httpd-tools-2.4.6-97.sl7_9.5> H HtxHFb< ?*}}b;+eʶ{@x?.YcE2am7E)bb6a115879f367cefa5be75175e2ffb98ab8fe7bll/5\HM3Fb< ?*}}V819-NB3dVZ5gg[|>3?d  I '-4p    w Z|D ( 98 @9 H:.G~4H~pI~X~Y~\~]$^bdeflChttpd-tools2.4.697.sl7_9.5Tools for use with the Apache HTTP ServerThe httpd-tools package contains tools which can be used with the Apache HTTP Server.bMMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Scientific Linux Auto Patch Process Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Added Source: httpd-sl_index.html.sl.patch --> This patch removes TUV branding from the default index.html - Added Source: httpd-spec_sl_index.html.sl7.patch --> The index.html file is outside of the source tarball, so we need to patch it in the install step - Added Source: httpd.ini --> Config file for automated patch script- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311) 2.4.6-97.sl7_9.52.4.6-97.sl7_9.5abhtdbmhtdigesthtpasswdhttxt2dbmlogresolvehttpd-tools-2.4.6LICENSENOTICEab.1.gzhtdbm.1.gzhtdigest.1.gzhtpasswd.1.gzhttxt2dbm.1.gzlogresolve.1.gz/usr/bin//usr/share/doc//usr/share/doc/httpd-tools-2.4.6//usr/share/man/man1/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu?7zXZ !X{] crv9wщZxpD s4;t9W >%U |[ ޷V,дLoNy,y<|輻)XࣴXpo|C]?8IWPs}'me:῞X3B^}jwe[   3#2Ey N6_=Tr&\{x Ed<֧x@l >8Wh4EW[kr4 >8 MEZc{io>dyH7ֳA^Rb6( KtBVIDWgCUARz[\5'-1؍Xk X`?-'v?&f9-e\2=0)Q BKjz,oo=0_ e4jU`w2YI/0L9δ)pDH{,LCo "N|-/QO:el1њ`齀Ռ[=u.V-ꐜ誺9`t,A)`iL4|~~KֶCSC<1#nO]y$μFH_\l:KģkQЍZ-9* D =YM+pՊ nԔf!ȱ3(3^}|X{C/ ^Y B%+Tҗs-UWQL/9G|,29lrhRD(ۚ@#P^>9 .o˭V۞X6eG+SS ؉ -Nb$&߻dƟꔳ g?{pzN< %/^G\VuU۲cA汀ّ] + &wf?W4WvJbA}=[hM` 5gTŝfմRG|jUn7VHms ;1v@S9mHn$Kvr4Adc9[ ;PT &(2a0:FJYEቺhܖXd3h/ e1oN)m'/ <$uy=QsGɴ艻MRt0@Gumc9IlZg4^'dNR;^G-QWp_8pRSz`BE&4<]MT)ēSʑ/ǃI%~w~;aب~>YyZb% y`? CRO`^.Õ|xp1X_Ɏ깮(b9R0mwK;C\pGt4w㗼ЂKucv':LXXϡiQxO_ y =j&kpZ: . 1j[VADyx%5lclK|]nl} VF{ii%t(k>kiX26ϫp\TPdm%؝!M`vdP(doC(T2~/|iNON V1x:sY4Le j-ZM}Ȗdx5yCDz].84c$.l|̃Mq!f\Mqsx4,>K= 4}iÜvS6q 1r2&t PE7cj #<]55zBhR rw=>/xœ_u RC9='?X$7r8Y}yd[Ř_6Z$bt<\fvwa)3ץa9)<*4w;~^cv@} "ENWg  o@m~!㨽<\9SϠ4P?O/{KOvqz9P6 $e${Tͪ>~l>УCc>Ntp%`XH d]` @pho&) Qa ؊-w6D=nc5yF\K4M1?a\EfOw-/M8%qHك:\J)@ ʌzWa)"58s 9êq@cyxӟhp*NxuTPGWUz.vUNN~x[df$ | TlxxlETC@f7ͷ,ibȐ et)"O+X4@|[1o`B\r5"t۶ `Uv^ n>9q-؟De;"/h IiEBefa;¶-ANLop`1{4$*}.JOKko_R]몡,5هur}{ wJEeFтØ\=.0+"x ]K~πTvUu]6 |>n>  y+lU„[7AULTq'_#<.DFsEOG7kkkBiʖtH{hWM,7θQy]Rup _P-Hh~TMU/R|]q© 7qՖDaiɔ&XKQko.9|o܃GJ"+{t9輼4R1rEf@u.ӷ2CN$ -7T]0-7}FyUxv6ׇNS0ש{Z k}t&cj;L吿P~ bQ>'YgFkg#H!C^B4o|59@޳ƹ]D,@vjTxG5d.#([B:s#bdԉyX[ , 0LG3E(\E;EC'Ve.p4#$"o\ @]9.ǥ Yv+L-Nq>׈V+amjt>ePN* WYHtBy`xӹ_>` Sŗ{_xN= Y(S Ög)rHjK3[TFb8 C@SߐK/#%FHї5T7kܵmHJ9Z%@ǰraFQY FEUꦠ-x4UZei7 1:xp _{"( F9]s{޷l .-x:n*Tsƀ@Fn۱hD8PnWEZ2}.eS*+{cPP@z3Au"8[4ZGumH#.a'Ԡܽmy[Ig]!؏ Q9WRTjlʨe r: -X1ՑaNEpR@yW V7x'"ngNpp8{ eqNr\,  !.4>_ q)RڞVv 78{rZsM԰xv}v1>BtIYm{$`PwGf;) N'A[/Hp&r;t# ]QBb rT1i!bÔ9Ⱥ,e;3vDvKu"EwVpD"6Y͟#eyPߟ5޵źj9S4 SЕ(""p69:L!B~1Z_]T}~QMuݑiJ _d͙]̐=@gupC^ rOABļHgzafqs ]I9E62/f42%vPsE8_ue;zEy:P%pAf ~hB m,t/bWj=':bm8<qcLNL\32+G*S$\> h_R{O9}k)g,x鮈w:U;x9wQvF=*Z$EFk%} pFeԅr_Aƒ6K`?=%5.皡O m:w@FEk|"F*ιI_-%w{\C#+]tE#Ғ,x^EOB.K $%T>s&RAXcuj4~!DghoW~(z!T{;-p6~P(S|:Φ0M'ͽϦ _S-&u,4"=Ǽ"<S! 2,(qټ2/x֢H4[d|i˩܌IQh\+Op̵WT݁L.M#$e4A$E]!HYͻ')Pt߂6xeRM!832YP¸1&@R n/?$׍<,qs1E5{p,f^?`X-#P(_\FdRzCtu^N?⃭еX6fז軯ז=JleRmt~; Q-?qUl]LsǼ_13޺PN+եh?g܎J詙Yd.aӍ_hsb#^ͣ<1\3hb33pG6YQhrlƽq]b+p:XWqס&xg,MDs y1v`k<*8U5 &Vh8jD~h>.݁B lu3l¿REӚ%*Q->xg l}HWM@lNۥU /{`nL:q'.4޵pOI S*MQ/1˨^U" 4ZVLxtH_j`ZeFB|qlzrPh+23ht3'd|u*qD&Jt8z3sw!aYcC3oؠ[VKhTO|~FXٲf4|R kqM׍n=_t47ՑYf!w歱!Njt UdH@E!8)QS $uJs:<24*!f| gy8Φ$u)+GrT i^rD@h]nv]&W}`qeѥÀI1H 4B25ǁc'W.e9o CbzP['wЛwN:u0{ܗ,InQE0?Q03,v@lNn5z< WϘҰuKc>2^Lh 黬pX>W)շa%Z~uz=ƂX_n*E(Oe>pQ-dnʬR6Ck扗8+/){tPr$Bxbe^^b"W ;AɅ%0]rլ.\||"AѦ:2>1` خ&*e/KZȎhUw&o" |;W6dhG.޸sH3JzHE5>Ɵ%n.Bs(* ^1G@ k=;b-ls)0gaH(#a޸\y 󂿇4wYeŐ\4`qJcϮaEO.J EAomvI|(H]s !/@0הL0}3Kpcusi _)F&fܓ ,mG8JA, xGT}q9ex sutw.8jl:M]Mi-ER<>&kuO* ۀX! cg:5an:lQmhL/o!? [egnp0/*jdOhKxv[GxUt(ʿXK5 : @T<7ӢβNWL 'Zu3MNCmBҖ!_&Rp7]Ms%PKJHwkj朊%ܶʢB!?&2 `R'y`"-\;Yf$J܌ЍKM^kSJOQ6n(rP q7ҬX(tgJIW.Tric ާ}F!&>W!*rfs DKdoLx7NsE& g *^awx_C |wa*Tr Վ.U8':{h9rڬR4%}eM^T7@n>+ɱ&9:h;XbAd!crA?5 yZ}H-;YЕ=OӃ+2V4aة k/w[(@IcQ^ 5ػ񰓻6ƑK+x2qX3(NhOI-ce[qg#`Am%1/ ڽVY{O7 {{*e'+ӾC;h(D*b\\Q)+R{|`]c0UEeS9WìIy]U!BiRrDZmy#=4^+ lo*hJ dYš1<@m su% vzY#eQSސVЬ w}]jUz0x|.ӵE%Ӹ342ɮ 3|`Tirj%vH:z8lNuYO Kuzv:ˑp*ˤyq ~3&ؙL7{a辛~Wa@X^)zz|~?#ޠTn8vd79#>C}I]c8*!w4۫2Ӈ+JYJ9KPc1;% ͍Qծ Zח.hADiRH!cx LP" 6ڋT!XGnF?¨ݽ^D]M'#y޷#K\}7j d^2=F )e& 2,Wx)<g?o:յrpB:?^ 5TU|bD]LpbSX̌B0A761m 6:A7@f<`"ܹ>$1T>aFsCA_ )}-@ncdEdZ'>v30Zh;8N7uM>\\woZQB=#F:!j`Eou2&k7]ӷp!6AXnZq&F s纏 pI2goN4ei `0v,{_YOdkf`u%!rZQ=iRc$BB.ce>Ɔ2ݕNҝٝ,#waR/#Ѻr3zEu\+'`0Sݞ3sKX{*>9X !79_my&HܐVeAUl@1 Ix8|'3':phkzMAN%J[Xhs`?6l5޵ꦮWY W@І@2O$}rT#! R9E~yZ91ƟAn1.Ndrҍ@䷃!'W'FJv}.nxs^sFcoKt,8`./6tĆ@k92 6?뎒fLbڼi)j*1EwpaDHgTnW{%+vLL 8FpN2r3Ƿ7u$Zf]3z@m ¤rxfu^Quv! 0w+ ֺņz`9w@U8_#KXI@'xI@{7# zөlhx6dV+ȳ}Y@Aك,8ql)s ЄHY$}Hs&YskvR} ZTbt6I^YѪq:0}Zܝ +Fr٨TK= eŠ>I3}VO3ip/'|"a9N/F2| Kv5=ne[tގgV ,s xd_ A}O?-'"{b( zOm7[[X94-r]yI+؛ϝڝƘ\R5hDS͌Je} Jb;5tm"w&>1fS':vM11Qp$e!/>JOBai{a|ľ;py¿]۸.tc1J€vP褛Fprڇ"?M^=;~9ivϞuAjћ|^ldMCs.a >$6"mE\rtB9IdJ["bNM ًl)tcmDWCQ7|Yo K2t˶؀㔝S{-}X%t EdIw-ώ}b?!E+}˭I_]6x4řw%ᨶ7Oaڧ m"ĺ7q+‹%HV%T'Ÿd֤QJthJ"!(0Ŵka7х*NLq8ԑzfczM~ dB8l51yJO~3- ܯLu56 59S`:m5!I&@ce݈`2on.v_\~9NQU[L()d8mDHlhJv1~]6hQ. es(f<"Hû3b0uA#FY2DpHԀ;pQGHh.CmѰAW!J"Fu&s,=I Er=whYH|v] no ߦ NGܖ𯖭.-v+R"Va8eu TǁgIPl|:׸KonPi}_fmg.9+w!)0? P-3U8; tunyM/e8ϤMS@caVu,"dǻjM]/i>8WGw( SlڞW$-HDJ8Ie"i%%P܍ـ伛{C-)vtQxh_s2l$~Zq-?y}+٭hĖA$hc^r T9_x>+r9#%/~=,s&;έ73f8KqcL,<6>}9amqk%o&ffA6]9{ ~˽gmrYcU)G0s v <|G)y=9Z ~oIJZj %"D4=/ok0難Mzi>. L3QsFs҉<x±j9w'1eTª^_%x8`4jɵʑ44|41r#֠>mxy.Yrqi-P[ }jmczo+*Z+DmAg? fKg(5e%b(njDZdJ2"y኉$E.Ǐ-!1a .t«V/l';c=W~T{qhbfYlIő@~(؏+&9IBܮN(R i|B*O_sjZIb f!!*z1!gJ$‚2)[C_eDH-C H=Lȭ`ezG)8Ҙ=X—)  $L=`MUqQ({S-\BYN^ЕH EAPA" B+%n 䁼B}Ѿz3s!]>FF^NjjmrW`"mJ)x%kʹe-t{Dg̱ϬMЖ5f6t,w-s_M 7{w[b_% k#L<6E3e7 wRT eJ^{ ɳud$B &H, HJHBb̞~1:],aL-XbAu#/pDoU~GSZSB~0@xӞYҼOؤv'jCp)5.|m4O tdkHc#l{Z-4rmLUg`GX Th¸ЕDnWЉ|ga YF1_#  ޥO[sr('T~E-D.5CA~k&{ q]"["ܾpOO L@+-l[͘wHe:փQFn\a¥ ז !yKQJ@J~mj˓ìN֭CMִ'dB4,rZ4J.w_$&gS4@C|bj˭y6ZP6IiJVނ=nj1<+̭ ~J؊"X.n&Ըj}lRƕsGlT兠U8mk& =hv/"RNHpj7N2gpH[0wBнz0=og5ةe׭-7 R ax"F} L:MZn)yc!(mX怒!][OqBR쵵JaBUޥ7͆K}{SF`(&g^BF;SM\ ^W/VZ=Si0'.,pJE@@icZ!(NƊ )n.wu~+'woo3) ϊ35*.FlTwwv/ЩAdiϽQf*:n2 q~_0͏7C4nKQ oĐ+ĦؼG[ -̡Sԯv!hՋbw,Ifv1B4Hhkwn!ЦOp~`{(B.Ko[1kEU1E1Ѵa &&,zLɢ[`V](q(gj/Kp~mIX4rҪNBSv3ea )^ JtU֘Y, t`3I2܎ۡ`dxkIFyp(?C}S`!"㴄Yj6x~u΋Oh \}9CuU l߂t4OI3;ěր~hWw]ʪ[v_g}}CTc@-ʠQȩ7;,˞WBݧT% 6Kk-{Òߖ2dك> Ygk+E/1cGJmԏ. {~.z,_q-Iݪ"{ٶCC(|>s, mxq>_|Bf 0mvmFx(FBheijx=m\\Rq`AZeq??fFW)4*Т`?QyM#>?r-;%$/z;ʗ޶Yy479ϰEVqAtvauсY=+ ;#͹ݨ5'\J1N"pr5s { 1\I}]88d=+3aX+t6wˤ JVi.L¡Y`y0Z;W#.=y_\" 1TJ2;K[!wB_c2Av}U6vgPyvHBWՠV)j4s|J#`Df3:u[ӑyHr&)?Tj Ժ{ M0"/ؐ_" Ѵc9UXiH;q'A/<`$O~ro UTM+Īcz7]`"npo #ExGۇ4;T7͍>7?B>^_}g$9OB4jģOVrυ$)>wiQd,O!r=R9u27eAYt`Kͩ e(Yd̸'AaeJJ, dMSBwjپ|Gx>%pFT`>㩞je_Nmn(48_U-d6?& 4R-)%&"n[J.ay," |kaLgS>9u,) TeѾ ɚ1.Ųc %saP8-hè;jj#JV6:hC,79O:'NJxD /5޽:'{JO"ÔpLH !0XDpGb\eba4Y\ħ !3!'֦2/~xyJfb$N͌ HlB#O\6g'UWQ햨!djB3B/6 4-+hTtc"B]it@P,Zi<(Օ4];3uTJU?љ`ՍM^+BϚq<ج@a!<lGFܨ*M{ r(1{.˲մ5VSSB ~#Qҏi;:%V,Rկ ~ |0̌+ 5|"(4F3߷BCՊv߅G- ʔ WeA#oѻ=Y$ԃBdi(6{Vg vJn{s10s:A2>bRv%l/bW_FťYVͦ =( ob*Zfhà}iƈ? R 2Mm֥ٹop ik9l1Ƥ-pRI_0Z=)B ]MȬ 2m 8ۂ~:OAUU}]@zꓚarO!DT(2 ^I.}]+ڊ:06e#Sk` (hx Τ"v#θ΋iU._`q(ʇ4+4_<%ýgפ=aof5> @?wHRthkDӧnjS7u MsS"lߌgpx+mgpϼkGvݶZ1?eBfN  nٸӟˍJ23´TʙjrV2:bԩ^~O1y* + ]Eުd.Uoiz*u'l>7K^k~ jzMUCY/$3ʬvXZ;eldfjP?diwT`dEMŸIcS1?&|ǥjAWړ@(&&l 8dsǣYSPA Y\~\2L0 N¤vGӊ "PLAǕj*4P  PԀsn\2翎VU]{(Tmʟmv1ZT\pmo0J]b%F&LLa_[tE@O0FxGe~z$ÏQlcW~'SK^rh=iqn}C-o1M*))7;Хf6œ,թo0԰@K]Ok*BhR[W w  y^,EAơ}56bnu*|7W_ Ys6 @{|JwN]ﱼe8XJZv"WDoY5S$#K*B4qF @z<4σi.@)2glӜOS+?hs # qE5#֗Rų5;w"r `wP+ܑr3# ` pT9DBI&4Z(Է ]dN[ßubgJtݐҍBX0r~*!'{>Pڬ5P98yLN_}G;ÍTsZ/CZ,sŌ,F-;^ P&<תR ʲm^ ;s)~ࡴY6f&bej0<f{0کQcϫ~Tc&V-htXRCsGm T-,j/MK-ǿvTSI05-lg> )@rI-ί-)*rBF=o4:eìDA-㷈 0높5M^ZC8漗r3MI>iNXS/hK"WS@Qz֢!K.oqfg-ُ;iɆz=*F:"t:j{BhAAi2P2U ?< AA,34JgARtAS8!1ҡEA_ 5' x(A[g(˼h *DǥxazjМBl6 H7șâk6.le>ku@RɅ[qSOL 0'l6bkܧFL>.;_Db,?>~Wdi5]!V:Q-_nM7NLPEb8鳱VѤ~;"*,~9;%S' Z}0 ;'0#jS>„0nƿL#09AJd2νaæ,! 4׾R*U;N65U+zoKOP5D "" n5&/dCcI2HP@ֻ>.l׏cu3f{B`C\fYк0_{@~ ! MXAq{#,9[X&4yRhJo,^JRu^y.x|y3ęš~frnn>s ):YTFq+ŎW|Łc 3,]+@qCF%6m Xb1+5+ܱz,i`ZVw9h}&xQsMQ⽤2_gIJLM5'q"q8^2O mn8**= pd+p#J : I?ŧǔVOC ?공)y-`OB/mMO~`N KĚ`p |Swzұ/or#P*4/?GwTvcDF|lt^Af9ꔂi3gbF#栍_n &#|T , F_{OV/Ch7 ;n+1~7EsH[]zBe,GeK!°yl=3r 2-a؉]&acaV6./K] )ѾUcBwqnU20$Q_%gI VE-QLR2ly]fXuMVC֠pH(AݦHzSXeW(7}(G)f+۲8@adOPjc)W fG6*RX[fP0z_k]X7oVĆRl'p$DC 5O,I:ܦ6,Mp˩C8S5ȟ S? ߤoW"{'=A_<'s]uWJL(SHv;o`\OM0[_SB!VR{onT Wwe,aɒ:2?\KD^Dy!j- /̱)og7y"U) lK5 '^.; H^6- {}*ճh|}#VLOˉ~\5X*\\ɠt]34pw#KbX\]Udh])T*\C?Y*7zh)ﴔ:ro^PގضYns>cVx)Q:nQ!DA&F" m_sYR)|K0X;]1}W\O|`| =X,8an7@R0OIhRUEZ 8E3W)adclF dnʯn2f̧"Yu}H4%@&t V[_r0($A* /8Q7DƃQK{W%3F9#n`5fg$3Ӻ.lF(8MնἷRqp@,wXj3Kc\&s! (3-?>Rm0d?;[ulNMߚ \MFqߒ{(^9^XICN\$ք+ϒ WM( @sn'E4LFdg*= DM_g=n ȍ]R15G=6q \,8x^*2vTij.¯AhO1݆Sݥ\`+hIi!9L䃘ӫJ7hR~Ԗᣴ [aRsOjo8IU~0ۄNGDOʇ=fB3#NNt_r_'\v1}7jHPեse"{N X=?#Ҁ[gmYO Dp4_$!TC-KM~yQ쭝,U1?&2Y֓hQr_{W*!wm:Vx4?1-18ht1/C/K4&BE=~^;34_pۄStY{4{2lR@ ŗx/ݞ(M \Hӹ}aasuJ *dנ%OtTH:tCqˉAXcWQ3!r$g?2[Bq (8F!Os31R+e3yuj͜8X~(*DYW C>i@{ 7?]66/+ gk~DYSB."rFV֪utL%L꫁ @ʍ#K3{S΀|D-:X~h>l>ǬQmv~9x@C>"?$4d hLSnH;zV \g^@lr Z\2Q5KU_иT|`-~Jx RO}LAS>iczkPaGjc4MZI@٘8fH_+?"4"+!zpզ mt=wx?m]8JKTmE&B2 X NUi" 01a!1#A` i \rAo4,pp^[ԯ M9}s%֚p%^qQ҆gS k'X_: ̲}$!mR6[0&IM嶉g3vbs;&MF <}ì%:Al*TS?.U)68r %GC|s'P~gv榮$1E̝U*?,n7Pm B 1Bc_(@ΝDL3tPIR|5~\RJw_Oy!w+9?ʺ#I}JNa|F4k׎iGgP$;5ISoVbpO \c kwzFrb"+ PDZGjESًD`[Ł9w{+cɍܣ\}L Ğ2C>0ӭ4DЙD rIxa5z6I*QRL% Nš@7>SᶛgP=Fl r]l*X2q$f-9[m,@ćXޡzVت<쟘ݎ0 ]/WKdڽ >&b\(sj ]׺K9 V \Luǎ'w"vv0<91җn $E?bvͨՆM ׺9#} eҏ;uP_ )q-* @{MD#z׫< =aGM#~r)),cXu&Qn,3kL2r5N1uޚU#8c@T^Ae&PKD"noi=R&䅉&W^ >ag)2gƇ^w S#߽ĖT*ѐ,HDaXC< 0!)9EbU}mRcϣ=4v_ˢ|'U5{Z1*Nڋ`E 㺨NC%;B*]i2uV1EZGMɳFo?_fӬfg]ܨ$ o VӇ_鄥RTɾeFzޠ*{Ą}L|]ȭZ.ɱ2x3},2ԌŧUo|Oä4"{֒2 Gh^ۋ\7 [0nKq8SѴIƌR>^y63sϽ\]^1k= siY8[)S%=vVkxdH#&d9Ѻ Kμ)G 779B mRԝؐUdzx?)Mϖ}Z|n!>FK.ɮm.1OYmX}_& yWPETfXEֻcڗU*1q֠`3}N_%=x_kPc+OWN(ӕԑSEA#GFoD+ԽWH_THF Q@αݻ (&[QzKej Y-Qs☪Cw;ς`Ss`n ( 6}\jӋ[ 0̡/](!% 3PƹU<ưU[SKQ͕ܷ`ŎLu %ДDEޝRj/YnSc3(¾Q[%q(. [bek֗Rx$|[ >gcwT wr!W@;6Giט8bR>2ީ+v1ZaIVwTLjT _#N0}ÖA ˳Zz4d-@OE*Pw).J`tA:6{`2/BsݫN>I[=bn`ZnȖbJte,20~eT*f 1LM<{҈z7hZDZQ>]oT]Ky8,yJ++_%ۙu>E%=NeVg0h G'cQaUVJS?tEuXQ EovgFNipduz.AP*VFΛiGRi3_ w|ۍ Qh~P`BIsDHe G%sZΜ65Z93R/#AX):?T2: g20>7O >\9 Ek@4|'mb7{ dnI4B4$tϱMR=aUiY7c<)Sid>o8bU`ފY(Βg=;#ؐ;*潲) Z)w_;z?rR%^ѷQ~$\w|Ȳ^&w/7׷sMdy3,.,;&mWuoj>4HĎoܾJ7(Z6)Jb ~ַ~@'rR}ZQ# XjM25lM)h3 A+L=$-fG)1MnE SSr-U~s!f뾑Z3@Iv?gXen rA8=LB=#5KebQ߁M/7֖7v6K}h:NK:7ٽ?(ؗG ft"I}n^" ﴐ_'`%6/iu6v @Ȭ\Sh \I) }e]K$;T%:ͪL[yJ~M&~ 0)i<~@>W]Butn;I'm[!VNH>.;q%hvݎ"ĀB{O )O󡻻 '7H` }9'd2%hҭR2sJ?LbpXE^;bZO7`6,#A|cjT<(^£5G5̾OP;fR]Zv~Tpg'}A1F3u% 2_ǞÀX^EٟOg෤~!b*kPi M F^tt4do/te t߀q ͡ !{CXM2UTl2]uj+ΒZv.WrLS7v&Q+̪u4|Hz96 p&3b[u;YN˜˱hmӸx2`yL]Q?g\gEpx0v%E DLW_,4@GDmwn{l8kY[5)f$ +z~Ux8./HGܢ{K87gඵ "w='Ns9)lw~--#,;RAeӣsH`yR' F09W\ّ FR@LUiFébAd3$mG3m%=f gl(ǜ[FЍd"BQLjo2SX̂?xocb^ u;v8ʍʾ=AE*R/ohQ*N:88<*3úZn>=LJ<nŠ\n{͙~ǝc%*wh+`wȉKlv/D7&HC 6SE⢺<6.:[B,p[Za(KR v? ?$̾'[CfW!!cbEBYs?p 1(oi8)䆈u^k,4qerOPCUwfcFT~1]- +gE13fLyh^ftʁivr_R4yj&5s4}){*NP|RúUv=qnWW{k7J-iaa:[ѐ#'ͯHLF#+/91,.dOMٙC: V_CuϞ9=Tl)Q}}a0VF*\?PVXhdSUݼߙ`^_!C1; /)R S?XޗFWxA#X5َ!D1G85ײ$ ?IP+w% BFTU`ဋK{C!]R/⣆y+,aZB;  3-! h=@:.lX0=X.My&ߑnKuzO_oe ^ VL༓kT-ܥiTz2( +-WHK_=cz7QtVs}odi.MfZւm2jtr\3bz'ozSzՅεJ9k1gm1o ]`nZ?S# .+>]/ kϞ=G5UC'0v`(&(TĊiAn49QMZbLj(mcDkZlE%C<#ZHn/գsXcO9-~uD$niDC+O^>0&''G4&.~^ C}>XJG[" wUi %JS؈a'!Uo{Dܨ (pt_kJvBR^ ?q?cPqϕ6F| ӊb.(6}%m<нn3 o^ Z1N^-1:ۗ}!GvG //u]=o]$ "Er;F~۫"QWܗɫ!൶4屹2er̙ZO|#k+4## 2gE2v0,+{R)z"NM@Pu-lQ(8Uy@3Uq-D}_{9ӕ:k /5i0N~vXQ?(PC [j`ϺpLaGkMv(?GdYE{:dQ{-A+lYX]Z7 VdKN}4wB=gMt_,W? Qao8yŨ|T%5gi_T9bgf<|-sAdžp酘b2<nKQ@wz11v&+T_ -õnߔgz`UȠob<++xZ\gHJGDz m k@ >~Zq{}J2<ң\.ĮwԮ.akʦBo]r8WyXv`{ AWxr\ITʩ@r4KT%PC KtG\DXU +HeMez~8h..ʁz쏉έX`ؿ]U-oz⻁~ F\.}/^6pyK^) t@] (~C1$ [7.4ù\`HSÂDS7֍ZY 0'BMQotz/~R{vF0X?af[_5]ne  k;\SX1bׄS^Bn:~nFłِrhҎpQ[sZB,&&7Ϙ O L)$Ue^R7J64qSPNI] uFR# ItWs,#ne)geKWN-KwhB J\m%+ _iěg%`• GP@S[S\I=AblC+' iw@ Uke*r!wSwςm\aݲtLTrIOx^G  .#h= D)6H2-#s@n}ˆ?C!T |Ctdf~oH}h)uQFe*Gٱ$`P+y2 Q^.ʰj=qn1+aPvΥT#UDta94"8~ ܯ-sr;/XU.nhw]NZڅ. _lCDpoc>0@Lkk^1m#NٌMaF;? 5sBgrLMĄuiYۀz =,SZjAT+|]ܿtd@Lbv:2_I&T̻?ԮQi%IH&72ߚ n rm6<(Y2/l&ݜW,U:'F3EhR9D.fV>sFQ,&u`ތBT2:S,&`?Nހ?.Ц^|ZjCW5j#4pR}ud$F͕BHey8}ݽ/Mc>r864{`k^ZBi6>nxzʏH2ܩ\ gW{)2Hv !:/V&8_u%/7Д%Z9-(KrsfDqq[~9'3<&b:]L1q4Er[hYů;nŮԾd.!2|ˇ^0fܽm",^dh\$>8P l:[o onX~a(˓Y!HL(]uZ{(wr3 |q%,-g'8Gs8( >f/EDPKvR{⽺0(ŀ~@:I?ˌf3nKp$|{4Ϙe/v*,r}n`BVuwWJj&7rSa:J;wPP:6RpLP?>)%~lq0,fUtËŠ6 kuA`6)M|I3IdwQa" w)bُ(p6,s-mWqeΓY%~*7zvz{տ1Mo;=.|I6,NstLVvԆL))[3VB|~ 0-b!첕(]+J%&7NE/ SђFyʙ}>p'NWNvGjd h"%M @|{b/`*p,\15\T%zݒGɋC?bĶo:*N I[ siB u3ViJd* B4Č(ԸPgY 'dC/xf8Q/U_R+ P!o{o/G2U4Q>dU2%Mq3-FHE | rhRN?jI0)xsRt}Rxwsmmd5IXT'%ҝ*|fe4<ז,c/pM#Њ4EWPeH -2U ]*ݰu1%O `n4Ѹ$ CAٟ5?u(8g9I@Y{f= SEN/ wIҾ[~G[Eaڨ>F=}S.o-JD}=}]mgɭar3< Mԟl|%C,Sj; \qQh?{袮.t !RX\4\E"DT?g)?Rհ!WbtU3{ә!Vc=0A,ꌥ|O%5MZDJeҽP@Vϐz̓p|-ĈiUyWzMqhV )tvzU&<`HU_}u$GpgI q_L GNFEA^\d=]$\ BZ|YjcaB٥jM0芪@1_1J%=ZկYgR_D69&> a+t[:Ua)SS.EAZ)\CO.jfcaAv~as FQ{OQQMAw# Vr+4%]%Wf#]O<3Do)'.1 4`b*HoK 8wG|.0sj3r3yj-)\~<74WӲ *90yMBmo&Ob VԼw?/dC(.pwrAH>s@*I ^m~c!qd2auXzV]Z#OToѱxiI]탺K6P\u&]4vkdKqܑO;21mbK{K>Y'a Yr/@3DFsdIqbOU c9fMC3D# BV:!*.^s|leQCjԒdٟ^.A^ 38Ӱ{3ܔ{Ѝ䎦oOBVv_4Շe΢i,*/o/mw1R\h hb<OLCE-8r`7Aw <(9։"no"Dž9dI^K?UIՂ{U|㢫F4ʍFɅ]u gАTiKFF"A?JEXzv8į`z&#Gk($+3%jddd7r>#%i =+ʤAݫ'5٪(t~bt!{㳼|-&jmd% 9/{ k21D6Zh}nigm\/o^%֥!O\A>OC桊H-)w &k$J;;f<3:ѡ6G}s}$tY+e SlCƦ54B2\*ԫ<gKgP ~T2fe$iryҳZCߍ'M2Ϛ",Xz)ҟcw '&6ʡR/VAЁi|Dz(Ae,[ ,xr鯕M?Q/VfB?N1~+QZŧcu&KJLE0!uWKKM*|:s `oR?7ũ@-7vB+VJt VA%o49nAWa,)+~_$J8 4Kq"a~G604E,&bT]~Hd OzQQ Ӄw2ŝxUU23>v#6Aif;1Kb*RV8N  ?;6η աnA>}Hd`:v(I$^\4FNn%/[&3@EzB8}voq!E'XowO2^zS+Q87>L=^HybCCqrA[nlKA'Md;"d = 0M#4tӥv c7-D Ž?y>t6 bhGR 3h< X<]q"P+቙viԦcA p u`:.DQT^NspL[`GX{wF]!.Q;`ǘ"~!UQtեq?c/%oVƦ8իWu7JM$fG,'d1" ȦZ}Md"]iG(ٍ(=p_&3p;ŖTgWs ,I%aMRʃcqKCd}G]z1Dyuc=y0;mj iK$p@ :> L#* ZNJ48.34f8达50$^9XփU}WLR:=w<EU0ct# %k&8?oЕU@?f5>I8>n8EnvCEŅwˋ R򇂶_rvaixl׶z(JFm2/"j*?´Pf8F%]KS?ҶL> &1) Y"adz}.bPr-6ee_CEX^$G=ZUVN$/8>Pw±ScۗI*& }ŨF6ᓟ@7_վ˒!zIMo:΁5-o5a4הkw,DU'ˁNߌZ|R, S6J-T}HttgɶZiZekrɘGJ2-b\_t!3$q#7zBX1Ll*zn(i2iP/7Ao!N@3qA:uI@Fj.| T,^PE3֤1ge TQp@""YQ{:"`qЀnRC\9~~--+B飥 {v+nE lf V0$|K?:;2@A(v2N$~M:YpgJjޡm-XGW^:߳\eE4bt{\JqHi*f>:(coӖ*sLbDrE tpMsjH$h&Ef ,+Qlz#M{N pQkf}~z"4ۚCt>;A(8g׭a~5$3GuW@BmR?p$j&iM'fMk֔<RH)$<:32h"H Q8#h?m2xClCӿleG}b 2)ȏk'풅|htY5QE*%,LѤ@Q#R ]?:Hz7t|k$n .u#Fײ8$n+,1XF*Zt$# D,nPCWN ,KQ ElJM99D;yy7%rA\7zqv=)²?wY5ucs9'.&.5}QiP<`opwІfCͬʥg Ӎ Q$U8r6KXX9EMm9Km@20)G?A8,bw7zg*MjbO乛7]Bb 0jA2tJh"6'q63j fC-PtxFE~M]qF\;HtfX8ݳu^>CnFc@8<"iyẐ=O4ê^b+:XI[jIuŃQ=sKOg!udEմCb)UewAa:cvYVʊTF8G6BI2s7Q4;iWY(#d I=|`WfP>h +DFI柤%gϰNVC(X r]6[B.d+=\LQTvzOĝpk:&M zk刜u"lR5&l cc g[9\E' &63 жMc-\eIcUg`BD0/$v|q%s[ T$7zM뼗+%ԝڥJ#YPt\^*0A2tp ҁ_xWdeQmHj8jbλbHp ܵULø-CzHjl5bh)x5BV ~DjW]ߟf.c`iϱw?Z |vłw@KF2FP%(»9Ev|1^A:)IfH©(Bi.I) jTI,XaSVVm(=eŒCplx -Y6:uoUnK[g_(OaD]!TUȠ6zgUUq+"m#^bsJ饋z/>e!:se ͟eiK '%3@}Y")KBo,b6߱pԾ د$v@S0[ˁ!$lxIn+ )[ #?&˝1C`U8\aSb *1l ;h XQS!YEm^LI'y(@.3Oy䓰?K)3[R1?s3C{iPT[;s^}˧Q…X׏p۔_$GXxH(:`+3 ) Ti{ϔ$i_ ȋ{i*c~g+DNJG4k.X̫ (eIkFpaSL1EG.i3QBZ-@8'lOii{]E*[bJH;XqI1AOnoHJ.?n妉(<\Ba|9Ά FvuZif*R֤ V.VXfm]?nyZO6mL5.@τ)L#wu8ºeX5Y|`ĩ,vG7L{ZxT| )jhHwvb':Y zn{ u'XSt^RsaoǙv ScOb~1EB| 9b;!8~8O`8<^e])G$U&4uv %`醁Vk!qS-Ը5xŠrИpbk8fسGZĚ2_ذ^y+^6%݇|tBNvItM-? //SZx$!/u Dկ_+&s2{h0?ȜgI:GX)4,Z5/D!9>X'$*1nǃrrC8}=xAtUme71 x A}IkU *kv9F( XI">摧w],hxwRw|Wbv>;8l4O ?!"([&Tƨz\y$$t T0f_!E d\.n~6 +P ub;oʁl#"f諼݅.=O5O'P nfTş*-¢i78 ~mh}Ԍ:a9p3 aS5_`)X&McmTR!]p X.(=AY~7h@ʛ=GƲJYd 銖c|H3N0&0'ŽkNF)wr?Bhxe6>\B au ɷ`Ot}lI䦍g4e~VU*pFe M9%^\T>aKq5?lPF4!ED¿tqrj[wxmToڛhiK$hC&Q[ë]k/uta0ެ9@8#HaJ%3yAv"F&e TMfjX ٩Ga>"3m!1c\`mD'٘Z5a-Ƞu>)j'*so'EoPdA\a"‹Vl7qܛY=5`h6 J>8+fPWeU1T$Nx#tesGv~j9m ?%i2 /H`R"UgM4EE89[ާh[=Gp;U ;TsB;m52I-e3'Pam+0K4:3se'O޹\/yWOjWף(^іH;8ѾLd6jQ*2ODUbj0ꑻT6oXað=&OE ~|i|H[Ά .֌RtL "_SIŻ@A% &0z[$mqDX1dXl vW @k_9-Xń4nzWϪwE ͟X?"q} :?_Rr|6xTM8..kW^cMm4;HM %&, ֣aܼKyuw¸HVhVPFJ_W{oV<K(6W]k5}dW&#Zu6E(Ne6:؊w;-MN 1~em#]%vu.~ $+H'UpEvWl|qƖ |T7n`*gUKᢱIʍ@CcUES>-XdBȹ+/3Ra,{۫M 1[ꞵ5B1TkԈ-CCoDt_S'_V7v0~pCGê&,wM%,u@FMXӔnrz**OE{Nd \o;whv1wN {f݋V2n\f߲p˜$*GZ&_xlKz֞t!KҀ5Lo눡 WrXZ^2)-},fT4yXh&Vv}) 2DܸW>R(-^%S^;o7u, k֤'EDy<&q&d <$w:Ϭ[e+#G k2ᵿΣo7uK IG\А ~.2*)_ڍނNS,5gF@zsZu?ea~U|𐗆Ko#ڷU7v2 P9Jaws'Nވ#fRHhA6jBaMC&HHo}}f0@-+Ya6(~ x"o_%2%JkS8;O|b#:Q z]dz*}}'2cz0u|7`}r~nyҘ}=n.,;kl~8:v帯SiEQ~4Vypf 6:d 1ghۗX*ҢQa}Lm##NVlKp`97B Lry:5AW- ҿ_>u5)R _*dAf#p5[E0O3#>Cq lv?9 h*u}HBY⏠Mniȗy@ Va;,;9 sR}܌<  ՜.1e..0ۮS"a\CO|p)a4_ i* :doft~jTf_&e3eBH5ΗF딊N;H0~:ַ,P*ۙ\5FdfXWX.6J{Mf`ŃxNP ~/z-VwS(Yja7糩z͈wMj~Ǯ20N"[L*}Z6ѮHÖJq)®8NT2( c@qUS6@AOq~  >HC9 `x ݣ$0O-Gwȷл_ LԮ*{1:U \PeCY{ -ҵw^S뷊:n*6Pwv[/#j/^sp+-vs|&BpZ=yƉs+duF M2L)*tpB{hȑŒ%[rN 3h0gQ`Rr}s?s]DH[y77Epp''[ KNwExO_l k޴L J2R?YA~%k/7o w&LhPiD1՚g},k3;%TY|yNBC'xI!"U?;1}6p){T/bk%]tgꈦ qE}]Bwsڪ %ͨͭ/YnՔ~eC\_m{ẙwi CpS\Y}W>>n~Nt(Ŷ֢{9:, GD3 쑸C_@: s/#n~#z=#Hz}fڂjGowZa2Z3b;M8]ylw/x.x3u!.nׅpn*Ӛ^u){l7'qEԮ+Ip]Sy5;V<$ePd]RWO q/}H Xia qw=$>ֻEPA?*^ǃP ⑊*b^\˕=qqc 2^&zpmƎ|ѻ;13w*,4|l.v઼)_d5c'ZL.Kdxd#PMB )u5+(Y[xRՒ-謪eeTKlX}(sDOvRXFd"aW#?Zl= gD:hYk̥EhO2@Jd˹as?4G_ Py5zfk`84 %Џz!~-^%oWU|fŹnV~hy-S=Zc8hۨD \mj,ŽoX9BD O: u33~o\/|-2^R('*[WT`a0Hlm3F&9E"l} 08p 1[ŋe2(j*H{~҆jo?tpމt66Ov-m 4gjT^Ý"zJjز 4e6)˱:6-bavR)H`13"_<57v5lͦ.~; tm-ˡ f1:]r`U%QvO\0@/τ+ SP%Ύd@IcZvҷtZrj|co"f-#aOsF+XPD{3nTvt 7^b8LA'mHOdZ$!@OYD.݆Lby"rLv0\6FȊ <Zaꭐ'(BE0@iuV}_$'uz0⡘ǐ97T=2Z8yq y;Oԅ*"/i56V"S6Fњxv$=pkj-X#*Y.?PAGC#p7HQrXO揻U+0ǮKX\rcS͹۹ƹI1{+yl&d}opɂOmײqƤt^ADWr* :Ic@p{|9QI+zr ȀD%fO7)>##{]ʂF"[lcbw&KCRB$L ;+QwPbprhzQ6 EqhώNV qEEX ,,qop_X< /8B;C/(5? @'콸>Q'5t8 l!G~[QGSAX T?ՌUكɈ{4T0KݡwS˱vV{H;:d,c!q{ߦP5,dLhW'W3)vd0nE;ȣd.]WV(/)JoT.5R> \?ȰTl [,ی^W+XtЯ~ ^LFwVovM TA?pSKޜtuט㪤*]X)RE*pfY̍I_yZ- FCy-+xbb:oדBOq!G=k-t*:߿\RJY~>] xځ T##jK o6.Y-!HdJӗdu/:RUY觶{ tn39>E*LnFY\8hrG{[HG%+Z_a7:r) `% +x㈬ yFc1^w7QVY-#1jʃzHb&V8LaGPuzЕE>mT`j >UyБ>&!M"o*rk\DR`&?AL$5y \5E E|ƀo_Aa\l)Ϭb[Xz5S[$Ymzqwa}18В4znߥ)YuB[23Oxt«~anisxoaQۢ . o}*1rEKpCʵzֿg$Żnhg ~ Lw@Re|t 8jM!(s])f< T%/h j+ֲz&.]݁Slcҩ.hhN=l6?e4F_E[nt 9lJ:$Y9QWqڅګf6@ݨv%˶8{jB`L\QJw .lY%9@A'(/h^T}W0R(5è8ii'өyh\Kgɽr:Dڽ %aoDA:+ L/tE?i tk8]=zy>1U, ]K7seӷwx)>tM ޽'.0 V-7K9%hG]hd(OVHה.Î}ϳK~"ާN'S9us35@VZ[CkH`=h_`IV-FRxNuS1%ԣءVR+ G <|J>j䜓q7n | djukiwEc<Yk1B&s}gA}\Uf>\Nȝf&lSӨwIH%#ލ[w 3APۂedi؉c 9(A?)"*TM"S(m eTM#,=j aa XKؽ?H Q<&Zci#&𡦋X*,kIR]ZQRhlU ))>fpsv#3H(eӁs&UgfC><.cu-H"ע%AbZ3vVi>8.P{Htpi:,|+8&zO SF/hcR}<.$9FQFOd]I[k̷fo .ÐqDM\( 4nO\6TS|=ҷ eQ4]q7ŢseVPȹC3r\ VJ_U