mod_ldap-2.4.37-41.module_el8.5.0+977+5653bbea >  A aU]P鄷yMg7wtP:i &w$dMD8cQqү7?,iҒϏrTzO$s=Q9hD:m66LK_pi* SF޺}%8S緣_*Cd%; TKO$TʺHه^S~V;SwiOf P!cbB>jeJr_; T<_oƏaI+K=\.~J];Cx٦V)i,#<:IY;S[-0=ٟ=NmD󐱽klRk@˷oht}v%\mWF)(Z*3]OL gW>S-S05[ Dt[L9?VY Mm?)+ηp(̘u0pl$\ aC6Vi9Lp}]Es_k¶GKC+XTV463fe35cb34d24402c745b3333ebd15b17a9ef0c662b816c7e28ad8757c675eabe879e9540b3c292cc2df73c075ccf7b03c78ce52;aU]@kg3`Pr/n\űd#m(bp''w&ZJ=0(@0 JM(A|_r2LM9H<Ԡ$ .eIxfr\dN>I1 d4o7e|A4i)#$)L{"˥1htJi7a"P NpFC?~S-efpD m;4WQVHؠMOK3v.fÈD yyN8*u<嘙W#mxͷ qoEy(aCxuyVOp65 Jd+ainñt${6Pu8BeRi+f.%Wo&< Y@Fq\oSp -v06,)YLgu9L $fOԐ2 (puՁ$\gx>p=?d  1 h (C]cl    z <pM(89 h:1G}H}I}X}Y}\~H]~`^~bQdefltuvw$x<yTCmod_ldap2.4.3741.module_el8.5.0+977+5653bbeaLDAP authentication modules for the Apache HTTP ServerThe mod_ldap and mod_authnz_ldap modules add support for LDAP authentication to the Apache HTTP Server.ax86-01.mbox.centos.orgCentOSCentOSASL 2.0CentOS Buildsys System Environment/Daemonshttps://httpd.apache.org/linuxx86_646/hBAahaaaaacbbbdd396fe056e8ab167abd7b2cb5145b42210bfea38452968ff02a03493fc8a61e33e55864c765f8723e5c02b16b3318ce6dc928579bd37c960598c9b3b57b5a061484ddbd4f4643817869d52b83a7ba3b486cd3711cd76afaf99e007fa3db../../../../usr/lib64/httpd/modules/mod_authnz_ldap.so../../../../usr/lib64/httpd/modules/mod_ldap.sorootrootrootrootrootrootrootrootrootrootrootroothttpd-2.4.37-41.module_el8.5.0+977+5653bbea.src.rpmconfig(mod_ldap)mod_ldapmod_ldap(x86-64)@@@@@@@    @apr-util-ldapconfig(mod_ldap)httpdhttpd-mmnlibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libpthread.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.4.37-41.module_el8.5.0+977+5653bbea0:2.4.37-41.module_el8.5.0+977+5653bbea20120211x86643.0.4-14.6.0-14.0-15.2-14.14.3`:@`f@`@`@_м@__@_:_^b^(@^@^]]@]߶]҇]@]g@]-@]]@\7\Z@\Yz\T4\\U@[@[[[@[H[u[[[ā@[ā@[ā@[@[@["@[YZ@Z@Z@Yp@Y{Y@Y@YéYéYéYéYX@YYYYx@Ym@YlYf@Ycl@YV=@YGY5GY@YXۡXP@X @X@XwoX[@X[@XEVX)@X@WW~D@W~D@W~D@WKW@VVVVn@VhV.VCV@UK@U@Ua@UF@UQUQTp@T=@T@T @TT_Tk@Tk@S0S@SGS@SS/SS@SSS"@SS5d@S4S&Sz@Sz@S(S@R@RRG@R@R@RsRrF@Ri Re@RVQ@QQޞ@QQo@Q@QQV@Q@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Luboš Uhliarik - 2.4.37-41Lubos Uhliarik - 2.4.37-40Artem Egorenkov - 2.4.37-39Lubos Uhliarik - 2.4.37-38Lubos Uhliarik - 2.4.37-37Lubos Uhliarik - 2.4.37-36Lubos Uhliarik - 2.4.37-35Lubos Uhliarik - 2.4.37-33Lubos Uhliarik - 2.4.37-31Joe Orton - 2.4.37-30Lubos Uhliarik - 2.4.37-29Lubos Uhliarik - 2.4.37-28Lubos Uhliarik - 2.4.37-27Lubos Uhliarik - 2.4.37-21Lubos Uhliarik - 2.4.37-20Joe Orton - 2.4.37-19Lubos Uhliarik - 2.4.37-18Lubos Uhliarik - 2.4.37-17Lubos Uhliarik - 2.4.37-16Lubos Uhliarik - 2.4.37-15Lubos Uhliarik - 2.4.37-14Lubos Uhliarik - 2.4.37-13Lubos Uhliarik - 2.4.37-11Lubos Uhliarik - 2.4.37-10Lubos Uhliarik - 2.4.37-9Joe Orton - 2.4.37-8Joe Orton - 2.4.37-7Joe Orton - 2.4.37-6Luboš Uhliarik - 2.4.37-5Luboš Uhliarik - 2.4.37-4Luboš Uhliarik - 2.4.37-3Joe Orton - 2.4.37-2Lubos Uhliarik - 2.4.37-1Luboš Uhliarik - 2.4.35-10Lubos Uhliarik - 2.4.35-9Joe Orton - 2.4.35-7Joe Orton - 2.4.35-5Lubos Uhliarik - 2.4.35-4Lubos Uhliarik - 2.4.35-3Lubos Uhliarik - 2.4.35-2Lubos Uhliarik - 2.4.35-1Lubos Uhliarik - 2.4.33-4Joe Orton - 2.4.33-3Luboš Uhliarik - 2.4.33-2Joe Orton - 2.4.28-8Luboš Uhliarik - 2.4.28-2Luboš Uhliarik - 2.4.28-1Joe Orton - 2.4.27-14Joe Orton - 2.4.27-13Joe Orton - 2.4.27-12Stephen Gallagher - 2.4.27-11Jeroen van Meeuwen - 2.4.27-10Joe Orton - 2.4.27-9Jeroen van Meeuwen - 2.4.27-8Stephen Gallagher - 2.4.27-8.1Joe Orton - 2.4.27-8.1Joe Orton - 2.4.27-7Fedora Release Engineering - 2.4.27-6Fedora Release Engineering - 2.4.27-5Joe Orton - 2.4.27-4Joe Orton - 2.4.27-3Luboš Uhliarik - 2.4.27-2Luboš Uhliarik - 2.4.27-1Joe Orton - 2.4.26-2Luboš Uhliarik - 2.4.26-1Joe Orton - 2.4.25-10Joe Orton - 2.4.25-9Joe Orton - 2.4.25-8Luboš Uhliarik - 2.4.25-7Luboš Uhliarik - 2.4.25-6Joe Orton - 2.4.25-5Fedora Release Engineering - 2.4.25-4Joe Orton - 2.4.25-3Luboš Uhliarik - 2.4.25-2Luboš Uhliarik - 2.4.25-1Luboš Uhliarik - 2.4.23-7Joe Orton - 2.4.23-6Joe Orton - 2.4.23-5Joe Orton - 2.4.23-4Joe Orton - 2.4.23-3Joe Orton - 2.4.23-2Joe Orton - 2.4.23-1Joe Orton - 2.4.18-6Joe Orton - 2.4.18-5Joe Orton - 2.4.18-4Joe Orton - 2.4.18-3Fedora Release Engineering - 2.4.18-2Jan Kaluza - 2.4.18-1Joe Orton - 2.4.17-4Jan Kaluza - 2.4.17-3Jan Kaluza - 2.4.17-2Joe Orton - 2.4.17-1Jan Kaluza - 2.4.12-4Joe Orton - 2.4.12-3Fedora Release Engineering - 2.4.12-2Jan Kaluza - 2.4.12-1Jan Kaluza - 2.4.10-17Jan Kaluza - 2.4.10-16Jan Kaluza - 2.4.10-15Joe Orton - 2.4.10-14Jan Kaluza - 2.4.10-13Jan Kaluza - 2.4.10-12Jan Kaluza - 2.4.10-11Jan Kaluza - 2.4.10-10Joe Orton - 2.4.10-9Joe Orton - 2.4.10-8Jan Kaluza - 2.4.10-7Joe Orton - 2.4.10-6Fedora Release Engineering - 2.4.10-5Jan Kaluza - 2.4.10-4Jan Kaluza - 2.4.10-3Joe Orton - 2.4.10-2Joe Orton - 2.4.10-1Jan Kaluza - 2.4.9-8Jan Kaluza - 2.4.9-7Jan Kaluza - 2.4.9-6Joe Orton - 2.4.9-5Fedora Release Engineering - 2.4.9-4Jan Kaluza - 2.4.9-3Jan Kaluza - 2.4.9-2Jan Kaluza - 2.4.9-1Joe Orton - 2.4.7-6Stephen Gallagher 2.4.7-5Jan Kaluza - 2.4.7-4Jan Kaluza - 2.4.7-3Joe Orton - 2.4.7-2Joe Orton - 2.4.7-1Joe Orton - 2.4.6-10Joe Orton - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Joe Orton - 2.4.6-6Jan kaluza - 2.4.6-5Joe Orton - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-7Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records - Resolves: #1905613 - mod_ssl does not like valid certificate chain - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for usertrack - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer dereference in parser - Resolves: #1934741 - Apache trademark update - new logo- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML - Resolves: #1937334 - SSLProtocol with based virtual hosts- prevent htcacheclean from while break when first file processed- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile to be able to handle certs without matching private key- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd mod_proxy_wstunnel - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()- Resolves: #1651376 - centralizing default index.html for httpd- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool concurrency issues - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1680118 - unorderly connection close when client attempts renegotiation- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does not respect expiry time - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer overflow - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package - Resolves: #1869576 - httpd : mod_proxy should allow to specify Proxy-Authorization in ProxyRemote directive - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in a balancer- Resolves: #1209162 - support logging to journald from CustomLog- Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Related: #1771847 - BalancerMember ping parameter for mod_proxy_http doesn't work- Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations vulnerable to open redirect - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential open redirect - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site scripting in mod_proxy error page - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference in mod_remoteip - Resolves: #1771847 - BalancerMember ping parameter for mod_proxy_http doesn't work - Resolves: #1794728 - Backport of SessionExpiryUpdateInterval directive- Resolves: #1775158 - POST request with TLS 1.3 PHA client auth fails: Re-negotiation handshake failed: Client certificate missing- Resolves: #1704317 - Add support for SSLKEYLOGFILE- mod_cgid: enable fd passing (#1633224)- Resolves: #1744121 - Unexpected OCSP in proxy SSL connection - Resolves: #1725031 - htpasswd: support SHA-x passwords for FIPS compatibility - Resolves: #1633224 - mod_cgid logging issues- remove bundled mod_md module - Related: #1747898 - add mod_md package- Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount of data request leads to denial of service - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length headers leads to denial of service - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for large response leads to denial of service- Resolves: #1730721 - absolute path used for default state and runtime dir by default- Resolves: #1724549 - httpd response contains garbage in Content-Type header- Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization inconsistency - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd causes systemctl to hang - Resolves: #1673022 - httpd can not be started with mod_md enabled- Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control bypass when using per-location client certification authentication- Resolves: #1672977 - state-dir corruption on reload- Resolves: #1670716 - Coredump when starting in FIPS mode- add security fix for CVE-2019-0190 (#1671282)- add DefaultStateDir/ap_state_dir_relative() (#1653009) - mod_dav_fs: use state dir for default DAVLockDB - mod_md: use state dir for default MDStoreDir- add httpd.conf(5) (#1611361)- Resolves: #1652966 - Missing RELEASE in http header- Resolves: #1641951 - No Documentation= line in htcacheclean.service files- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden- mod_ssl: fix off-by-one causing crashes in CGI children (#1649428)- Resolves: #1644625 - httpd rebase to 2.4.37- Related: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen- mod_ssl: allow sending multiple CA names which differ only in case- mod_ssl: drop SSLRandomSeed from default config (#1638730) - mod_ssl: follow OpenSSL protocol defaults if SSLProtocol is not configured (Rob Crittenden, #1638738)- mod_ssl: don't require SSLCryptoDevice to be set for PKCS#11 cert- Resolves: #1635681 - sync with Fedora 28/29 httpd - comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default configuration; now follow OpenSSL system default (#1468322) - dropped NPN support - mod_md: change hard-coded default MdStoreDir to state/md (#1563846) - don't block on service try-restart in posttrans scriptlet - build and load mod_brotli - mod_systemd: show bound ports in status and log to journal at startup - updated httpd.service.xml man page - tweak wording in privkey passphrase prompt - drop sslmultiproxy patch - apachectl: don't read /etc/sysconfig/httpd - drop irrelevant Obsoletes for devel subpackage - move instantiated httpd@.service to main httpd package- Resolves: #1602548 - various covscan fixes- apache httpd can work with TLS 1.3 (#1617997) - drop SSLv3 support patch- new version 2.4.35 (#1632754)- mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All" configuration (#1622630)- mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki, #1527084)- new version 2.4.33 - add mod_md subpackage; load mod_proxy_uwsgi by default- remove %ghosted /etc/sysconfig/httpd (#1572676)- Resolves: #1512563 - httpd: update welcome page branding - Resolves: #1511123 - RFE: httpd use event MPM by default - Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen- new version 2.4.28- add notes on enabling httpd_graceful_shutdown boolean for prefork- drop Requires(post) for mod_ssl- better error handling in httpd-ssl-gencerts (#1494556)- Require sscg 2.2.0 for creating service and CA certificates together- Address CVE-2017-9798 by applying patch from upstream (#1490344)- use sscg defaults; append CA cert to generated cert - document httpd-init.service in httpd-init.service(8)- Address CVE-2017-9798 by applying patch from upstream (#1490344)- Generate SSL certificates on service start, not %posttrans- move httpd.service.d, httpd.socket.d dirs to -filesystem- add new content-length filter (upstream PR 61222)- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- update mod_systemd (r1802251)- switch to event by default for Fedora 27 and later (#1471708)- Resolves: #1469959 - httpd update cleaned out /etc/sysconfig- new version 2.4.27- mod_proxy_fcgi: fix further regressions (PR 61202)- new version 2.4.26- move unit man pages to section 8, add as Documentation= in units- add httpd.service(5) and httpd.socket(5) man pages- require mod_http2, now packaged separately- Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Resolves: #1434916 - httpd.service: Failed with result timeout- link only httpd, not support/* against -lselinux -lsystemd- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- mod_watchdog: restrict thread lifetime (#1410883)- Resolves: #1358875 - require nghttp2 >= 1.5.0- new version 2.4.25- Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of LimitRequestFields directive in mod_http2- fix build with OpenSSL 1.1 (#1392900) - fix typos in ssl.conf (josef randinger, #1379407)- no longer package /etc/sysconfig/httpd - synch ssl.conf with upstream- add security fix for CVE-2016-5387- load mod_watchdog by default (#1353582)- restore build of mod_proxy_fdpass (#1325883) - improve check tests to catch configured-but-not-built modules- update to 2.4.23 (#1325883, #1353203) - load mod_proxy_hcheck - recommend use of "systemctl edit" in httpd.service- have "apachectl graceful" start httpd if not running, per man page- use redirects for lang-specific /manual/ URLs- fix welcome page HTML validity (Ville Skyttä)- remove httpd pre script (duplicate of httpd-filesystem's) - in httpd-filesystem pre script, create group/user iff non-existent- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- update to new version 2.4.18- re-enable mod_asis due to popular demand (#1284315)- fix crash when using -X argument (#1272234)- rebase socket activation patch to 2.4.17- update to 2.4.17 (#1271224) - build, load mod_http2 - don't build mod_asis, mod_file_cache - load mod_cache_socache, mod_proxy_wstunnel by default - check every built mod_* is configured - synch ssl.conf with upstream; disable SSLv3 by default- update to 2.4.16- mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- update to 2.4.12- fix compilation with lua-5.3- remove filter for auto-provides of httpd modules, it is not needed since F20- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581) - mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583) - mod_lua: fix handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments (CVE-2014-8109)- require apr-util 1.5.x- use NoDelay and DeferAcceptSec in httpd.socket- increase suexec minimum acceptable uid/gid to 1000 (#1136391)- fix hostname requirement and conflict with openssl-libs- use KillMode=mixed in httpd.service (#1135122)- set vstring based on /etc/os-release (Pat Riehecky, #1114539)- pull in httpd-filesystem as Requires(pre) (#1128328) - fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348) - require hostname for mod_ssl post script (#1135118)- mod_systemd: updated to the latest version - use -lsystemd instead of -lsystemd-daemon (#1125084) - fix possible crash in SIGINT handling (#958934)- mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119) - switch default ssl.conf to use PROFILE=SYSTEM (#1109119)- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- add /usr/bin/useradd dependency to -filesystem requires- fix creating apache user in pre script (#1128328)- enable mod_request by default for mod_auth_form - move disabled-by-default modules from 00-base.conf to 00-optional.conf- update to 2.4.10 - expand variables in docdir example configs- add support for systemd socket activation (#1111648)- remove conf.modules.d from httpd-filesystem subpackage (#1081453)- add httpd-filesystem subpackage (#1081453)- mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119)- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- add support for SetHandler + proxy (#1078970)- move macros from /etc/rpm to macros.d (#1074277) - remove unused patches- update to 2.4.9- use 2048-bit RSA key with SHA-256 signature in dummy certificate- Create drop directory for systemd snippets- remove provides of old MMN, because it contained double-dash (#1068851)- fix graceful restart using legacy actions- conflict with pre-1.5.0 APR - fix sslsninotreq patch- update to 2.4.7 (#1034071)- switch to requiring system-logos-httpd (#1031288)- change mmnisa to drop "-" altogether- drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide for transition- systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg- mod_ssl: allow SSLEngine to override Listen-based default (r1537535)- systemd: send SIGWINCH signal without httpd -k in ExecStop- load mod_macro by default (#998452) - add README to conf.modules.d - mod_proxy_http: add possible fix for threading issues (r1534321) - core: add fix for truncated output with CGI scripts (r1530793)- require fedora-logos-httpd (#1009162)- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- ignore /etc/sysconfig/httpd and document systemd way of setting env variables in this file- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)2.4.37-41.module_el8.5.0+977+5653bbea2.4.37-41.module_el8.5.0+977+5653bbea2.4.37-41.module_el8.5.0+977+5653bbea01-ldap.conf.build-idb35daa3e7d6c8b6ec9eb9aeb26c1d8c384c2f1ff81fa2514efd6a9f3c49aaba2d2c1a0a59456mod_authnz_ldap.somod_ldap.so/etc/httpd/conf.modules.d//usr/lib//usr/lib/.build-id/0b//usr/lib/.build-id/95//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnuASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0bb35daa3e7d6c8b6ec9eb9aeb26c1d8c384c2f1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=95ff81fa2514efd6a9f3c49aaba2d2c1a0a59456, strippedRRRR RR RRRRR RR RRutf-8591160245b27af714a635a0d52a93526543750f2edefdc73f13b7f254b97223dhttpd:2.4:8050020211109183606:b4937e53?07zXZ !#,wB] b2u Q{LR~_FհRY;7NZ6bI$]|H (ىV #Y ?`W*ͭ&/KYC1p L+VRbzpL%$ M˖ Z4NX.pݲyUNЁo,+oo,pn]@c穬¾aGV ,ށ^KV%'3'Dɵ1;-5$͋.Q(8d j܊Kd`=l?yqWqXWObIMݶN95A70ԱCc,Zt"ZY&ڍ,AeO6Ҧz {&8!H Qeb\)o40",K|v!G1PBԽ,BCoߌ3! R7 j :1g#hlܷC-q#4:ߟ]>IK)=0<ǺgZk D˹ hփYU]&:Yu;6g%E)!.6\?dӷm ҌXn 9c:ns%3ۨd,jRڔ:ݽ;soS24t4rz#)>+]PXX8Mwg,퀆LU2Rg ]}Tp_QTn÷|֒p]}&JX-+w?ަZ`r!·t GzrM-‚-R]$IWEDpVbWH՗:bE5YcxWbO/\!w j#w.:/8'1=S!Ĕpo_xh.{)F6ugI]uъ{"F:#sۥgꡄt^CyR65N88gcڟl]/'ޤ9e*+0h/EGqfVLܔ+PXlݘ~}U7k$k[eOmx`o،RP "ѽ H'- ^Ӏl=Jcx&`gdb4*Bu52X >axG*Ij P<и& |9n߱4WC} _vi; wS C .eՀl,.Lb8:zѦ.7N_xkXi9.cր.A(_ nSZ0ɵTZ:$!R݉f͊^^^a]}]K.ryuj.S{#6$ZޞΈb$5lxZ0ooՐy4n~gE`7t݉RD(G_F#4rnj>UI%WEL?{AN!ϼ{󄮔W_y01_9s',3s"pR/1xIK&5\:'l#`"E *,:Øz)i.BE,ϳQӣ_yd ן-VA\T =C]L6črղVK! "̩ye9F,x}$F^8CHpM$Z~ۀr r ̽Q& /I07wyOUL AhyҤ`w}ɓG9z[L RPF+J(l+/dOhhED{8O&g]J2slj9J nظ+Lnf)<ވ>3fiVۢX`D84VvۥV:Q=1 dZ|of94T7Xӽ%q@bgڱlNvKdAo=ʜ?8+&{VqӏK.pd@,2@>gA+fM)B˶m7[tGb6~;喅 `+"ݬ0K5C*T#xMl3ʋZ}-[i VPg!jbhX-~GAcYHպ܁ =3rl"fRc\o/@a MV{$Ic ~ƣNn=)AtFP Y78ʓ Bᵓ<}fs:eK˃`_mU:Od{R՜H b+ŸHNNZ eΣ#URP֠~RVe¤] R4ZKsRIixW4d 6 hULqXlP8 46Bp@,4Զ`ڮSTH'hfH4i%Ƴ-V"{z:\4k }w7>ޏˆ`z"iiRFze>߸"…N  HSRbenVc+| @*Vfn+GR/0Y}ph;ػ?+aijH b2C_䔅Gw#KFi6cA!£e51 ;x&.7IhmKT=79Wbj{C>h>aRd@8;[j2ER@)zl3t*ȬFRb!uN9YTYJP; |Ң%sE6Dq6$$f.:2jgwHNvpC,<^ޣ0~oþ %g>eѰ,,vXPNApirwX|Uq:ER.nZq(Sc~lϏ#zpZo+97jSf<56- @o2[ pPt x#4䙡wWfC̷!6oqw+dtZg2tO͙2/ȴ2.kNnd~2{w-eKs\/ )>jIp*kn*Hu:g w)vY^v&fU1vK4p@*Iw)$ocדo;Ȝ]V`Y3:֬mMTI$^ &"Z@t Ɯk?ߓB`]$ͶsV^]33![mׯh{%$nd}J؁!~)Ѱ_`Ui`= ֋h^;c̄} X_d&\"XJd%Hzr7pj=+Z޵5i;gTHE+<j&YK%A5f.;\4N&ZeVߞ# t <0%ų Ӳ=K(cpm} g|.]6w)?5;O"]pi 4⣺d,F\X J;ʂڑ$>5Sy 9ɜ;׆A\hyB/9z(@-1azv9͒vt NpwdwM&۞̄ 1ai&c V8]oK^2˴űEK/#ݮ!ķE(y[af*;"d("g=v㿘'!J6(Q&^:TO1l>. 7[^cv MjhP!Ti&z^D7{ΙǀI_d6ؙΙ`L/tY/@cDr2!*L0#Ȏ&c-N7>Q#_d>گ r=wlyT}JfwiÑ|y1#u,,.c:`0k@P2t`HVQ P:X ]Lr.94wI=֛tI "ՅWF+d`IJ5"dXvYNȐPGY4ӮJ[})e?* KŠ̫9IR٬38;+cI[Ğ=Ut~%`&hfˌ8+B-D|X7ʼnW/! B*N-ʻP@KmD?%_hSrohl$KhAL3RMӱ 7}37s݃*M}T|;FaoCGJ{:&tJ1B#Ha,vM:qx׿EzIg]]7NcωaDpztj=di1˞~SI袠N9".?Q$I.v/c˵,{f U*lN(3Oq*]]bދAS>W9,tWs{jr5u|R<*wt~Q?$vܖՌHhwNE/ipBWDy٪Xu0]/7ONh;P>]Q(׮%ŨH_<OoʾQ ; X+GZsY T"˄6jg U|),"/!fT;?yt>◔/)݋27N_|J2g(D" T,gEb&|S%N>U$:в jz'{'`t~y韣Z9SR+Jqkc0xLTevNm˔q/tHXG8s/\̡9C1>Z tb&;*o'w2c6GRrhF8GhϗDMl;V {p!)(I`&K@;9'yLDJ_BoD'0/grj)уdGŲƎlT =6z3GMqGh'lYGaVed?OW/]j}{F)Jv]&6zE1Pi99LIm~Ћy߼fKf4?|w:YjjB|xRtP%c {ye8K0 >zDj-*эT뺣9ӭ& ˄zJS%Z: OWj+1bp1C~G_Pc L풝(ŧ|veoz:Xq4{j&s ҝ[+[ n-!·z'+9EK%m4!m"$tUp}q ݉tˌZGlLv*I!Fg\/TlA2)Er"{ ~31ᒪ .ʹ,*EC1,3Gu{Ob[O3w NlqiM͚ p,;Ǒ"ata dǠ.U7n8Fu@4B5="JLW,\,نѵ\>3*~tPm+ɲ~SanfOf^qNy[;82wZ4o?UR5CjT4qGZ&,^ meEbB|359aF RQt'-Nj敧;ŗZ uB\H{=/!g^[we3KB^Mѭ&䜠칹&ôɸlC@_\6܌^L}e7[D/2&?#1h : DoD7uf]P^0^ 60# ;=[!4a$c^,MBWl'UA 6jxKBr *Q:ty!TQu{͇ON?Z Lg[<|#;n:\(Ĭ+}QpQCx1C7ɉ#n[TvB=Xczqo5ÛW~ IJ"gԡ<{i!yl(8]h&&scp%sG V_fxHI1:K@*ΐ)0S !~O$SBB/ϴCWm:/n>Up3;.x$Ki:@ ȃZV*+42Py};JP|C+8YVHfxA+MWu^I`XC߫ura΄~W֝?n2Đ1Wv-+kE[D~˫4g=`9쨣Do=IڏogY1}6,G1b>Jg% C\ ߐ_&ٽ@FE6REuZk?s'8.izHƽnCw\|=%I%=BI\Q&`6q IT{OBa5+:i9< $BҘ @]#Tx1V|C4M+bYz)龭\r1nυ9k\ xmlα?6ALr5EkPx0>Un!gu iF&*pt&X6q=DUq?26(ցW@ eڬҜlQdMڏ`P'DUZB4^79lp9S&~P'6w'}jj#^u&_5_s*ɰw Rl߲2拣ܹ-3$ޑ Ӭ;4!K.=&) ޒeEM_ŒwGÓ@5Ʈ"[vHzhF D$! ^g(˙kt.0 *Ժ( rV ^{!릞Id09oLs8pĢ?Q&E7P!8@\ĮG&ɺ6DK'-G6ЀTAnG X6>p"HT.iCUs}؋N:kk W&/G:dcSpN9[<f@__a=f p89x26 Z': ~XD'%NCIwoe|"PL8m7! %A"ډOm6n(*'ҁ@ SnX+2/-=*SZL> wWJqVaOF*q&6^ 9x8\ o8"nW/-9È@$8O$?/Ėn`sLiIi=#Ir$\`|a)HokUFtY]|M%x}eO1f՞voD{lVMa4O+!"I u ߚh1gۘrkM1P&mE.( k-]ी>9iGY b=\w^]ZJ-=m]303Ljyٹ&R |;&Yvqenv<#8_:Z'x$+M`<zuB&`e MSID5"qN7UzI'`~a|!o#fng<֯]_ϯalÊoD.4G?!~^cLPQ[PZ@h[8\s6=fcbBJ{exk1I_sШ8SHAqYMA0F;|la!OT9_eǼɼyw@ۭ%'` 1z,|EK\I`'PMJP2oS|o}'F`G^ T ` Oq6U 6?pގOȶlP!UsSFCaʎPptqD Y_Hv c葉0ۉ(o6~h` ٣ݧQ7 -XN0x8>ߺho82 ,abP13TuPk@)VYVvӾ4!:h T!.#_UR>u07OGȸ\PiFF?tWFd#n*0;c2'*8 8'|[E&$(bx PM,<;`\V\@-Ӣ=p"o340{ lS'55fH1[1,KI"V):X/ @L N|̩?JPX.Rx r jl݀iIBt+?hwBj.@znJ^ U<pc$`]!1?q3:VUIeņ?B|p.W@J"<@ 㝑 n#t$-+J4Ej+$},˂kd7MѤ];fuV]ݐ1`ȁՑ 1HߥaCq+>B#AJV^^y:rJSU;S7M*܍xElI;R B++krs`G4>2NߌkfTq0-1j,b1U3ʤwcLQDŽԅX OHs-qʾ[[^`oG˵';ͧ(- 2S>2b# e-a`_Uiz*:Δ5Q*S aC}{v*Ž?E2cH~73i!!E6DJRu]IBNvNd!A5ck` #6؅x(˭M-7wꅀ<9m +՘"_G9_i4ۃu%3=,<)A9Gz[df.?eTrɘ‡at(Je#|cP-]zR-D4P<˶ۆ`+I?p0ɶbSQ@AF,lm3)b}h *5hvR ZuXq::/jޑ`o۔K;p|=LO^,kK!ڝ$S7=:V1RE-9[6t(ޑ<%iFJD֎m!CZ/6#PqۗiĭǸ$e@8o *E,^=HMNn'pfh\WuAbA6̱F:SgLT<U5;'/ cm D*"[u i(d-t\շG% 1lb?(atI|:\:d+.$Qum~u,;U馸,ؖtT|O;X1~aC`4VwP}Dt59:}&[N 6Z_|A;2=@Tb(< ^7KMv54NV,)۹p){`$|C}Bˆ|000MW&$}k헷k 0y:h[n)jB֤1/hl~nÒKĂ%PYKRh-{bˆ3;27h1ƫloO8@`r- TqҪF #8MCF/fI}iFF{?}ΦENk\w?1?&^ Nf!(vzl@R2I1g4&=tNE^ f],6ŚC,PcHNuj)Z' n n~N>*T'7Uw[ ^01zL[R!lJ|#F8 oaG5xF\:93>#wڗdkNU @vsL6E_3u Rg)I Aۭ#ec={ BB7vO 3 !yiJ CxjXZD+bo~PQ {=v,n6xs]s3 vՅ0#nc|ْt`ea:LU͵~3gxYzj\Q15y_>jt]!;M6g2(fH`qrd켽f7^/Lw(Ş& R m+mrZl'(8y##б(N#蒱7{*QnĄ?K<:\PfEĐ0OY3ETiB?`臵J~CT:$ fe hw@̲Tq%߽[{YibQGwf6rL8cz{8Ѣl(K9 L v<0p91G5 1'XSМ|$j뤃O "^=_[PK44$ OU;[#C5GW-ǔ7Y:}a}*p=xc2MnkIwd u!MfsGñb>U_'*7N'<'%[R꽀X 2gi!9Kyu)G_'+U$!q ]wUt.8/@P-Bw3bdaUyzsN6^D7t@9G 'ԯKU9#'.'ڊU[!kpGz"5)5r Csރ/ѝ5, >B)ZgoPI$Mo1nrmK,:&#RnL\ ésEgJ'҃ũŽE .i`?NGvZ㮚 n|:hU*=> ,2!FL)T*6:AcnѮv6zGR^~kea91I8zJaۭ0Nie_ m2s'GoH8sGǠ1nf |D*"bV/!bZ;vh_, Ǔs6&gXވfz"+uNH ~uĕ9Tna1X>I豾} v* _R^#ږ'N\i*h(W>vIe&%J͒cK%<=C0fpTnczd,v Je1ȴEv&hC'C{{*' bdtHz&hlgc' K2@kgD{dcUz-.14-eC˖~!UX/RhXH4݆ۼpBA4雧'&t0z]c6хdTv,4`ZGn$kI;_8 K׮MSUJ];}~n^Lxڊ) 4 Id04KhQVVHco̍KYȅ~IAbao[~\@H+dy=ΐfB8vCtEI'!΍gyYcwZ>C N啕|MًEwYAygb%,T4ȀjמVTa34F/z[f0 }6$D\hHr""Tа_,$9|ĝ,(?IOk^/AWcŨ@>-5ѥr}+Y?:ź֔Q]IOPf [҈8xw%A6͏v詝Y 2L" Xsls,$>k*x;D`wWXqȄ@,59@&5G*chjGg2FH478 .o&W@=SW*K(AHPNZrw c8yAᑲEX&Bå"'(@ j6732f dyӆ*)CWSQ#ݏtx`Km;s+ )*L>tEO]X:J%I#qwLU8򯻑[J\@ŞBRat.ʙv*Cs>F/6xig'1EϰVI .%@մOIA+0EBtEG17wSM!QRܚW_2nOMYb$,@͗Zq sxЅhxy0wH>e)  ϲH_*y2jP22^>Sz65:r1ce0/~E #{(wa~N ngչ Jȁ@j%g}CvV; f첷,Qus N+,qE *ŵ8˓|\QkvgRkAoF2ub2(2RDy`A#l#e[#~Z9}A0[zi YهH\f ]e=7=|pBlciV@B_?r$ h1 ä_> , 5V@Z/.t =6r"T0$bK0&atRJvf<UYΰC- z1<7;.M5?#vyd$X롋I8*>Pt)L]U53}'gdjvdtD̿qa9 6Ԅ @]$ )\,P9mWߤgBt T J 5>%LEq-$ } 0.`-5jx ŠK =RXpg_׈GǺ!JL(O~9x\e-,Lo)K/\D:ȿ͕Q6ư)x(C:2C&x}e,x}{_jv=>%*ckqAQN^W`Ȧ|m g` sIR-pD&[otnM&59,`u5\q?v2pv_ cQ& Vy?B ܒ>l-r }rv+N8]\6O7ɰm7 6yF243"sG6~>\Fae1n\N=X<9nj2z1!%-:zA2Ҁz5J< :t~>85I"FQf(h|6]=No5WO)oHQ*?Mq4[[Bc_ rR`ȼaPđd#Mt]o \9T`lLPU0/ēX36&6c'"p_?esb eǒxUF !s4[ˈL]=ۆs,Uj z|Ȇl͟?K\ɂ\D+_!=;iQ7r,w${O3 (CW+16ۯzZ"%>\UYu0tTiLq>l7懱`1]g;dWoaS(BMi(/s:_` efS 暀1 %1ܲs}@{[E_JZ.2\ &Űz4ޱ0cܠUͶ; m/:Ųn/Q}w0S~pnKT>wě\Vɯ"dd"J'ٱD224^!ow1GDaWKctڇP(x4se·νAE>gB%5wf)ӥɚ}C!-gd湴V{b:F)=Y:$;tI@!4o "&'+V qGHP: mar[Q;ifbu*.Ǝ$miLLzpTG?xS";` ОM2gL6W +gg:&k{E6t٤A.#ąʭSн!epzXFbA^n1a""NjN)O fnq|Y9s`40eQKaaSx s#[Wp)`LC=ur@!M{ Q\lR}׽+mӼUV2qIbw `S4AeX,&8iN a%-`NdS-ն.(I{"l z/i<)>{%aW*Q7-S,:@xA3O߿0+tpP.K hWaf0=o4(+SRN~}m:pػ6(b~ OmP뇕ϰ%FqK*oYQkI;9Aݾ(F>hQBE@pLfv!kw~mxݭQ?"(y 'UIoٸ"A1qZM^DDԿ}ʣqaڀm;zQH&iY2 ׽D΃񛪭rxu._o cmgz_g#[DYq|w+ :n=&:-bXemhƬܩ/HPbS0'7"Psoqvjtnc1fo]S, @Qy,zןM#%^ˬ9 +uar^̈́*JS%C%Y~HꅽX[o 07msa=,f rL'kT" XpҪYmmpzykQKBuO l;+^{,tIwO ?h!~Ů`A[>mFH37˾!SF.fXEcn]xȻmUd*Y˛ |d <;.6 H$b*r-%P+nQrؿD/FXjS ^ٙCP j&sWQ'Ԯ#ݟ^7iH|VYȍZu3Nz\˄Bvq$e{-,OU_kSCơKqÞ'y~P&O11uZW:Ds[pBu# ؠ`~ l â$fvX~:CUd &ݻ+N5#QX7LPX wpwy e>[ ջ}ɳ׺6^_: dS| foTiadYDhr;zbEx1۷ 9}Häfqi?w(zx`f{KiX<|淀 n<^clرUʩ|8>3!EHY*~/cHBo$wA'[SSd3Xxitk?@o^n%Iۗt"Q8,G0n'8ڍJ"*~Ȱf i~ƚ[PK~Hc#*hk|{۽O"o)!:*y5뻠P[R8%8|D#WN*-+efB!XVB4:'DuH2vY捗l*R>-3# )]X5(d(X΂>M DNGT_ѩ#PYVUѩEL*ImS~l<#m2m-Zg$uzɝK̚~6;7V&RC51J-Kz>WqG!7#7j$`& tGʀ3 SȦ A yQ%ICн_S P$c ~)0DVNV)|Cԝ(z@=);Y$ ='z:"lu>v9V Am(T|(P]#oʷ=qH7kg\rQ2,)l2uPAȜǟYf ٱ#z&sa: WT@> 7vCtkX/Ch< +0m5`3mz& āMs`( uABJ2]I[9@ ;^ߴp=(9DyT DD8^Cǧ3 o(q>;%c+kΖFN7:{X$s4qz1UgEa>TMF_=*;ZA>>Urhok](pyf`udI,x4#޸W)نgwް5F-3?Enա\[k7:k*,x(`v*=}\7J1̼LPR v](4#0h{r "~ w3̶ Q2( q Aq*p!໥ WujqOp"  (LXvv<5u]U8%{ ʨ<`Lmi~DwEEJVZFZ(jwM̈d{ Ĕc[RuWK镩D0 %D_[9PK3)bX#o4v#(R| Z|1P^zkImƁ3Sވ"`CH4 1jᅣt;\y3o]SPT"&<'3LmB+uQnRynBo XϊT-$MRgI֥?jpDž$v:^)J=^4̾rh<̒ ?MNJ7E5׃~,*URgM;PtrAUj ZѺ!--;oCL} vT 3ַeI.yO?OJmpϷDJW+lYm"{Q5Ae p;l~ƱB){C;~2 6. e|I_]` 5U'EcV+)HZ0}g2=VG0ZM}tXbsa0*@0N4%=Sa`-8c~grr#,3C6NTywxCl`knӨW"44v(m7P{飺~9I@IWF0؍k] F˧y+@4s_&YnB|}xTfHjcη_+QVۑ<Zݴd%%"r-XB Ԝ LLP^vJRɕ^, ȠhCҏ'y]˼66Z\9^lrCԗrQ23Im4re5k0 %6Q 8քԣ|iDח .;e9M|_3"&9,XU jF{3\x3J9'ipZ^4mu6A^>6`5Ƹ ڱA9Y-aa J4~}g( 7LG}o_Jm[ J5ҧ0])=d熨۱:JlYH7#8" Vv\L}h!Z{"Xo8fűT'\ ?@K8 f5C"cSeu wԡZUᎍwksXJ8L-7qQĢIHUFXP`ET9g-T%ؤ^^^.@#(bЛ%S3d=#eȖ(KSګ)JCS tkXvY'; rk(5P0jO4:r9cY/E-~/p3<61Ȗ1>S i|JH8B=1b} 칗Tն;vlӈb>+bw2&9듘 MWV_r͟ zHj$ ( t~ŀU)޶iŃm,XmˆjY/8vUj -T_O( jŚnMّn_CfK?&&m(]5lh7yj}Lr]GT#M7<_߈a籒)1cڎ{/S27&`W [;~O`/?PnISӮ3cץ@l:I:bE}힙{D a(7D]# 6.[u૳DZ%,V$4~\K |>uM?'}ݘxWֳy8#;-$+y|W|NhMW]GoϥTJ挟$ڛwD Jۗ%;k.K\_ؗ;kC@L_vƬ%\t<0D }q/9r: XSk?[: ӽ,48!}o$Z3eBę5Zky#&{$Txia/|ˑHmOXDWsJv+~WnC' 򥊢Sfe}gA_vY ړ5(O&t'aN Y Fծ&OC)ս}bC.օDo@71x(:)ڶU1Ks\s,Q6&{H#1qn&>Mu5ɺ^VE|bTaV_t8Yざ XA9iQa7HOvGӧU`&wX EMlpVDy,'^Q tz? QH@,^H俜! zbyjJܠ;9-qEzG?֗kFT+` ?cH-}Xߧɂ>: ˻@NwվF )&1z:хm`rQ*배(@Т>b)"+TWc윶m4tGS>gElx WVe(gxl ݹ Iue,(!Cqi0t_VҧֵsR8H(z!,&q&sqv<+M,h|HXrBo4HQt7qM?_Y8VZl]j1hå?\o*s`\G|dlwTD'aLv.R֭qz > %l^*Jm1A{4/S"7"4~My7PuŝQ2hUlvJSvFS#ŷM(qH9nA4ڇӶHIo ^sEŅM>M%_ +EN ,}}G]R &ns6g=Fm, Lq1&όV$]l>`eG=3fl磖*=;ǀ,_C'JWoA|=({TAHN̸I Z}r,åJa“hFi'{[XoH:ŊцY2jHu[ yk#=C\J|/9?qx}Kc],i 2k YMsBL좴AFU%<"t`)V|khnLq90SF0G3 0V-zFz[ofb85¸VBDui=|+I`^2#vY\"ݪf0xQ=x7UQ'`eV6R<gqa]@|^İK!oX.&6*Q.d+zEEU'rj:ϫހI/R,t,0z c:قO?*l90ʏad]AK5LAc%ցê-k(//5V)8;eEϋ,?MBrYw<d׶4((4…c%snP] z EE'4Bz {2/7bTYWSHn,=ô*&_XY$QxXá) vU?uwnj۝Z6ې;u>;P }`#/}F+ s'֭`I;@>+Gvf" WTMՕe.K\nizUJ6`&Ų.2qtڭXwQGg w 0k!L腫V (j[ 9E?U)#QJAQa6l]m#۱ `(֫IRksûȴџ#E@=C< j)tD;oAt؂U`S K@OKI|6%A]-]PmZ!>s&- w ,^e}I=` _rl*d2w;TГd$Wbu}o9P?ȥv2I|SyAQ|j6q Rb4}jҞzbi+Ɍ RlctXNߊVis.%2L~gO- po>gΪN\Ld0V_y^.Z h*iIv&!jI/nXhg˛Ffa=ur9gFdAO,B80i\QB:l4V)mx@( N۲wNy6UNXLKo<&Y64Hꖙ(-BۉS/;)FR:H,AC@m`W+ ɳ9a|yi*Cn`;R/ޒJ{׊')*z[WF126ӏ.v+@ bqJ=Ymdiuк~?F"zxK Uz;:Ӽ[(gCYJEG;n4zll<|wJ N`ҿ0r(4lqwDBt7YȬ{#vXs2Ā; x:UǦEij~pFXiIl,IEW!&zv  %|' QR--2Gܙ{L)mϷxmQOh0E^J|cC bPZ;aJᶀ,o1 BQ wf.h^$Ul"B3NuB&DVUh b4l7 GA2 [@X?xu[E9<1= @AN͎IUII~_mB=&qnp9c55R`d\8 P4reP$KW2ξ bnݶJϟVh÷#!Xet s̑m(vE̮c^1+CEy3E I?!E+ڞf&p1lPC Lv N$͜-JX'We{)7RuAQJH֧oq+0)ʌN-p`iBӷ/w>f&g0!{{ 5{6~B9cvafz(@۫HCj@k܅ZÉʝ*:h,Q!|4ctʒ-:3tTlOБsmRYyȭU &竺 `;(ICJOILv;7ɽjY{|chfn.wډ)~a;]Q2!9sSLJx<.'HE9`߅e&;fyGt"YϧJ^[Uh&|7dϲ^ =pUMQn}q@GhJʱM秨9QobNr NBq ăo;f-0ԂAf} ew, nH#(钵g,]2pb n&Lo(+z14g.9V7ڗ7锥D)myM7.mHݨ_}nTg"d?K,Cnp~O3$<{|;ǯٷP2^nG8Ih_DQ[|IJH5kVmqhms.jUXUS| "Fʴ0a7Af8 'Z)Ѧe |s ^tD(^ 8Go;Tq|}J|^'UVWT&,)a֏<jMu'ILF$ A#Axc ΂*%+X3?!s.ޥPNIlk\T:yu1mBhI պ<9P5dN𨱞ezv4:85nɿ#NUfT.=)-bm{v~~#u'/]2e^;X,.vQ-:푬e<ë qX+i U?tZ'FP iN9-\ /Au_ Tn?AMИt5ia/^rll3 hyGۉ--Ic:R.0m<&.t>Dp*@ *4 r'b)#Læ#fi mtrm`?DJ T 6s bWFa߁lzA*#6Bk<<$V\$_X<}|yM4^o2(A9s.1I P@({}_FZ30dzM*Sn<. wNWKt Tʥ YxmA"tuOoGP߳\g #T\.]ڻlצu;ٖ~EKx4YMwaE >o86Ƣ馨#1I]F6PΘkmdT'92tR Ңu 6},[B"XQq(򡄕)50&ߴz)t/QCdB;`zw@:*~"}3cG Hb:,KK F,gD,-rOT=JgT5UX VэE ey8fag< _[9xP&Ƅ߾RT Kp~AsLR=*Y[ M4}z2`+8i] ߤhmA-w5/8ʼnDBYcaiywf&Dd[EDo:˹)ؠ9SUEO5 Twbk V ʵ \s%TMbMsVKk< \FW&䬨 8R(Uc||-,b `G./NN 'IgU[M:8p7L3N67 ZDz^ǃ?[Jvң( Hp{ ,(mhѭ}CGwרUTzN+. !Ot)Gdv.x w!vo`#5bO I@ N!ߡǢ^/>4{Se$ tj $bd?\mW.u+OjϺC:=Jv"Ah|p=%DVo p&SaMK٦;;]JI2V@Tݰ3FȒZߛ WWbiWJA>G`pdaG4ĸ r{ND/WSڏqp)|sG;j䐊Q:*f|ݠv@*t݆+$U3yr pnjGL_5@=U-!YB0(]&תML dVżEF?jе[?!̥vT{Kz$i-M >=QJ&5qώD 4 vf<\CtL_z<L(eT{n'=>^dݵE籬75YD„xՖ:T,FuPJil+Bb2n4X<?8"lldt 6[ Anxjp蓻7сȼ#M"%x?A)t8ْ&JAvԍ,8|N~Ok/7oZA1%oE *K9. ƍ؞adc#4_O:xٖq:i5(7 k/Nb\1+ 0!Q ?6@F +]"LJR$rҙ7w`VvYLhq'!Ax`XNϔR+ӲCDa` ; UJjË_la@oZOvf.kХ!63ǯfN} 7K#k'vڀPTz3sQ;ձ(;ANᵇ 篬@`M>->/hA Pi. "tNߜb1u-')Y@03+fHkgO \!Uaw m/JտOJ@aa#7'1e ~d,kc>\!]{B5<, RaRKiQ"g^0Zo"::1w,@ICOdHwAn#Q$?킿nW]]Y*LYDHRfh&pmVjm;%+rQE&hb`Ў/ ,ǝo)`^El cR k@ Tt"rlFӗw^غ=^n7ǭ!pd. à|~x#-*BXϊD4;=~F ]z04q FvSsFq^\85'g BdI((-ߋ )DD<1!CCS#lA # ؏ŽKOy5j=bګ =6FRYDM~Jޕ0`8yuBrM-su\Tu+7%PM5[SP(W]e%e «*2ħ(X*!lSc$xg3Uʀ5G_d[7= ӻO5{?T2ݙH1ИTq4NBبd)\鯍&?aKG%/M:f* 6VUh-"c%'[Q;=bd`F6L6̮{ ر۫qy1)x/`a)4-AQ7S;*__'%-Z޽gfF-իa0$^`|QrK^tеz^Oft*KŦLj*9  <؈jej<&]1%bwo㓠%!uSG[CӹY9w[՚SɬLEq6"M U4>󆳰Bs|62-j1è ID.@-cf* kwl",/93]+71?T\<+d -X"[YbW0ԺUSD0/I0>5_>uu_…upWI Rdh>AqOhSnN"Laطk۴lUɟ[F=7 'F3Wp6Lb gǹ9H$*03э [s) ~#-6N'PK[?H`"qYPClXh$܅Ҫvǡ&rT~ޖv.!6ޔTw>5ddG_?D8 *¡@Us$d=C0R*u&]kXcM$INzvT9 ~(9NEz'ց7]A!mHR' %[gW'*J4\/xqDw@TgHӄEϔyqH:4/t7jj\޼6bGskom594!}`6m/'nZ{wJ6} v DMn| {D l)^T+("+~ <T7SޡQU{_Ob $0rs<H! CO Vlc [9uڠV9jV-rq?ׇvC013'|ġ[|:>'C\޴ma#SCSt^1_2R#SMѳ|t/=1Ѽ7sHک+ WS*!'G,("7S^Ŭi&kjӗ˛7+*^>nü FYD%bvk`c%홄)7^ەᓵMC5!8V~gg5w&EA"%(l[^4޵"X,vƚ_ xP`>Ba'̱=ot4sܟMD/[, D)79I-Hz7xDfgS/fgb(|FcB Rn$t `=&e8ÑQgJ), )\RÓ%H3*-2N<&s}g's k4R}gȀ@Ls<5>Q 幭|5N#^+prgw,ѣI-z[0Hs*X̰?xmY.mg S:(-9Q`%gH;[{\ꔆu;`7]-nm{..CS8/!IɎ7J`%t:Q>8)COa#TPf6&&ɤNݽkKjW(aQhQɂm^L|sK5f"-aax8@e624GŸ J+`s^6bȢCND^I0Zhhg-OJ6}|ܙzv Xԑk= ś YvR+e>b19ǐ-_䳄f˗:whgK+$tks>f񂆟`EEiǰ(3d $ۅ x}q7, - ='WIh"jؚ~jM&D%(n/q5=^#֠Gl'L ǘ2cfcc0 ; Sx ;̛V64S% -/OY̊tno.L8`E^Y]ON7cmh#u}^:+~ja&n<9m]U\}?DQ!;{U.7 n sMt ?^3$E'8NLO珳)g/$w *ōN\cGI̖ 1؍~:J sch˼$2r/ǚ#MƼ` m3R0uLR!N=Ȏ ]O];. i4~ZK` [3iCmQ kU H0,$f:V+t$S%({5s ;IDN Q"v@t ކvb#烟g '[:˭vضxPgXpg|NcRy ZC fdݜ$_84gbޏd@NLr4Z Q+v3{+Vp"vFjf%i=)zȎD"Q3y[A\$fD 1m ,dNFٹmog]$KRH`8Y DA$)FрDw2T: ^L~c`N6^~_MzM6/:zK{/aq_.Zm6* jS%,,WߡHPuL*0ȊCdq$RRRO*;zO?xe*Q$?{w/ˀ땧/֒sTO5NFL4nv4z;i:戎;05e;ی8r|滻'ˁ>S|u(FTdG$g֯ZCȆeEY`0١:Za9bQ=y:!?Tߒ,8>'DE''MpM|MP($tQ>ڻrN9Xs`i"A`G+NiN &(cpm^0Pcf}9xA*yVgKNs~ cɇp›D׋]Ac󇔫zA6n) teL;V^u!2͜90s`5v c{JLmg箨iF:BH x1/T0kK2 I кL$Hlꌱ84=Ur1@Pͣ>ѯZݦk(K7-%6b5ðPwь|[+uIO44ZW|_cPPzáw .Nzy'rmqA9/TƝdm?J[@ھ%m0XbgEx.mm*wiM[*H/5g5e_׉ VANOOUdΒ?o鍵 ؚ*{66 0˶6zA3|RÆ ɷ('IR_|kG{y@C?0pns9Kvzp1{;fv}k9#ɄjPC`*D$$HZ`}UM i2C[Y%  9`B" @9[S΁aj3} ֽg\cg}&x'(&=?r>6NBx#L^+9JTh(=hF?)N@n׭4\`MDxZqVVkBl+u}p!N;R}s~Xz*6BfXtsq*Z2G\;.Sޫ]toޡs:@΍u# !\AWZ![GE^38=VX$'W' cNb*7VL!Y3Ebk C^܉/ѝ<-e:]r3aB@WeuZ?{V}MM&a0)kƋeh4)P.AHdeY9`M)|02';᣼[f ֕&1>+@Hjy$kXaUQ,5AE$|e鎒H ##Z <$6ءpC;g0b^p1GOH$ !1=^tRT(YJ>C>emkT::ƪ *urI ^l Ds2}ֱrY%#XYAi#DXJI 똦QDnmUrž-0 B QoO jf*.z\ظ}&[(1'DXU?y7TNɱ((ѹ=\hI(j"PF G nw #'oi.5d6O۫ Q{ -KP-d.e0Nx.cߝp;/Ѕ"’{7b~y87Mz2Uzv`t@đB~GW]csk!Ui7 VMAI 7~Ī-#ƉUPœipayы\ 7eh We=+eKyFI/)ӹf-'\W(PQ)F6"rGut3$-&8 >FZ%>8CAc /(ALG武*~3}5= k!̗P5**e֩k[@CLHBzƑU<5v=yjtڭWxU+N!NDg<2=_0:)ީ3қM_[UY`ݺ'l5p%zK k@{#:+@̏+ㅢSR8Q"2Og/p@My*ei!:T ì,j~&%e:,Td P߱LJ'b2Efy) KYLofXD|Zk* W,8_JI]ՙY3z3.gKN6݅m7PU'p\բՁYj͋gq#WLm*Er@w O\-M&{$X+V*{ɗݚ6^Wo!]z0Nt9qƉ3)- JGXLPB𪃞VdݱbJLqCNTڳe8~4@JS:ʂ(n7`SQkF&?*=J6Wmc^t0[11 ,yyKgRJ ؋0&io4Gt)ˈ!PCcO: $*)Fc%8B?2y}|?U56'?d˦eK+ 5(r ij'+Ny( 4aNt],u؉Io VVv#&\Av5%FQM^=JꡌwשSQYأlAJ+ * ڵ)a4LE~gɑ/~K:l[05`FmP7IH0'%/_[#*rcpJfNm:4)Pݜ9,<@6o[zБxlkqޥBǩ{ -A;^ΨVU{9:eXF)TaUtKQ&L$9/ +\o315k$܈M9rxofe&طy "/3o ~j=tto9H[ 9P)@nD(=f#\imUN/9B-.}Tp3XG13yr2 /#?"N  ]AQ/h|-Y8 yvYMe8 8MO>h|v:6)ĥgNWotB+h *DZyʗsD4^8EeѶ]ð@`Hj ,P{&_*<̏2Mژ<$]V_~t&GHQYo9#s'i 35aZ'7>.({.\5bhFj xو_R0|X~n9lg1A((_!( G@o}tILsKfmExMܺtv/`1`AP'T,RzĄOi]BJ.+< 2B:n3r!c|׍*UA7Z>ЦL#ƴє7z|!& sn̓8! 6p9Gmɰ + nKkk.mJSƸp5^RLv:6nX3cw_ LxyѐWVaM@zȢnXEkŨi+la̴Si[6rݾ^ӻu=2ofS9v:a~bin$8n_ UP@;% Lci\&*!'Z{F4Iz]j_)Ǩi ɟ U1c? Pf:qtCVm/ =u.wYR^0$ZŦ*pp:q\V/O̠ݰd[J$wa1߯YK+8HȮkT';#Y4,PTc6 +f3SSⳌHR8,'>f !#e&2lRls+&y >*nǷz?H5VNUPl Yၥ/DMK҅FH #MH)^ ǬI"Fw6k}l+^:?Bz퇙>Ac< Q$ߓ D8z+/CdI/iTYKG>icC|Q1n &J)i. p.Wg!+1VM .ǒߔ.:2"N͙ͬ7YEaBѢͨ%ULR{VjJx-tfz[vQ'B!@AOҚG䐆iXyASvr0\4.|e-s`>țwg5Xޢ6Ѡ jjPXPD}}v]sBn]&8.٧{m;4v ʢjQY:*̌|4AJwВ.,|De6>JR;IGM"2X`#$&/Rv']lىD@lB%#4/ujAF˼}:u[VpԟA`r"w'>'.S tUy,F)Y(X0ifDCWQYG LL93D+fyJCԃ]ݸ?m}UN=[Y<(k6XG+AX"C$h$x`bV?".QV>~P~*$E+ etʇu.2m*q?c 1c]z0ch:ɺwU"Cŗ ])G g6Q..)FAҲEE9X;Aߏyo=''/ܞ H D G8> xs i]d`LHCJbvR`Fޑk*蕽r6?#|;#v%7|@_Bg}m2uP2k{=Q2RxfnQ=l=1,e8/m,B}W )/hj?[ Ӂ!3?pXa"Z#W֐xam)_K:CfmVE*%QsT6@,4ߕq:F݋[5}wW'9{T[{W{R%Laj>r~zsrsRAn YZ