mod_ssl-1:2.4.6-97.sl7_9.2> H HtxHFa ?*}}5g']H&[Ŷ %Sվ.V@2MW 8733213975287c621c984b46b8f1ea2b7775bb10Hra$,F!Y~Fa ?*}}J̓tt4 rSпCazD4>9|d?|Td   J"* ;Vou|L` j t   (( 8 9 :-&>z]BzeGzxHzIzXzYzZz[z\z]z^{.b{d|-e|2f|5l|7|PCmod_ssl2.4.697.sl7_9.2SSL/TLS module for the Apache HTTP ServerThe mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.asl7.fnal.gov~Scientific LinuxScientific LinuxASL 2.0Scientific LinuxSystem Environment/Daemonshttp://httpd.apache.org/linuxx86_64umask 077 if [ -f /etc/pki/tls/private/localhost.key -o -f /etc/pki/tls/certs/localhost.crt ]; then exit 0 fi /usr/bin/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 2048 > /etc/pki/tls/private/localhost.key 2> /dev/null FQDN=`hostname` if [ "x${FQDN}" = "x" -o ${#FQDN} -gt 59 ]; then FQDN=localhost.localdomain fi cat << EOF | /usr/bin/openssl req -new -key /etc/pki/tls/private/localhost.key \ -x509 -sha256 -days 365 -set_serial $RANDOM -extensions v3_req \ -out /etc/pki/tls/certs/localhost.crt 2>/dev/null -- SomeState SomeCity SomeOrganization SomeOrganizationalUnit ${FQDN} root@${FQDN} EOF$)Y@QAaaaZaLaKc29eef01443a1e35d9eb0088a0ebc9fdf443a8632bf0fde83b99e5edc46691df88f04c415dbd1bf0d074965d37261e056d073b675a047a02e55222818640c6e8e9bebe7af1892e46debfbaeae54183e68902688170d71bb338963ff5858e5f8d2db3d123a987134321f309c837e96d27a3c11d5e7fb9ae6395255d2cc119d0f0rootrootrootrootapacherootrootrootrootroothttpd-2.4.6-97.sl7_9.2.src.rpmmod_sslmod_ssl(x86-64)    @@@@@@@@@@@@@@ openssl-libsopenssl/bin/cathostnamehttpdhttpdhttpd-mmn/bin/shrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)/bin/shlibcrypto.so.10()(64bit)libcrypto.so.10(libcrypto.so.10)(64bit)libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit)libcrypto.so.10(OPENSSL_1.0.2)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libpthread.so.0()(64bit)libssl.so.10()(64bit)libssl.so.10(libssl.so.10)(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)1:1.0.1e-370:2.4.6-97.sl7_9.220120211x86644.6.0-14.0-13.0.4-15.2-14.11.3a@av@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Scientific Linux Auto Patch Process Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Added Source: httpd-sl_index.html.sl.patch --> This patch removes TUV branding from the default index.html - Added Source: httpd-spec_sl_index.html.sl7.patch --> The index.html file is outside of the source tarball, so we need to patch it in the install step - Added Source: httpd.ini --> Config file for automated patch script- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)/bin/shstronghold-mod_ssl1:2.4.6-97.sl7_9.21:2.4.6-97.sl7_9.2ssl.conf00-ssl.confmod_ssl.sohttpd-ssl-pass-dialogssl/etc/httpd/conf.d//etc/httpd/conf.modules.d//usr/lib64/httpd/modules//usr/libexec//var/cache/httpd/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu?p7zXZ !X] crv(vX0b6q.hnLjO uT ߨ uPAFg-!;! a̸N͖=.{ÎǬg9rͽa2΢^m!w2\bOG8^f+D"GЋiY |%FD#~~m tY(31vyJT A+'!,sGKS Li$qY#|>nP4BClgrwbApQh0CQ4$Z|r&6k];)SO7<+3W쥅im%PI$(RU5ThZ+MeE3w2&IsY+6B[t== H rbAцRw8YL$BN 7lR:{8O@P\5hC@8Ʋ{%:5ϒe1B +$}7`%)4kyȮҕ{%F@'l(;G.AHVo{)Zkaq4PQx"P"$_1cV%a~}hU?9&t ǡhn*J y]GUk9q.F{Ah7(=$/"ʅ>(F'|*J,QgRV? |LUb)6]*zSP!Gfܸ_\T9AِOZʸ 245~R 8&S{*a'3Ήn-(L"ZM .b+}|uZ=k} JD(81 [:Qhj~0*8+hŸqF:`:A+,d^ >JL`/h .?9MłZ&->5d\iN DT7uHHE]33"sZz2g `h@CjJE(?9>MrL*)̛_p&qrdj_ WS8I cp )`$- (G t2jBrz"//{ |ÿe\屝Em{tySWxY`]2KKP&XQhºe+' SG,wNd@k p4 uM.IM0t%VװbOqe BVt2}A?UGeF禝vcb8_iڬr>n] jd#~9jxl1BeOtl*U?k>̂gvTd1l=ȡ<;(=}j(aHn}1ط;H=V}~r\y֭: p=析u'Hp"{cobxwrT _cq*Ң @B?b,yf8w˝?[k)O'+>7; jioe [W32Xު HZG?ҘnnJkJsIwV-t\2:jyacSGqsٰh; ͅHm 9ZMMX}cS1]vs=s"[qU0QaUR.C~oKuT{ԊԺ=!fǴ3'zyϷC6JJ\k34lK#`7y208f%:[gnÔ'I] \WU6ީ+΃~1,i`q1lޮ7&w k!@Q6(eP>M#+&Ɖ>r4hʗkw:SShKʃ¤FJDX$qtzҧ{[91x`Ue6?h)I+F\\aE hE /,g[hZ?\Bҷ3/zvA9Sx pt)EvpG0𑷧Y!ic@Ym(KnXw\\pGZOvh9#i>vm)_8}GJ%A^y6ٿ&7 vH.vgLmm<κpkhQRدOmÏäk`ktcF%a60ސ [C9/nɪ߶`T^{a&pN/u/)\4Bw]_+}Y !d^$BI/~,fD@Ț}ł+b %kJ}Ծ0؁*Lf}~! [`01O\`j- wjLDz~'( 'Gb-˿bRWwa_7 kaϭچÓR.jSܔ!a=bJ򮋨d>J́PCpvC|GD{rTiӽxa"Y/@z1a&Ƣ>F-TLd\@/>xp_Ⓙap t*ҰӸK"BqPuףJ}_  t1#:}Hi~"78ԍkjhrCo0ٕP:ҤVl|P!f7eFw :OCq Sr = XJ96uBm$KMV&wM84~0c옄V~7~uX?7yw2!M ,wns'U]ǨsφNg?AШ۷dDz̲ZI0dz=#G.Y(sTנ=@amZ*\Eg}[7ɼݢYz28J!2.:<u/Ahh R_b1ŮI()OVPoܱw{OX\{'Tw*1? NE$AŖ/ W$tiuemm=ah2C~3x",X*"W=.t@Λ`J8G`hx׎p@0vz[{dk@mp!5JAx $ %Tl(^YCh,nS &MS3P:>7/7EDmJ~P]}׎%G?BO^_Ep).y=Fz\fɃMb#3bXN3/2|,uFԌDקΊ4yYE%3#>\f)g YW,g΂&`,r$'%$ DPrX!3hyO)7LSIb,^AA 5E*>E@@>Q~9xsw#wY8:Wr-wљQF _c KG TL!bdr2Jc3ȗ!۾_|c1l)u <"JR ~{4C;`{ZSOhkdңKGQE8dz?wuNXE{ogeF-u6*kP,Vf],W fN͈:szi﵃}wCs( xh6@<鮏9CZG1?*z*uԒJ@5t.4zoqjӭd߿S(N^P>Ն&Eűv']Hrrħ`<^˼q0J3'Ƴ;=eݾ$(IDyjSט){ vb֦gsG Ak=ᱪ{]ƐC )FQVo£@fv$"n~Ԙ 3I{Og21)' ֝ B1ڐ={Z|+ IX %Z'>&x$*͎TѶ]8t3ޥ̓fα_sKU^Iw+w) -r,"(44H$Q"A <2%(:j:* [gY6M,lA}ٟ[UIQ $2tGDo&PLwc-͞PC{8@ÑE`i'%%)ɜ]!cyrp^cɣtL gu;yb8Yv3OyH#.7&9a1wu7"l.}]L[o61gkFa̅4C+.kW4M80UaW+Kf$a6Ǵ⒊.N i `bSL]+{Y+JΧiS=Ûԥk8uޖqۉ>/όAω~:Y7BC f2}CpHfOn1`~jT*_߶5:b+!wfpAϲ\XC"O)F4Ň/˸Ń)~M/)=?FQXr %YK3Dz^&wMJHJq5P^IYJed* N5̫|YX7},pebsVP9|yMC%VM|[EtZ̜`˜޲҈5ޠUp{(>(l3_a.\_η/r.-A5֣== l dHt/W#:\1*^P˝T_G#@P3o&\?wκJ;X?պ BSU),R҉}5=T8+%Wm躟P۩tɚj΀p6#dɅ sUXv{ȝE! 2(;ǡf]H,ehշD/ ^ %}\\4Uw@w2%rP{2^c&p ǶY2tX,~ա_O9 T۳@s6J3err }md C,|T)&Ŗδf$ܖ/ Ҏ[e 6)*t ;~Ypmi+6c7ĺ#n+q'ݎ `;;jn~Q:˜Mz[޽N[x1&sjHW4k5%yCY.WUyv cƣUqGy5fCc"VD-eRvFCeRRA<ÜfbSUETn4$#OJ`hLtF KX? O{+羅 0Nmq n\(e`fE Ci 5&߼qׯ-"4ƚ3pֿC{nfaЎ *I`t̔Q͆VjšW*>3'|=ԧ枞 x+3[WAdK(c,X7mN\X@UNru-B/R< JiȂ~TsLJ.u_O.*q/gğ.wDou5̎.#3X9_5Mz9u|q^LEQ2K~j`&BJBI>y;yye<FP9ϜCJC$O{ -: !e6籟[{AGiŀ-9\@?-l8gh':"©5'z7Yj=/U%',~={.MYGg}Eů_|UͭHO։gbCR-НbKiFV@[<<$Q\QwZN/jz]YՄ#Y ޜz ȿGjhWa6%8H dSʷH5`c(S!b7cHʓ͚hmr${ata ѳjo =nyiCbG{ff*DYr[,7Fd|/(pAk~VߟNF),ru$Kp93suX2U gov` i)+&-y2?Tбz;d&%RC $L*r.{|}ظGs|o83\=MܯUs96ݕeWBS=ta>Q6 '<_wefnU*'kl ^t>JE"&y; A?(nm0u^Lc9@,NS_On ǪHiNp]>ܱ!rԔoX_M=dVQqm &<еfP`n{SΧ b i7y)5zxsSިo+DQR{e xB?pk`!]Z[ <^n"zN CZZ))y taKyȬyS_,=">aH^TlZpD$h{65y' < S-jWPc8Qr1]`FB$Ӛ~JF?i44dC ^Y1$@gƛG̝HY ^8v>a@ĸC m Emm/+Af5gčyU%Hɩ3~p7}MZGⶫ4 |-A:9K_\'B_Ȭmb9[vYi9\p~Vn@ǿSВvtTňf\unvN~Մ_ qO{ "2A5e ])&h"Kego?k~8]H}E1jKaZ~"*_tsn4L0fCeh& ]sI҆FdL:H3G筆S!A+'udDDsqɜɝKRDkݙU-"7=hlUJ~n)bg0SAWJj/ƒ!D)w1llOqȵ(6x= U9-VCאw8)&+,T&2H B %>ݖ{C̋$?^c+ee `h#H:ACUMiˡh.KS$+FuD͢(ȈhkҪH6i,/wWd'\AcRVGP5 YDt6#J~g .sgkS$+:A^X0ݑ{ A;KOYx^]o}mxM=4U r;f:_%X TSiH~r! s/PZ //LR2ٍkf[|w6ԱхO{-)n-U&*U~C!,WZWK]4jOPb6uMYY6l'Cq>d]xk/0zi*4.X<~DTy{} u6e^t{wIҫ>K;;h:K;ȡz8hmA[xû,s' & ħH='ێ;2#ީoZX҉uF̬ndI7f5ږBZ",4 -T#D$CKݔ0~l> jPESB7$ay s^%_)C`5s,RbTxƍ3dU(.NG7ܥdk*M :؃'eWȸ/j Vm–CN_!jb@i!?}R2I?]Dޙ*Nv]C6n&gnb͸6f0X3G5| ۪ @^Y*YȴDJӅ6 ӛyk(i<@3H(k5]H2U"$ncSZ?]D%G' 78W9&6 |)*_#i*yKo`40d@~L SQt Ox11Q˦4-|_̭ w?sV5/-(83~EiON]A|hrq"EK^-*R@ mފ!ooB`XVALOA[._7\(E.\K~9 b-ݴPr䭐STQ {)q\Gki-ϛmWx1*4ϱiAsv ,ӱ u8j3ѰȹOxZ`M]+0 nL+d~i(-ȶQ!)NCP2\*\ J O Q__,r'D)'?c6d TApmBk ?U>B:.{P7 D|?^+iH7\k2ɱ/E2{<q"j$ɲLrRq| GtlC(%w:8Q_Qh$0v!/TrRaR? r[{Z 7!]39Pxmh:Em}_( J 'v k .mPcԆ# Wiܐ6 Ӹx8"<2q,Bz!~QviȹoQ%jFG9;m)l|U-:h~1ȍj=7!|1[ኇLVXbP~ eyDY_Wy W4"P3fB:Ļ2wf:=6VUWXJ"CxWOY2C Bu l:Z?ߜ}7-q}@%KSܴ<H)OޮrO?V o[YҍT_5B?w-puwІ<9nH>;IGw?bO%M)57iū?QO j=Q\u%ͿLLZGx] l }KЂ)QȅffʶgϬpw{7XvRva];].*77.V'Lra[JF 2 쏡A䐬YDFF%F!Iw.󵶹((Jw\Äu*Ie3#;&ݤGa*s+(6Uv,Ub{4"diQM,n#(=P, O,qz/ 3[Y} S8@_W=d̓!m}<p@u, nH 4sNp wA`ҠQ~" MԛL\C?5cM:@Q =sv=]QրqDP7 IGtxW٨OMf1hi]7F 77ER=v<͉z-ٝa@ TK~ƁW3m24 '5/~t{Sփ}393F[̳f5M7 )mi49BF&WE JLvw=ҙKi~>]KE2c &?q+Oiv+7>e0O}v7oAh~?ru@ _p샗m$* +2vXT4[1 ğ]vtQVVT3B>'`?epVO9Ƹ-E@5kȰP_Zaug`}DXnA\؎=pf´?E pt ~1iLQ 6{\An,$?k~D*|Z.3 eR,ԫ%6\Rq!&eMތRwW0}(3$F TtdYD|NOB@>ē[C֭m7x> xXa6T0Dؤ\v%%b^ UҦꖥ6S\ܘqE,+Ԙ%X QR/ !(x+k`/;Y!*Dߒή#U [NQt TLOVΤ/ҸoS"HOGQ %6\tEPvc |#tf˲JWZ<">*5y~Gm ܕ^&v#&L"P[X"ޖă`W; L܊9[Z)%H㔎oP81a?Lk|( >_1\MјTp/'.`lCHIIayT~Z'כ-uMQdj_xEdpGR kFel E}PI5=gC=ģ˛`#MMj!Ko|0d]0Kr57)8ZqY!h0^mZO-?G .nJİ:IAEbR Jz, F8nTD 8RK{KOBBWVdSWm}}O&?Vqb vwv^ OiNXպ;ܶ5z 2bZꩳ,SP`W-B)@OnXP 0f9 O7>JOޟ/Nw=vHcʼnZqG@mʹmP)4ל t1oNFTŲ]QDN[Ln 4v iU潰e (~vb|fYVJjc$+Ԗ13(`e?0dWqzӧ,^D:`:DE 驐 8G;fщi3 Y|{#di;s-+G-bS B}pE$4:jm-X-'i| 6}zϤk=Et֧`#J?D^ 0ɾ<!LrJx2"j'Ԋ ]9Bo%SSs;kDh&)q?=+xqb?pN/`EgXP qQ [ߤUa%̲#ov%Gc-U|cA'*܉r`FQha7Fblt\KںΥlu$ A%4\_D qz;ÁIawi(.젠fNu EXܑ / 7t=HMqd{PnYgr sHF6ڇ&}C#6|z%C\ gBMglIοTx 2h%u~lP8N8LC@Bz,-7WGS\,ns8k;/!r(q՗MK γK/HAjd/ԉ>Xkc~ZU +A Ìԟh9ʳS^['8dzD[A͙B֩K0HZnX?S,6H\=:/&QylvA?f$HBkQ13>Td T挴Vެ9q{ l!---`DLmw[h\AqG:< 9;ٰn̔UEХN~a?l{cZR:p[ߝ}~ o.'RHa+}9Nn8ʳ /8&H4W=ɭۉ ;N_K or̤sSim5[ c}fA2èEt;:Ri>qg$fU\ )uR\G4:K}E$,}H{F%~Q`Fڭf,!9 >*V&뀀pq4L,Lq^BYͲ[3^f7M*MSNh-;4¶5!fEĔC3NGp1&fmeQFv_4RငOHʗr@d,9P̼298#-;t e:Wͧ8_|;7i<wߢT/]DTXT6ՠO+ΐDey7 zml(8QDlX{8%\U k T[/ y5%qzCe]0ϲ THжSЭzӈ߫Gj-7*"=diKGגIbKD=ќi,ۜdh]qEzӒ4 h$.<Tn\Ө0 D 9\zwIh;.Y*5<@y8K3 ?=Pv1%(& aZ"?2v$>ʇ #mt?]u*m^tbZ]"PC̫45ET ;;hZ.Y;͛khކ=W4hk~iK)dC.bq9u5OpV,R1MV>ǔ?e׫RP\黅t՘S] l͝a7M9r,R?A;a Gr|z3iR0bVRN v.5 ,NU4nz0;n?8;=gy3C  `\y!^^> \bH\ Y7 6XVHUc W'DO[8=v^E m@5zMc@$R~+B09{k.j?O aúF+_)&_ M4WkU7ؤdV_ɜ}I)[mS6ܱ5-|a-7]dA푐˲Ac\VXi9|lޟ24b'8*/sа*3(-/d rj|ABF:cyLѳՠӰJL ^A$uQS:]Gt8PZ XW4UI7a pMڌcUoii7R1g3w$#Ȟ> Xǽ%= A-kAJ"(]{C^{_n]ʧg-?ݒIrnاE%}،*Ⳃ[I ;X_js \gd[]T~tn`:F6._%=P9sOu,`6R6.fyO}Ho/㏇1OƶF;B54]bKN=RQ}C[Ootd6{R -\C?D5e?e9f2Q eؠ6Q/Ƅdt=egFoS0;wq1PNUXJ{R=]| |]g bqn.X Z?ٿi Sa*vy b^ G&F|s#.H]XeRFSRFpC٩€xVag=F;K;M)1V~ %]-~r;i ) S= 2$SI!}$AB_E#B^i,>_6GУ{| Mu4 LT3,oV!?6c ̀h060zi&j -buGMyބ,97*> 6Is0CSZkQ F}y䟎 ȩT 7 5/0!a`?ls*9 ?G&yTnMٲ"t]a]:\éVokb"V%- Ǡ=^D׎0@2Q9vxK`%s_H1\Yzk,@̅wV *Q^6BdOVCJ)21+Zatwf%֓pvdO ˽Tĵޟ(~*]o!%fpW}ׇ/Ol&iD{#*X 4:T-v7mE ϗuRzĵ7A1f݅i_Ñvk'RaIQ1$9Ѓ.UGcpy.ChI1/%øu^UPK Td<ɒ`/ 9Uaq]pWsбmW;6 U zCv8ѡ\KJhrDmd Xّ~6w88YPulUYQQ&ovчqS+"qa'繮v>)ϪNz xL|K$_". -Rv 0qTc"aɤ5CŨ!U5]|\uSyG RvT+u,r|Z Lt֢ 28+stz9{ @Fw)va߆No$~Q` c;Y [N rRdbE|-+ (ԢjJt}d ⼽{qA*#{>\>=t ;}}dʓ_*AWRe>XxT4ku{w"뎲/ٖ\qJ4+6TSD#}e5w1,/Hrq1A=%i;_9.Cp5㷾Am<,?)kTuAU/: V? 2w]gKCǕkOv꣡Jeg3m7Ꝧ TDOn.73^~QWiow 4^e.BGZd;IC:b,^ }o4ʿyO -}\N!8e;y%4[teiЄ l}~|e46(iA(bG7ͿoanfZl3f;/3 0LoFN qZ_T>Ox/mI4C ;ep5+olq0#So,01R C:$ar8V䋡Drjum,Cy 9]F3X<`YH,tl_v84dyҝ*Ye!(Z+_/_{fVgC|f-9 LS}99Hd8X=z7ȅIblƳ҅_$U]Ro"٤_SxY/:Ywb]L1z_ECyuwo[6tR jӮٯBr%H>XڕWV>{K`6hW}&p3F{g|T,zpwrbّJ-2sPhι+ho%׸#z.ab )hĢRuxM)KjÜ&hb<)/Rq`ｾfA3pleIΧ9J]a9h&\WO_+Ţq Y բ!*?c|CEYϪ֒N Q8CAƛ8ym#msfѺ8\=,}..Q{Gޞ ?^`0%7Q2#o vӬL]#2*+?$ޏۑnJvZ!]4͝}L> BA@7v ȯ oYfbfLWyWDpl,zw7Quq M)z!av’rUyK<͏Z$V+ƘC~u#кG؞ 0@j-ea iTJB^wrjd@W%bbz~q!8T7DhǬ;crߖ';M+'Bphw2,+ b ,ԍO O)3CJJϴy &<%` dC!qY ˨f䴈r|~T{I; R㠒W:ifE8F=q~( Qf6z# [9.%T\}q=+jXJ<[o+"f'hgWgQի1ۯU4^C9VAf*Axio?c=&à6Nm؁|Í/.db4(({!Mk)m 3 G7o8 R&;B<|Z)ϺcO,1kJB# jͺ ԩȪ?Κp1˔[cX0P.^ZaAc@,KcZ.|FSsQ&zƋ4lQ/,s'D cR.D?GIjl[8QpWD=V€wka3+CP8gG)+rqQtY_5B~Oğ6Xoq :NrepK7bhZ'Z7:B%snؘSϛ}k&= 6|}hjJT ݝxݍ%vhX=H{j@e$B̋JU 7?2c?*G$:NMќ{)0"l$d`n+zP=c2|H#Ϩnq{\8ƚj^Q'Q-]RN k}eOry=KqJt(A;29& /KPy?}: \;*\y@BY8٤ozX?dȮzqä3ó.gS]k#Vv`uUM'?uN.JÔ}fH'}8z!=|TD@l lWvk0iሲmk/4  Qc ~9"Of{bF˦V#!/Q`Ζ  T'#0-o ྒ Rz!l{zBduM/n/һ; UN:Џ3_opg~[ઌ'I_yWbP`{@4&%?|nHG(uޡnRY:n߶o[3\%kM-R5ԡ`3H9ܸ )HIOB,R"7iֵ3-|=c}_b- :Jcm! :]R%s>34_*Kn5C+*-UgO5Zj4hkIFw+-Rm.20rwa9+y}'N40d S2޾UISvfpRq!lGѬ'Tˊ/PI /A$F!88.gt/9 ̗|/:BfIS&k 4/FuWb Nt{oid$;5< @&]58쨉!^l:݅!y<߸a'V|&9m@NbOO6}CAg )_?C]FZa QzYq {RmPpd=Ӣx;`4u"HrJk%VX5]Z) DE !se@+!k0j/e1ÐP+n 0_n Da'q GߺxiJhN/#@j}>5qzP7}m0jBϾכD#al(j겛S΋T J# 4LVvʼ3[Ǩ`ZSTw1g)d1~f-` M\}INjR 78H5Snzjt|ߤ⍝;} B.3"L|k,SEn^'XRbLCɼ7{ b.>DmQ֓3b'u}K|T7Lq i#rE6}80''W%cbt6:nq;z:[Ŵg2l!妠֚J/HLV"S.7eK@Jأ,pZ`1{ OmD p8Prԃ0duRr5G2xma|(fDr1Ή'#4 XII|1eNJ:p:H@a*{p&l+/V&eWU(N) Jq:Dz ~>s ޡSyqJVR#eGP&90^ťJҏt/"FM{sHK`+bD ԬXQ&k|扉)Zk@fҽQؒ3Q+X1FOg{~E;a3ﯚZ?z=gez˙лLhU|3pC[aMmrII\DG3t]_ʬ&;y>ubyzC9֭n?w;^R _D#F>;! wkE:T P? U#%%wN,a1 =5y~QS#[3sį-1۝.P oeTmٺw2rG<{n"(׵m_õ.<]7ەѷPKLשTo:ZWG˺&J~'͹pUPRq8&:6rPךDr)Ic1SQw%4X\OdİwxHL?xJ{ޘq(0 eB{|="82>"ΜKHOʞgf4WYȽ7b"K3JIl|x>֓i5OU}:ĈUc^di.Sra3Č\AWK,mVgȹ8+ J}UA n'KiȫEO07/`As *L WԼ75T e赃{S獿IRR[@gUΩSEG%!IIUH7r%2&}p>\RU@hK\ %AOqNmX ?Q}Фwa)֞}<0b?'2/j̃G\QX>ɼ t|9$|gi%8pw;b"nh^q1BV5cсl܅͸u`1㟤+!/g)vrU3dyZ>Yܭ!T(4%%q'_LRVX2T#΢ 16.INK([e4XuA2{B!d(ǎi9>+ҕГr:u-~5ɵǔF(k)SK)~ydSS)С o@1Ndu׌] 1Nih}yRQҘwHu/'"_R<($8KĈb. H;:dg>Spa9. [f6D5)=.G5(@RV. DM&ŚYY4#@9Y[ i2=rEfcL2&E컖FM߿!CQ5J!_m^蹑ɂqdTklTz;m?) mw^CT7/4MlLI2Q1&$2(6˼E%y^Eu fIkU88X=}B2gY D9$ɲY 4bf 5\0݀1]Ǐn9 q$fcǪ4R(_#M1$8#k%tDd֠0%:hmXjɆuowQ6~$5L/޹"zZaԀNpy>;ŸB7U틇!1&׋l6[{wOg{N)&:U.i()Hj.pUlWu@zo/e<6~mnjfS^$rn`4&SgX L1;i{}_ -'{vL 5}ǽPy*b\Hg$K~ݭ׌ܰQѐDiyjpبh2L΋yKTI;IF\RqlY<5%(FJN0-X今g)T]TڰQ5?q{o{ICoe_(p؀kƮa{֦n. ڗsqT4fXυv nCFa("i6I>uܜ2d"<f4Z|?wHװj65çTk kԋ^>c쉨ڵKys[KoOҸ|R'.=b*)OZK?#h*q[Z"A Nn"0Ȗ'M[iR3;d;hrFTM7P8V.]$Z;+԰!}xƅW%QȨ*փCªAՇM6ej ׫ $,O6wi_mvea/9b~g* t#FHvC9I92}cfnB&LuΕm>7Q4+Cf1jN舧!?ŤEM$ ]!mG| zcp<+ /fB 2]6Wo\;281A զ+MIMP8Jʛ|/N3w;p;+E%~EZbk# D)}d*.ؕι(=:&V 14y,?gD\s4ueiz&[cTa(~5{Hb}PDi qnj^"HEؖW QxN3Gw6T`]chPԚB*q}! A+XʢHb0h։C3DWtf5*p($mlͱm*J: Y,KBk!mO7O M0P\_Uq׽4OV8jI\e4Ot|"ޡ(q1{:<*S]o< ,)g>yd{q!7f!6HƱ&ռhFR+1&Ku+ܑWy^^.~,B#r`1]Q4>9xG%6UMF2\~Dqps嶌& uӈ!Y=#%62_^))t 0w[G/DhUJ!Y{~{>~< q[n [!:eMp΃uUF{lMG˚q&^%)SuL<)lϪS,EOϹ X%eM ߧ#?0ٛ>Y;QKw)f*\%V8=ѧSMȿs 3tcKj@"'`/{E^I'wI q6[\L:,TuU9zL"N@UDIߍۚ#;N 2w@.[9Bfw ~ CV^4N(lר}ࢦZtEEð&0^ly7KW9B9vvغjYv4S^f$\k}7Y"С0A:0rY%͂KLӑNbWTi=|9t_uu~fN4:hKds.]~hQp;JJ(fB@->dS(M(e @]Y>&]XKL9h2e2?dB|M y\}^_"$Ŭhr^[ cQ'd5dc~Br~ᓢE[ ar!Ev'@NJ?9C {÷Ը`4qyj1]j+ƑʽQƱ|DCaLy| Aڼ}?@!݆f͉Xӽv34h<ʲL7sg.vQӡRbdg Fή:0jEkkk ]PD5{aXp.lWS.io#gsBNLH#-p\;a/ArlaǬn{5߿bY?trZA`Yzu 4W5TY뻃ɪ%$ R}jnWI1'{ GR{w-O3ɒNRq #啩CjyozSyduo?ix. =*;?JvsȵyJ k݂xH+z '-C K]*1ۢ%`hgp%Jm5$ NwK [f9^hHV%?AM D;DHs?I*#`j, ߠJG7 }PwIZ+KyܱⲜZ6UdyxXl6`h$$2#*-L̵3%%Ej>N˷2;ӋabV/儷id 7dHA#nr\q`rzh%nPq0*`Ls{nԹcy@`YSmJ 8Z$(R٪o'/WF$:UЩ:P;Tc&îYZyDE T|)A]Ȃ{M{\狓jn25S/Akg[xhbz>kݯ C9-AFCc6h>@5<776^Y)&WylruaM=ņH9;^xўUN2lͥZM0e /$:#g'|9l$uUM+bd&2܉WTg.mSS4voDirdCX&Ad @/1aZ6tkMWPJwM7U@\iV; +ZM‘e]p)K ^iXr(*$en>$>Ov.I}QL|â" ٨j|1E *sєŰ^t"sJKz񯘳5t\|s\y`L3#QKKe ppr}\+y$6+bF:;ӊUTlhi:r]C{<9Lq25k.f q4{Z-xR",/V- ͒Y=iNJC g\U0_|a*xJZG#%GIX|=n*AVi35$ѧmUOŀlK E)?;|\>8WqEBuˎPb\fSYl .Jͷ KΎvpgiO.Ep8{ Ŵ$Mc71?ANh.[`?0mRe_]۳qFF!q(l>.\Kxn"3(ԝ#H`6(@%b.W8 VMN}7Iij=Tf3ߗw D.ݓ"f+lutFwPp2 hX* 7>w&d \ X2 =o46Tj^CkbL%Qt2#U)Ä+9`ES"͕'8wb}YA@:&`q#lI:2h"i‘/ c6v#^gMi[O€_^=fӕ_8(u>G;[I1"hI]7Zc!M\ǩ6E,0xH=/|è 6/L-wL ¦r?-oiA)KUtEIb|b9?*aqrd3Wbij`[| ,ɕ5[xRK|,@&`/(3Ijַ>AU+M+TR% MaZmĂPKu<Ʀ:Yu| Z\`j#F6Ϲ15v3o kqJ[oP IAVT*ApiI Z_NՐ4@0{ԥFݦfkp=ic?%1nt[@Qm})K*;3UK K0o#~"i5'xԕuuz VV@1wD[TޞÊ.}!걫+A羬SX#@+9aPO01>@YռX+O#Gm+sAg^w,qn},\lj:?aH UJ4KAgSp7;V(M U94Ym𝼰ۉRPŸ߈hu P"3ě$K~x  c63a_Դh8ضӸbEi[TFM;qK7jdRXBZ{Ɵ@23aP*ｧgGiPePPӉ=1v4 ,ot\fF|APzȕ*. 2 ob@!6RLqD y~ AȾx'mgm u>rc<nxV74)+a.#6dQeKF[dju;˄AoEUI^,r|((r"@E8qO\`ɼD1*w閚 emo GB6H?bv2rs4d{_5\6z IJx tr |9r2[ޓJ=%978ze +Q W"q]-( V 5q|(e"`  ӗ|9D 0Tt<25KEo v4 O40\pُ|Np"냇9lu( dF1ͼ7`F U=n1J|ۘ>Cf%E'QS >e۞]?&r|9!=Әl(G8-hM?Xz>A )Z0^_>IO \{j 4c" s:% ߲ʹ, FGIOp׼.fԛ9rϯ!SvD݇r llko%l2tOw X+w1?Gh(eK :;υR_ZQxO69fŁ-,uߟ"tSH~_[&u˵ ȥ;G4 k\Wtw l^([j_1t%q:`ԭOd Zzz)5P rM!Ɖ$Ne)^9OWfqt.YB{bxT@pϧQ7}I!yM\vs3yGkkw<i-PcԦjzι X 3r lCtBi0/ Yc܆` ?*[lkPTDS.X0S_8wzEPXZ9ðxG݂I*Ngv0ch$c5yIFF>ćZi Lp#nPA|mcnHlOo y;Cq2< ksH)Yֳ,Kdf2H u2"0T"-rɘ%-Dp2o?CQcf5B r%7Ncf4ʠ ~DPvxLЩ8hÓ 54qՌku_B#t2]t;F {ul,y-wD+q[L#ɍBg &9' DQ=#s=<"PAf*'',n"~dwqr2t_3+YX߷3!' ;zkS2Sdg"f ]~~[3Y3)h_6ղ 竳| )ӡS׭DK.K 0 BKlB^( TΏM %oWjkw &je9D%[ m؍9 fEg< +iƦX!Sh zt_q$@jT1x#m01K_h,G*āb@7: .6z6"@Fs_TzcA8uài)j~LR2Z;xQOWHU %'HbSQSHD f6iȹWP_n i )ʬO-6^;b'd̻N3 f>Å Uq:ݵق`REdzf<ן8Uh$̿t;Eu13M4DKP=RX#YA%R_T?4@y34=d^.){tJ01]"$mJ Ut[ >8=m_vL,wIeǸ(G;eϹc2iy EMu-&;M 1I]j}{+^K!Ȍ%<B >@7ف<#Ƙs zRrrBA_p l|t >Ps Pնv8 FowV(J}$"rFHc(\^NEsZK \{BPgWfct}YŦЁEB~/^PT3(0AuKGu]#mRFVK ;nTŧ6ڨS_T\V,& &nX$HVoh?EJQɚڃͲ{ 3[ ;|>]8 ym澍_I-bݞ>a6ExZboP`<]^f IFj Ն_~-cd LWJ f>klex v}dr!' R&֗]_Wv &0mP@2">7u"[*7bpm9Z/ 7@/PؙIf%.m9v?흚]# NDk=c"bJKv;Q~$bGQϐ wzɝfo}"ͯ; >4X\MW9ɒK"(rV sw(CҀ8^QdYs'yƥ ;AUj2LVu?YCT>-M[GdenBA/K )bͩű@!Tg}'(ǁ~>oAVR@^(Q H8 X'^XK|4] ZPޞ3+߭G\.M&A0 3A2Eq &z&$z!^fۤ1rk0_`5M~87b3:ɼU+z6kW>Om P]9 Zv7eE lʯ G:siN"2>~ϙ鈊wv~Awdm0`+s 3y/ MG.MMs.'R;}`qu(+3tf#`RG r3 Hޞ@C;L}S-1Fh]Y5BLԕ C @걋bhո.dxkzoH\{xl֧8QjƀŌScYSߵB;ǾH(} dW)5R#W;ayWc['$Ȃ<i4\((ZqvW%-5s<>ޥlh->nLG7逰\)f&w.ge#/csK)إBFDȸͅpȠ8-  cj2+YRۆa]d$q*]vwg^IՈ)t 1.` "ÃQޢY"b^;h8Odjq-&J¾ڗdbzX2 lEdS$Md`6NͶ(D`K;~!E.dX$hsku1RB .r ̢ҏP[l43X Ӛ{r0zw0%RC2.@u?6ui:󱔖e5?O9UoUe0FP\0GVj#>~rqnP {=Ѿ yuhҵ~heM ;"0AHs8 !("a/;"ң]Y"G\a2Z"OׇÓD_H5\=zBw͊,'Sӧ0mIŞ{"{' )eF9m0, ;B,%ٵ@ (#Ø+.q%_1rFY`DyJ KCʡrTLJfm^xg$X=r-F)F $w:Fw*>(&+k[[X1VJk=gh^7-aц&_`4pr}f4B,Ӆ'.گ ny yŰ{m<=w4'z{C c{1}KZYwn_X f4-`Q.#SLf}$r`a3X ׽ʿik֣! v}.!nŲ 1f>A+6MjeQתv?{mA'q$.6 3CV5%]ɨ?T %a6'Gi/g?9)9uJMH _z>f8b Ɋ"<@w`F«3^{)~eoj,lKEP>\EF PflF^{p}$6XvC.717: JbuHo Wlޥ;jr%̑YhK,#[,%([}OeqFr xYj}ky @|*,@1Ĺ6.3"Iz S{'mEAف\4mXkBRqg9(&qIDRF׳O _]ۦd*ށߢҁfY4{ltB89m\Y˸LI-CVʆ8(nkqe3<81ӴF\CsIѡтN ²8s%lry&+[:j8 $~hB}Ǧ*W:ʬWlc GtYî.:G@P2  H0T觉n8wc?we4:N.=P]xg؋\TM55#XZ[ߞp[?(AnN #$a?COP.`v&{xlC#fI\-86ӴAq)H:fFepT:48$#/H zMF Z0!4p?r+t=V)* ߚ%E@JYT>bvGDv 'BkrהQ+5}; nzY9 'sm}1 ;J&ÐԏSVȆd 7Prqq[TrH+V8.,A'2VΰZs {Ʒ&j'K*~5Y?|/ DZwe@Fl80 |}7> HgT9O+3!ސHudвlI 2*]G!|pYwaaW 5Wp_]x G+6W;.psm8On-4&>ubB;=W3C}[w9?-O*A:h=7ʒ 2E'eq*x-p~a [doĭDsmUa_X7 L. K2嗭;=rmbƛ>duL8V t22kHYbq@K%=@v]sVHo<G8šweJ\Ai ]z䄛!rYGEYWtR S0?n9 x;gǏFD۝T& `G]ZÀ6uc,{绕IOJW4$7:KNųG=%mAK: Sِ"*kVSz ̕?`C)RPH2]~l|*ږ\3ekMJcJtCR `owMtl+X$s9;ʼjSrOk9^.ظT1RGZnqc}WCDI%4n5T,j7cuM+Ti-^<9QzzT{Gı+w ϰׁV 4/l@_ɥ,~N r~t( r_Ob_F*Ҷ{ʦXᾓ v)׷>]m-J&uH\{Ts7¬-7م[eoFue'cWmrAH*zdi5lkpg)UmJpάZq6 ˬ´N7\sJN &q/es#g#"5}.D˗k"LVMJ:iĂ neax 9#! eS.wtAU@,.Y5̀^\c=~jD /=K.1⣄,9Lұ ٣&33I+L KfS\%!q7[{/?zij;y@4B8 ~||$==Q'ç.}#m;@3YjCdTZshf/6u62ã;<2eG{z~[\!% Y%;j{ ~9f\$Ŗ~_-?Qbp#_"?? Z"VVapGpVs CuǢpHnשCC#[$7W 8_>27օ!.VD8O]&=쫲ϓkV8&)ëkOzPiH%$^@`BeI=BQ"?jk~3',QI\`-gI!F.!`3hDMC<[eK}E' >CYV.8 w `ͰWLCw+%*̮݊(in>΂J*# p>j "PΆVCo@oV_u W5YB}6/c,ea套D'$Ճԛ'uZ X"R0~It:ity(UK< m-LP c.4jUr2fFheL-i`9dɨojRH ]=4r#5QlM_gݪ1BA*q9F%|A`%lg+mQ88bA_A*Pp6ziN>07Q8exg}/%hϪҽ媘X#R$(ђTz@bkͼ>bKg7G2/FEc g i:$V#0,=Z}+9cP˥2F]d?j'mۚ*>cŢR[~,W+3r&ZjqA][=@>W~:V ɏB.Dژ)ZJ5x>["IV-e&aٌGzד bWB7 ,dZFڑl3xJTbNR )?65.p}#lA>+=柖mxCWj c>] .LSMĦ#ީ9 |-XCvY*#/l{ }l֐2+wViYs¯ƳaS ܍ŮrÒs.&df\}f6<萵FGqM֋`VV-Ꭷ}3 ` (@j M,x}nUsI`cdNc^OYf wrǗ|7%yATacl {*ep"R4KBTuة4 CKNrV6+:"0"hV%r2pr2a/D'pL.>rWٙ[@ޣvCÜ\UKhw9hwj`>8Ң0)t:x$!/)1V[qc)@ 5ޜ)ظg$gD#0Q e,~,G}A2/FVĺA-F7oG+jRwσ7o {Lw A:.WȺͫF_-1|mWԬ>..R'XUWQ8@Vɒ"3IYotK{+6 -OUqIwzϔ׺RB&VJȲUW ,0Aܹ:8m3C2B0 xwV5WVV&퓙q=pBb} XgKyʺq BWQ")(\_hLyUE}3ìs]iS,yX[>vJ5 E@M9J'IE-h4ᫎtry),5MoX3 j׮rr (q^7-(X 8#X?{ks[HF sIޑcw^a"|i{+SoT@GngdD2_~-:ⶆA(KPhH˛k1Ʃ5P f\,Zwb%N*)^C^Q?0}fq7TjБ4"){2o7c1u%1bz> `r̀.VBvخnlWDhdV?0n}s8~`e"V`>_m<J@H}tr.{YA\mt>Yh4k7.\.g\S"Bxg$wmU3w ȈG:yhcf'8w~ _eDjB:(":cʏH<C~՚mP |+ۉV3~³_o$sb/|aW XZf'ע ah+N p8,A)V !$z孚\ Ա<mT2O?^T__ʢ]GAT-pڽh6(GTZ'Y - tCJ_*mw tps:h icDq86KҎ{Bqw,T[1Z+ѡp3[xQ.B]dWkpԘDۘ|۠TAѤY!=y5`eXsajðS<剣敉'z{0Sb.܉iImQBn1E9/Me~1!j;$/VlǹjQa$9Iܓw:;H˷= ;RJ":2$M r]$' l ɟM1l3O9ܾN։Vf*.jiһ/Kػ7֧`rI dƎR[x}u-͑i׏̞bU#u!Fd}=!Bj:w5$+z \m:F[@|I.?zxSLf,5SU\Y(̽kWge4[ыE5ga%_Be .&r 3ÊՌN.#u/E.;0OӞ~rp+ Ѐ"W, E^^Q) C;&Ejngqʿ mjlP>*f$˨CXtDt.AGn3$|'e:DA@zd]ܥrgR0L\R e^dۦz>4 ai|US,'L=v1HK=EҺ]SAaޑR|9rä{wIlrF{mUM-0Ґui:-`rjn4Н)]l?63y2B9Rkro*EQcQ؃&n"5F=cA=әOFFRj1MSP*v`{TIΎ菓Qh @+ U-!F7>!cB2wԍz'.9 *;“Wo ]s9<M/Y;[E>c OR~5?O8b$6pt&hr%k-Ɔ?ȑ/^d>ю/ob3{~>>R#eb3=bmH棭Z2*g ̦7SF Zr@PV5GvFObmܑP R7BB%  qG:W[ OSROdT\#;Z_>|~TPY GXKRx/9)dC}w"d"xN5Fba Co{ tsj&j*FE)Km~+r*~ [K!**l~ +2A^q@]hb%%ATl>>> ?2(BD{FL$VG#cre1NjxV*akˎepc5 B,;'r{ekA % BdVMZIBH )(}V QeڎshMPd5Vjâ;]ylGOPxCNaςsr~I1Awog)WKEW}5jE`pbG39%26;*=EMGz1pE@V>{ZymE P+{,>-=;WdfUj5f!9P1;En @+R+?a?r|> OL@H esM/ߖ/.Oa؞GQtN{@_sm{Tַfѹ$ PʀS(dP,M<6/BW:F϶Wi<`YiubqQf\ gצdrf|y Pt9y`p/5-Z≇Gy 67)*AYaZ5iZ )5]KGXuf"Wxg: ݛ':..!8c* @Fp;c O|RBp7* 骼8ih` fG2/@ )UxFR^KMfv'lǫbF4Dtgr"_m@k"aYܬeww4҉zO E@Ḃ )s3LJB 0u+.P?/~fv)o`ђ2 S>״܁k# Ğ2j?Z"eji9A>VqNH )_,o`ͧ|&ya =QK >A}[눒1E4&/S^C6'`Bv 3X|~'T)dz=^gRT2TG"c}>} ov*ycr굮"ż %QK5?<.rY[szAk[3k`vj$YkzBP0Ͽ쮎eAbyOTϯGj n9qo<&R~ pp,n+ԝ^m>/zتoHZ{3ӢpB1 fE?VaRPf[6/B+VE=n3MJ?g/%v'qz\+CU`e;вR:\Qq(y Go%+%nq\ בֿɅ9&lYutvCۼ9_Q#cRzVrߐ!KD]p8Qo֞iwzzE* k&9-ﾧOefoCv.@Խ59| #Ii#Oʥu]f `ff`l ތi N;0Jn߮&:<]'+;Zrj 5y} 4$ *CUYh;BvgjQqTF8%QPsݽl{1uF?9d7?S'Xf.6-]`P.h2l M};ݼOu }RYmQnB3/goMUѴya#g ]?38ßg^M|]4n-II R.{HKdYT8pvt,\pIs#gC-x$O ~E Sf*M!Oء(B v]MtM1Z^ax t&EW"NĄ$ hՏ6~D互U=DکA0g]!0Ys?lse` uw5 tPuF;!x9;nL8|HCT<2wfiyu&/eOg|ȬwqNkܽUɟ2lBNWg#&6e֞J#/_l1L#0ђ5u}dE[TEpsKu؞H4XY=q OURoY 5QCNW(m'.LǤ7VS])J!6gR&h|v5e7*u@5C0ڋBj+pA,`PsV<\zNCSƚ Bʃ7N!^7#Bd x Xfsg~m[3 > 45bYB W/4uXGXL L-0)38X:'A,$y:;V{hLv86{$ c֮Xs"5sf[y=혬|"z(BЯ8BPX1ژ­I`ߦXO:K<4zLJ@Bb~z"_F4'L:KƳ:lr,̔O';ZW1 ww*SS[>{e =.~ƵBj-FH U\q ul9/1G AaЯnqN} bބ{OWKP>v G A.'CU7f#[Q {Y'j~&eIc]_)\6Ŭƾ9lۉzdBvtWpY6ͱ͐b)n;D&;.>caV4?MvVc:=nKjGy'W`$VR0}젍_-H$Q~f_ ,a엻fLp=Ur*X c;BSK?dX8ۭSUSG>.f')Vή,׍LnP4ps5!n9e)$TjxhۈHjiT9P>J[숮OV& ~mIDiwtv 3?d Х^1kNSO84B6 f fi?ZC! |lھAINw \kIxz "C1]۬#L{PITeju~G΂Ӳ6XtE'(.Ld `4(\W0=2h >T0Zml[ z1Lj\llioōɒ~! F{ k%M!bJ+"o"?ws=I5GEj7sx^Nkv|39bT$lf_R.NmEɌ=eXK:Y ` [9MXѢ`DIX cp`aN::ԢF` R34$nլc؝>@Hq+Qf#NNKˌ "o)f#B㒃jFühLpoG>t:7-S;L|Kʀ8}ťƖE:fX!1o4 nMf Lo֬kdԂ#J([$i+ʚ+"м hHs--V4Eo(Ҫ/l|=wfݸߵ \C\g z^^ԏ,Ϙf*3*[RL9xw`Zn+<+iRNڞFi*xSY*S=uGâ)ǂr[vwfŻIbFZcF`+oA@V Ջ7}h >e (28 w:qCq)VQl}Gȧd@d0ЌWWjjp(kΘbԺ24 lcm4y}C_C0  ,oYH$k1ЭxY>8 ʄJTr8ڔrLioyo W]ibmm2 יJ@7 HsXo7j s$z%07nN:׾ʠ^W`е]<n"2rƉ/ĐLKp6 ^;5yYwCP}+̉F'v*:ZoQҗ0n-%E*=>dd 3 t[h&6a#TkoYTDZ" #hj/@ۄ憭N)[n+NZgSOgjهLgβ{ѻxG!*Jl쏟t5,^Rsk$݅YG5Ȕ\4W' =3@i'^ NE#~ǛZz#]f Tvr"[; Y8m# ;&$YEY &vPyVYfXq=ʻ}5c<ϸQGNneKTYƮp[mK>2AEC P5 j6HI4l) IA^[cMg*/8\?!?lq^щs\z $cpTgDꗁ.|E*n`Bhp>q`)e˸!G0\Uלּ˫ ikY^%Y1ådp:t 3/W,B:gEI7h5DYa8?%]@Aat ӖQexKtgD3l)T-{<ѩ'C\^J+T7N]6/y|>"jY,hVguЪ$OZCu&~0`sVFs. CAiu'#wFWVsd8}%) L)U+r9t&ET hCxmH[(]l5<^6_2[=*HR ʶfkwXǷ"`ā э䰷 Kժ9;h`[|[0~`1*ߔ "$Zy,ȱ@`(j3|u8sh۰\Bh%%qX Q<{b/2"\i %} ME3llOL:$C!Oip=cS.g+@ۓ) pcB&(ah=x5WQ^&r\NQ.8sXw-kVR=ʕ_͕8F=5$4Җen4 PA?,9}aJ)R j!`t?Oy<ópUt9eTEDs{nưč1N] ǻܻb@Ď3X={g?]$VX(/6Ӏh爬42@Pfdl;3L :؍웤v8Zm[,ݵU2CӀ\fd%Fq~f`|3Ԑt0$`/x/b*(G\s8cgG+}Vߌ?!~-'};\oo:.D0&$l/78yUu1 . /{KAo8G޾[xxcxvI8tlZ+lEiOXWR{IZG5tuO4Z/. eL 채/T*T*TNܩVP՗ǻb2bsV![;og)\}M6^g;đTM9¿ȫ7-I'wTA&fnZ:W ٻH xťN,{b}k'FV-ԓW@]8alDD\vǺ:.J&Zf3LԈg] H"ߎ 63 - P-_teK7 R 藷݁=>Z keS?h( &?DwNMNqw> ~ܠb{ųsRxeuCƁss?pv.T,]~l`y;8dۇ:ډ%‰51O/0p3qƐ3Ds {7oB@^1Wфn),wMzc$aHҠ-.qD>g 6n lʅ ǸhHxڧG;S8VUsB:}c YJʙMMˏNSƎt !u"Reebz8p'ְ-Qwk|`^x#Eδع'?5RNTϪESxSm=KlXlNsƇkXC]Cq+^mEu_i3+}֨RZyTQVTNm 6.vb\tqYy2@v>GzlQ.Y錋LW p)d'Oj[ݠ%*꿓e_'@ik&<+M"2DfVo~NQ!Vˌe IVån`+=fTK\7?53ۦ;`SK3 3տ==i%;}H;}4!蛲eV" դ?&ir4RkT\jh8h_{t)]<4l|\R< 9#c~҆  glz 29-5'Q3h盌[B8XiHCsYU7З*ӭ^~+WōgʡiD~#A_vք3BZ9,KF?Ĕ ^n8 g #?%Y^44^wX~Q{_cf|)!m'ν~՛~5eX~rB5~"'V=IɃ!u?2(FK{;!!0@GMKn aw4.Q' h> <leA Mn$MJ1H|#__/D\qco~Xdž[7}ϧe=f;[x&@k+ciyt惈 $=0&_v74n xJъVV7WPy-b_i^MmeCI=sIt-Z"/H#O9mL^>1ktUX߯T0xُ!szb2"j$]mC(ЯkǦLk/v_@iD?*Z{]r-m4SGE8Y s'SZH 6E OF2>Z_o4;JýNJF-E"xR;wZgҽl 65\>/R9ıY4/'O.81\C|ohtD9n\73X{Tâ|jylhFFE$caXla C`~{Z^`:TGIvveZ?/7^ ƺz\yԧ\ bS:eL?&%fꡋBF1j`"Żg\% @[4`X i'@F5IiTcKW rvrѴ"I@h(q;+趌Ozq4eJf4@6)x/TIY-5%{D U$Mp;‹z/o/e{DIRp<2ߙÿ _ n 딕cAh-d.R`Wg7lQqC~*xk,3ͼ @6BbD%S佣0zx2k eR.04Al`*.MKY!=&aYյΒ;mj2YlB+mhX+_iiء*falꖁPyJ̵k^ ?(4lo\TN!ujl7K]x>\_f\5Li|DRu:JqvI ?< h+(G͂ Pi-isC*N?l)EFWԦۅFRKUqe0=wH  ~*Xu!s쏋+\\H'K;_`g~M4Chέ?A*O{@oQGAD8[5d>%d\^'~|3Aw/-׶*hkIlfNY)!zeB.b,MWVNˈzm\i"N3K\3-Q)̙AwpT͚hags-"|"t8H\+Ɖ;6\i؈P8\)VTK`K,{? +L 糋%\ЛqZQ@UUM)E[w2#l)* =BJȭcmGnIІ]a4jI,I) DZ'bkS؏SPETq~ 8` aTh5mZ^Qv/S=LEtm$gҽYmM5ڨ,5_`Okk%Ghy?+Fϼp!'AhZpc'v:CaUa얈.DyE 63w 75Y3Y,<+Iҵ 8֬^:30a9&x"9y '߲(H)*"F ),sC`ɡ)CI((ـ펗r] .O8<]c&vC5,Tq< r݊U&$ u I6 wkuCMz\Rx`,rZk 8 g 9c}ScX63;&o4]0c0%9}Rj2 S#ުdIpR7!dn|,` Zzomq- D[BEsox^Z4S#6W ?&Ri>톌ﶰyI5G  @Xf` 5ɠ9rIs;h6mVga琼 4z?dHvww 0  pPJU%&CUj5^  /st>F0&£zvRbAiCc&לy$⣹Hχ1\6ʸrByh1f#SgYpTCVJ[[ ZP$R@Bz1ʤ'B:,™ٶIOu%9[HRi&2*Ά/ SIb zAbj&1f](S,i̬r/ww$H9]d#:i)wPPPHRn@A}X60i^Oa''gr}u)Sɂ܆2d6υЌ2(+&#w )XР|g_=m =%hi? Q@ӵھDw.A1W]R AsT|7qFiOӄIfauF֜nצV"ȜX`ԭÛnl:7A6G#o[Dv' ;LuEcPIv~<;qqYu^vB>&G`J@y4`p %%bRvIJDWCVRf찁.\?C` !ݏ>tf>ΒLۃUX=^MMjBc&xh h>o̦bX֤B ݢBRٽx#6kC)՞ĴA\_ e^%+,3YD\#zyuYlpg^K$SnӐ>Lz#k#`j[P ,)+dr]  54nGfPbVLfn:2]޽M#׏Z,@;fiZk2TJ>@Q >+(x& CSײvRɨߗmg@MW{5Q tԤzo+i|l,i8ۍDj_(U|w|mg}lӰe?V C #cFBUAO U(yK3l)ܹvXLPgc0ߝ'de"\_րjP[Q e&l5A.M[Aܼ[IxͨSBBQEwsS{{Amu"f2-_d¶-E#*$_܈'1fwk}@f6-̡I4;$J˔d8$)~qOoVP–ne65|s/ [ĸ^֭#h4᎐kӚ_( )=R3NKа_57#'`G;x*})y:n{>>{ 3u rrFY%^h_7{ė(x#V#MS1t3HoA&iVc GfE밌i\iܱoŪZerDQ'JڴBZb&0Gb` `' B)ɍ]pB-orNqZ8bo+ks\.3+,\fVbᣏk UOAMFW֕%dԯeܩq^?p$zq;٘#ɻ+&5s tr]ArbC5-PY7'Pߞ1s?A "#9K2uҟC Yņ9ڟ^vpid3 xbȌ=.t㗇f4ʆϬgS "N_˸L{RYX\[6TGԭlݞ`=ػQ*6ʊf UQ0tMo[xT!ըh6jY0X{&ޯPUyS<MNZU3rEv qj$#%+.6H~L,eukLz|l[cQnv}TD|p7Σ;6:`J~l9k{dgFYtǷMօtnB$\-bVSGD=  RSlL.2j!2C jKÉ j!3X",BGtJ=u@ dԑ6%gz0 >ŀ$@.;6Ռ V%V]I3W\o'z+PBjy,5C P!+d \pFhi 4~2ױ\1׆, (OkBiR05Xr( =W O "<K<߼2| \S!a#Wu @jQw~cCsژˊLˬL~ֈiHqB# C;'c{g7^ 5x%H ςk%I55 0U㣦.dO`p'hr=ڛ|8î=N. PA1F('{^7Nw]ѬA1ۂ-^Ua}ׂX0?.=Z!| !G&8 }PX7׫;):ВyCk||t:StHWgo}V4>Ua G(O`p[^NYnS᪔1X̮t=-R&<٪tbwEYk S\LPRW(xsY[&G6tOګ(*2ܢ=ƟaW='O>/2(O lBI A)ҹZ8"Bpu(ް,cYyX Tmp$kA?䤬f H# A,~ȋdߪΥn%ydzo25ϣ,wxSK)>V˛MnffI+B{pY>s0O aH> h/ޗQ+L#֜eojφQNQVv?jҵ#0uh 8:D7F$`bصo8l0&凖^(^$  yW{& ҋJgE8Y8Ϟǡ&"'L5u98f1%-\_wᝨ}U !2 &mce{Wawj:k~j>'И; D:X0̯Q%cVޙ tm+B(`qdP4/M;You|9[ܴERo<^^Plx:@tK69J$?i+%Q+%} TB}:y#W1@Q 坣Ty3oWp5}H0&!l ;ҫV6qLI9M'G2fggv'1ә־8V}|TbD=Gx$(8[>Nxjxen')WC԰Ӫ2Cx!15Z9BǬ%Kv"*3YbEH)ob@C5l{ KňXQxQ!}ВkS{iAk G,;9UҮqA5jQ첗߽X+yhЦZҋ"lC1?o4zVo1y"[ZQ=I_j8Z%Co7cqpuFe2۔ZX/bà%T+l4Dڕ`љݠq瑊'8=ja\=bMk8?'7[TAKU}M=t, O!P 694^ #d(Z9p$y2;}#E۪&-%K6 y95xRE91Dչ/wfU:#@32owxI!Lk"pҭLz m/w?+u仼̘I"|졵5m]rZX]>_]ڙ_tuO<.cܿ|YWk$}Ǽu͉?Z]z/U(Vℋ:U32tUdrcÃp8˭>†[F#ٵ}ZX1 +4.i5W Tot a|%DM ^v53GE5u4DAe)@nm?O@$:+L8J8Q3aP4l?pK듗k,i8ښpg"6:A{R6 ns<-1I*ZLZ:8̎N<H[1ЉDr˫#W:Mp;eÕG 2⇏PAaSFs$7Al"<&E۽Hg2sEʼnaD:7i1ҷs/sPIY^;t襶[/A4/׵Z0$!>eІ\]g5y|ffLeGnq3?ޮڢmgHb^NpNb霔=ƫN ;]K/+'As%ˌ#qN'܌g ;sxںDr3cy/cʁ6=Z, S=$sPMLo;.+~lNMD.sճloy:Q0NT`\X'juܖnex95~b/T,-ڢ:6 8{YbNxJ2U;Ʌ6);6//iT Rր7\Wwv _pw GkG/ cTm*dOfWB%,wX&#a^?OkM?ar(lbpܘy坘C<|1 Y:wO${ r]+˜@!T򔴰7Ǔh;P\ᬷПKf(IiS/(RdsP YV;+ç;\="XY?ԅV,H mU(۵>^N8) zJHEv)Q#5Ow#S`J a - Ɓ2sӘtS-2;<4`[_5 A_t6P`o)i BE1bX9:+ȅkTh e}՟j5 dAP͘pXŰ#Uxntvy.;ǡlگAxڂ_3TbUuz] W g)}>u{G66 儥 %m4k5F#Q2jsèz8{^#3q4aX+3*aTb\vjÄ 4sGQ"ۚNws40YngU3 Dy4 $7UhL*qj$Jۭ_1-~1ɧ}3_U3jzۮ~->- +Ոo枈'.8b܅Np1H\om ^K fsdsekק$@*Rb r)/wVY?NK̈:ZՒj–kAظ*>[|+g}$L_K~-: u:x$9)wl#qAKP{Sb,+x.?%Jtɇ4si,F?݅e5*_aZs*r^x'SaGoJ~_/r?WxK-x!HVj7\ɧuqx| +1oh1LtT8GC*YD--R c:G`==~jA"e.D1%zgp(] ~JpJuH1`:) 'Ikי嬩ڗJRӎYdt~vwV{ VXf_}2 ]i0b'i s Wo> 5HC f{(ۼcLRrfHOsMʷ ?U)‗q^[8H{eBSGȿZqƥIAu&2oڙujQHgf>Cz( U*9Dž9CsMߔo}J I.)[p/L^&_N*D16O#;yCw#.&F[@XA S_EZr-Xvfo컋/,zh1i9һ?G8F!ZbbHy-rx(1,3Z$&M;*O3pfK'>4\4N\ mf]S 6SFw(' ~ zq=S '#grZg2VjvY5L) !9z'@ RENz7LcQ&)fyijxo F.[5CLU}L48BvǷrހ+:QNӭz5ߔ)Ql$QlEd2o1Zʖ֜heq  v" L]fæ0b':k #cj#d XqІ0 jbq-X~o]w.?:{I|Bק?Diy JivC24x >d}n(҈cY'[~8 0D^ KE*x"~{ֲR+ZJ?0ftU^ls0wri*fDf7_W1ﰺQ$ߝlMo֖"^%Bo&0k~:LRDVȼެ\K7i-E& δ0G|hrsaOoj7][ W!#xQ N$vUʏQLaē-p=I iRۚk]{lD䀃F0w*Aeq,=n0ݓz(Z؂TTǵ5^/[\YIh;A?0מu˄7ʌH]gD 7^{  uJwIl~n'ZE31?Us; ^U뷲=ɢPh$.57}8#Aٚ% DB{? RRB.l`Mv]婩90bYX90PWty/wȸ N穏< ]G]бf-[tX떎L~ /2^L{SkdZ^kHj<_;?mݫb2>_rMtYK|Ӧ|ʂbSe#d@_"yl7#i UZ}4ap%)waiSv7F!䧶_|\ R2yT0s ub%I&ܖ31BQK'c|;f~k"ڕ9TبI?_crL\{a~>VJybzey%n1E=)m,잞fvO:?Y#W[m66*?_~QKm[`HS nMG7>X/zk&-bᕓ*j.YmH!=vEwagX}.زVCvEDg]  U,zS YTHRXc{Qޏ9`O̧^n&kWCӇ<<{8ʗq 2BE qw|mQ,48Ў Qkȯ+j6. فNkjE`wM0j^#P?pWRX}R!MY#"Aj2KE}&>g@p-cc;G[h\.݇4flb).X*%o紃 sf.Af7C>~mLnfVBL#p$/ yN7DW~N&b6fɂ69TVllat$U""s* ?Fϰ.Xm*~uszPͩ΃๹ܒ$1o;d綌|\̌NͶކ#t:ځiRھ(+ya+7DCC$݇:Q~># ~R_Cǧp_SbC Ik<'1 QVXȗOE#&$4J'mf )cW} ̂v+ۜ$%SuFnA5}(b鈯I8{bͧ^!^CİC% ڪ&c)Z)^b W-sӹR7oZHhq%a }_LBV@~{jp }x[0M$|{lY!}d{uưq5B(oA%JMʑoH *@B_J֚Ō kKRM2xl00Ξ<$ǘqy#SD.ئxW_ B cʪ'=7H&[kNl9׼Cs]Gd66?3?9̴,(ۋlXw-y2W0%kbJ2=OMFݤnuq Wﾰ߆tz*E񗤺lΆX➟َM'lh7xM|1`og!㘊n=41П&M>I|Y;^ʼn[}=值fyvON,d'&-nXuXkl-媃]-zXH"3IgrB5;Q<_BCAI9oHڲ4\_'2OuVv-J7gpbB̖_JBWI#75g(>ɣ1LQk"]AO{9jkh?%o =7HxɠR85p+U ц vA1Ĺ%˅-B#-XTrz89(Vh]3.i_e>{NU˴dv^yܺ%r8Kх\Va۾]p|`+nT Vٳ4QEpAyZHY_e lUͩi*C@j~~$h=q!=rwϊXDD΂aumiLf;CUS0Qoh:\iVefn6Å0kVIw$kXZCn;_t}reҧ~] Y`u8%րUE`R0{A5ty˵¿Hy_G~YCn"5.G kӜm<eP誘[Ɯb9Ҡ ML T@3mE' \qn aݡ88\|1M&];h.Ee1oQZY)-{IulAƻzz+)‡rU{qK6u)H ɣD,#|I`!X2g! I޵ nėG95sY9U,gHB,j_F^_BH-$s!6} (~@OwE>=p8X˜F7^LAޕd(}j30[HTOIHF#UP$Zct|ad-anX?xf16I7o4Ya.kW>/L>*q+\Iv`|Х{4Y!n 71 ?^BUmR\zDux nsRNGdT΀gQSnܧc8CE/Bಱ@Q<7q(j3|/' T~xa%C& Q(G I[R)=QkGw]TpP0J,.>NhZ$AqAIkLEV$ѫ Mb^&Р0=2K. t*gu&/P.i˅xRf Qhi=ÏNqI\?Oά즛Mڒc! ) YZ