mod_ldap-2.4.6-97.sl7_9.2> H HtxHFa ?*}}XJ,|cٸMMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Scientific Linux Auto Patch Process Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Added Source: httpd-sl_index.html.sl.patch --> This patch removes TUV branding from the default index.html - Added Source: httpd-spec_sl_index.html.sl7.patch --> The index.html file is outside of the source tarball, so we need to patch it in the install step - Added Source: httpd.ini --> Config file for automated patch script- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)2.4.6-97.sl7_9.22.4.6-97.sl7_9.201-ldap.confmod_authnz_ldap.somod_ldap.so/etc/httpd/conf.modules.d//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu?7zXZ !Xۢw] crv(vX0b6q0`q֏,U^# G0(*l ^7{49~">#[ nfi^Y!+pM}/\%۩t yx<~ߦ?uFVPdӔf c7+|TTe\dSChžtz%ـ3@).1Xڻx]0s}Y$B>щhD[~N |z/Bdm Z)\)h |sT#bmsʟ';,vf$_j\yˬ"J4&zӇ,uz}EO;'ɇoxO!o(|b*7% 6n ?VRGXjR+cR22#r\.Zf(5JU}>X'kd(=5J[W&0_I]Cq3R FiZ˚ ,HÛQ^68<%qsCAWo&J_#sL vG3Pŧa'v.S9!* /aK_L4ied@\hv4P#LX!h?T K5t^^ va8Wޥ 3lp_cǏ}MfE!y;SN#myV/ҿ{%[< j#qd%e؉cOHm9VX^=;|z~{c5LZX ˞koy(@c{Y=ԪW -,96PjhW0^"=A oxNQIp/ڶc|CXFɁ 2߆XxrK(E Ⱦ:]a9k4(_F;aC]Iy\4G^3(þh{m=hlϣW4v/  oL3df[\ fԵn&W"HñXlY]8mB9Q`3>Ng5>W+G ,q ,uMAW铒f\Ud 52mYbRg8q˷QӠ|.Of{`Ӓ`uK alǿi1bni큁z0sB$$kDoʏ?=ґA NVLʯjD9ZDcje]H-xOkgq  NrzOr_4ҁ1%d# [';H8#)dqob(1Wqə!j `4 x}{E2"Ռ|Tsߔ_]3R >Gũ"rNғ{eoe*_#ԖV+Yoga0M3t}`w@j($E9DZu ~M@V[%TĄGP(3k%_T4k'NFMI;a.@Tz R/Au?K ~H\a6紅MC3AAt-6suIo \$)ƾҲ:ós,qM% xYPfI8-Mgp}!zRy󡁈}ںoW(vo +xDL"rvbiCB҇o]U,{mf~⚞I) I*F^g{@;D |?0_3qC'OǾ=l5cB$)T#wlU6PjՀʕjΚg,Ud·(H-y"zdn/7;muTRCcͼ.0aF].f[ sN| ABml-eR;g. oG5|U2Bw cnvc׳k)Q2?G3~( }Yex ifdaK9JV5P)lAǀ}nn2E3h@h{|{J|57b0^1ݞ #ftC a"/P!6%X/Xmь` ]9U[kĆQ4,eiُ0+v?x^UqIMPv%P T\$$V?5d_ L+*[dEiǻpOd=ZI"6J-odeжryQŹwon5,!a>1β⛃>{ ER^}dQ0Hjc|OPӄz ^՚ܷve[YΓz|0`oc6W;Ċ*BiZ"S6vRzZDAPRVɊҞbXyGnȁhPT )}Kj|uFXDe ,Y$33H@D.^dN۴[*N%GG_}l~Z^`sy3pi͠*}Cn8+*%h4|EFj5뒚eE ?[:̥:Z5㢎#aa,B6Wƈ#cO6p~wqr*Yǣ8ʞnh~:=mSrxf¼ݗUBPZ$8)SA eϊ`,܂ps( s+x{Y/E@Ŏ.L?st˓c\7T 4pxSZȚS}D>$Suk[˲vE(\&GV/j{S/Ncv`e&v>^~|fR?mJ>&z8cބ>DzC<_֑sv$5 {Uð0Pֳze׃_xqFvhqwX92¼Jo'%x{ɾPqCwg]S{]^'(Ɏ4@i$-!ŜN}.v\ ,ߔd [&?䘲>QV!Bc8s˲#2!;j첕aWhl@. j뽺j0RG;"ܑ*mŌT]l"k QO%6!1P3CZ2D-\R~ RYgK^k#OUg:!F79_Wv/omљ$NxRg~iZ4Jz+Hx!3o:eO-]k)Bu:^@GD9|" u~] `AW")S<~3r d>tlLRxM-|_G]^vq|$=3B]As?o‹}ܵMb"%136^$7&GZ47חOrk23m p 圏IID ( ]u^6}zĦjROs34f{Aerni2@iNS|M ˜cWb-y-j&#56 p C|Βm8AkKG¯+U"zcm"vG00V㿿[˽KnD|NGژH!#=2}"Zz2͞L(GL''wMyp,%~a]4+"7e=Ji~N!Sׯ BĚP9bP.h:&z;sx]ؑݪ(bMK/Cgmb;K,R+?ďH=Uqz !< "+Cm]"WFqmz2{ea"#J 7_ (%%D[0 p")9,֟ۀ,1u:1ld-)D1R[#[n}EdVoq$Y0 vV/kD7B΍Gi(C@AcUlV7B&;V.\[{_]G.ɑo |$Z@7{S:q=od'9e|K!._lF,.RO@L"/0T)ACJ~ItݝȘ0@Jl6>#|T!rg2^3 2CTcdeWxlm\E'-i?'-bK9Ɓ>GK>=4 ɍR654=  클A,2'7Y_,BT|YfV.;5sb1G&O'щ_55O(.n*җtUY4f{ň0u%@tѠՉLPjq|*mk16,0TVM*z?g5-;XaX!ܳXdg]I hgo737y-j|]}xHӅFM^}C2^'ec'*%ӷR/q+RYr#gE#_P qvDz41TBl* OsҘxťF8Iϋy0N" MtN"SL( Nc[ 73'M\%M'QN2b˩EnCi]v"ͩk%Q*_@-wME8 (75R;=I&w)ASanXGإQC7CZAGk &kF ׿k*C-༦f:0 NbqD.5Kz\OD3Zscuտס+}isFHoܥ.Tܜ󊄶4L0!ނܒ)Ҙy^RKKp MA(G~JXhwdf ?Jt N&v3h2OyZR@Yp 69U6MĎP?^U,rCp[FO E!-d|1<0MZ;bk$MyJJlQ\9F-$/t>PY{'3Ah$br[fdU 'C_:h|-ٵvvE}]F.ϹH,5$ :VE;8`A1MEBɾ Ґ?xWDvg6"bǝٺ.ST p7Ó0 5v dz%R%Ҏ?ڍ[X5#&5>\^4 ձ$.O'hGfYH7xγ΂t>+"f#O!%k"JG:R^+UAB]Я;)(.7~XYj/ʒ`y KV#MM+86A8$M %hK4PhݘFd'[$S~ll4N&#+ìQtƀ5$ EY<)Quz7%Uj#E j:4y^47O;˕HBr&nB:0;dwڎ7w&E]# ȭ`V e:Nk¹A_wGzΕB{ea XX ΂O;hjՆ0DҍD>݇z.S'zCj4?ś-tJ}1.- Eπoxn/I^0P,y |ȕA3k(0[Fc;WIޅnɩzfTVt A?M|ެ.Y{34iъVD:鶇^!՝Zi~ *4\TJ }qX@RCHY gz㙍Hb~0HB'!07t7!땣Hx.q~̦zӰ)^ԒW 'xA8,g4p'ɉ 9?%:PKfA:Pbː,"DPbk$`zPL76Ib>l^@ZzY͠`GUM ثauIo7FQ)vHi&c}ɻ`y O 1p!'ĻU=3=5l8QYr2 LS8+805 xR(&jhbn}z:j-ȵ p=pЋ(y\jӛX!Ssu&/pR=i}ӟ8 ۉܚH~;YXeHH7#wFaUu7|2%5 3c9vO귽0-0/N17AaDuTTO5Nd9 T0}?$1ix@jh,C/PlIf[wFȉV U^MMЌ1ZGzǨ]mQ1 -TG:=5``AʺFfDlm;e{EXtM^w a1r &MZڂZ( B]g"BVc]ԈpRɺF.TxX>T}ve.\d#Q@9P>H2 ]2pFm#ӊ渀E\ ~ !/+oUln5lSٔ Qq: 8CY{$c&Cb@~­ireP6F'ۄ#G6HZt;|~+Z 0T㤢J೔Ru HؽrU*oZ4ǝ @2̆RA4PM|  `p9o& 5aH;JUKO4yL1{SYgh"L>&`|̤w$2d,cIn˸Nڠ6$~R$hcDC- no,\&sD.:_jp) #/'Uh{'`kڕ@%P=Oq %&4317sQBh|Z_ xl  ƬQӦ:a 5[tM^t$0a1}Z(T_Jt!7ǻY3reI@O2"g+It2{mS;wKDnnU{ydGMhN#- 3H>3PB0O7Z2h`p'M,k}ﱎ&Fh?ޗQmgaZOg;Zsd Cpj]LG!?t4>K F,Ի qx8*3/mF`$RټXF8X5w)e9w.JĜ=I Vc#EˎOH9L D"hFvπˡrkm&<؎QH6xry\FF|ci $A?/dg:<raT I4m5$d+|8.˹Z75΍c5‹i4L:vjgPYH[ 0")ءGNLz/#.$mO؄G =&yhL%'[ ,($ٯj?q6 ZUГr+Vf!OL/rEp3`:gKG6 ;Cq95=A //)@-q !O Nv1DKk^mpP SX6,]xɑ~T'D3Cf wx- "5 nJ5@sQ[m.]Βk۵(#(ܪ',x5vAŤqk B۸;%1>α02mchpDXX2k%%GE A[gJ<$HVGb鈜G[~2,ӉoT%sPqu$AS_E3j [♿`繝y=잲l;-\<(p5{c3<ًC/Bgi?\ƿ8фEk\>]W!RwEJ? rҐ"\ef8 J%\ƛ,Лz a6*V,G2iXq?"1h jn4Oώ7K{)z&᥷O:'&j0,ti*B}_)`7"f44$񓛾xɄrئ#3ltw(]l-6C3 %?-@tJ{IzdbFT]~+__Y o9,>BބmHK`!4(sby%ϋ4,@/H1Vt }z+8,?9YRClΣ*X"d6(pk(4mzfi*ND{PdWf>U1UuT3sR 6VJu5W XĤ q;EtP15Fb/{r4QҢj9LlܞsuhXhB7{/l[3N%L+S;暗[NB L8# ol$"^4<td~?eRE@O؎AV`nҊ <$ kuNZv|y{$G&Sw#gn~o Oo3'.N%E{Nh~!?pѡ>TtO($hqۙ?zA`I\j佒D_kJ]lm0?(r WnNB|^:Ep"BmiKٰȂR;oz⺍H=р'{z!5iLXOU*Bw!V[!C2\+!4F_!&6Qk=m؟oR:cʉXN:Y:DY'U>GE?Zm*; 5rz5&Z 0m59Z\k?+HDk-dE?=+GmWugB&2-ہ[Ձ̋2trQ`]>T=?@6)3<-6O^Ƞ s@?}+M3ChY!X'%Kf nXZ6{~m.}N`W 7ϨY2rF 5ϞDxXǽry ])wg!xSI+pvp1Nڋ} WkBTv\ O[J65o McU]_i寙x ul l_Gh56qL&,} z= F7OW_i?JR0#P#*Fa(:=ۥL M[Anx!=;Κ# 9 }A~k|a&[x !4r8ڃWpIf/&@|-r+3w"D7Sƣ0gHua馓Yin (mPѐ08WQlX2))cZNyGqdP?iٸD >٘W3װ7ؕ aw %̰\Zm~3Kԟ1jڊ#:v;^^sj[Y 3mҕ< l+m>w jo+˘O,+`c֖KK=gw">-oUʹ{UyCNiilp̻jz[TO q[Ș4!a~(-gV z`X@MNƭsǰQOw4itO膵yrZDomqx Tvq,n?NBʪ QidA޲^=|-!PqVQeF'ggGBo`e]LPx񲻘i<EBWu-:7}?]-U J/; uCD,$G낙}YLWh !VKUKWzKbU>woؔ$0aRA)tJsYQ+J"6tvQ=6f{ww*JDj'El zNGފ0lFF_.)u.NX#J](`e<_"N-݃?/68sF IqEmv6֛o0i; y !%d]1C:H25upb߷]KGy[ O1exW2UWc18П@[:#Oh*Ty׳J :bFp*yUO צ?+ L_]зnPPbzc+B+sOnἡs;EA10ꇡVhi npU ge)f7*6#Q7 N* U ǂZbX$[/ dT-'/-[O7Ư͆lwqSݔEQ(N|G.-1Scxگ`iHU}@\.9 dPTk2Q1L#N?JЃ* LY– XZA hy:%sJi5v g.Ok}D&"@ WD0 ?njX%ԤxSc8F!S[5zEActplw 2k=`7̕(dW 7nPdN7Nү܂1{WJ ׸ĥ;Kvn`7UW|/р}V [('J:{.Jh3XV=I-=F9q*_vKz|R ՜_gW)Ic5@}T߂Jwx V۲KJ y>W=NR]^g:Ť>%kC8EVzD Vl+e1N7Fe/V:a) ErI2wGs56resW#{y x]PY*+Z"c@BLRl9|3?+LMtgtਫ਼L~*S.`B2@kDаk8]5U\UM ,1/~+rm"$_\SGzN82ׁ~eH.$= S -ҹ=nf>Yd0zf2;;@B_C5KzK`L<8y1qeik.$y[]Σ9m2O)Dzi XhWr/Rg}g7[+żƏFA[nU mǯ/nY'Lj= OD*=f )]cK+r+5yH_|lu #kx= n7h|e "_h.CXa+=qN$_Sᴿ#xpeQu2EUf&_}o o,QSeiŸg ~zBK~?rSN7);/ $m T b#˚Y1 ͅ$5` {뉁 #T)1E #9аuuz*P2j7e:Pr{&뫼SPLْͩ#y B9kRX (k87 +cWxErq\S }I _ .R]ڰ^{_-Qj_vi>~UwS: k (a`&ǚ'ߍ|nO]ڧ8!>z36Xs>J@~ `3I{`$t1@y`j[&bȑ}KX rJQTJi֢`:S\&ܷ%J-/mK`D7;(yqHxerYEӫbܻ~*#TX覮Kl78goF% ͋6#dR0 ?](M.OȁT$QԟCe,TzVK;{S1ġ?aOM$Ii<G:)YU>2#AFNY '?|D1m y( N~u@|+sM>獒KCjueI`䆲Cbtw"tXS7CɻҕP/DZ߁ḧ́{4.z#,mts%ewB$IsU/B\nZKNՎ]|M_% %i@锘wREԺ[nLW$M$~&E յaaڊ¿R\Vgqu`HW}V&H``oi,Ea՗وi UACVq^ Fܑ$/xRPX[b,CtW?\l$ فruRQ5su]v}l1 B7@pғ`q^0޳q&22튭I{/p] /xU:A0=וHΦ,f/8,/-v,/4{1WӕU D/xH•;tCS)&{XުI)p _t F솻7; '㤦ؕj+P(ae~ZEDc{%emNRN<1 Uv_0lFIuZїUw? gK5YqC, Iͧ W&~޵2Ŧ{U!Pw$.5ibG6н}ۂWG ̖ f"%/-2dMi$;&*0+uG1QȇrJԌF4k69b[B̺ jP'MC gC#;R8# f~9YK+4sO=qE>XS$hY3=]Q@[i:EЍ|FV`4F*3L810io5/C`k8p7H0~dqn3!~O$:ik5%}y "ن9ץzݟrTl8T_߬V a&{3jFz[sJ˰a>LX'#՗d?IVIߐ-l'^K7LsY5Yb$bt_l!&8Ѿ@ wrLȳ0hf3y=~nWZvL =;`Vgb` DRN.UEb]U Ýܥ{(%81?@.lm'vP22c'f>@W_ML5``bNfhm緪Ѻddym~Pē~@NoERmXt#C]5OcM<EOst7g\gw*BđI؟ WYSRY`W($U@0oJZܻ莖HGC2S{uU} چHFCPOeelŮl4K(\ʹFX҆i-.|䖍zCaDcc($lQ?j©{`vXlV齨 ie&3?dV /G> x<^L`H8܀4]@n ]X_WE:."`DE IoKyemׅV%9StMifs/6]VI.ɸ2XB& ޼Ika'khp/^I46]@.%/z֩Wo#3%3W4|*<+'Ӆ .ِQަ<hq7-=~.sZo4c/K`(6`'df|JAvUdE &/:m.%a<^'V&u-d}؃Xw󀇃QdRws>sP(֗'syT_:.~M@C9[z$%$ u,6&87iSenO+!:qK+EnԐT.rުN`KGFT},)M7k=:XPrP(,uum f]%~53uҡt8h(=H?X5.ZjBj\>ycn)zOarODu~Y!09ߑpҊ& a8?qN]h!s%Mmj.zCRDT͙`kD`-iɊyی?K4a3K)YCHi˜,nS=4Vs`%wיXq1Yh$]We$st=6tĀޭT&XGH.gvHy*`SVqt)h]hShxLӎ|릆3Q-ۺv;O*0]o^s|k?NʿD}E : teF#|ᢠG(Y\'Z{j(bycȿ5wa%櫥YgC`ZO#iӖzY\"OE2mI̩|t]kwq>g9bc=c^QK"9!}~Lj74f?YVB:a!pvNfZ:yRGJz^3En|KutyURB +MIL'nH (fbK@yq6,T½a!ԢWBitPTt)V˞~C`Ll=-N1~S}{/y&U7-s nQ|we%Xw'tC'2>u&2@bՊpY0#]ڪds!c^Xň?!@bKf rUR\hBlQ{^Eob8$۸KZMބ GKM{:2G_dGrt6`z*-]'WN ʲK|% 3ϮhOG*M8(,"Y\"F9v2sAf,T~d9Yl[.ZgN |mrg7  , j:*4h53hI:EBJf`؋ld`5;(%cBwYHƪ@iHDB{̿ $9С,c(FBЅUbĮ#?Qx.)d/F/5 X&Ǚ4B,+ҫuYiޑpC̖E+>^Ic"15_-ET,m7*##?s f2qw6{uA !'FFOE8$YvC2fo<&NMvף|se_ ,X),sY9t81Vg, 9聉nU+6RkD zjwq4*JQE9 gf#YñtYJZS T~ ׽Wd4r[&+kKgz4+z:I 牚n7FxjR6­%r_(hm":Վf`Ꚃ6[lb)ѿLKGZ^W6듁ǚ4,uӮDI|P=DzMRvKݵ mIZnqSKC;.4{&Gc' nV\x sD;A׋=B}!䖕sA|P9ýh ܡ.1b#N3CzIiYoz ,m'Bv Kׯ;  \Z ¯^9#-# 1{m~ j28O,J_:re. U<7e%`{pF5WhΜE(]MT+Vm`/Lo×0 '%VH&kncnqiL9K۩}^A/ImmAnvy}K=ȪrL9ZEW V~δK^\$)w$&֏}+PUJigg&Ż"AV]G(b% n^kS܋r~[:  qPv(ehM2 L{M.Qyb'zθDn9$eTG }q{7|3z<*!7pmP#ݹϤW\L (Jooi5&嘒H5pE nFMJiʭ^Gܺ28PjBK͵|ה Ű -LA?/QɠEtŐ@?_f6$0rCa<@8GJ2/ëzhʦD?~yrR4 I"\0S9$u\I|ŴD)行3NxN'Ǎ#fw$Nm 3,o }-8ܲﱻWrhB;w+ b]}%qIyb hZ=FXoR%C;bY'KFHOvsLrf9 Т"@'uЀUQSa7g1͢n$ʈt &(0Y,d߂|^:(͍W)YҢȖ65} (QYl9 {1b]&N 7OdWPdR#d3"Ui -6lrcP q?w]o,;'ncz akHG3EoVDKㅅ*k@ r{31K}lr;~vP) 1+<OOq, s8 f&"[JԜ`4)eܧv`J1锲*TVb 2sBZNh_L\ݟ U?)euN Tn0#1`ig~?Lgْ^пOUu|Suq"Bܧo&T# 'TNCCfcD)7¤;nScKvˠh<;5A81N_mHme=9)0&LWvĎ;'`}G7P<E4V{-̱+V9`GXL!J WJS鉠v١KBӪK_2Cɬ;|o{m,Ne@bHO~LoE2An?9'CKOw5I6r`&U_.5N8:قZ]}r$E@P0HMC7Ѐ[7B H%l]vpZl1w9 $)yoWrc^d` 1et}X@ٛItaԾ-Y>hy^NCrb^!JjWzB[B]"Dܤ|P9v3Fr%KwPMR EOswqOwr<~?  Q|ّ';k`ڂL<%>y|U`Wu&p OJCXJEw3fѐM8$˔-Ї%ڭD!NR^bIX <9fP956t֤H2_U^ (bG-PzAM~V-$ƚ'SÊ|VO-/_J Y>tAȊ׎qsm!%Ow9{,:9T1bo5.Xh\$ބ[oljaHYd>ȹ>sٺ (Z"4_T s/(ZgALv[I #`]m T'`jlzM7S=wa"%~S~1x)t"g "lMY˫nͣƫy8abCtrV7v*dަ\^P3TOCYSgxb_jiMG/dhɉ[i$))LnXR 01qY.*2TnZ :$HnYV KQ&FiaJ}KI][Y҃)D\&c[<%a}λgRqpH<.̹u: \=A=(SGqgرd1z)Yd۔b]*:T]`x\c^RNfkp,F.j$XZyCLVzG`ˁ8 ۏ";y"m*I }m38_~dDb,X`HC -;ffO؜ v](|:40Ax5swBC!aY1D# yͨ @9 <R` ntMazVE?[o^,8[HKfG>]O=b3`vhd ~/1x we_ vbȉ>Qt$V_1nia uFI'q[HeYd!kCn}]h<^Tp>>G݁͢)ֺ1 e0v^]nmQ?8# OΘq{YmºOV=sC]PDUW{eKKܭ|s&*@(g?9¼=W&lN u"g +&XTgșa&G-sq)¢ *&- qc[ww˱JӢo*KsۂYƴ(&` +phw !#~(n)jMh[iq?@]$j}&eV|;Ub]XntZG^)vJm:WvqVl3H}lwYы,Y@jVO ֥b(+Bxe>Y1#p%wQ JVkR;vʥDJ~ЯV Si$Eש\x8m#LqgA݀[ )V؍qcU ?I-}]U+fO }䎇!ٙE<<ߋSMTOnId1۪ؠ~ˋS[Mw-Uu#4";)]޴MghY,fDL1T^P6c3^APDToܑ߰c2?/֭RA<5E WWtTvNa^Ё^y.-/PlQmɓTa&uBOg(ɦ{+rvU{U΍]$lLS7 3FLR~zxo1_ti}Y/[rUް8=ge^kJڙSh7V^YU瑊 ح+>hGz#gs!3T!;& j믙 sJ:jeEۅ) wa}jA3nlPATgЊg^M$I)ͪbHP g!+u~O @$tYW7V<-\94KMo9^JbcQGo=ˀ6$?3`Sr?dƛG2xew.uI[M%HieρVEEL(,U7kK"GqRאǼ^|B.H碙Z/t1=^8/Y(džd[<sT*ͩseK{!Csݹ5N={JhnM3XZ-h+.. u%7\i0Z*|m&\&(9߰ewc-jX۽)>`\wREvlHx.I3nCA$˗ӥ%Eύfe=޹AHØV;}} ˟هNq1պg۱ىv6c{_ΐp'&;<=;w_F!w1gX%Z/Rz7_#5hY ^Tt(ȹ sxItͰJ)(hߗ)|J Ok89|24^V*ɉC9[3UJU{[@.}4)R'ޟcOTR%hmL?$WE YNɔKoBĪ6!sC%M-N:9}F!F1 m%辳ImjYDdt#,IW*[? E%FE0*iRW/"V/M,@Ħu;x3Zf!K_8fۮwz*(bi>uEQ˔ͯ? kPO˵ ?ʚ%k1 &!@NUb~%)Kx`֌ *B숵*Pr}`g*?.iSQڐ,#uW&dYOURQB0KӣI]/Ӯ79XQB'#Zɏz..E>#DFH?Pٽg"3y]vHh;շMS1jm.'+ӳN:5Wo])_3Kݱshn)ָDj*R~k G 7%a^[jΉI>E%Chfگb20,qK$)oE# 3(k5- (唫Y8)e"~&އ bݓ z:(\ϰSÏQ_L9d\}HW *-Gf!7~y^m ՊTy e3/\lSA_h.0H{F(nrP|!X>RkN6}'f𝆕mj0Tcm'u9PǏb=eZ4Tgc ǘy~/JHtjUp:#N5ސEc/U"Eu 룡{E;-h6N9U: R?3!S*8^GM7f6iPSdad[Y&?!S78%p_b~*eto((֝'õ{,]䟦B@[5x28Tîs6J9Fcaq#ٿՍ"|VmzPNzK 61 :8?& $E]{&kxXv4#t#q6:Jb_%Wyt7{$T ;LWPțsS{d 6, l[\5-T13Z"C68;Qܔd0n:`_oaL %bG;~:,] "$`.6uqW}#p7g/JojC̶aC.;7O:7AШ)P3I(#&=C7 F27 }"G.!u@ԆJ=w/fL u2rI=Zn`|%HaZN&%/aaoa(f2ob XtҘ+@z"6\߲ԣ„ޛP|C4فm^~_#U_j]^jJO;H$Lqooub <{κy 2Cs 9xݮ/UcZIۍ()wY# SێvIN&}^Ɋic'>h҂t[x8@3_:K ףI9n* aŷ".z\yTdL\^` bp֜C?q Gh%[ dy>&&IT~ JD~I.R0όkA$5(cq&&]Ci CIPX^(@S *pUv~un mW5H ~;55 + _* d֠^ s$kp$)=S}QQF~Ց-^a"B)_cn݅[J,Yם}6*hRxUІfG0:E49[ nYUnՋض|9ltOmOb"U^ _cH`xMgR6FTFI؂z-e ]5&p5Aְg|O!7 $1ߎhlAs IlRqM /oQ}FS")܋ۧaa3 {ӏAO9)?jٔ6LZŅW&Ǒ,e _,llJr256#ZQ Y79.4͔`_$ZJyݎ 3@?xPx~2,ڻTBSFK }w8>wLh)#4TZNm EOx͆*OaEt& g/`27՛<XR`LVUO-U*A>ߏG9KĮx3өC"X%p곰j:ɗ~Ui;| hh{32v 냣ɈqYݹ2~7elw5I8-O 5j>,/lJk}E^+̎&AÉ#z}jF/]=r̷Ml:[~o$r%+.V)|K=Ir+|uڕEn2 lA+ā?n[;^O9I*܈AD{ {7getj@|ch0PW݌] [mf_jMD8¡5cl峪XeeLӱC1B嚺Z\Mal,rэ+ ^V%/7&9 Q/\D-ڮ9|*-(tx-i91- K,a 8AՇJx=U>Mx@ߵ73N?jUY4u[gW"X2xO4Rq/"i{Yjd7]3$ō*Ax!M̓rOIy5c#ǝ`l7uVa;N։Iw=Q2"t 5ZPXLH&y{R(-#)c Mt*d$\TUq4 TU)eo660-RO^BobŨvq>b-#E&Τ]:C& ]tyKr25 L|n!# HII7#FvRƃZ?e0F.#igI9iyf=Tv~n&E YDwi n]4GRowr%k/3DT%ZWD슽7!*7r_E^elxTeKn_"*Ƣ-𥰅a5Cil8Ij(u ϺDF7ϫc5$t-ܳ)CZK*kg C g!c6BX0{7#קK*NδbWL@%8*% sllTaxbpQ!b@0Dek_6zϰ@W74L9wIJ' 6(^ ң>W\%=G~hI8{ȁƻij.'V?( ^։U^&Gk_E}#*3lKgh ]3vҬ23}PGT+gvIxv}p]aU=ܡ1o>Jl/=?Z4u3aŢ}W|Gzb<5:8&V0}8xOr] eBQS@recDSG$;]'q򗏴 Nn.ߛؤe_m]|r;eGEE ( p`3MUE8wP/ZH{zG|v2Ϟڲ]gAnT@5CC{6==VBßIQƹT۷zU@b: r҆08 hX~wǑ!6.}l7N7 d.[WpO@6ȊG |ITIًKEZ̒i(QӿX噭~b ~kf. \'u@8 -3"wsh%w{5zCʠPN:DűMȇe:BDhS*u1C~-K0N^rdiM8R"?֖\iPv=,C{S:MhP Ӛʹu4ꄨѰ`b.F+SΠ)&ŀ#j̰9;9ӭUCz;m #Kî خ_3y [2%ZnlyÛۢ| Ib/.})~<׬EU1ZVTWCyM㎯H@L55dB`>kq6є4 mxo]-:^{+ѭʣU{hc8((,p"wGX^)7P ޭ<=B%R1Wm4\ry/C,/i]$i{X4z)F8AQĦ0 y"4]fd&+y<;r$dd1cK22#NF/Bo341Ϛ=A\%Z{ $^+m2SVoTM5 4v6?p v"ToF;S+"'_B!~¥xUHQh?qdve!eEa#tcީ"ƀ~815 ՝"TGa'RIf\箉"㊖n]v F` !}Ƕ<2Q{7yC_޴ZJäp#mD鏶Jc2x};5F~cr ̿]57.S k܈ ʰqDNw(enfMmk0 /<5VD GWI[t =z뻖4M,c [jnITB>l.ɹy*Ɔ=L{Vu[G}5<%;OQ,=9U)%4CJ`%6xl}&KRPW@H;ŋbFpth$̦@"1x簜h.$hf@~RcFW B9ǂDdn-9zu7n';"H%nn!1Cw,R;ܾXQQ0qEd4dH Bo93VzTŧMі3lR+.~BU:XO*lV^ ;K$0R1uS*@8/o-ʌԍ4k+H:v%70,̌)|uv"vZ$Ps2A`L 핞DV=vlïT'qP~*.Vxup'dNP/?j. %/Nť˻H"CQvoi)D[m|ExΐlYqݛc2nEt{`Z"Iªg!qYsًA (zR9/2=+T\p q~6I݌mժ`8{uWjsid0Ijk S%ymGX~$p^s4:&t \%(vj&!=G((⎽@u3C%,Xfhxà'9G]C.H?: {ܘ"3Y\{rVc "w`+X̬ ~{HxI*D7og8*^XA0}`%[ Vli, VQYM}_= 5?b>wAM.-l[r g#<@в'2ȴp(i*""Ãd% q).5׆tmˁ ()YњX !K@5Kׯ P״%"E3횱`9ue6"vp(?9&YH?!Kdhbca2ع+{Tz x% hkmN?ZSSpj(a,~R԰%g{33e4M_?H1*8Q;kbú$&{_K;r b|7 i/m2s'&qVFváMDѶ}8Y6"x\ DmQ)C?#=DJ׽b2|kƏ%ys5TuȆcN A=V1ô/y']KQfbtL+6Oݺg&-4cVp̀t?o\04|d:QeGRc_U\KBj."҉i\s{GY2ǁZUQV6-cmkڰΑf-g -~>\R$h$&lDr餫7R7^GH &kIpgv&ͷ Q>Fǔ`qCdHϡCmiac||D^DT}D_kU}etXyxp|eq ! GC7wZ0?~ gѐ"(wk67s}"j[F?P~{'kibGXڑyTIKl$ ??n`2~Ӑ7NqAT7S{$RȨn=18vS-h vCA@UsE5Bk *F1v,nDȾS9Tg4[qG_Yfފ?(4"&r˾xsS `Ȯ}e5wf*H]O@$aj?]Cz}N"**M,gqm »"R"2!Ń e/2z,nX+9o:&{oɁxȏ_ [frًc3s}'il0,@n_OQ /6]! ozDH~U 57ҿ @Q SkGVͅ nf8I_* B[Hw0l΂@ ~8}^]Hh3%o-^Zƴx t$t 20)$SIa0zU)'ϭZ^N0/bR vF20XrV3*' OoNDe˨Z˾]xwn!Ҏbl!@AӒT8EwedC _Z0X)qp y"AA8j؍""R1VqC|\zkjO.F:~I}hwocҿ2^r (S]0je-;'ji!~N?梡?]W X$4x56# $wtRXu#(E+C2lOJ:LDbyك};tHWP(-f8;nxYblZOn.leKkNJ{B&b Y =})>@Tҳ֝qŘvzԏzL2{E nJ>o%lUywuWf^$x[6N=8SC{ՈVS2X٦4;_qit,W'-|g<(U1>"B-/iӀN,fIQ-D/mtAц,^Ra6ln#ޘ SToqy<"ɺHAє;m`F;p'V\ vP9s:o6CXQF;tfa+9ۓ`r+?54T*U>~Bi4w5t):,'+S(|)$ sJAWwʑU pawQOwŁL2W ɢ0CPPZJIs|oD~c"$  oT`+VŒ\,+IM[M.31.Hud!bMK / 좌_`|mFe!)/C3U[Fv{`LC;S0q6tRsĈ^_7/S);ۇύ!S-/Aߨ1}VUGi' :(*~{޸=6/>ϊH䵒DJ=^5PxMh®1->.^&f91#uv8l8JC0˃ݣ\ck>):GpB T2*;]:pK3`{;mE.(x;h­'E"pcp a)nxwDh];޲ =UsN%6~D M&@?dƘ֜EH(8kS W Ă.k.U\#l2aڒ.F!7GeV0*^RyVap ȨPznuq 5y 51TЭijuΝNBt 7}}a]h2FZjj9Ӷ"%2H/PƄql@G oV=,V4w1 BpNdH)K ?\7 }ZDk19Wh9i+ |sqwAT 4b2oLL x80Еfo 3SC,d<Las[,)VwbD( TVyW*SCݓJJB9Ybw*;:raѭsif:w7:Vd|-o\2-3?+QN7ܼFTG5bqc?AvӬw:N헚9O%7wGp緧oo#ީY^$ WHQֶ YZ