⤕ЧDR.ֻP uX<5eorI+^]1N_FadNPK[ݕ“[}}DuR퉎xB[ŜJLyo_LߛJW5oEK?aWȇ|îe-:D Ji,Ut@$ࢩ ]xz~Fz Ei/Л].b0AWl=>WL٪EtImJmͱk*?hP}bnIi#kH#hn ye8|P"WgIx] ͉:MӫqfþӃ}3c~fwym2glzƺGvl`[LE+>LCCkԐ kLC(ь1Y%9sr9L;RXL w\C80&ݻńdWb8F¿x}UD\Q6a#XTU:u+h|UX-/vȓj#y/^kWrx|wXuGvZ\g[ed؄x 1+; Ooã1o(e khkdqQb'4*+^𼃉VˋUkc|xPf aCb㸧{}S'aںZ}"P04BWnfK$xfQ笃dpDr2PԴ%0)Aw'=r;'Nu=Ǜwƀm;>; 5*yiI/ޠS \S DE'aOoOHLĥO∄QznΆ儶]\*\y{ƠˣP-:rS}B6(^+R]M[p C). ҹԳS&}/{?iTF; 7ρ^]`&@nwE;"@׉S(@L]xcYI_S%ra@N9IA$}t]&uԡz4vOhnHA&N1DQw~{P/s5 /^s'6{w L;#\Tx8@;Bk`^.y@^\3A ,haX P44#=nS.чf6̾vZv@)3y0 ,&(o0`9 [@"`b͈gAoSyO`iGP1d*)UX3q&*(daL-rYy{~Nؐ u+ V/ ZTa=#dylz}":rR) #8:~ a] *06!olBU__t[VHIxhRZl[.R{k&SlGvYԀ}Ma{9P zDŽႢELUѨa'RPM馊!$Oh'qS7\`PHϴIx0U t -]SV[s,= M"dhr`u _O>[Zuțs=Q[`Z~RyjE ܇se+VI9o'L* l&Np.9N|%de] J@%kd~$9)k >,˭\ I Y)`I ,HM`4R ~EDD.+ĵmm*fGra`P-!m4ۤǛ`1 QYVJB126D^7Z3 TF߸my U(qj Ō[6ƣ4/#1Ľ]& .8Ъ?t |Lks<ɂ*,Qt%)"нlǃRHgƝ.GvWUM.y.iش pBjEUڏw*\8#ilT6h:5E 3$4 9L9֨(|{OԠ2ݪ*ҶVq^90oCN| ̠Z++2]GUC zSn,|o%s$tl玆Bԕ k+RXL`ݢ(l1DT2ᎢaF\ՍO!ΧdqLN~$<(9[^>䍰7~("Nw] :tGi1U~~Rhgd\E^ 8X/zA*.%/`@]n/ UbBRCQ 8T_JA[>?TKKYS\ ,-(R*CA}~2_:uny|Mfݞ-3  Vl`z@`$J۬)v2봅~K`,!Q9"㌍R8i2P#-i^BXTX($d6LЀ1O*THʁofsen$2NUL{寈m/~ ~Dg6fIH?<ԝ[0o"S^kGuW+8i $Xx7Y^G.Wq|I\KۙuG]V3fL{7RZCewvKIYn1}A_Gig OREPy~Xhe$&;²v@(T Tգf Z)ܗ)SQ0a#^P6VWŖݟWg3"(7j+B3!0,'tkDS#HV~3 )YRJy іsfey95wd/khp?-:Rѿ >$ wHf%6iO t$}å|RI(9aBy0m}=T{rg8Dqs-; (aX;Oqp3XZaz_${~9%+6H(ml^Dζ3/[\)E &Sq>v0-b/9CP~\u $szl33qB"{Mw[w]Mvu/y0Bu1߫)Ozno!bk*nY=D]{ QiNYx>Blq;*~T\Og.rm #ř^wbͤIo62Wwʿ?:Z+0 < o$4OwA-ɲjܤda%^]–cG6f D _.MeG`p(ExznՐ`g/7zޮ['(B:J̅u}y#/p'݇} OHu&j!uwNkK;)"R'y1m \1YBALnp->["j ds!ӈ]-msfц,90q8j5cjf.@o۟O?rP᯽6d=z;" vPfUsR?woZium+V~" Su#R=$[|`mA Bo@p=pGJy3J{9fX^HKt%Q#s'`}3nh?"|s9['FFwk3`n95YV9NSb Rf-f"(ݣNDXilmOo_`SAfg<4=ҟ$㍥S̠(b>D-^ib. %03ǫq nP^,.tJm?lPhJҤb+ǻkk ѕ`j1l?y cHُժsX^ߋ:% I;Qg ̷f+f,p=IVM a'ā#cQ{F2mky"L* t4=}im6GOyLhr5Ke; & 6ͩ'iq}bF-=I OۢK9A q](1+3$r_;Nk9?m1dorm&DWsf:lERyz|9˾k4 CBϺ1OtE(/Wijpp|{CȤ/C[$0Jjϻ^mayd^ {IRWi`k[ئ8cνE?|_ D`2EL`~|^r2&0\~ɻ:N^! ^n8ɭ*}^yML=lG1| l ?yV0,01JyBۮqхNJ@CrZK|G-.Ț$/=> E!!QK-Jxe, stL͝+?ykPIm:[)9Mq p6\ۋx&8snSNi$}0J'iJMk~)Mް'0>J& ?-`1f~+0c~КHaS2_ wb~(peMXb5Xzy4E]vyͼ |}z{u;q4+Sޞ+y8~?|a}4%{Ox!% +M]am \zV y\Rwx1iyrLޑ]k5)솞HnOUXLJ<(ndur' Y CUsv+v>;W-k#⡙L[ˆ2EZ O!q:Co~i4-^= /f.0Rͮ9XNz[j\6CKl;f2f{Ү Z/V2n=[XFڵhz=PO'@f0ֈSb[?@7G.q(zUZy0S=c`/G8BTvk)ˀb3gӠZ6Ǹ *L^4ۇpr !5'{ gҶ,6 %NW5p? \'pI8B!XQT_"ŧe o"d-[,W*/z&L_o;p=so?hQyyY9.T?.ɳ p}&rW—En+ Y6.͍6Ϩ'u0^63vYO )/ۅ2xY""Z~ੴEtM߂P nW4Il#B?`%s6uu c&z+\s6 D1G,Y+R@ $J@w\ġy/!Z*kj=ihRys-͒.ĔA$r4G%#SyרgM߸_bX2]uoq͈xnSK0)` ]%ڡBIvU3݆P$1 |1D?^cgs9J73~!*eq~iŇh"(ݥ\cY$+(:+&A#+;z+ N5[%*DMTF&1وUN2̹X]fù]vVLK)9*i D Ih줫h-XUjy{7A_Lٰe ׺Xd?9йXo%?G 7%HyA3r=ޟ{.C*߂jrh߃c^hK;VA)cċtJFYP/)\nJ Q΂ &ϠmyyT4g':p]ޡ[u\2I%9њ3 2F2I5r7(R.KOD`ZEᣭ0wM,R||óӅ#Ps90D=5"HT`3G8KJ7u\d'ћÌnTzE[e.*7GR7|[f (r-Ϟ&Xܡ6V'W9L;qԧ$ד#ih@٭xqGli]B%3ֲB37|nA\򰍹\Bw23aߧD;ˌ&H"Qe1!swר*w+E_i=gxhb֣gD&`@zy/wRzn)Q.wri}!p*N9/-,@7>ՅGJ3 jNͣnW_I,Mvo f7v "Nx*EGkF\lA %j~O@qШFR%DA\/ ^Z(3)RDlқB!4 Y5N#3G&o6 X;RLڦDʝz#G2, !@p o*jap \fI:;\V]`RMky!R-i0KcT0Mc2)Kx0.^Nvm{/FȾ6Z'%zEK-֘0nl ؕ:2kyO!a-(B2֪!C<|Ԑ,yMuh2q%s,$MPw 9j3n{KE^(:aQ؜#zXx?jnx+sZpT7 k 0G?Sya gem_xophB?'q#@ e/0Dc_$[{ ,,;fǘ RN508Î{ hIPkUxPFk1 2`=Geݩ9e̳GT k9aa"+nTĖW@ W ozt/C2:} m l"VOs27NjO[oGP=t+e"/g 9;6V:I;Ml$][NJr3a_I }[jDݮ9PE ӎ>vAWՂ,WIgl맲p*3EhBtZ,D>:0 W%u†L@$ї?VRRtlJ2"-Lb<݄]iVveU\vFyN^"?fɻPS i@N@|OlF {ڴrJӤ=SxH<1b OQyx9@f[\O͔CyVfy2G[藤{|~Kl Mx k/,j채Z]R'+7\1AG޵#RBoͲGr 5Lݗb<0!ݠ3G#G#*nQucc(_@%[1Tskt;˞tY`$Or6xʴo͐4ͧWV..@Lh)+Wk&uLgFjbg Dx3'mLU.@N31`0Q#mv'Qm*a.tq߂i&OˈlpeDPǑE0 %Sihg.L-̸NGn^f!ZJ;/0s}ٻ&aVa] H@NTҔ[tYgňyH}.Z%cn>g4।GJQQSnN<|UYia…{B >eX.0s_xe 6răgovk˘'\A@-& <}!q[(F㑳BfIFoj0' fsSgb~I?Ș]L3G]se)y.͢&>G_bǓnyF1 ]ιDqݻmljXOGZ5"0 ;$gc2g;+W%We-.STߪ^\}YZ!@NfI8VI~'[vG>⫤]tmKQ_D9Thؔ+xXLgNR/3J"ݺ7ż|k:5 Y%ݩYe32 %/0Nr#:-)"̯WM@`*ϝǍ)&:F閿QlץѴ-PCz٢oU j~X!݌u͜I75f+ 2Hй|P1uV5U%/o@F^ub$ 4VQtV2p)m3a*5 F}ߕoھRkD\OJPׂ '#Yҏ T_s792^g|wsʂĠ&9U<}m]eCVs_u L1`n_ܚHa;dgHzj}D/J=$5+. zG~ɘvXze+eދ6n{ y[aֆs͂;ykkDF-2+Ĝ We,^[LI=xm/$*,b%B%TA<  O{bxۗܤG7xGÁ͗ܲSn8!I )JXWk*Aٞ+qiE*[!Eec O oy @/-5Tmn1 AWwbc1כ26W+?ku szѺ1~tʼ/&6{ydH slwA\ <)uaǃ?.L/=G;iY#GaPP3ekK@-36}@b 20u?vHY !6 |> |1򦲰PcmOkzu*z3jA a09SBOoB˜̡>:t W/J-".Zm/ni^Ä1R塄zB`P"Ή'}_(ɡ|,MI?i|]WOX)Au:?iq@:@՞`+ *f# 4&2F@_lc$zA""]T {B7S}E~%tRά(xe~OQMa{ X0> NW׿!ByU#عS 1F +%Z5{CI{sR~a;[~ W$ 4*-wAIK<~' ÚFFٻ'ۨ Qzh(!#\{%Q8S5Oh}{XPc&E*:RR"qm]7dm (Hǖc,5Kpŵ*JuvNQEGs[g9ѤHK7Σ[8ېx"hw8v>Ls[FraOڛ Ȅv xj[VL%i{jvt|P?6m-7m.gZ 30څܬMwАM ̂;/~Sv[ǶҦqP)N+SGf z=W:Vn6v>i:OO1p:-RVmh HhOr_@8=b0VZ [:+TjnFZÿ;-eKŽAĝtk,s,6>\Ӡt[h%#!!#uA /m:R3jvdBlP֔!>4f7qb``,ήi܏Z>$?L  =Έ;C<'D\Jh3֭V:j8<6k qf Xa֒)=|e,n^̖%ښ7ȲicwՕRp1uߙ%p3[ Y+;Ԧ>d/SuD7@Aոt=Q?%":Ld< /Q|zkݨ=+y;+סRt tL.C Z{9mRAQ~cH6evZpػƎA&)[4$' o6uw-A}F?/ !7 QWFyS,8KvwX(򓉹m}weF[ !N7MRUMߏSգT?i/@4,l`_|Љ-LRauNF'J s# _%Օ!-%E`ڲЌmދ.Ǣ`jsB YV(r{ Wcsz'WgVČJ7Zi!<UF -aA dȠ(8+Yߖ>,'{@j@"FdК6=&Ato>~ 71] H쟳t~xA$bNˆͮ}W$:ڕq7kʕZyJZ}s%=t'7.E^e`ԑk#bYYٳGv j꧹_8WC%zp1fSH+|LD,^.E擎,d 7L/6C}>l}d^,4 )OW=AV=7_LyWc0V"c?$ݞɨNq7i)܎sC3mI hRqm\߹NkƦ6mKǞ+ݾV1bVOnGKH+c5pYf lv*dÚC}9R*8`OVټըS4;P uќ!k EV29|~yxOXCV#_5P6T#Wsb& `fBjE~umZ7}J pSY'{`EL$9^گr}{ 0iq6bH_fC]^&JS$d{sޤ3ȣ+}JkSEubS rWifu"`!zpE3zޙ)s+YUnreя%KE5Ư1euKa0c * s$5EBR> pUVeT)iy&]jtm>9g"ߣd5D]* n\3`.7aJgwB޹ aұ~̾ `OUȻ"ϒzYzze72>E7aO8g* ߜeHjr'}>[={\;1yowX,ƃjcBM} Ϣu;ON\eZ7/QwbLIMpw)HtFݵи bsV@汼~d.&v'Jt3Tc3|w'dY"G0nL;fPRJhWov͟ _R&p Sn'3K[,Ik[{JgzJc`cscqbla7c,zҍxPϓyvgjZcþ{5u@%)6366U7ZgSIO!@X_J>r~Td媝fr~nquWeVkhq€TUqƇGƒw H;m@!4ʈӔcZb[ԗm 6mICcMѫ6OQ +LCio#}UtY jѕjI8PCbσ6r*? $WKYXOϕ;:묀5:2NA#ĠE,Vlr@ƐWעgI\d 4g@ *i7_zɾpvרvJjJ"]Čʓ>tv:1ާ8RQԛ9f|&(*CB7bC L>dc)x 8LRP$x /G\nc7 ;}9p*|@kp,%"{]fH ֩'fNN FZmB瓰ֻH:f`t D+m/PE?o-T ~\ihv-^hrZ.K}žJzcQ'1>`S^GWX_VذZ&uiUsoGV2Wl܏SGG'^IL >IvC֙`Ȯźh&9=-K>UOaT/[&Zz>gg(3A|b=6 'dftC2{7Nbb/1[ OlX? x |5nn&Bt!,?.oȦBȼ?;cHOtGw9NaV*$T=lzy00Y6Ӆ^_,kϽޒ?{A` EmpBT̤{ 4'6A"G>.$rM\m[xUIes>a8x*K,-H?'hfa f3$ZzJǃsKA:ْ@` htx' p#BA7< ='[MOJj?~?,yU091(&.r84**/ ‰VyۗEz1i'R䎡ׇbx8^&4 .1GQ( n+۲?G'pٕ AS/#K;|uШ%v[<~v4cC6tk9\ CJ_Q xXѯN eV~:ϷvԝTQŊ7Po; ~s$',1bg42 =~ܥeל* '7~OJ6hk{evꕾ \N2!$k>?*].Sl#-Bӎ=`o.`@5 Tz]5(G[@C MnC`)7ypRV8G 7w~Β KfthT\hЭvePD岄dbki/M-%ÒݗCH@`Bt6)}7#i&XPνL#`Nq kwZi= Ou?);&}˩(Ι!MyiJU&nFsC38)z|a}[*Ie&>9.d m*.uWf~~ZUͺHC=.3Bzcrvq+ 1٢dTwM0iXtEh@ ^n:ӓnn|8b^"۩oH ABpN,'zHP5Y| 4=ZS}nA nԦQZw9tO*GwHQBO|b:R{-h8Q'SA:yX( 7:御|8:>8&c*,8_Y(HT9v5Z{MhX8&p Y}~O9{ (, /lҳL$LɔDkFg8 Y 3q-#T}Dfs5MR/KOu K_[ZY,4bky+ >+T? e[o1JgN(ʈ5ƍ j Y ۰jj7Sz+HrL~ͦ _\I#C_"nz֋ᒊVl:jSXY'$_+Cd#즐NfX KE$@"7wjĉWh׎y|6,JmԜ̊~j٦w9߮pww܉}N:ϐe2mA$y^خԨenCD wOLr`6t(4J9W4)bYj"Ɔɜ;l&p ;Z,_Ό9~smݤN.h'<Au9kaz<FH`yMZ srf{١_/ meOqVXG$S k/ Uz nc0՛ S/]zƛL'9#5 e},sN;$d30) @VUw0 Bb9'W51:Iȧʛbpq%SP9938hhG' +3҄f˗zBo N.gTw%k91j7SůS*VT.Dڍ,`gΩ 7X:1>%Xf/|2h ;j值O:HMŴrp/~=QսF5tYlA69(G PD:=% r'lzPH]Q=WU0+#3d';Xa0fXs)ˎjؕn&Qz`pbYUHv\bp4VVPF?OwwkjeP.>Qgc|yXRNۇywӑTb*o~:^,p|l(i/[}a jvz`(FТoƸVɮ`TU&)\_(G @`e1ڼuG׉~Gd/t>;Nՠf;j]y _VU8d=l<}9,Vr-ɼgTٴ4xؐr)tj!ŸnL'5~i=D[iX9k)&zw KBYxe^$H]TzL3=tRlZ` Y^gWu#L6O 8Xn1Y8Uq7HA϶20ۯq@EЎ!ze#Ld@.isj U10V\bGNmd'\o@K2mbFGna0'ۼe"4HKwux@ f ~Tc=HNiQ)DSPlmb$9/4Oz?jgL5G.[HdM/,$<DlF& +u(&(*\73MJdCGX\2^kkdR]rϽ-w< neӨE:(h}:G3vB3o鷈;y흸έL?8ZoFX+NqWÂ(L:P {lp&dv9\ EtV:W7OOTj0/ Y=ۮ*E,_8ϻd(=JL M#Rd ymI}nhX% /)Sin@Y?8v4Zcޏ>?7$]]=Zuٛ /aS|?s7ZF;\"2 oC~OƶD/^t48oԷ2%@6n'h ^Im/ v-Du]m>wX=K UIɸNz}YyUpo].vFЄU4ܰ>;!K_͉xen/. F+G?=LvFR޼ =2H]pA%U KG>L|9*D1 r zlGWGx V-̿gQn׮vƼCW ufWP2mMnUku jIRX,U䳗\Zߡ6w ifnZ%bS!~dIdu o͚T,0:}Qs Qj*JjH;y h<ˁ\"UpUx)^qT$! ihJ2&,N뇥}_ n _CxݒdSF D3jo$. 1郓"{ YР(5I&gyIpf7e0d+$}pĸ3w~=7, .FFNˍp )3/U[ӍQ4Ph9'~8^TϙgE6IJ_ssQ rp^EDyN5rC:?vGd8eqhdFC`X2muP6-,t>%1w`aKjm3j Buջ3A98H*!n_jA >m\WF&/hTdžE*'mV xxQ49ѩƂiPR~`ßǩV$i]4eM"+X ަLc!yT y 1f\A_:mͭ-͐n늖f5Bk7^t{ }FVZ5xb `E GIdwS*Z[LQ05Ni JOpJ%Meߕ3:2HxRkNr~E b&D?) >JQ=ozr0~Zs{$JvΙWj20Mͫڄ'Ț$jRXݼ=)v`ꗳ s;+ѿ{@|0΀J$(sj@-䫥{֏ώ8ʷdO 6uM`?Hʣ3 jJ<3 MBӞ@xE_I,6'N!R)3{9P>i_MnGb(-]LjKQrbMu߅m e$DҺ1A }O_KܢHV!(ct 1`} FOhlMX-.>9Mzd?At0GhF })h6Gw- LY=RZG_\{|, UaRZ"rTۑ:In?B+U.8?~&pաBО*#즤Z9afPQ YԀH|37gX'&Mлo|V)HoSu-NgVJu7ɼ O'%,"uD)=[Zwea(c":-,z~G mMK##LnmvE2sS&ޱ< '(MW.eA7:K;.ӊOvwrkCykfPs@(ukϪB摘Um_U$S  k(pbЙ=ъ;(ιt" :VlGzL\9bL~t3%3OZHMPzZ k#wH+!B L;p={hq>Dj=k&{o+הA&@{%G+nk3?&[Lh~e G p yfli%Y $Xu t?I͟(YCDa=WY^R-sn ԅm}m͋_D#~^,HneVpaR/lů;GFXT,Ϙ\h j'KJs]Xwyy²ΤeHԍ&1ȗ%,EٰI[*ﭝԬW$qBzt}+ [ Y~Uyյd0Hhw%uՐE$v}qȦ1FqvFs Tֿ-4%; y(HrIҖRqx  R v\֥0>-o藚5wq;9Kc;}P s^a zT0k Ϳ~vO_}Ej}uI֍j6fc2Fwsϒjqi?cx{{{r(}F:.U׎%L<9 J`}'@OH=Q hӮ$Aom^";@QBA[M.NYX93#aX"mhBtؠ*z^h[9/UO.tL# _;l*(I!S´E2Xvn?oaǧcȠt4r?NM񃫅H=spލQtQӱUb?a|lmsߚ[X@s7SsΎw$㟤 9nɤ?FZPӁ1 #ʝ$F%J՟E(ztf8ʟ}NsV+T^k4_P# un7#BP7|*H޽-qY _wJmw= -T b*!y.bnؽyZIգ/^Rhz*#R8ŵ*.2P'ge ,$Xn{ʡݹ8Ӽ ^Š0.:;Ht^\/]JC4ڽGَlJfc&KvUp=s,ӝ)CD6D6uqfI1#tΞ?cC;MH}H@18\ƕ?L1zvb:[̅4f"+H †C+R{jwjZeхޫЎ í$ͨo/pn4c|xHbi R$Í$I{[xe&3Y{9Rs+R- t<pqF^jk>Q|])UaS/(2~6yސ0=ɘ*{`ds Q1U7yWXc\-Vծ;a9LU%" P{XNCdSQF)J΀A^gMewևl'ӑ:έes;? S$V?)blT[>scUZtD`6~8Xt7k@g0=K0Sml~}y<& Xh_,mDb6 +Ms`@TN@Ȕh ;ʵX~<#bKEϯtԹa"@l>C%_-xù/NGq̤w~sbٓ)cUۤqKb|1՘Z]MH`'o%=59h.:4ٗo@cq^H\tI*ח"ҭU`nR=,wd5ܼ F&me*AEݘ}e;>ng)TѺa95MF鷊zv39҅{8n %!7$hui K]ꔝn#?;&X\G $_۬61Ҥ~u*^vUJas#žC*]lb^3 kC"d4.Øz8vg}(cd" ]ٚl};64fQt2J-)@љ2ە\BޣM^zE{z(ID28jSKxJnv;VNl!9xѐ+M}L >O';T,=+Ecԗ'l{)E`ۨbwe8KݻSD&myi%k_j.ޖ 7mĝ1 cV;k9rJ| :A \ m|;+A':US#7d1ƲV Y'w*1Eej瀚6EwnhM⿼$B_=Lľ _{sO* ۾b24EK8 %t0 \-';2J J;ž4YǣjYK^97D!x<񅯴,opϢ36x:b?rM_EXSݗrIXt/fXhkwri\Җ_u0j;! Uevo/ijIpyAR-Uh2^mc]В(%8 ><4$,k@5ĽF2Mk ףּ47$ʑYԨFrXG& r_To fe?|*t@5j‚Ab0$?=q<뙙Nć$zCVhm*/eԃ˦6CYpAN M K>yިvƒJ@l &$1ؑgפR͚H2o8ksRy]XL`eCVV Byi=5yMɄC4葥ފ =*˜t0څdC=yu> EV}3T6iXzz=B_!!z{~-J^b]Ք~CnN.`FHgbJZvV|lqk&q((BAv_$h}`0z$~Tq3Y;c᳒<|\ʔ_kfBo+kYc+3([Xbef,7PU:8س<`s3d#Ŀi;Sqq>bh#P \N@Xģ'] /d=s 7,R o =UP\1LЛRҳ!7}s]r2$~&Ol%&`R) Ll* o{f FKم-p1-:_9n,)X_ob i0T9ee#$v=^[VeAj^|U +1RO,k;ϭG V~4lSby|R*$aus,r0 r\)A ৷fj-v$meAɋ"}~=%A4Z9ns?-6[3H '6RKSij=kF*Ϫ$H`0[&OAXe)snZq&e4 J%v >tI*m:P'yfPJfm+DZá.&ji!Q;4gq:~kG}5܆xke3GrG4K5yBcل<_ g[.| 鈆-"b 27$pMJ Oť4uǶ2„eklo2^DKl)awWxZ}qϔq^egxJYՖ=8EzU]OGu&2H6d2]Zƈ<{%)@A!b4v&tgBpQՄ(37:̘fLiکct1'lQ&噳/@#  σݵMc N^{u8EGJP8a/ʐ:xfm)g@#GzӞ7Po(*MK(I~긦`۽Ag錋+G5\;8Q &0lc׃KV|9wpƟUԇ>414V5AXIsw66 $(uUZ9쎷 tK7)6ۂuYpoxAIc_BUV)q]sSP)ZCI*x); o^O(Jy X-or',}þ\N:̤>3uS' ϔUh4DR-4,[#j: k"}A|"Q6"rJU?p:DC SZ2oSR<(*V6YAIτ r"Vt׍(m*LҺÕ+< @هJ ]؅V|W%}4ߪk2!ˎD2dg? f|e2ZqCqD{sޥNpu #䉴"r[;JCT 2 '3󃦱_AiV=2#؀59;D߫^s4ck;O%>8Ek]5ʁRal2kԚQCKl`]qT0Og},`t0)X Ό隋#wƉ>j& {5!Q7%^wQ>qXP )t LQ5C/󠿙6N/,I1 fDe19B\!zh}Nh;Zd.2NGD٫＝0Tϱ@|>E%2CҩQm-vxG[ cժš 8ׂ;<`E)` -dPa;A/Yb} NmM=Y9S+)NmAlBwh`9i Hyr`p2E("L{cާoCV$T_C9G&2x R;}Hx71D?}}jQK֤VY<J"Ia8ៃ/Қ:9$G=X9ox(Lx=BoŘ͔e>cߡCԨ ,Wb'rLh9Bv/Lp%UOQ}-dg\ثDm:TA@_^,]p3rA0uaag.9bXRw3T/HeyP׹M 4N5StųG0:f Uz"sٳB~u8' 09Uz`*23Ŝ6ItD]Sz:|%XV׆ ppZc5iHj̤px|KzU|}$@N2"vJ@.Ct4&cI K*ɀK$Dԭh?זBOƹ՜ 4ʮ\GvkE*y[s R`)RG8蠡D/wpQhrFSP~QW07(r`40 ;V᭜$Pzh ޴ζ~ \*B2^@u%he  h[Kށ"Q "0xw7"~J3RGEuӼf2yn=j7*.N3r\EԌVeLY>Ȫ0Ggȉz :TT#'@HѷrN숻\jtzR㦻HU`1oaT[ǩC^Z=t߄} BZǹ|&,VSl9&pۦp^\I̩\+W.bLR'B[ oVۊ1j;(0 =V~҈.ўi'-)W*i_WW$0v_;Ag\ɭ5v!]+>(& éB>A_];T%as@"bhI5o6,cDbIKICyoվ1 pV򀞅v!i8`|ϡeQWuh 'z!'(g5Ѯ}Ac*Nhlq'q~ `be'Eśps\%@!QC`d%{X:^7f~`#nƚ KJ-ֺJX2n P Gi1`nH^W ;7.:1Tœȑp3+Ͱm/XRG#Da9KkE08lS(ĺdx²]{>8@vB%rL.*Z0"V  n<Ȉ r+9 \,K&SZQ5R ?Ʊts͙5MRfU/k/PS|?vijU3y̳CV^?JK)7#'' bπu~$(v|E_9bmYF-qTkBYS>Yb)}Xˀހ'iǞI@x\qTV X(Jg,tZ V?0uc "FŪ0<@YW(qk.gFU^!t?x(H>12ƢjRaEðrolEU]:c N+wSx;Znqog.\$P #\s7llpiIĈ^ҋIَU >| :Ih(>Ģ(^3 a36d)s%)t:V/b*=H0I)0:!Cg 5 uF%|?Cu!]wRGсQ hb4SErB>FX{Y\WwtX:"F2N͕t2SdLy1R OWbmQgPe-Ob%uV[a="ﻆCZ2n7QhJt]j'6k7xcqNIAދ_nX@95 EwDzoS}eB3y[Hvezϧm yfkPtH )ILNZkkvm,g1D2{+gȿxGq cE8R9D^hqXt8OTxdK#Gn?}<++o_ARP  T52ԗRIMa`3 :/{I@9U$Utwa)cBW3bx!$f)?PYo3Kݿ6ۡP鮍KJ,S-  ؄iàn< ,8z]N  !+ ؊f&LL:3VJ<1*t Wˊ.hI#!꫻rd$q`[Df&J g|>*rQV04Z[(gn*^xN}=%b܊Y+ԥ .P`!X=?N,kKߧ!ƻ?`f;&HQpI@_-+к틨Xձ͎H>! 脿f0UխV T% 4ي::YxC}ZKWލQG6*|CkC F)xNQ)h.= as~|h3-&={#x9Ikyt=[`st5'k*:-4peśH^(MƅSA_n!kZQEZ5n+ǚ£~'{8ѝ)Ĩ> l<'$vY-> vj4U@FVWij zmnz`U$ zUN}?V\'eUP?bçfn;8m$ #ՏW^H#LQM*sXz;e_eD\Fm[ҍ@V/"${vt!zc+ G-E׳cL fm1 =k% ƾw8\ϴ/t̚~aaVXW)\)nY{'Q";ׂ6RMS̪B~FZ0}gxICg&(`IBao4:j&%ٜ9MgM *EapeF~k{_6pW[8 95gB酼f_2lsVeI6vPf%;bCɮM9h|[ӁLV3< h0%'svX'S -yd2|zQ$aeqP$H,_М[i|/ =Gއ >t3hxAjWMgS985(Xt ǭxħ\:'HYJOAD$4Ę:[AkM12==St2&C4/V~1fZ~Mc'%;W]NxdY^a&80[jȓ)9췇MiW}.D$]=>bu1.25'wԗJwe e,>x,M4Vd|^EY+t$ 6et`;T@3#eVj!KB#TXOf|fpWJV쬤3Oˮ߲`~TGMԒG-gP9VG0U1(CH쌹w+oU\tZ<˗pٖ~8Z5YQjWW3bIdM [wtW5,OG:'hU&)![[:q8~;JvrFZ:>2jaƯуeδH@j' ""Ʃc&pHR0 _b⒄ȭ>* 7ajX]A &ߵY YFӏot 7 AUʤWԅc҃ڊ'DKdUw@Ŭ1'~uhxnl[@!Sk[rkܷ7V ;z=9b_Ѽq,jĒa;…(ɮ @tP܋T2.L51kyNҜon]poAX Bs :dƥ!iJ !0;zw=;d5B{UMlFr'2:ba-LM 6Nebܚ.XnUtq"Z~K/~<}LHhvjsED_cF@0_9 5Za19o;)=Zo[lRcAL?]ΡbxMHl;qijq}&Cɕ3*8<*GL׫;=bv'`,m5!!F[5 Ap VMκgfM& BiU 3ϲ]x=F)M3 NhfHTj۔\ pұ 붓&",c4nUqNA- N2~ntG?504upLi`kjj@|5:r;ŠkIj 7PĵK,]xs{?x'x3 nY ?y\s ;D̃jFc"a}6=TStr33-C  A#\cY U _J8*Z3inOR< :Vemn7KC+fnU+f"PlۭKPɞå`6&k0ȥm)? !=qTFOOiT xѰN;J?Oןm,M y6g43U"âaL"Kje_ʈ?9is$*x2ƌ_7lu`WSQW/} ٩f4A&ōtQs a#*T~ՈIbIne/q[1ĉ&}qe{7-&ŇŅ_NC3MVX8zaCz`eOYIoz1fۈoWFRl@.ջFps"aUe~R ׊ R[-m~ɽ;NooMeX4;ݸ KVF綆: #19+^*O֮ ΆZbjUK^ Hmk]}cmC0N(+8 <>K@TW#DiυD)tOiNy6}΃qjFg,R*.'lZ >TU ^ &TA nlēF,U>ʛ|]X䳃N׃KT_%W)M(\jM\7wjizb%T߀•i5~[|Y`W-:]yx,*mF2a{HO9 &}8b0cԎTd6uUfp-[A0vK KNHcQd|2DΚ!o|sf8c<SCVt^(0U`9](J&/f׌K然rm ձjF;v g#܉wAx_ZOΫiyV~~oc]bwZ}5bk7;vg\bht(R)xk]ImR'`$J<vE@cW D m)uϨwX&-[RFUT1Fb>Ϝ#wm.]0v}t"!<\cٸb2\MV9t.hՇ\EMoX{o QhxF:p| \TF.?:l#rp YZ