mod_ssl-1:2.4.6-98.sl7_9.6> H HtxHFc5 ?*}}cr᳓Q f(2Vo_ $kcbdd54d8d3d8da105deada3b750162d3a648ae697o`bC,DFc5 ?*}}ah`2eLy/&")>0{?K3OJ$6>9?d   J"* ;Vou|L` j t   (( 8 9 :.>}B}G}H}I}X}Y}Z~$[~(\~,]~@^~zb~dye~flCmod_ssl2.4.698.sl7_9.6SSL/TLS module for the Apache HTTP ServerThe mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.cϼsl7.fnal.gov~Scientific LinuxScientific LinuxASL 2.0Scientific LinuxSystem Environment/Daemonshttp://httpd.apache.org/linuxx86_64umask 077 if [ -f /etc/pki/tls/private/localhost.key -o -f /etc/pki/tls/certs/localhost.crt ]; then exit 0 fi /usr/bin/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 2048 > /etc/pki/tls/private/localhost.key 2> /dev/null FQDN=`hostname` if [ "x${FQDN}" = "x" -o ${#FQDN} -gt 59 ]; then FQDN=localhost.localdomain fi cat << EOF | /usr/bin/openssl req -new -key /etc/pki/tls/private/localhost.key \ -x509 -sha256 -days 365 -set_serial $RANDOM -extensions v3_req \ -out /etc/pki/tls/certs/localhost.crt 2>/dev/null -- SomeState SomeCity SomeOrganization SomeOrganizationalUnit ${FQDN} root@${FQDN} EOF$)Y@QAcϲcϲcϼ^cϼcϼc29eef01443a1e35d9eb0088a0ebc9fdf443a8632bf0fde83b99e5edc46691df88f04c415dbd1bf0d074965d37261e056d073b675a047a02e55222818640c6e8f5b69e10ff37dc4b54249bfce641b7b667e0d36c5d13ccac5b70e3530707d8822db3d123a987134321f309c837e96d27a3c11d5e7fb9ae6395255d2cc119d0f0rootrootrootrootapacherootrootrootrootroothttpd-2.4.6-98.sl7_9.6.src.rpmmod_sslmod_ssl(x86-64)    @@@@@@@@@@@@@@ openssl-libsopenssl/bin/cathostnamehttpdhttpdhttpd-mmn/bin/shrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)/bin/shlibcrypto.so.10()(64bit)libcrypto.so.10(libcrypto.so.10)(64bit)libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit)libcrypto.so.10(OPENSSL_1.0.2)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libpthread.so.0()(64bit)libssl.so.10()(64bit)libssl.so.10(libssl.so.10)(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)1:1.0.1e-370:2.4.6-98.sl7_9.620120211x86644.6.0-14.0-13.0.4-15.2-14.11.3c@c@b9@aaav@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Scientific Linux Auto Patch Process Luboš Uhliarik - 2.4.6-97.6Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Added Source: httpd-sl_index.html.sl.patch --> This patch removes TUV branding from the default index.html - Added Source: httpd-spec_sl_index.html.sl7.patch --> The index.html file is outside of the source tarball, so we need to patch it in the install step - Added Source: httpd.ini --> Config file for automated patch script- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)/bin/shstronghold-mod_ssl1:2.4.6-98.sl7_9.61:2.4.6-98.sl7_9.6ssl.conf00-ssl.confmod_ssl.sohttpd-ssl-pass-dialogssl/etc/httpd/conf.d//etc/httpd/conf.modules.d//usr/lib64/httpd/modules//usr/libexec//var/cache/httpd/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu?p7zXZ !X] crv(vX0']{!4pM-ŴDygq~/84ӽXjֆ4}_Z1OBt(_eF)jSͺ??.zD x/tFOA6P6YȄ6+P }7Ҟd&$їL7ZJd Sh>v!]:to@ػҹGܐ *s /3WIK(O?%Wj? r{l0T(؛oI%V:*t\3O3i$9bYvL_Θ/t9I 2y`̀yc`v5wk4+ [?#qe욏t#AGJt"x.5 U47*(re + pI{6rQ;P((}@Swpz9US*Vx+Fd) }lq&ܣwmsX9g^#a.#Su}#WlUְrBYhr~> ,uˁՃ^:iLrxz|2#+N\@ =⌧7 ߯ZqOa{C`5' dsYcr,{=7.* C'GA}2k9e8u6~МvN05yr4ʎ,ashy^, R|׍ ōA]FOEP%\\J󣿇@– 9l*(,Ap"/Z` dN8\٦LxȖ{GRCf*sЃQ-Rԁ#mSn㭀6NzC$=.dٽYG%(5q0SH}IvM甄'0֢ǭHIBNccVbg- (e mVIdwԔ~?MWIFHڙ"GQ %%UR1&ͥ t&U4;y6fB_OوqiYZj`?& 4UX9uZAtʯn~#,!iOe^֐2}:&5*}I5D E k{ _f n~'+g] Eg Qejt跑:R`qYщd;ş^`=^BB,[dc >JxvKA4Z M(f[QZY˔#HӐza6,KgqM)0Vdͦ I9$}]B,yd*8'@*ir[@8yp~AƊy(Ji%Z)M'r_4Ԅ᭦ k0NJ _-Oy/!)q;P>+-aPsqp:&*||'Bm%hboK"U \BL2z(aILze%:rFљy^3ARorM@9P )@L{!Ɋi9#&/{b2[,3j7Q&Ѝ0H$(_U?:WJ>} ჟ/QB`J|M :M,l3o=i|F':8GɆ]i<| I u!8N~w|. SJt@ؗsXmm"g2˂> N15p }080 pv H1`oq>dKBų'E,[#u<ߎT Pө(&zV2"kr/ DP$1hY8GoTXL Ot GB1p88=;Ζ骍{+͌?"c&G5e>"mgPgfgSx&M!N:XQ̠謸e]!٩m Q넯~q)tB,`Mt\xΊC{Vsu33CGCUS@f 6}r@s]ݮ}50B3+՘G v y(K?z{ MTGUpհε٣e芴q)PKeRG4bWbScN~K<^V|鞱cȻjnS-.m/HC7N-ZxɟJqKB!ą^56מ}0l0Z";+ <[:O)Hv*Ӯf{#n⾨b"Cr8$9>TXoV%-)NW ZpS'>| 3tN<V9dc. ^3Zqy gA@rY7J@6ƈ fSԹe0sYj0T.iMF\(ZQnݠX"A)p7eyhV>RV {iTZDFGRilզ6V\t56iyjb5ٹx>5oT.W&z eM!5VHpV|$0~oJ]:@>IZu##Zl|3iPWjD%)Fɝf$(e=܆ щB;*`g0_^ fF4et:"LTpV@}HTTlz﷊Ax`!m41!{F6-){slM҄čEDe>F\#,LԐҞ,BI=2Re3үfʉӌĵsZ"9 lFb_:D嗺9B ss՜c7Ge_5ϛQ68|k q4Ъ;F'b&.C6S <wgK5Y5]!٩¹SDQVP0 hQqܬSA_M59yN꜎CT4ix]ǘϦH#Q*+\Z񒋘2A̬T>-\LTPu!jێ~N50TaD`m4U8BxZDf,@Oya4Rj_J-tiCh]@ ͳ_Q;x#Py{]jnMD+ޢ{nh銬uvmjv"" {`/$5gKۥM(h8RF{|QӚ3/ԘW|4dAX|2u0 n?iUY- =5Ќh'6B3| 1J<"eY$%J{qI @HGJK&tzK ݖ G* ,Od;zƳqHCV)#nJ[͊$V9 ?J?"|/;G&6PUM\ SÊ5aol[9D,.UJP̪|7QnXN6L}!ʮr[4Fj8ǂTEqV&×O 7Mz"c-8SJInC҇7(B0j,zIxz`g@qM{4OM75ekk\l0wE,r UTjH:[ar]5h!}1 yqY9T3J"0x>V_kI "'Ѯŧv~{Q(6W<. J"oA?5"AYpICt\V,Uic9)xîedsRnD[q?PgE&d2ހS+~ji皱vGvm!HW-`H9n<0 pqH:WGqψ=;_uqJ.׈ Cp>a%zLWMD-fm#1Wةjp1h2HEG9Wٓ(wpI}SlkAɼٲIJ{igv~xoy-=0"[w74٘!RJq=mB+S|ea[a'mjYoxi4+kG"x{h[Y8Q MY: mrlW8qS|2a*W,Z wh-_u 4P'׊c: E*Fa h0<ݿq .克e" 5~.;Csɮ"vBrn>wm'.%1Vlc ?)twqGPRbXEYqt3/2K2Y ۇ1Q*-)^S!`:EM(I&*!:*ߠ:z9 !?8EϽWpfr~Z?.Q"3/3܈5 We}E]u̶%8XZG @c腠=B<~9X4]y&-):?||D"q, KG3x$DKtn8vդo)$~H?񛞭XWR /YLD+\H!*7TYHf"^jt$nxq6%4cK!d&&:ECy!oEQ%xG>hپ>5{QUgQtm0 HIپ)ѬE.:%sY^ϻCTzirb9ERzHvo-6.ÙDZ,\Vu}n 0N,mbː!^%xRz0Yi$엂lfG:ӳ*A俲@\-hg|M^xU}YQy$cO#bjIgS)4°&>40?[]^+Q+&zq}\s"ddN\=}BZcLjj2Xv+4@Wvi<Sfb?l8/Ɠ<,^xOf,d+O+Ej+B7WvC-QFуQ=Ve{@^bbrGwɷ|NǍ|_aǪU^Z"-"9yJnn5A9H8Q[!5sֱSm]ãrh5ɤYqʃ<$ؙ 1ŀ6<ٞhڍk-(x8bX)!*>2m:gTQu)"̎ Fz]7YE-ȊJ!g{b1̹Te'/%JxT *U} ԁZfHi~1_-_,{ZUljO^TWmqf0ɀ1 0!:ݩeT%Yw;e}n#W&&)qQAk ox. =*b3!JJ[9Rp)u,526D݇hjվ{­>c޹-6PaoGE>j[_-HRO9Կ+B,r\NҌ,t!(C^'p2jA¥TGM R؅[·^בSƼE%qnyb>VBQ'-XiؑQ+HQ?Ep?cșX ZpR^ggZ\@ض&TCW?ce 6t #x:8y X7rCS?B7D`<ɕ0$vM]P`AיH|&|a Lo]pZ .OW*s#8y6W墎FnҀmD^Zi!\]T=w5sy%jد3R3,eWY I jȴC| 1 MoTOjl&gWz5.>3:6.B L:0VU᜝shn8\ʣKEOApsH e)!7J= ~tf|QqN;ee=Ǩe 7K?d򇼣-8vMYi4#w8^܎|h,F5J0/mi4MX<=S/ ه9 v`fȎM8/;3ZF,2[%ZDOT [7353nYu᤾(3 U"hHvj8ߊ} 5m̌OM^c5$q"dXXK&X J=XCEԙ7^'ĈTΥ``ws4SG[J7o6Atj^ˀ$7IhVK{]ƦSXpq$CK5λ9H[IȤ(Bìa'%xe)*|e:cl[ys:J:-hS6|k˙^ 8%E@<]i Z3 0r&MXFcjo >SSeuBߐp@lM" 'BsLXRHS.paiHi"1}MSoY~Ո0ę c-A$y3xKI-6ͩG4u]̥ ɺ#\H#Z|ё kW<5_TVEPRxL^os(B T ?vN,m07ڶs9f0SO3O챷+>b0@)\5Ŀ:lĒ=dbWCwmE]zgZiтgd`2+ 8`9 j+q؂cdz6>W 0&Iw|CYEtqSg04D{'1JYeJ߳ۡe4'2>x(5㜨ǝ%_?,UQHjd\=8hhbB M*j1V"s2nP#7ZӁp6; mD(<(1܌1dp`3HޤP4aL$3_b}[!uJ'|( -OR.aG]%[ PTҮŊ}O*&7FvxŘs!7[ 뢩ZOzcEis a*-5)M?) 8{t+bՊ#`F?l%u)X|/iρ_'H5w)vT5b>?j`%jPmFBv"wzCYs!_ A z9= 5EZ@}BKZb6XC Ag0d$ތ44N˞y67?:^1$CnflGէ)&zџ_Ev7>:*Yi"@@#ЧSp#}MdTeZ p/7^8S x "m"aLV}.B|@`Fezr-\n/^ Ӣ= )A{#g.7Zb͆hg1z j6<@F=/N. վA~u^CМ`<ƪf9*Q.~d#?LpW( eJ3Mi I#CI&Q8u>PLo@`GfөZ7:hl,IV"~r2Y[«béE zEE k d Xx39g(EzձφĊM?or}-l<K+cb?/TyE˱ DUdM~Ajs 4Yosw>B_ hCi B"" D@ 4:$یpw3;fO<;10]uXEM^{kwݗj#&wxc[ǨMK:'l:k79sa'ݸҰA!gOXY'\rK`4L.5Ap?{SV&ۺ;IjpUցa.xH:Pγj̸1ƒm_Om0b̵tkЏ{mg~VZvBL e%(5.ߥBcٖJc*>'@;7LVHdz{\ _f>ƞ4LAjvӪqfmga-4m#y%_$)SPEt"jVp*dISOn{g?w'[Soa`3hxTBv:T)*yC YȪRpedX*#_ Ȉk6@,SPU'C]sl,#} :M 6 ;,1-?| | Qm$@=kʹ 4m[ s@ܢUO{Z?٦Ĵ9T{NY?. *<> eeӐhpLCO9KIx rDұHd ,ɴɪbX8|G$RVd#X9` n itgJA"@RR{`~I9BU%3M7E3vYr 2"g(Fz9ɛl@W7F;*>.@5۔\Pa64sNJ3@<>s+B@ o kHЎ0jo}(#/8-8^I#jry7AL!}5pj#ouωmcbU5[4m0_[2GAy&a%{{ );$gWBQ:$eyLRpCxݧFyC:%~[Y=' -+oy>DŽe:fwSć^"p6T|K.ΰRR$o)W#9{0 {=j{ރ4>bN‚6 v%>.*GVZkjZ6o)dC& R(@;Հeʛϱ>,nV3Ee Uƒxxq`[JHzl9C`>% :yXE`iu6&SfΜlE}Y% X9* +B֡_C/@|B߹y>rnu(+} 5ܬöI.cj4!1+}S;3QxÓ/hb/WY'nшf8q41ᐐU'g>eӖkmT-7,npNn wrh_1U5O^:lRF^+UFz(g˸ kdP^By`'"`N%[0^amqPrήjнZo2&A5l=%a`3mo3RR%Ͷ1K;+,vrDkp8WB:Q @΃_W/{~P9S(DS ҞL%Rؿg @? sw%8BVjҨ*= 7 e .\stm7Xz!22fyfBEa_RR-LxGsD-|͜Z %]Ғ9~lvzbJEEЪk&|=2_| b:4-&0]UA(5 1RB7Tzi*ʸVދ$b:\m+(Q&,fD >i-Qna/JcH^60E0cr5e&*Qk2){t#ޢ!4ꯂ\" :`ﾀě-7x58LywY⁄z5ΙYWdΚ/mkģXrŌ붜~-b89yhǜp Rsu0rT`fM^t Η$m/x(x2u@%)v $f2`o~6ŭ6Ce0s~݁`zql)80VjVq Tg~ V+[́D B+]c/ߞF=`nÁ52]>zy .L:=uB6fn< #GtX5<^FnnL>^-It k~ւ ĎD4N+o"@?Ŭ?В2W,z ?ۆi}h"X+JBdi9!׸*j{ܬKT+\5tx8[9W:d,-%jݵ`<+'I;v5Ot6mӕRPe`t$-XOOk,}}CUpg(J~7/idRB`. K̫;TP9"{%z/c{ʡ+\(-k'(9hW ep_"GNU#^Vaѕ3XH 57ͧn`2#FVk&!?3ZHBPH3:Wēln~[Ud(FM(V:_1XRk BDM"ca/]٥~G,,޴ rh Eg-F7~o>$䕟 AM J9)*Np3D#e [ⓁPZ/-VM/sYfMql x3"Q6$rNn *5kP~\*Ԭ @]wEE.?-s'{c(pY} "9CcPqrH(;y8ў`3D'Zi9c 펡aأXgxAsVіZ xdȑ`ʹc|F#@ SO #QPW?P&V!m̒A) cMW*2l"¾3xA~,I+b~?< ~ &R> cm<4fsS*noYG]v~to\xg>fL.AvZhDw&Ix<`{?۞܍y$'m84L9sKHca]\}K>g }5#ewȏ/#mYxC}? a]@Aݵ=kNV#$p65e 0ʗRmPZQE4Q{°s `8S:'Z9FU7.i]޸aYy̔I`|_4حQ~T6Y/O# (k|8v` jC*Rgɾ/&m@L~8fFy okiYGw?:~ $m~y@^l%c#W,xDk.sndbF?]Ws'%~&T[([js";xkJ[7=_)YE[4gQa3yR4L).x7%;]:;;^jɴ~C }z~>n*n/sl$pF1Jbld,zc )0I#֑VԈPq g3< NLa $J 61p/H*SZ #x9O'KڲJr|zD*`2,Hbvhz^LiV28 ^߾UGl̎9 sa43EiEvD~)GR']Q2`TGZ/UlXN.4ڔ{xHHe0`ݳ^>XAT}uas-I)f+>GUԜ6l.d ,,pm|# !sKt6;LbƑ^A: !c sJ'IH@\sFI+IIQczCBQdAsصipҬȵ*%I ROYqˉ3*h-GJx D/#F %6g{՘bH,5ΥPܟH!I NLE^nvݾ_=-ǭ<ȶ6)sTUg]bWۥrL@}˅p!@; @H_;cshpbwpU{+BSֱ1jn>%倆RߌToqLҽǟuHә:; uBK9I ewca˱"͑&-JwE7#I:kBRЃR!ޗcSt蔝fgNwO1L|w-Nx}-1+| e쾇 GZvԂ9g_ Ь nִOxu.W.!-b.R+6 nLˣ Y2PBH?,_,Τo|Ñ|{ɔK U Zڼ~-Q;/?(1im`ԸvK(@eď +N$Cg.iS_:=<.UsgGX|`b] G_-[*ɡ!neUܪfE*Y^a}28vAg e¹~ '˅*|$<:ܙ‡%[yY)8wgYJ R ƀxr.JDzYGb(la@oq|eq;QT)둜YCigWHV7ᜪxx@0ꃓ2%cS>nc +̿>G}:V&U-5AtT>Ti=eRO{zb[BDKGI#Z,_1Ye@~fsܔyه==msT{a|jd<O!aN *$)q ow>HlҝNrU?Q pBـ̄29,1T$nI.l7,Ůf8g0 enY('HЎ51hR FY(-#"U˕\6y.\^d.QspULhA0GBתIƺHοbvL}ToJ^s8G"Wxz (r|1fL.oGxqyxGXxYUaw. BˆJIy&7ފD 2ד94ŻͪU,^LO_3l2lN:?`Т (W7oYNJ?RV[ (uI)^@ªZ Y4)]\7coD3\ve}y&Fhi%փEQgڌ7 bPngM0;d[Zq: {a΃ ?la3 LY!PlpjEe+Ad)fBW՞F8v12yR.qWTM+NjKQ2Rx"kbԫ+f7 = TΛxؚK~6)`~;%pi}jNUkxn,qZ=(3/2`aZE<抏_{7:g+Ef| @Ű鹒ΰ"&UM'QSxg!_ s>GUcTXsPh`'ZpC=rs]f/#tig.#^?Qz+$~(k_J[nM,Wt8):M`2H3D/v5Ay㧊3 O:~ y,tq/=ܮ9o w ^aF峩TC S8|C/K'n+pcrU@ $FN 3M-݂++COoUqg8NifG b%UdbMj4W_gG>R4P8˅qjX4M 5/)({݅c4v.rאycCCM6NF]2$Xy(UѰa="ahl:>;eHCf$"Ss qܭ }QdmRG\32Zρnz{v\ɎSE|CCFD:jT<%`VQJ6ITY$k)DvEM`q\' vs^;QE(BgN^Y3\p1fpd6H|Fi ֨w;䱽e3й(s!5=?7~|N5]B7*5gu`Y{7.*V<&rxwMzضcy[ιm&XTi}qUdT׽J5n|1 ͱ-D~ KDo6x.6Yg}FYf"76}mߩB1U'8 }nجɔk."E>Lcʈ:R(AxT%8d:IјGCN/XJ.NR6LG|ɡcq/J8neyI$εFpC\:gfx5 CY'3aI+_QK}Ua)<F/(x(A4gSu;!1ddJKpqFos5xwyJRwwO™!7nEastۈQVN +,o1IYAIϼ?o2>.9?RVN2fn`m?LR,7o*p"+}sEdH $ Q%M#~S|`G`kaxr5k1[v0@hT@6 ?(?`e,4 l"npתTG"qj.%Vӂfo2  ~A'ߧ0Ix3ApHTc7 nA5'79f9P-ʝxL*#,kHE_ϪZ~~>5៵Az۝ްbu %T]jnʛ"@z. Ͻ<* 2tZFςm y0Bi#p`nLzņD5z5gF&lc7b#I.SD)q^g yf(s{kawQIb%z ؃4!z>p4XLg\$6YJ a==QAswxV;lFԶMxM +mA;%ןLuڴ'-Dt3y1rYr.bt/h> Fy`Y4 Gż7Dq|%߁^Jєb8)Vtqќp 59fnc] 5mh\A<9({gPk䄮1[#}Ҟm}p`37K#GI`CVpd>{әb-WPΧ_E6_; ;~䤌aEE/kbkC_3P!K#}vi9lOXtv35|/S*~Dx[<f\2]zbI5~ߋ|zGG=uȂ_{i< 7nL,k؜QܥXsZ` X+ԣM+ėycbEu5$ו p@*q~݈ $/njq3N^_}[*ݷ qTxOF]'eRm&9N{xZL*Z(#s2?s[kĥ ~{&Le, ?$HWA/_Ƹ&`m-"-1/v["AJ`tr9GcG*&q5{@Due+N'-z>G\*vIƨaU[xAh!ocDZ4$eKk=t]0h)8AR@Rk7@CcO/{ZA2j\\E"Ow[k-#Aô2֥ XL=A#^-xS,pEঅ&_ؔO)/T`Hu$κ (qOGakB<%V": x7&Enт.Ȋ,ҺlM$-l{N#7ts/܉e qe̕6[#0=|VdžaNVf:p1פ=U \ʨWc_JۗDA1^BYi*Kw]|ь;oEj7. ʂB3xr݂UxD8Me'2hAMXX%C"(̛Oډ[1XD̡߉ZۛmAM[KbWFLuĈ(n'%p7cT&'ӷ_~=/gYxyTea\x]!vn&%4~&ڳ9_HEgtV m{}mwѨ(A/r~`݋uCTiBR\_cKC."T;/CŘ[Tm< 4Sc tXX~V>Gc@KƢp[ dr[DC^qʚ8^x!, Ӓy`3KsSLp\&EtE'  |~$?ZؼqpDM7R;mcA;$ K7*?6pG"V/C#Z2t,=p-O-:/ZO(FFr6%I~7XVcMpQE&Vp Lzʰ3y 6 91}zWU)o.2 EO@NאM>4+0InlAI, `:Bf\I6.3xӐ2oQx N-dnO>D*-/e~7i/IL:J#jbT:_ו\qV~FjeS5u!iWhk :yn||=T\wYP; 8&<7-Zw2ۡik =eKuw2/)ecI QT\[6F{-#Zuo!dJaR[[@Oͽ85&ܹigE`Y/=`B@4.1;@C kmUŰۯ}GC-T\MㆸY΁V`~fek·gp¼('bT8b 1y^y ^`Fyx5a4Έ3@ >a= I|kYRHjԗl]^Y  {[gK2Q̶: ЧصDnkB 'GuW|TXe|3AQmN&6y)`]n&dJzp35B'^k4IM jHl~W_qVuD菤Ȭ(`Kj2!g5B|5\$rmb YFƃˡ?p}= =O/Q^5U6*Q/IGOߗRxSTlV]+?K浪?@Tn&>+4Q]IEw)dai.-uv-M A(9x׷nQw?1Tnڲ\dܨ@?g\OLS.Wq)DyP8[nc'"ءQw5nenHҢ avTlHw,܎|[fя`q3]ֳPC"ZC&կ\/ JI:C@[_:A7ڗx+݀'çY3nmD-vģNA$Z a3y¯)9椁[@^Gxvn01Z{ǩf8j2;Cr0 ]f6LU 9N,yH|]V76P̤[|椝2 tkT I d˦mi⬖ o1OZlG;bɂJδZ^evp֡߄ 5 Uѐ|ռ4~}zяsɊ8Y=dmѸ (0D.^"4Dg)[^9^ 73<̍ț]{,ޑ:/WnTe:Ψd8eߨax~XwS-@$NwNp rmd1HHy.y ߒѭ 3.m/bXQVMA%ϰ1E`"!!H"BڰoBll%s Yy$"Sf!|f=f5rwf=qCڼW7%-oChKg, ,^;88нAGVBVRv,hϟN&؁AF̤h7-ѬW0Vh80  afÚh`a@LUc[Bz2}R25F .U~˧#ck|B"ljuŜ#Rmc< Q?yi4,9 3o^i`1"Z;?eGVJ:hi\!L5?4 -/|uv2tyɝѢS |=8pOҍٮv6=j#6Z5Go`v*G2x;ԘUϧ4v I:9mj=AU K0.ŸT2d =pڞ!U9F uzV<[BևAjۜn wtx4ǾiK}Oz*mBPRaZƾb >KȎ8Eg ņ?C4+O՞k2y;<=0W>ز24\5C}9?pu s>HbF?M} c-B@M7 ^b܋d(>r2Pr 7BdHoz.PԾX6A)A\ 0 Й(5j'?~{/_OuD/Xg`Bt)ymtVc kDICTAvb=E9j?[j,Q }4ovh9U[3X\PtoANu({p|04ڪۺb̞~vd71WE%JGP9Wtskcn[6oCjz2A8PO?m0Y*YkPJěDh4}b 3*7xxDTSȈLN;,'V롸OHCnejv7 W*c[BALnin ZDFRBTxtI+., UX8̧uIKJjx0#/cFi2[JI1W|:=E?۲^_*}oo[mxq-?.e*190Wx]u|# j=YʢIgM FW5WI nҾc8[/)i@jb}OKl4^%:EyX Z8ro`-6&AECd0D B] 43Ss [=D1#YRjEOL&Txzہ4z>o: &p,8n>7DrpYl4<y Su?@R\ yԂC ]-H%3B [&Fr9L]x6?ZJ ?gȔbf3jT %cL,3@3+d:/sCAےB7J&Jl0%.N­ѕۜD}^mThVIF+4LlX=Z+sCcWM9um9dt>"jEjZy39줶wS؎b 䑮4ք!h<8Eby^^.^d ¹Dm~ ZwA֘MD2 R^1(I:?6fX=yY02$(W| TWr0ICDD1m1ZS Ze檇# F"W!o|:h̠(‰fӥ0Ɖ =+4?oS*cYU @ ƿ&\UH~L\U>D~uHgq*_C1q kZ>+{H]Uk#i PfkEpvj3qF{ #Uu|]dWzWXXmDˋz1wDe=(C#w?v .;L5t!өSWv`0V$38ɒ:!qe(m}({"Hl@0-%ߎO[N9"yc WW-Jձ~?Rgx):g;[CELUEHV\Ai0пJ-Q~=8i%96’vG ҇ (B)KP#7WV ӄ""quZu<4qӣ岹i7pu .sOvXs|40mp!RX rOzMu %Gɖ_%Th2ԕ S^'c="ͼUt4FQfʝR`nF"߭tb֝XnׁtެC,dclz hR&m^H96ɒOL[nq8Ő_;FshuB83b0,XR`>9V1QeV&\a*i*hdUHE5*! ~6))h%Ebgv,HHlSɐь%E 1vsv?,2#N~>a%TL8B@t=!!y9Tw%|f 8cܛ~ ^$AgE0M|F Gg䑟ɯ3_JL5EcE0t7+ᕎDtcB H,RnYᐛ ݴ!oDMhC| 8&8GҬ7R1p’sgmQ.-^zRK"t<3ӝTߙZQPM_Aק Rѣ&9uo|^pfv2@,*9!tWx n Dvɰ޴*ՏI b31l8wWR27ʠf8XFm6'-O|^;tNS@AsWT(tfsb4+/i٥*~IpO)E+@7#W~}w+ut&gP^ I3hrg7un,xPIöuDuqP59Ղؑ z|ϫͱiE}Z(Ҭ!ȭIw1G?uHaPky` phDv3BT:x/yYd֐;%RN%.b I $ 5Kӛ>B,̹m]pշAG@ Y0VmFU&I?ԥniGX0ygke촋{'Kp,ĝ4s*$Z{SİbDٓHHk%`mӋBڅ$;؂HK>w2)MK1aEo Bc9;?]0Be67UsNu](Q`d-{=X9C0{Eka"Y4[K`@RUO_tVw$E#>/pA*B. FN*Tt߄}/ôp({aAuJL ٳiڏEŋN&"'(U!oEt5˦ЖrB#94SNY0ܺWx:*k"ӮRnO0ug[m4l`[P -,9ܝ~]-ԲUDe8]%r[4F O~v/1"j ,ҹ f^57$jLU3=%-(~}"\,zH B'2v*[,|,\,k o*X(^{_-M{D.R*`б^׾IwXg}/nyymjy5ݰ댺cDC ]e 6+iChBD(HBԔI @oED˩" 95:Lg>t0XԤP%VĚs8ͽw4:PbȺXATG3f:n ]ŪOЦ֌I'}VzɚcqZf}:ElxodmnS,Yi0/FȑT drbQӶT0.S#| *TI__d|(w ;$W+-z3 M8DSu-ϚϸL]7C= 6sW~>z_cY$obKz_s Cu /h[rb-l",a z*HRk#ksPf{kM)pd3x b誕kH^G!5V\ e5/ǀ!MtVfBAlxMZOBR" `BZ0'e~JyZ&UnNG$BS]kiHǦ7VRsV:͕T>P&s|o[]iջ]޾[4ƶ\"icu1rX񞶶3Ey'9\ ̗-_D6#KTK%DhqY":cKޯĮ7YZBvPV& ,\,/CC.=Yk?tf|ί3fsT UF0n t?^Rxq~r ղt[A}[V; ө 鮆/إ^z'ɜDaХFpN֘6W]h|o@'-R-m\˳w7at׵, cw1szqפ:~Ϋ;}!UEhbUW2oTjV֢L!"K:jW-rklƆR֒;@qL/IĖM^1d|[sM l ~AT"fut4]Wr1QK-,r! C~2wK!*!ɒNI;9&ɔ>ڷ=-7hg783q# 惘mӗeU]iJrwKVZ J=0-E뺥Rk̎5AYt -c5!=hQHRv-bz9Ibyd67Fmܑ>LY *d" NiFt `֣;<ˠhRX| Dy_ i9P,d̀?M;0Qs5mKRDH*J'"q~P?d֝{WIu} 1zGYՙjh)9ŧUs31 Y5PP iޠSNSz$"tr\rzQ!|E`:C"Y1'6o_B.n} [zgOT5M}Ep+!ڟpdgo9"aRSsZhmd:cuBm%,=1{J5n9|$ XX-Gev4,S'xŃL91RcWwJFLw9 %ȋ0F U-^S)x=Ϸ=i8j} >gP%uV\!@Whݔ-ۗnHs5+y8fsji aZP2O)B*=fJ`D_3B- uS"c#YnVDPUtkiUA)\A!mj;Pj̮V&[DJCg*Z'Bg~j~tb.Ԟr.⟞=Kgۥ} C&pt> o9&λ^!75vmn<ITƎ{c6q3JXKI4]Ul +K4h(WcX*>b37NO;%ܚy'E)u '4(i*tUu~\pP6GLNI[æfIJ[9Rcj[Aa>¤#!P"ZS$.ja5m%"N M\xA*hWH%"2.E]x_U`oȶ҅DT0זcsPՎ8eBZ2adv*bfR>8ASIv4::gzX"Ɋ,7}cUGUn0 *fA"=OI-F;KpMс˜*JDkolqGy1pI`剋u(s^^;UGy kf:,~<Җr+٩6\iX6E)[ڻ-zHy;n 9 / P":S䧉SVdQIc0KV˲<){@HtU~)!{,M̖e}&vo,OgZ^%'_%Cf4dyx/u4EW 1079RT9 _~WX`WQsԠY{HMLFTVɉ82ؕJk3}cLMv)aQ1?K{y}x&?HrsVec\Q RpC[5 ` ZQHa*# 8 18VhJ:RQ\!"'QkB&BIUȈ*,cA$^wm^T#Rz%ۋO8ǓO*|f<-o('_5,jt :lJl,Wz(M?GzҶGĬ;۶)t'=޵5&UM! g_}ukz;STc"wq2U_WB`9I;n|8díJT9~ 吞 C{QTDa En[2[ﻸ!c \kZˡ(MJltSPۻ_Aqtm?F8~={9?ל?VC.>ڒH+tA^0sQÁNJ_d"#YN>ފ'Nv_Z@75:?@5 vt8pbn8Ǔyhs>E|>C*Bfhy,^\V4l+:I{(q +7gwXl񧺳nspްq]Cl6=h8h .i♾UDRY!S48`>^E N(F/%@*RۃCf!*4xk^M^;)K~jϐ>b\~>D-p̭֞&M*[doPZ3!u85Ca-h)%sbh0,ırO2& 88scDծbB+uqF` Sk*ϸ~k܍JiU=)SW`/;ѿEQ;=*C>xH%M;HU *Ōp qn@R55d7E63"^lt(OŵXL=dRyqU7$[ǟ߮yN`&>i$k ~ZeboP%8NڥHd2UC٪^Rrbҗн/3뷠|@Ү:0UөLMӽ/,Ls؄(IyLBŃY4| gmUB> o-dQ5dSrVQ Mܹm6ɵ;rc#^BL_Xj\'-I`Kxq+hϠ POWYv&$ۤ{{6vM Z%>A(H̛;3[vj]*"7{8]3A˄ɴIӨ`;洆CשniwE$#R8;qe]"S@u^\%]e%btqqanI|:@bE咢F^W~z9B,8[85'nn0ce Y~PР7uK=)JCyyek3@oYclK~ ѬڶNm$>SgGXe4c;ΕȐ_b}umr8eceQآhSZYoݭZD'o30֔WWsE$^H~"{\OOEK|0E(y`$Mb3&W}}8^?`Q'Ei+k %jݖɁ>!F) &vjQ-ȫ\ELX)ړ3WXMci% N~g _%HKsB 5XfU,#Pjf1@9N04I(;\eؘwU*&R4Ŋ9𽖈GOwlV U=vB"p_VHBܖ$ڢ Ov6ft,Ymfv\#D"7 (!&|-36Ӱ@q&?$]J*@mޏ!KLրr|326q|Q5qd*dFM&GP!A8!G=F@H5P:kCq@H*^0ajju;^!śNnBU\]*g$A'uI!/>ƙMqmIƠJqnl)yE.8> mɍ;lu՜7XO9#ndT<ԼA*ӹ);ͫ[~:+$m}CϱY)s.<>E=y> n*A\)󛒮&D*%nktG "ED?Ėٱۍ)Us2_+=NBb R| VsnIH9)dZzhW\G޾`!AYfn rj{[5N4.TާkUtSn*0D4RL۩5gvܟ H݂ KXGZV m 6j@@fKB"L׆rS1PvWKu!ݕ#Ҷ=h9jE$i(ӁY)}D3:^nIeƺhu BbkYRi|j*;?[!{O\>ta6$Q} |;b,KԆ:Sh&}AƳ* ԗdc7w5IO !~'J=3u ;3iJVtFϷ^5H0&[YtX}: ɯ9=(Z-TچZC"#c7!=qMqR}r2_PXY!x 3xa tT/ Q:;_mˁ$bWJg |v K")7')JeF<'0F L7)4sNoNɸ&ÔB1Ij26,'zk5y߀\%dǺ09<| - 6K_7W\p/UY(̐PhFo5zt/q.ᅤUUW]D6k-}#"Մ+u  üVBc6HGv+/Y\+~E{wsk!Z0;;ay};`qbNlj֩4CPY{xHNa)+ HHs 6w5"϶ JzUV.{ : Hg 1@s9\ƭ+xy{%լ.i!0@ۥ7ҁaC+ug:y`6q Drca}o`D2gFǐMDoWHᆑ؉&g6RͶ)iIGu=~|z:pMAcB$V 1`[k6[t1jOCpb:dxڿGCv ~AZNd0d|<Χ>YbĻ՚1'P"cN1K!Ug?f&Zhd-,yl0aV=il a(nE "9p&H+T'Aq"m{Q_dm]%CSd v^C:jAcQ!M%$v Dj֢H^KQ$Dk}ϚCӠK:;jmdSڡ] 憃Bݤu^BV{J܎w&RrA2l&x{}T1 OJ/" .."kGT4MtyUOT#<~aۮ_j;m8=e^{4qDQY5ٵ|:\]DXBG;jN[4w^K ^㿜mw`#c'w^4N"G `-j>0f[\fnP!񋺝5.k|6AߎBw.*.ٍAm_-hQS&]`P.J'zN.enh\(?T~,0}n{>u.elqpSo*8(Q`[,eViv'ak/\0'\nx Z2@t7䄺Y.TԽ $im3Z:ǿ{JWy@^ஂ rYg! jɢk𢇩R\wHV1h"g8a3׺zrчi~&+@_M P8֔Otj,ĨڪLƼvVDi}E4gՇ*>)3jnJvӜM"s]Φ-{a*(UToV*ȗdڼnF଴1epE4/ZgE&)i,qäk9-n$%P (/kwɮa} ^dDkGx A\*>gCMGfOr7{g4]KnBt>s6Myځ҇ S ~\ Q%b J_'dVq$x QKZx\Ev+"+5TU3?MNx}w]9T7\-?5V+݄πsoR| z\1@ŀGW,D'nn(|Ő?nG9ʄt)6x -;$PkYsWaE)-hT wV1?,o+u;) qg { DTs2$~@`1P$;Y5>`D]|G2ݩԗhzn?z#3ئOO5ڔ9ꗱg0HJ.A5)kߛxT _k-?/Vr//{v~ j",~lpiEfEETPٜ)ɗ4$_r]jƊpƻ OpCHv@m ߹6#.1,ʌ˶[ECʑ8>&dȐ!xMB r 9ϭPA.EGg`2b۟ pRK:m*-KwӍQ+Z$ %G iAV"K-QMHm^/9>(n1aS33X !P a2iNTha!Ǘ?6H[RnDjnܩlJp_*i Bru)U'IO#6մj 7=d\iޕPY3#7m\y&IڦQH-i1q^GlFC /Б::U"!Ŕk2!>o"MȚu\pT;5_Jb+.H9FhzvGAmǴ|Q;e-54;[\mzK~44YfU_ 3{F293Ʃ$vGPT @ɘ%WZ,I,Q}oW~wf%\l5N=c`@e= 3@I#L;e:sڸ8\9vW];(U ӏ͝'"-k:mE&Eb5w{^x&FJ'i#ASFL" TXhOE"׬kOfN[>~ ")yuetlP'SLR9qdir|b5;Bh}{bm#D|M/+>R"3s(rz/Fioz4(&j .YĪxE`ڷ9."@E5Yk.ɇ4##72}oI#ۄ |XHy0n a,;#T#k/P%4!Zw-lǬܲWfw&/7-6ۯ&$i}q33 ~7V%֗ $@.B,Grjrad4xx#ڍu0^E.Ν^t5.<^- ڙMh%77;09NŭчXǸϊrCv;uh3*4r5Hk4 _[.t`wDd?ZwuAkX,]DŽߌ81-p,,)0zJ~y#>8/yM7£( Gk=Ejn^wTJeIkCBy]b(Φ!a g]DaG%v8)'&L򟓺(M~\ۍCoU_Ey9kîv$mҧŠy*|[;o,{7풯tl/] &w9,FG;?,uЫw}RJ2 mr,9G2SUo@:Na,ürKdl ͠|* %QWaMwejM+5@r.>TFM3ա"'wLz%Gvޅ?+ `U'Tng|}|j|Fu1mm7(+2P^L|ASZ{ 7tWҿ;Y1pJWB*qc,<`| +MZ"N"zֶBY,h* r$腴K NzgO|9+@+B{Y<6.ޣpyO7%C}"@Lá%7"^@k ۔1~FU|q@XA|$\A0K }%\NvM̝6Bm(L)Ax g7CnǤ#ѽ5jn)+<'W1@]v36@ z!z;IAFrËdp8/ o$نQ}hNo1Nzǜcv9ךxf kT6s}La$İ02~=2xNšAC7T 6e92\:5sruc4GւΘ+wLn K0l),b.G|R7mAmu>j-j{tg A<_diBlPL'h먡։ʽ+}>FX}65b)]D졬4>kZ/Z@ e®0[3&LF4kkry ڹ'= W ƷEܖ,鎵.ЁfFE3ykuĩV^X ^aTy#nxD%u>KiRLDV G"^EzYPhFZEidk$E7 k#G>4Z\]\l)G 38܌KE¤$%XPX ORztŴ눏x79ϸl>vb>Ϊ^_Xfy 3GAti0?jܕV/cV B9dLynw=kaRW-vapv+;.[iZt(roL,y;߂:Cf*B]Ϣ'JKLl՚񙙳&u&4=Q uW4NXnX(`bR]@O%K zTk8B[gv?-gqW$R{Vlb,vӣˋSz&[nS&whb [#2\-Id> .$=Dd%:INzZOc|ܝp}z+˼G;ZI^ \TGjMz<ӏ% Ów0'fc&-`1~X ]2m6i=^jYdbnzt4cBːPQW>M@Ų38߿[aH)}}騘R6lGE~;%?3x'75YިmI ^녺f2U% p3Ot -k&pr.>Wg-#TO%5Czjqg\glÓ'k.*fv+`o$&p8$GCE8<8yu8Q Jji7hdӖF|Fh^ڗ85(^JlϋD@sTiD_4wI-*RQZP.kJӠGd5;ÿݐmZvL}"Q ]CSciD$9a3=kդ&֒zF.wID56x*l_Z7Vh0޹<~'^QRR=2SDf 8HҰo' @X"JQJߍiq0MHoQ^m0 ;D]^4A;P53a][1v#[I@+?~nhNrEiA}j^ H4B}`mmx;VP>.e@oO\[̑y_Ų,H ECKgO@s!U &ЋjD ON3Q|]NB)їa#3n\$NYVѓ`#u=,̗Қ+*:rZrK1vSifߏN6 X L[,,Yybў!-rCO,A+@Ckv]?8/ o,m-rzY*gxչ&!pBk<&bmہ¢px4oTօI]33 oҝB˝69fXHO4~#-ڑ ~d3Z :⌿/]DDHI5z榀I̠p.]Рl}aa(󟖤>hq$Ђa؃4W_@s5Y?k% x1sPY|Zk*^X\W=VP=з;+\r1JN&_b,w:}3;z_K26:yIKp-{zDQ( @kaq Pjrq|$PR"+/R["o35{`):%"Iks],`3MOi]S,4Y̦þZv]&*!x(jqeЩ+#îp@F Aw4%7xRتccS_GJ"6u^ꉤH:Ld;rgl o6h?DmlE CS|hdf;d}|?;/]j v͠~ȴN )K'O` {lHlN[pܤ(E)KڅMD6Ɔ\15;sb!J8VuV΁W^ d|W47SnQ<*IxtSLV[5sJDx@b |.hPOLvR: b:ҔҚ3Lia&lJlwFCu<= C'k>܊XKM 8JPN'%*茲":1P%/w)VW>%$sA1˶knP* sKЇag6/JW-Q*Z8 8e,td=0.ݳsYw)#r%yшyː|`.4+hFAB*8 b'^`",}nG`jm&skֲ!ګVV38ee➈  NM2^{3%AmTzj>9oiu1M>Ur.* H$ )QWDr 9CMQ12:b:U 9~E״!y¶H{9eKգ'9T$_:ߚ#|RP| w_[Q=8x_D\äe=Ϭ dÓ_*9,)ER΄F{@Xݐt^-C"ĨGLDX*2C$MXh;&8,Y-'Cp525)؄|&EӢQ<xD'S3,F|EUfD:,Sk!8϶1 |P]x R)0{oL¦Xwd F ܢ4[v^!'r&٪ИeiE``K[ w#ꙵ2e>Xr-_RGA+|(K-zsdJ%=yq鸰JFGmc[E S 1/OAW-$\rn_ʝZ jZϝUrwW٨ siyuo+;\!R$Kzx-*it$II-7? X9LJyPNFALx[!9/!&y +;ORnC*]iiL 6JjQE/ϿEK٬eZZ-eYukMT%&Wtsӑ9 уd%]zi,1sSק#v(7XV1}\ܯkظR[@n83o'C'B2ؐ$1>$}cJ拘>P]Wi!s!ܠ1(Zz&T}o<ǁ./*Jta|@L}3 M ͅx=A5usM]հ#<sZP/e;]8mjFx/cb%%x.P?5it?ލs5 ͅKN9b͒Ѱl89l@6`llJDaf^ Y*p,r7Z7;K{:5}~,,x7X&ʼnЌ2,VFoG]|uW@RVƲJX䦓.7ЅBfuO[C!nX15߭8:{,8wqu!sg zDQ23{L*QoJ!ݗ3,HS(jQo0+ٙX[-?HZl?:0(/j~]He4ƧJyKǟ1a n[vv0Ⱦi:IAEר:Z4̵ayцlse" CnPKX2#G\pdU E CGprc/˫.H&|du] GbBn8`-׺W! P̚D4e[w8_μo1.+΄Sރ_B/x1 *F{̳%ٸ8t!GӜqfo)6DlԄ?c*撼K /O}Y,i`k !Hra|uKQVAkׂo8ls9+])vak291 0=e(%=KԨvBs!.jI1A܇60ś}iԸQ:[>A;- " A/jK$|3G v:цh=)5WS y"=rº̅|Oz]Vr@'#AM<<*yuCnzQ.t$TdS3Sg:bd`1; iBr>E`w#Aq2*V6g2qT;] _tU*@dv<ʼn;REsmH+&D1礷x{zU&b6w2XT9I ' ʸ 'S=6Nݔ6uMG[GrT^MBSKEa0[f.v@q>5'@/7rh+;3_Vx ps"nFx5p3 {?eIy[!{N4)r:^t4lM{?&ttDL(b{w;YٮaXYߔWjuZ!orWѵe$x!>V\ >ZuUpX.D)2)k)-ԕp2' L JRF zMMݹa 2o:( ZH7)AX;]`=r xdap)$ eAvE.~ZAHo`>׻`kiGA(c%} 2KD5Pm)Ý`'O ,ߑoZf<{D˔L P+*j oj#iMik !whHm;f+;Cbs请XFi~=7}4@" RgD$YlCŹ?ll8x'æ "Լ 47eoNRܺJ-C@a洅~:dWwht#+z;xCuθ,h31*6tj1;Pw FBF OD_5 eʑMJ革sM2./2EWC$} R3>P}U,;ˬ>o E] $ W.&=CEԆv I;z#!}A7lq`VNQR66$v-&㄰ca ZzQI2R- pK! Da1jVi0/<>E?:{ Nei[68Zł؊ %PCBE(ah~QO˶O5za&.0"yc\jGd>Z:_9؈4HO b]/P5&j[(B21_jiJ%rKȌu2Ҿ{LoC߭$:>J88Pjvj;\#0tuBvLbkߣ#?Ÿ%-@7{_u B'T-jG Uk˼BrZsj6dMjU20G pvv6O;%feRC@iPr z 8~fbFV.$}װ(`+%8*}f$*Wu4`l! R\G3ւO[p#|\b]r%˦ ׻XKީ= -նi=PÇ 0ЍO_J30u ;ul\ 'GfI|#f&kmLM79TY*sߋJgC;MZݕ`Wቹ`)g IZ-Z9˕x2NsaI>A%R ߄gơU%V[ͯ~iGz eI?<)Pڝ|")iajMXJĈqhjSIKpͱ?_HQqUskًo)~{v $ S)5nyLZLJ9{f R f9fV 996Txh5O7HC*Yc^}7vjo9[s|!đ[<3 cy硘z̔ZZ;5K#=*suTP!H}Ɉ(}ا34369X#`>)S }qs|Лo(|OF/h_9#P8 d}ivȿ ɘ*e>gtP󔀬g^Gh8J9 s[{28'ޡVzO!s-yčzNt˫Md8uc\5E]O)xm6fHv,Vm ,$&-|2&wb٩ 8r.k:ǔZط] |퉳iT9a>@[>r +9{`SPтLU/3L*n.f-qClbٜ-Bhhf,ΐ?deo}-bgyҝuEA_FrLXMKwlK9a dk7Xo>hQ}>w~nDU{'b͒WنAY܄ŠI};qB;xOpӧ:/ք2Rf9OEϡ0,F4Ola;AS kH`Uz- _\- f7eNV,\J1 ]3NNc-_.hdwPwR8M#lYnfޔ`WN+韰a=TEI0R{ȉ!-A *{?xzS647Iip'8(hBxTTv֦R$C`_YqG5K!5 zaަF("E|ma1 r_Z_0,ǚ YbD~y>y/ ҫ(`(s?9H rRMa"=%ar-R\*ާUqH3"q+0--hmh A4{G7Kg` zF(0 ?ho3X#ZcBVjZ*]hFze4b 1!( bd] ,uڼ.gQanDI O/2$dvC}^w6}of/-x`Bg Sm] MZg'k¢ ;Fp:ļp狌pW?[ :?.2޼=l ` '%gׇ`bho2'wXc2'ZbËۮ[016#nn{A" xRw`FEm|=|ߺ)L6xfɥJV+sy d"vFn"ݑT\yƑpJѴB2I_%NW3Od.FOV5ߍ}'9 ,2EC‡_Zz9o ՈC0AOtq<}Ul\Cg-{x$4Y] Ý8`S&QǒDtO-Q Q.㈡݄\M *ny{aiQ$R`=*;f{To_[mpyDbaDwwOp1"m4 S_ԲE+wV~osE .?{%q4M K^:8x;vsrJʔU>O\ ) zDɲfkW3<d[}0y?g#Zn&ncV:ӊ  =7 V /^KIGWƞՐcqΐ9/"mÔBh/}D0l HrGqEU[B )>ސx[_L`Mi\u$W I{LҮH1Fb92ɋZ4^n{s^};G*|TkL%C 5},wS=2u1,rIg0H B|DFr89gscDj uF~]vc\VZ&euz}&:RʙMa&^A$& umKY41Aιi˧[VrǵCNLvT/'n) KD Z.tAu }wi t52mћ Ay }{`WAy o,80wEllϠM$-:~>=P9# u40+3;!eo3s~ċHMfnrwx<#yq)PR"a&+n}Meփ`),551+Wz]>eWnϯJgEk>Ɩ2SCǩ0TD]|޾no ]rn/x_D.A"qEw=/rd7vĄ8,%1aC]"zcȘKt\>mrP]0 +V`J'K ^KwH2ʻÑ~cG2>$hlpL|I0 ŗt|ʂx(%y1|q!Kzg`u}P)wJLs)ecu‰UmOMKSH*։"i+0ۨkU$;pK5[4[z!#֕ 9);j^=)i,䷚SlkfkMNrV%K ~ j@$j&q7 WًgFT֪.D?bޞXZSxu54Tlg.a94hQ*WcD+I?gٝN˰o2BjNJPd1! -pt8=(b|'1ni8 ߍ>j3@_vуun~ ?8xW8Z+|@*Vt4*X3Na6\)RӼc3Qd(BY;/uKAJs# VIrY-Y!*y/J]5z7"MuƘHJ[ 4r ,TbސaKy: B;F}!U_v (eQq]ZOA8&}@o%4Sϸzf%,K 7UHH}햦wr-l$o 柄02na%c5].UIiղфrDzoZ;عmvO!pnMY-Ə5KI?tc즸{t c0-'Ej$pAb ;ʊ3yl]_6p_'7j ؾ<5)wY՞ ui:vU4?f WFhu^Wѕ*zHOTxyxeO FӍ@cݯDsrkUMOb+Rve5B@▧QՅ5ed]3eyqUM>I dT*B8C',nK gn`vQc^nzw8;du\ !dZo︰ͱ4S%e#һ?$E!ɝ8H{\F1E*N߹TjK\T$Gj/2d-ѥYc0#͍Uۤ/5~0ƱЂ|:ߩb矙xx꘯NՈB$hXt[4.۔aKY[}K@*)ފkFE*EK)ed3oC`3nEx-͚ڄ_>8h(MCf79 / h%\ߩԈ pAGĻWhA~̖T!09QL8N;X-U)თ{rofoM);yd_LWDዜ&,ƭO룮rv׌lq `مQ\ 5\ bI7 ^Fȫ 8ɼi pe9-"8y̘jqe@0?=d4V= ڄeF2"`h"" Zy-nwڝA0*]noK$?HE"E im2V =3>fVz^to|(B%pp!Z~P[P>6͢0-ŧA"CRu2<g4ݥBnIZGb*;'+gd*&sFX $*@Z1vIDT&>!gy;/@ǔJ @)T$Cq8gx;n"oBy"ds̈&\SӣqIȺG.7֢it%.݊Dҏ;dTS z@y=)lxql#`8qP:6kل9:~wNBF+Lܾ2a9T^vQ$1YRj1[ ,F~$}_ݏ J loIsP8 (qO͒(mhm?+MZ|˾*h7ʲܦxWz˲2;i/ rZcM|6EӺ&ڃNKKi&zdϜp,PĹMH6)W!Iʬ$aIǁ ǵ4N}=3s1;q6@-lVkDW~ ɶʖ5ǍC 퐥p),R{̑ ,:<`oj4ۆ4+5W4h?ap@bVqD`,6 Ha'p7>#sUP_8!P4ajT8\^&<KEWQ"R{1XDyZwG%\w}&>bLj'ᖃp2[?ET ػRT#r@U)`-[H0`!mD/S-v{`[9ݛ@e| [hGHQC 'tEyiI' l pu&;Qn8Lho*6@4F"ic`!2t15^gYP??@72J  =e8G2`4!*\!tNi4|qy, Le]G٤쇾z0,?& Kzkԛ#KFTf5D#ӯXq"{U%kkEi<oV~ri9KTN-fZ|/$[fLvt_QXߖ[G5N-,!my 8;=I#imlbK$hӎ\]F#HFu}DfGCk. EFMǦcCpt2k1Z@Oq_5 V^`&yz%/g\/|Ř m؇:ȷhQ[i @b1ɬ22@ӿgxo':)U_ކ)G,1=,iq>J]4=^Un>(t.47!Ly a'#:KP>n;,a lPCffR7^zw4` <0d'eqt1unY_Kxb3[s&$HǃJ_R<2`:ؙ+b? ^ ˵5 eΎ{t^gv@.9ӣxqy&/`oc2_DPu =f-Gi2ѽ,e]>CQ * HN!%\h.qj۰rC m= ɩV`ǛX_8K%lE1FO+;1O2Y-Y? @\J3ݖЄgVNY@\\*ԚM9\51b+2\KfL+lJҜ!K=߄V0ΩvQClB}՗% G&Oe`CTs.4:BRJC9G?,-!ے&) Op7c2e4.=f$mq-ّ6iH|cyَ#8pQ'+e̯I]wCg#xu$ U,gvnmq:RIJ ~1%C3Ti)7,A&kZMj5 `=ٟTI4KmYkNGTw^?[]&yA:Nka7Q2DߑΏX&)Df#^EtN]L+[ihYddV Tnrճne\фlR7#Et,hB_[m? AIre'W0&e5f;!zc6{˚ rJ;oDadrK_~6('}݁vWξ(iLb;d'}VB*d¸%o> "0~N*6pU|_?*g< D5SC6L_ 'UC\!/dg64[yuNnv{Ԙ^޻*OЗSWV|#XiԶrdSkGZ";y|Ok`h fIu|֔!ly)4n&dLܦdhqj[ԫavZVcV pOgRҧ: 譵N=%f L.d#DI6 3oS9KLCן%dҳ!Q]zfH |8 ?ip2)0/?z+~- Qe=8Ϗ9Q PL?֭j4hXrO`87rD!ҫ2YvƮ=$7lqۖ8XŸ<Uf?+o BLQb_phI~נV:8g)8-+;~wB0~Zݬ778/=I&ӞCSQ%kot)!$o+kعk=چX=]37zw0.ښ]+nזwe?"?Ȑ_i *;d7PxiUl٘Nkd7&&[+7ga& IB5v*PSS?x,s&bd 14'{=!``Ep>`K]0eg ˓y;V;_ &e:aD<U>4bS2ٸx0gF9B*-}#` ƺD& Ky/|ᚪ+?xXv:X1Rd1"--Z ^8߁gwH_E l{~aT)kf4ʇ[ΫFh4֫]Yn7Ұd.zɥXKH|lF]K&[ {1$8.(_L RЍm;a>QcEzIh],YC/|EdZ"MYY/Sweu  \[('쨋iyCi 2/eW ;5.̄ޫެyi Wޝ$8EL=O >R=0n]nyb0yJ1oY!M'3٪C)Bߤ9{ˡ7x G}sO aa49n/ti!~aY;?sB j0p([PWZAJ'{'ߴ~ TYj4;wsW0Ndp' %ޒ<;aŻ1nY:~`]F3Dk3xmf!+*듛_' p~9<Lʢw+Zg )D;m,#GL@&ABqZƔ`<'6%V.Ӊ^D+ i% z!)eD*Dآ3+$qM|4r +|LLQkxÈ|b/w{'/ỹZvd$7%^aZ2M|3EAjLD!<c)(\Oki=A=r7N#)>8.5?P,KU孞#J4&5[N)`j4JB*pC1@sBקkѦٝ+΀8~FeqJbEE+!/rTfxrт<:S j|7\އi du!bR0lf'>ӹ _{KZn?&J0gVႴzqF9UsT %$,lX­e7IjeHr(^ i\5/+bJ̹χ2PO#%%^bYm;N^>vsy\9XQG83TŭVV k[Pn1}W >;v-ӆVxh-TS5 GeCh3-Rx>I3xy)=IrGC$ GdG ڨbqyҐ$DDŨo>Lygp#LEjTopQhS91C6C#+Mݘ ܒ7g?FϮ9)ﰲ|Izt-WO '8)"潁 JSWqj2`JDLedx0ZҬ8,|v2%S BAkÌ#aӛ)ؙl..55f E$n z ]B?"fmAe,yklkk eW5W=o%h]L]4zz^KH`Ǻ2J@LJt> 9R:I%>LMcMBpzm̡g;}f vܰ-C  S[ 匀[@%c6x$K?#l:MAooS(VDDXv6ok属;ɖ0/[m[?׷A]J.#dGZl&} %l?>[DenWG,Yɲ9CME7X/`r-&؊ NJ`lNcXꡬJ?!V+O)s*SUVh:тl ƒ tiI_x֎t= <dI:T6a{i,2 ϯé7q0'EJڂ8WLo;`iS)e(! =/VuQ])LB>XLePT}.mG̡8ъ2aN&du5~S\L:}WK@V+Zdk%lNuKvʧ7$!2/>9 ۂdhwаoF=!:Ш)vNNLUeѝ_$BAq-!R &W{A U}&(%a/p1QtS(23Τ]V|:0mpwz2;mԺ!X+fY4\蛚RwK?9>c 0 5>򄿫H͔X)trk'yJ*-Ԋ2 6b>{-KOy T"Ù .ULsMLT_ɦe&dŦt;^EԈU'6 ɇ6k?d'W1s 5ۣ*z[_ZW_p⹕d =w]xKoQF,exMP7[1h[7DUQWxp;]얝UPJ%΁f;b*`Vp_/ NُkCϲ*yDwU]UNQ$mAXmAD] t q#[VQv*tV&05@E;YoQޜ:_ B> в["Տsy%jMox|vR5mrF FM&2eDRh%"t0܊Ÿî~~X8F73#쥺?=AnLHYz"-֭뉘ħi`u+o "f_xm% B8X{=-ʑZDB""w\/|4Q6>V=JFKY}' L?):Evn'St=Vɋ|'C9k@`8'yͪj&D,r4blKmuT]lz::uhIa(!|s U8p?%EhMR5}9{bJ BLYֽ)*SOĵY2IѦY2 oG:QX<<^PϢqvVW( y*aLI( Qm"&>;Z_$< IR!ݚokUaY+ 8 #R`#E&jo"͢ZQ 1qb]]a|o;H˨`:We5\{ !3aƀ8tKg#,>$"oXR)Cy%牗AfU/=l96VC? ӿn`+7Ht׈Tv, 3ZWkP\tnjO\C˸IN̰;#/rB2/iK"-u@9P);bK<. SfM+F'y8 yȰqDiW {ponR񻉑2C6*J[k}ĭU:cHL m\$C8i9?\ cYg ۅ5l+ir9sF/ʆC@X3{S %{aYeRKq+IXegHGQix:pmMe#jFD|KQ/t jS~n^fo?L93KWQ>f' xI(%zO' ^xDu|H"aAs%NH;C"{^jTSM#*;}*Y 2/SƫxMvD8sqxP_1٢['5ܸVY9uqi4|-_S[ a +MI@w6kcKo'l?~MZ*WY`G+J/"?=yhYB(NVGިq¨NƣۖߏOrONTi'jEEJ3-fN<NԃE!;`4W85p,e-*A-Z*ZloV^&6d5hnVmOsk!´g1kT\Rj4T11@="!"9EBi8tYP?ҔXOּ*96_hTj^bA"~1ܔA*0&?'BԇBx735_1U(o{pi_rF0 8cQMvjb-." V5L?3 @Ƿ.*dQ07kN@Js./dO67/4 QetQ[f#(OE&fmsw~."a2wR+3Ahx.ba8>h -D0%Jojn*yh!Zre,x5QU$ c4,zs1In]_?O>XDpЛ;H.~G9 :+tpn&Cg?/'& (FMGEMwTۦ~G*)BUycԙhb"<,Η6N19Lg p 92Ugsu BM`%,7[&R5**kd PG > 1^I YdOﺘ؝+hWl"u鱇1+Y^tسs86(9\`|_dH~tDai!2^yX_5diA{Yޑg9=L/RUWR!H$RP&Ue[a I{͒}I:$TW/2LRZGǾ'\dHMx;ނ?D. 7wBsmH0|껵Dz*: 0+c}%\g\lFmxMQ"Z Jb,Xi!`©tv4oWgE#G"5=΃;A;U q/>LPuhF6\\xi/"*MJhCH͉FfhuAfxkڭhr;/ì?&mP܉(Q 67  ')1 F66x#P470%D65ٛpwh_a1M˿d9:;.$HB<0m~=iL}uAӷh!" I+D(SGQ`4FA2p4I†i nJ\ NޟiLVշ%gYۆz7XWU-8ljD,FpU,۔Ca&Q)-yچ:8"jB;SKiGvA74Йz Ds61w@.'C+)Z*Q2bCmC1`j I2%dB ]G2a₝FXvdh99X6z2pM2Y֝ q$sDe1XMD/vkJR6^4yV0ߵk9݆((7rB j4E٠!j~7զ1ٺx"뛌?>Du7O!pŒ~3IʑCx|aX