mod_ldap-2.4.37-61.module_el8+563+4ebf229f >  H    d U] Jz!}ShZXI﷤r*tիlk$rɓ? ojr4  Q2;"[ݝSR՛~o.ScMz¬[dO[.U`.Nz'$etcb#I!VߢzE"vاi,q]2(5`1׺.QYS/(gXV&rZ,w7.0j+θ7ݠx;3̟BH3XVŤϊi51;D4$P (;]m`^!+A/1w!m96 c} {!Kq8~Prh",C]P iY UQ;?Ww ABm-)O_ŲQ`aiyr+&bXNhv1zgOݮ(YއȃP3qvpX=OV\%*_t*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 U]yq/~ŕX !ym4J1,eİ72o4,I.).l5(yu%K("ZFj^,m~ׇεL^qzŇTuZmHk V!g͸o$+hca3eIKv=%a_Įk+%XB vcvix^IueHu,꒖[ȶw؋o^{^tmpttt y ޾d,ő֬ݠQۨ"IK #d1z")[ >̽Zq0ܥNҼ2|%4c/ғAUi >1r 耐|pY,&VkK8ue XiA&P=?d  - d  8RX`x    n 0`x=(89 :5G4HLIdXlYx\]^|bd9e>fAlCt\utvwxy(,2txCmod_ldap2.4.3761.module_el8+563+4ebf229fLDAP authentication modules for the Apache HTTP ServerThe mod_ldap and mod_authnz_ldap modules add support for LDAP authentication to the Apache HTTP Server.d1x86-04.stream.rdu2.redhat.comCentOSCentOSASL 2.0builder@centos.orgSystem Environment/Daemonshttps://httpd.apache.org/linuxx86_64/6pC Ad1d1d1d1d1d1cbbbdd396fe056e8ab167abd7b2cb5145b42210bfea38452968ff02a03493fc816ef1c96fd9b26711f820075385aee732fb44ad6ac998c1099f481083e388844b5b8e33d23b0cc93ca1cbc6fe6c714e103cc57ec6fb56f19de2b7734f14d1790../../../../usr/lib64/httpd/modules/mod_ldap.so../../../../usr/lib64/httpd/modules/mod_authnz_ldap.sorootrootrootrootrootrootrootrootrootrootrootroothttpd-2.4.37-61.module_el8+563+4ebf229f.src.rpmconfig(mod_ldap)mod_ldapmod_ldap(x86-64)@@@@@@@    @apr-util-ldapconfig(mod_ldap)httpdhttpd-mmnlibc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libpthread.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)2.4.37-61.module_el8+563+4ebf229f0:2.4.37-61.module_el8+563+4ebf229f20120211x86643.0.4-14.6.0-14.0-15.2-14.14.3d!d-@d-@d-@doMdJcdcck@cck@c(Ybޅbb2@b8haNaaaawaU`:@`f@`@`@_м@__@_:_^b^(@^@^]]@]߶]҇]@]g@]-@]]@\7\Z@\Yz\T4\\U@[@[[[@[H[u[[[ā@[ā@[ā@[@[@["@[YZ@Z@Z@Yp@Y{Y@Y@YéYéYéYéYX@YYYYx@Ym@YlYf@Ycl@YV=@YGY5GY@YXۡXP@X @X@XwoX[@X[@XEVX)@X@WW~D@W~D@W~D@WKW@VVVVn@VhV.VCV@UK@U@Ua@UF@UQUQTp@T=@T@T @TT_Tk@Tk@S0S@SGS@SS/SS@SSS"@SS5d@S4S&Sz@Sz@S(S@R@RRG@R@R@RsRrF@Ri Re@RVQ@QQޞ@QQo@Q@QQV@Q@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Tomas Korbar - 2.4.37-61Tomas Korbar - 2.4.37-60Tomas Korbar - 2.4.37-59Tomas Korbar - 2.4.37-58Luboš Uhliarik - 2.4.37-57Luboš Uhliarik - 2.4.37-56.5Luboš Uhliarik - 2.4.37-56.4Luboš Uhliarik - 2.4.37-56Luboš Uhliarik - 2.4.37-55Luboš Uhliarik - 2.4.37-54Luboš Uhliarik - 2.4.37-53Tomas Korbar - 2.4.37-52Luboš Uhliarik - 2.4.37-51Luboš Uhliarik - 2.4.37-50Luboš Uhliarik - 2.4.37-49Luboš Uhliarik - 2.4.37-48Luboš Uhliarik - 2.4.37-47Luboš Uhliarik - 2.4.37-46Luboš Uhliarik - 2.4.37-45Luboš Uhliarik - 2.4.37-44Luboš Uhliarik - 2.4.37-43Luboš Uhliarik - 2.4.37-42Luboš Uhliarik - 2.4.37-41Lubos Uhliarik - 2.4.37-40Artem Egorenkov - 2.4.37-39Lubos Uhliarik - 2.4.37-38Lubos Uhliarik - 2.4.37-37Lubos Uhliarik - 2.4.37-36Lubos Uhliarik - 2.4.37-35Lubos Uhliarik - 2.4.37-33Lubos Uhliarik - 2.4.37-31Joe Orton - 2.4.37-30Lubos Uhliarik - 2.4.37-29Lubos Uhliarik - 2.4.37-28Lubos Uhliarik - 2.4.37-27Lubos Uhliarik - 2.4.37-21Lubos Uhliarik - 2.4.37-20Joe Orton - 2.4.37-19Lubos Uhliarik - 2.4.37-18Lubos Uhliarik - 2.4.37-17Lubos Uhliarik - 2.4.37-16Lubos Uhliarik - 2.4.37-15Lubos Uhliarik - 2.4.37-14Lubos Uhliarik - 2.4.37-13Lubos Uhliarik - 2.4.37-11Lubos Uhliarik - 2.4.37-10Lubos Uhliarik - 2.4.37-9Joe Orton - 2.4.37-8Joe Orton - 2.4.37-7Joe Orton - 2.4.37-6Luboš Uhliarik - 2.4.37-5Luboš Uhliarik - 2.4.37-4Luboš Uhliarik - 2.4.37-3Joe Orton - 2.4.37-2Lubos Uhliarik - 2.4.37-1Luboš Uhliarik - 2.4.35-10Lubos Uhliarik - 2.4.35-9Joe Orton - 2.4.35-7Joe Orton - 2.4.35-5Lubos Uhliarik - 2.4.35-4Lubos Uhliarik - 2.4.35-3Lubos Uhliarik - 2.4.35-2Lubos Uhliarik - 2.4.35-1Lubos Uhliarik - 2.4.33-4Joe Orton - 2.4.33-3Luboš Uhliarik - 2.4.33-2Joe Orton - 2.4.28-8Luboš Uhliarik - 2.4.28-2Luboš Uhliarik - 2.4.28-1Joe Orton - 2.4.27-14Joe Orton - 2.4.27-13Joe Orton - 2.4.27-12Stephen Gallagher - 2.4.27-11Jeroen van Meeuwen - 2.4.27-10Joe Orton - 2.4.27-9Jeroen van Meeuwen - 2.4.27-8Stephen Gallagher - 2.4.27-8.1Joe Orton - 2.4.27-8.1Joe Orton - 2.4.27-7Fedora Release Engineering - 2.4.27-6Fedora Release Engineering - 2.4.27-5Joe Orton - 2.4.27-4Joe Orton - 2.4.27-3Luboš Uhliarik - 2.4.27-2Luboš Uhliarik - 2.4.27-1Joe Orton - 2.4.26-2Luboš Uhliarik - 2.4.26-1Joe Orton - 2.4.25-10Joe Orton - 2.4.25-9Joe Orton - 2.4.25-8Luboš Uhliarik - 2.4.25-7Luboš Uhliarik - 2.4.25-6Joe Orton - 2.4.25-5Fedora Release Engineering - 2.4.25-4Joe Orton - 2.4.25-3Luboš Uhliarik - 2.4.25-2Luboš Uhliarik - 2.4.25-1Luboš Uhliarik - 2.4.23-7Joe Orton - 2.4.23-6Joe Orton - 2.4.23-5Joe Orton - 2.4.23-4Joe Orton - 2.4.23-3Joe Orton - 2.4.23-2Joe Orton - 2.4.23-1Joe Orton - 2.4.18-6Joe Orton - 2.4.18-5Joe Orton - 2.4.18-4Joe Orton - 2.4.18-3Fedora Release Engineering - 2.4.18-2Jan Kaluza - 2.4.18-1Joe Orton - 2.4.17-4Jan Kaluza - 2.4.17-3Jan Kaluza - 2.4.17-2Joe Orton - 2.4.17-1Jan Kaluza - 2.4.12-4Joe Orton - 2.4.12-3Fedora Release Engineering - 2.4.12-2Jan Kaluza - 2.4.12-1Jan Kaluza - 2.4.10-17Jan Kaluza - 2.4.10-16Jan Kaluza - 2.4.10-15Joe Orton - 2.4.10-14Jan Kaluza - 2.4.10-13Jan Kaluza - 2.4.10-12Jan Kaluza - 2.4.10-11Jan Kaluza - 2.4.10-10Joe Orton - 2.4.10-9Joe Orton - 2.4.10-8Jan Kaluza - 2.4.10-7Joe Orton - 2.4.10-6Fedora Release Engineering - 2.4.10-5Jan Kaluza - 2.4.10-4Jan Kaluza - 2.4.10-3Joe Orton - 2.4.10-2Joe Orton - 2.4.10-1Jan Kaluza - 2.4.9-8Jan Kaluza - 2.4.9-7Jan Kaluza - 2.4.9-6Joe Orton - 2.4.9-5Fedora Release Engineering - 2.4.9-4Jan Kaluza - 2.4.9-3Jan Kaluza - 2.4.9-2Jan Kaluza - 2.4.9-1Joe Orton - 2.4.7-6Stephen Gallagher 2.4.7-5Jan Kaluza - 2.4.7-4Jan Kaluza - 2.4.7-3Joe Orton - 2.4.7-2Joe Orton - 2.4.7-1Joe Orton - 2.4.6-10Joe Orton - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Joe Orton - 2.4.6-6Jan kaluza - 2.4.6-5Joe Orton - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-7Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Fix issue found by covscan - Related: #2159603- Another rebuild because of mistake in workflow - Related: #2159603- Rebuild because of mistake in workflow - Related: #2159603- Resolves: #2159603 - mod_status lists BusyWorkers IdleWorkers keys twice- Resolves: #2176723 - CVE-2023-27522 httpd:2.4/httpd: mod_proxy_uwsgi HTTP response splitting- Resolves: #2190133 - mod_rewrite regression with CVE-2023-25690- Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy- Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling- Resolves: #2155961 - prevent sscg creating /dhparams.pem- Resolves: #2095650 - Dependency from mod_http2 on httpd broken- Resolves: #2050888 - httpd with SSL fails to start unless hostname command was installed- Add the SNI support in mod_proxy_wstunnel module for Apache httpd - Resolves: rhbz#2017543- Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via ap_rwrite() - Resolves: #2097031 - CVE-2022-28615 httpd:2.4/httpd: out-of-bounds read in ap_strcmp_match() - Resolves: #2097458 - CVE-2022-30522 httpd:2.4/httpd: mod_sed: DoS vulnerability - Resolves: #2097480 - CVE-2022-30556 httpd:2.4/httpd: mod_lua: Information disclosure with websockets - Resolves: #2098247 - CVE-2022-31813 httpd:2.4/httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism - Resolves: #2097451 - CVE-2022-29404 httpd:2.4/httpd: mod_lua: DoS in r:parsebody - Resolves: #2096997 - CVE-2022-26377 httpd:2.4/httpd: mod_proxy_ajp: Possible request smuggling- Resolves: #2065237 - CVE-2022-22719 httpd:2.4/httpd: mod_lua: Use of uninitialized value of in r:parsebody - Resolves: #2065267 - CVE-2022-22721 httpd:2.4/httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody - Resolves: #2065324 - CVE-2022-23943 httpd:2.4/httpd: mod_sed: Read/write beyond bounds- Resolves: #2090848 - CVE-2020-13950 httpd:2.4/httpd: mod_proxy NULL pointer dereference- Resolves: #2065249 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference or SSRF in forward proxy configurations- Resolves: #2035063 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2007199 - CVE-2021-36160 httpd:2.4/httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path - Resolves: #1972491 - CVE-2021-33193 httpd:2.4/mod_http2: Request splitting via HTTP/2 method injection and mod_proxy- Resolves: #1968278 - CVE-2020-35452 httpd:2.4/httpd: Single zero byte stack overflow in mod_auth_digest - Resolves: #2001046 - Apache httpd OOME with mod_dav in RHEL 8 - Resolves: #2005128 (CVE-2021-34798) - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #1984828 - mod_proxy_hcheck piles up health checks leading to high memory consumption - Resolves: #2005119 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input- Related: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via a crafted request uri-path- Resolves: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via a crafted request uri-path - Resolves: #1969229 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in mod_session- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records - Resolves: #1905613 - mod_ssl does not like valid certificate chain - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for usertrack - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer dereference in parser - Resolves: #1934741 - Apache trademark update - new logo- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML - Resolves: #1937334 - SSLProtocol with based virtual hosts- prevent htcacheclean from while break when first file processed- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile to be able to handle certs without matching private key- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd mod_proxy_wstunnel - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()- Resolves: #1651376 - centralizing default index.html for httpd- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool concurrency issues - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1680118 - unorderly connection close when client attempts renegotiation- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does not respect expiry time - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer overflow - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package - Resolves: #1869576 - httpd : mod_proxy should allow to specify Proxy-Authorization in ProxyRemote directive - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in a balancer- Resolves: #1209162 - support logging to journald from CustomLog- Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Related: #1771847 - BalancerMember ping parameter for mod_proxy_http doesn't work- Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations vulnerable to open redirect - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential open redirect - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site scripting in mod_proxy error page - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference in mod_remoteip - Resolves: #1771847 - BalancerMember ping parameter for mod_proxy_http doesn't work - Resolves: #1794728 - Backport of SessionExpiryUpdateInterval directive- Resolves: #1775158 - POST request with TLS 1.3 PHA client auth fails: Re-negotiation handshake failed: Client certificate missing- Resolves: #1704317 - Add support for SSLKEYLOGFILE- mod_cgid: enable fd passing (#1633224)- Resolves: #1744121 - Unexpected OCSP in proxy SSL connection - Resolves: #1725031 - htpasswd: support SHA-x passwords for FIPS compatibility - Resolves: #1633224 - mod_cgid logging issues- remove bundled mod_md module - Related: #1747898 - add mod_md package- Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount of data request leads to denial of service - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length headers leads to denial of service - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for large response leads to denial of service- Resolves: #1730721 - absolute path used for default state and runtime dir by default- Resolves: #1724549 - httpd response contains garbage in Content-Type header- Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization inconsistency - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd causes systemctl to hang - Resolves: #1673022 - httpd can not be started with mod_md enabled- Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control bypass when using per-location client certification authentication- Resolves: #1672977 - state-dir corruption on reload- Resolves: #1670716 - Coredump when starting in FIPS mode- add security fix for CVE-2019-0190 (#1671282)- add DefaultStateDir/ap_state_dir_relative() (#1653009) - mod_dav_fs: use state dir for default DAVLockDB - mod_md: use state dir for default MDStoreDir- add httpd.conf(5) (#1611361)- Resolves: #1652966 - Missing RELEASE in http header- Resolves: #1641951 - No Documentation= line in htcacheclean.service files- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden- mod_ssl: fix off-by-one causing crashes in CGI children (#1649428)- Resolves: #1644625 - httpd rebase to 2.4.37- Related: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen- mod_ssl: allow sending multiple CA names which differ only in case- mod_ssl: drop SSLRandomSeed from default config (#1638730) - mod_ssl: follow OpenSSL protocol defaults if SSLProtocol is not configured (Rob Crittenden, #1638738)- mod_ssl: don't require SSLCryptoDevice to be set for PKCS#11 cert- Resolves: #1635681 - sync with Fedora 28/29 httpd - comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default configuration; now follow OpenSSL system default (#1468322) - dropped NPN support - mod_md: change hard-coded default MdStoreDir to state/md (#1563846) - don't block on service try-restart in posttrans scriptlet - build and load mod_brotli - mod_systemd: show bound ports in status and log to journal at startup - updated httpd.service.xml man page - tweak wording in privkey passphrase prompt - drop sslmultiproxy patch - apachectl: don't read /etc/sysconfig/httpd - drop irrelevant Obsoletes for devel subpackage - move instantiated httpd@.service to main httpd package- Resolves: #1602548 - various covscan fixes- apache httpd can work with TLS 1.3 (#1617997) - drop SSLv3 support patch- new version 2.4.35 (#1632754)- mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All" configuration (#1622630)- mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki, #1527084)- new version 2.4.33 - add mod_md subpackage; load mod_proxy_uwsgi by default- remove %ghosted /etc/sysconfig/httpd (#1572676)- Resolves: #1512563 - httpd: update welcome page branding - Resolves: #1511123 - RFE: httpd use event MPM by default - Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen- new version 2.4.28- add notes on enabling httpd_graceful_shutdown boolean for prefork- drop Requires(post) for mod_ssl- better error handling in httpd-ssl-gencerts (#1494556)- Require sscg 2.2.0 for creating service and CA certificates together- Address CVE-2017-9798 by applying patch from upstream (#1490344)- use sscg defaults; append CA cert to generated cert - document httpd-init.service in httpd-init.service(8)- Address CVE-2017-9798 by applying patch from upstream (#1490344)- Generate SSL certificates on service start, not %posttrans- move httpd.service.d, httpd.socket.d dirs to -filesystem- add new content-length filter (upstream PR 61222)- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- update mod_systemd (r1802251)- switch to event by default for Fedora 27 and later (#1471708)- Resolves: #1469959 - httpd update cleaned out /etc/sysconfig- new version 2.4.27- mod_proxy_fcgi: fix further regressions (PR 61202)- new version 2.4.26- move unit man pages to section 8, add as Documentation= in units- add httpd.service(5) and httpd.socket(5) man pages- require mod_http2, now packaged separately- Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Resolves: #1434916 - httpd.service: Failed with result timeout- link only httpd, not support/* against -lselinux -lsystemd- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- mod_watchdog: restrict thread lifetime (#1410883)- Resolves: #1358875 - require nghttp2 >= 1.5.0- new version 2.4.25- Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of LimitRequestFields directive in mod_http2- fix build with OpenSSL 1.1 (#1392900) - fix typos in ssl.conf (josef randinger, #1379407)- no longer package /etc/sysconfig/httpd - synch ssl.conf with upstream- add security fix for CVE-2016-5387- load mod_watchdog by default (#1353582)- restore build of mod_proxy_fdpass (#1325883) - improve check tests to catch configured-but-not-built modules- update to 2.4.23 (#1325883, #1353203) - load mod_proxy_hcheck - recommend use of "systemctl edit" in httpd.service- have "apachectl graceful" start httpd if not running, per man page- use redirects for lang-specific /manual/ URLs- fix welcome page HTML validity (Ville Skyttä)- remove httpd pre script (duplicate of httpd-filesystem's) - in httpd-filesystem pre script, create group/user iff non-existent- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- update to new version 2.4.18- re-enable mod_asis due to popular demand (#1284315)- fix crash when using -X argument (#1272234)- rebase socket activation patch to 2.4.17- update to 2.4.17 (#1271224) - build, load mod_http2 - don't build mod_asis, mod_file_cache - load mod_cache_socache, mod_proxy_wstunnel by default - check every built mod_* is configured - synch ssl.conf with upstream; disable SSLv3 by default- update to 2.4.16- mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- update to 2.4.12- fix compilation with lua-5.3- remove filter for auto-provides of httpd modules, it is not needed since F20- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581) - mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583) - mod_lua: fix handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments (CVE-2014-8109)- require apr-util 1.5.x- use NoDelay and DeferAcceptSec in httpd.socket- increase suexec minimum acceptable uid/gid to 1000 (#1136391)- fix hostname requirement and conflict with openssl-libs- use KillMode=mixed in httpd.service (#1135122)- set vstring based on /etc/os-release (Pat Riehecky, #1114539)- pull in httpd-filesystem as Requires(pre) (#1128328) - fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348) - require hostname for mod_ssl post script (#1135118)- mod_systemd: updated to the latest version - use -lsystemd instead of -lsystemd-daemon (#1125084) - fix possible crash in SIGINT handling (#958934)- mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119) - switch default ssl.conf to use PROFILE=SYSTEM (#1109119)- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- add /usr/bin/useradd dependency to -filesystem requires- fix creating apache user in pre script (#1128328)- enable mod_request by default for mod_auth_form - move disabled-by-default modules from 00-base.conf to 00-optional.conf- update to 2.4.10 - expand variables in docdir example configs- add support for systemd socket activation (#1111648)- remove conf.modules.d from httpd-filesystem subpackage (#1081453)- add httpd-filesystem subpackage (#1081453)- mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119)- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- add support for SetHandler + proxy (#1078970)- move macros from /etc/rpm to macros.d (#1074277) - remove unused patches- update to 2.4.9- use 2048-bit RSA key with SHA-256 signature in dummy certificate- Create drop directory for systemd snippets- remove provides of old MMN, because it contained double-dash (#1068851)- fix graceful restart using legacy actions- conflict with pre-1.5.0 APR - fix sslsninotreq patch- update to 2.4.7 (#1034071)- switch to requiring system-logos-httpd (#1031288)- change mmnisa to drop "-" altogether- drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide for transition- systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg- mod_ssl: allow SSLEngine to override Listen-based default (r1537535)- systemd: send SIGWINCH signal without httpd -k in ExecStop- load mod_macro by default (#998452) - add README to conf.modules.d - mod_proxy_http: add possible fix for threading issues (r1534321) - core: add fix for truncated output with CGI scripts (r1530793)- require fedora-logos-httpd (#1009162)- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- ignore /etc/sysconfig/httpd and document systemd way of setting env variables in this file- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)2.4.37-61.module_el8+563+4ebf229f2.4.37-61.module_el8+563+4ebf229f2.4.37-61.module_el8+563+4ebf229f01-ldap.conf.build-idf2bfe261b643747a3b0fa4853fb97eb6e0892836d78c9e273770a49bd888e16a4d0ba0cf7b92mod_authnz_ldap.somod_ldap.so/etc/httpd/conf.modules.d//usr/lib//usr/lib/.build-id/cb//usr/lib/.build-id/f9//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnuASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f936d78c9e273770a49bd888e16a4d0ba0cf7b92, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cbf2bfe261b643747a3b0fa4853fb97eb6e08928, strippedRRRR RR RRRRR RR RRutf-8f9ea39f48c1d5e651b4de6586f8d05c1c8a81671405e3b0b15023c93882cc533httpd:2.4:820230720125714:9edba152?07zXZ !#,O] b2u Q{LV9g+`'m&Y֞jM6nqGv#prK2< lJ?H( soU3]SqIS{ ~%g(fx _] ~߱Y 2s,XF|RLWd>^3Q` O-4𜐥w^3jK*/C TDi\e1& T ]_ğ.z:d-OY EǻۮGN-ENxJ߅r\~<'lC#/6 5B{nJz?w_YKs%ް[e :(7T9Fo66!'͟SF14PAQh2F4@5$&1t@_ߧ*\7`k/Xw.A11BB9VR$!u&P"nzv=z>(!hfz"1"UZ9ˀR>0G o 7 ysr^*j9@6)A*;;tVM ޅ%SnqdE6wAKx#"_GWfथ"HmcFqڔzHNzKP}OSVf۲l >Bfb[kY~A#O.,Vf7 h ~Y3AU1`%C7}iΗDֱ.$̎Uo~@1&Jp빃A~.GHnj^:2TZ\$+.֗/jLdA %4 UTPC .Wɪ9~+өLE&P٥Ͷ:^'/t㽢r +X] 8jl̀;𯹜F~4l) ;>ͩa玕1=n a>hF`WkNcT&‚PV5Ί dw#gH;֨tz +`i "7኉!EmBvw\1:m_(LiϠä2M$=VCP:ٖ˝"D*B%aHεGH%. .~c՟k y`@dsQrj,،Q|P~/cɱ8u?ydݟcAzVw}ִ89>\C@&0)=A;e2P l\ . yG(He1bXBr-HL$^D}a[;ƽQ 3@+FTҾ3?-q_xc1 'SmǨ@9뗆Ȧa{qpTI+9`%l͞^! 2̞ݮǦ4—8vÎ"p>9HhL:{pn`-(~Boࠣ*c5l_ 5,avV̔tdC.GW#FH麒 mESsΆ*©P_y[m!E0*u9ŇpAPeKT:KF N 0dPe_Rar(QpBMB{е[GE%@gH!M֩p5+]?5dϚ}_?{ȹyH@9ς5rQ!~ޏFN~-O <&;@`")8QUY Q\_fiqA;_ ޙHj3n%k ֦sg4x":SgmX}x"&PZGQr4<KkD6a'YsW"/i=~aP>38rx:2:57r*uw446=$}J87eP@PBP7.D)t1M q;PTbkq1BJg8AGX҇Gz ^`xyd . o䱋zk&>>ғP-~r`9w~9gM6l m~mFHCdזg3RmB8FͤZNyu]v: kYOyj1&4]z ^Ւ\:]VRuAYϓ*:RBZDjisFΒGh!J98gN.o˳QJK4E@Y&l:ce~ɦ4 f:;O 6n+[y/l-A g OcָlJy,h{~`@W1A -f7_Ϟ%5]#Ř{*=(pX}"(*!l偀VmL&#Eju4.f˚OA-iv}̠ΡوئY/BfePZm &KԊaCvIQiܿ*kHĬΣr>,2.Y 70Eأ}|hS@-5KB<i!Q 8n.%$bd1K7ugѮ^~+ Қ7Dޜt8Es=ZQ>SXiQTQ-qdŵ.5?lR$|i!=5vU j*&Fy%mB951-l$z+!1xV ΍#OU؛zX|beא$*EM><5i$clˁ90 ԩz&˒wEӻk efd~9'U8.0,9vV`4JN*nfZGME+w iM 1Wlx*#|~Ցo I[C7rԻPvV˨`-*<A߬+ҥ'UcNm~s뉻64cWAw|&0m*.3:\^\g)3GbZ,;|;$طsvǜKkƿB/K7hc˴O>MB 5YvILJN˧)JCDA#q7iW Gݾѯpo|e<"xUYG bÚm@Lz̄+e&j+?OZ{'e^^3XizƟPC$c#^B>k/tbvϳa"?zUgmV:Hc$S2S8DSOv6N Ef|P.6>t;b"!آQ@Whs ,vXjݜblpcM3  ZkݟZs^ea-fW2r_T?8I4UE.\1 W0026:SkYɩ3}?tJa(!\d[\ m'3ews|9"#z;x*_VӏLI푏X(l[ʘM=,CjUL,(hD" ֈ(] 4S8RYfWf=DyZ &3w<ߔS] 2K8#e^ :𯅀L T p\N[T)CEVS~H)\W? \h묈/[>6[ t[`kvp8AC9Ơz&fNn$[JURSkaہZxsqy1C2l~  <)1?6R87B䪼 pλ *X [ T}mSXSpQxP׳9QwK{:Bp+Tq~ hۖu Hs+ZV?_(4wϻ;,]ꉐ׋AVO+`Yu?~vhg9g~|Y38mWBıQveE J2L:Q4XTqWQ6D,Q:, mrO@.G{d%#2V;d ^A9+"epy*ﮄΛ_I})th_@ Sz2$ޫd|&ÛePpZ![Sͧh}xRNԲ{AJ,XֲG Z7Q%{بgf dZM747Heχ2 _!DyOr^ץkbZ}7*n޹@43}{ ,R][mH~4rvS}pU s㡻+Ly&^fvy2t9ŔlE| NBlG-|gTtOI]}"eNWqnӼwՁR_ªn%E,(\}^!fQwD#YMOn>+7 ^_䍝{pmǣvX 6͒n}F$v^`ݣ\5BCDn8m$ڎ6>ɃRuN`8WLl=DCN/h=U[$Y0B"cr7IGsʶ"EMN[>( zX, 5q 6W+$Iþ|gj_, i8E< e?F~wK=8fKjrP7s稠lhx$uz􌁦C2|/ &*]MX5"ɍwpYK`otWucЉ/Eݛ+w NN+v{O8=WIRF cdXŌ7*"{_ESMTFÒitJB6SPğ֯90@k?n.'c@χW0Cy#x~1FI G()f!#$ZkZ=%n9U< 8e9{@ak8 m<@8QPjHЖ3_UU{J}[P;:az4)8$eQL-}@'njL+>1&:J x+pC0}ezZT&s2L٩.̲3Ň! LCdIudkLLE+syjueA6 \#Z% HU=RIK:쀃CXe.Ro^v7<V0[a$C|g\}Nl-sSLJ) *km%[pごIf٨lN_`eng1?v^<$ctvPK`(i'bA9Wjlo) m"VZfhcz]s"ć6nOxTdhǫyfRUDU<{|H mmC&DXZޑR:ҟ,ʶ)̍D4K'k6hBoj"z˓7/K\ 2YU_25rG&ZutMyS9Hpx E˧U14;@d_}\ZP2ƀ@. W Wl`:!OVRxKF|$>JC^7 ijgz $ޯB2"e ͖DZaZb{8H?^f`ONMuOs&nfW׹.ywg/")}׼ɵt0@QrU!R$|~= l, `Ԁˊ)4䓟ˆc=.b-''' Iߝ; qV [Khn+ҩoͿyozD6ǰj*)q#!鷛%]xbhrroDWrt,Q@E\ 2Jm0+2WGPߐC2kOKPTx6'=˄e !45ClPAm}HeC H_ P:TP<2n(A[XaRi%Cvɤ-b:"˖yW"Rxqݕ :>?@ªjZ5Pⳁ[;&}u:%|R\0Ϝ!sͦYh뇴J霷"ᯉtG dd[C n[n&Q 7<<{j*9$,& gZ#N%_{#ŹYp5"F#0F5fP*)5=RPKek3 |DzDŽYe w)[(*l\ L֑`1$CM~K}5U<բl6TnIU,KRPY K &hWx7‘eb%3]@cg6ߑ}n~X~]Pw:UkFR!bS^Q-#$x5yƣDwN{{x㚦 lz'D2I>H̘R8Kk,.+AތdXnR DžxV՛N,{b^| )WqmL}ar F08ewBh DK8n3$ےŚ1?pNo4৳ AQᾯi|^)vfA{ Eimi TeMcI'. *ig҆FXGUmR,0Z]uMW."GNd fG*V%ݜ{gL(Ẑ4}@>aw{ofTЍoک?яq˯#fUIwD;B:M=BwcЁ /;KŇsƸ?Oe 57")*"uQ<&Z M&3\;ωOzݳŨ E bPb/_э ͙`^ rd'Og[ {4&PXؿC? BBBuFAmU9R/RlZ2{hR{JCh. O l7(To7I>h='S&-Zi/P6/[p{ O~]¥+tS0w1jVT vVq 9VqYX\ +d=}lG%P#ӆ",@uVb&%2% 5/nAqK)T/v?\he#jJ}ck%#?@r`@)cy:{,xZ=rMS8;ۨt|҂V=D5l#+ 򔡈yaOPe*P͡}b:.`rd@lGgJkxZfg ,֣"|LsM]VG»Ģ((;E~͛5V!X7E~nNCl'$xܦA 1Ȓ Ϛ\Y1{Yg1ӫe6_[6u<+e vڐ~<҄FFۚ C([$WsGiOHh1FC'䘸>)40_ *NJPZfrf oLDB3瘢(xK02٧JFU} VhaoV]:-*{[/[v&T\8\>'l{mR]߫d7A \!}]FD-8`|gPI{Go;z[zhĄk#,[hncUV]8M5a__8%"Tyc|`s^w"UA˻1}_zw zx- y/tmzLtaKAsN9 ds1?=stM5KNC|bHG@p")\U"S&mÃqV@2fY#_t6lbTIs.T٤go#B bSll6N#%g*\$RT=&::)Ujow)6J} CF^ƐY)" `DQ;eĈ ֈ̾͢tyoO<=C <&c?0J^Y^3AB;"LY!J2 Tx 뙖{hrԆDO2>,>UCȋ l-KceE3`2kGS!N| ~ވ5EYQ(_*Ǯ ͔@d)hq;]$]" A03U{͘$=wɍawIwl4)i,_Xdך)AD`ʧe^l.9Z61EroH40hwٚ?^oV]b7T\`)֔hh]7&<5?(`OgNS)I7neLn΁$|CJ0ܕϻ)Z@mIͩIwEHagHxdm`^5Y.z_M.cHE0)z/+uE(_bi,~mo \;3(PZLj尐4dQn /E]T^W#Đsf iutyT?2jc;-))}inسh\Ga ,;`c Ns|[SKG@n. {J!d{4{v=\_(#]*phxBi-23\b$^".{MmC{H*Ƚ3IF;ozʘ⡺_v2<#Fj?_zN A)7~k]2j2rX/RHʙR \~$i֧oʘ M|4u&X]]k F8wڗF3rSH_ssi8OR@ `Wgj!& o=뮿U;`LJ Tblᑭ[tOC2|| AQ RdvAsM.WSvZB*Q6BjsoXFXs Q< _%&q'zdnU'/Ιu""O* 8\-H͵댺j*!gq/e^ͨ{C? IE |~G_dR"')Qttd2Ɗah~en}z7kٸʱ뫻NAz lkQ.h `"`jYF72NXt.ϥI]''څm$MxyB a F0ZLn˩BC1sY,my.~|7>3osn->)4J7*ƭi9| - # ڪIO b>bkHa8 =%S'."ix`ޭ#kZ*ߟ$DdN0O/Ңh/Х+Bppi>nElF1Oo.DhJ }ʉ(u?%{[#f^L渙J!P$[zdN:dfz Ca ht>0ƽ8 81 W/9Ҁ8w |h!W"+KJyo"C8wZ0ճ5+6jfJ_{@,xfWDk8gke ./R-Yޥ}]|ϻ? ڳvq{rf#2dTJw Q;KLKt2DIhUzY7\4AO 욁ƃ{U?:c"=Pݹƃa +QC̿$О$54LT Zq(P:,RJ⪤fqڈ&ȝIt&pS; k^'|R{`¨GDsL|cn;NKvwm8[Qzĺ߼Enk3My/iegAQவX./&e]d#A+8J0p]}?A]:/NHpB)`4W ]e(cks93cpK)̏A1x8h&G*e^eΚ9n* {t/pB&D0~-H3a1 l}dsvCMǟ&5'kT÷ jx& s#F2s_/뻹[GաHx8L"># :?4IVw}nV #}qi8MN 'sMQ#o[[)'x/TŲk^剥 *ЍM< /!tdmUxl$eL'% WH;2(B=ǔU)@Zg (7T0V@搯(sbu#5"Ð\"ԉ*VD&J5t$W;o,'ҶߍB v{AـBH T*&XδE@V%\UVtAxֈku=/Ğ%ѲPdy@d}|P/7vK!J2i4CSܾCWfks HNlql ] ]o&#`+K7* mf֟xa: Xn#P.8houK{bpQ%1cOOU$2 բq7 ᎮӉ'Cн^j]e.XM;`">W;#I~7W !Yv\;' <|wx>*HAWf0qgrș/Fnjfz! 1GS2ܬ~z3=N7i%?wdFf>|[Ѣ"c]i`smEtfJGl#:i rQ\^ڝO2Ж&iNw_7*ɨvD/ m6&eeǦZjwѴ4#ss"8h$jdRdK^jU ?#缹"%2 &K,K*equ,QyaAxXT/;^`C[NJ8=qr_ˁY̽fLxa4a*9HEpg/rʱNԭ!l]M6A2BY~bl+3{b?gT,^Z**>AG9Kg <Ḫy'ðZGفƃujsC6B,,rTgSjsW *ny2*`>\*骡`T.1θwF*5a=Vt78HdhhZPV7- )|I)_jWsLv$S79VZ$Ov~Mx{D<ׇk(/1Ke |L*9wAKڲg{/&iD9VX[3Kr$-Aa Cź xmT ~~ %xGH BF3LpyƠtnn^lXCao@ћ$\ʘ+i[-sK[KR¡næl Y 5nIuM=2|׺H/xCʯ;:6 (9=Or'2R;Kg_P)2^+HAMs0=(l4~X{Dȱ[xPj+~܁Q$e C٤= ʹl%__mp~k tI%-#?z/&*o wOk\+VHr?4h@;`ijQ?|mygjPOvbAg'Zt4y USgP]rm&ɋZsvy/h N$â0 Ghmp+ .cHCq(}3yoBG^H흽Wrl5ѥǴBHQy?IEy|D|$֨buK<и#3~sMs(U K*9'xKcYj\3śhJn{4zhH;!aUK+M*CdQ*=@:jAWշs+qp-.6bfE\\ۏ43?ko'm)Ԇ04yЍʓ8Mk47 T4sڏs-wu6U.d٦򛁵ݷmx4JQ͏> gK#,\_P!; %6J^%(Bą3cF-[u ;aaO7 =xr <ɀNKGw•<"PbinxDߙ_^t{Kqb"jy.KÏ#t1P(BOY1+I ZͺOީ#'0LkMlqRv~i>3h;4w eRcu\I@3 mW?|L]vo*]}L@5ĹZdd3d3_`9M6v`&@ʩ29K74k LL`D'$ Ҷ.G'o$ub(ǏvGGzl̓e&:X@s$YҺG+]2`Ci߰%agLkw$${l}^(;eӈwY 'p. @<c-Qꌺ˟rW3o6 5f++w"Z*+`= tIhv 誎MgDGǶvlsk^}4|ScN"Řxy r(4HQ" 6 #Y_:9K9ym1peW<3<.l= P*r`Esbz̼Ⱦ4KL.d B"ڛ-28GB |K4gGH ^tf`41a"e=ITrB b06W_srJTc2ʼ}v D"1-cYNyzТG F{9syCؾdn4RJYdE 0*rJ3s)Tb{ߟlw&v37=3͜8uE^g1jzHs"@w'meqΈȓ9E4(|ZxfD} =:}[b3N/";֘a{}|+Fڠn>+syU'T%áIpn jj]32LѩzURmk] M9-o^xe迉,7X9&͛ |8:#6،~ Ò(53.\ *FAk?^7wKw܋"l͟f浆M33+\hU--&bB7D񐙙TŅxw0fAI/Qd~igIi1)t.7i5`p 1m-W)FV?q#H0MqP͠͝s_:NPrY6$<_>@x v?9kU|jsT^OCOj{3 pXmWah y6(Nev80O&=|WlgAwh0^NWݢiTחR?r+$Kj}䏹mT$ ߧJw4i}>es݌g"e&#ؒB.agAe.q6GGI#-^ 8Ά2c;`Q9{BFփ|`o3'5-:K[Y9a M˪ɴd_z˿3ã7έu VDHb@9 \ƃԎJfuO`cwD)sȥyt&`kH)'sxDA;6;sz#HTJ AOeE~#ho=4r>t(+KHVRR3OA&0I b̎nAQt ",'OP'Y.&O)cAžY;C{5!9i-շʹ7^A';( *+T$]s0Bol 7_WzJ8=iT\:TY|.8Ng]KȯM T $Sm OSZOj輪6Ca$ 찗tZ Ϯ 낂&Hqx%}.y8Eˊ^\Toe/|XƼ2+̃ E9׃ dV[h=0H$)4Z-}Q8Y$d2BbdY射ZQis1SvnGIѳy=u#E&;skI'sf#O S Df0.nesfH% W]10VAi:*[zl]r0 r Ϭ ܣr,W& 2wYhôe\H5Zµ=M;Zh U碙d qaY77neF:T)~d" LN7xP޴y~GZb{RcGyRQbq>h:lJJPaz֢-yF@+KSZ54}\mdE/:8vJ{$R 2*-E'` ;J``22ϛg)4O-s _YIշ1ZyFmaׁ{&w9|d2T>ԿT&2bnK}rA,o6Qu9h^fꃢ,92팼Ɋ; Mt!P,)ԃ NH/-ڮ4.&ƎѐDۗ@ xYtp?dC svù[sV hV_z]cC\ѭ"mz ik 1V=_{'W-՘QJ{TC,P) /*|Ԁ^i)s\NQ]"3[ T@r;gG7ԣhr)ꅡZ;rҟ$n}1BY s:ׁМ3P$t *>{j풼x@5Hb\mRJJ_tiIL{D~1p12\a[b_KF!YSB]гl([ښVqO@9NugcvJJR ] %9mrtFSșFӆPxkUs^pYvذ-!s, S$ny!؆Pxsv"A?%Wӌ9)O][][M{6h`ݹ+W GE_fپ"[2u-`\Oܹ,Dr! 떨9 QGG'Mw @&K *L/Yv`~9RFvm!#%);B5\ RH:r;*%/P3KH) cܺ[uqVn^W"x9'[3++F27R*b"@v' @rA>0 )./kADxZdZ%!!"@:T9«d^.̵2ԃ/LLvG,7f rH4Nɇ&_j@'xՙ&,pl/1yϗ늉F&Kն"nt$'f@|LG^W$?c]0 <[ S_e2+60iieH;.  Cxf5o6 kIY0-5=ԃݤkꕛ]Ok Ly ̽Di$mWUxߙCK 0,l?VZskhYŏOZSB'v*;Hi =vڲ ܍K#B"LnDcQ+MM1QuO+{|ҳK#3Q IF4Ք/b3Ӄ0-vCvKLf&?u}~,J]03Aqhŋ6ium53/j:izȒC~`K'=թ0<]sNL qY{.;-j#`zB3%5{kG)/r @$I* Ԃ<$wˋҒ+eX%ZU =;^ 7gO]"L))%(/]D+R;Z? *pB PhbG4Nƞ wӣKeSy3ݷƪ\w'Ίи۟Gp3ZL@Sl)gKu`*x*]T,VϜQJ=j+5Γ1ŵ"Y%z&l M>>ŮkD)ࠃgg{nB_vp y $*͹r^a|&wguFp# 줔&oOD0'TzknFls>O4Yh-!g.A&@3@QEO<&dG78 aSp }}㴹Mʼ(q-TZN#9?\R8csͥ·} W&h5CHUUp@Mߥ^&2H52S0 n)9KԻ O`ekerWOjMr|eHhIe} wkPS0-LIt od:vZ:C=HO,v6 ~-d'Œ6xe-! ;B0*mkpHidP3l4ٙ^}B5qPчt7Ubx.QYwVX.hM܂idpV`{&ʤ:&<6%㫚/8I)x !w$fp9Gs*촗͌כ +tfb:W\o EYIyY|PjX .fJP / #s~gK -  XXÓu6ڵ Z{=a`<Њ698GDNvfSK/>!w5X$m ?IW8٬onml0*r$w KpJfkmN,(tPDpEɩМmSWEFT"k&COWK.>%vhhߤśnKX]"?Dj`G3tsP'${_K[P#-y_iP͐ǯN47^(ѵRß(o@;Vn1X|h-5 P˨ PDs ,St07dƃ$L! +EIX|d+5_A1LJ;fmRzP$ MmLcGĎmB#{J\1%H:n.s5Bpls@Bۭ.ЖͥIh%=0X&vä ! ]w@)=($8ùY3b=ԣJp"1 kn?U83LPIl1hdfM$XzM޲')%eX=Ұre2IA/޷(9OhJR-v|}gS)d?.he K[;m)D@ȸR 4Rd 9e0ġъGŊ=l:eI7X̊Pt:Ve~c˃6tw6ܼ3e;CD%ڝa,/C'D|"tHӟ |SN9 X,wzK{IgZk| ֪p~y;e/kMu qMN)g.fig9~\wpZHSB<O0>67S_NJ!Ȅޑ)u*"^k]$Yte <*E*wEL+=4-iZYkUϕxW3=GREO#8/v:h} e"_"i$ L|(7uL`Y= Jw؎@=~O?> )%[sf6楄%?ճ=X.sae^WZ1\/{1Qe*@zN*#lcclIY>T.eSҚyyup6(uZDoӿN0omڨm5= bދ"Yo2wu1[wf#2VA~Vw r@6 \ oMQ|t,ALwj~h3W:m]`1ىTr~WD6.7ϼQ"Õ,7ɌK, i`;F{ԅc^4ha{i!h ŧ|Ƌ$ qm g zp~ KM졥BE Ev@o,G%2_au"'m(@z1,r^2}e;i>^ʮ_-1wP v!R|:ʗjQ( O'aTYxébOf-rDrA NeR 6dcU5}Ҭ)E^d,h2c^ȘEzICaq4Ʃ㵶Ԫz3Eɍςmr:fLf i-og16ΧtϞuN7zhn"zM̚mn_6#8^чLQ.3'Yi,SG` @$?1J)* R䥜Tmk=I 25 NTA'ΟŨ/VU"nbb蘛0]H=ٵ8bo@ZDLj*sBZ~K7& _}-4A3}Ϫ$ X!e Zx WQ "sr鎧crXLOxxc=ܬZ7 xB8hBA<~kȪ1̱P^e(Zi/ }sEb!,:b> )Q91 Y 0t^g-\cAJvJgbmwByPV_&jgS_dzFGdaP@ɓys(`|i]2Ƽ쒁2Ӑ[(k--bL%ȣ3Ra- al|0|R$#kI~;Cm$奤` ZTP>Zhf ,&r7:LL|12bQt㌟%y@z_ 8Bx='HOu$Wc+\o(tPC%d}FS=?$hc!Ap.1v2Qr3~ =opNkkp8vY//JԖm{`u2&+e>eM'WxXdy&4AZƝ/a KmK>9O9/,A~:WYjzH29ûzFETp.6X/˯C2h=湷}[n-`GbhE%IXXHw(!rDʩAh k%4żfLH$:2y>R^ܻ% `cNw޿d_HWaQzŒ|ԭ7 /j ֢ f:,wKq'?d w{2ub\A9v_J+,4M!%pJF췕 ݞ(|l@^5ٕ4arMb&W&(j2AלWr~_Lw KOyr1Zfbl-5°k<}A0Q[ LooqwC9 iv$S彏8gnMr#s@iC~D!vbOV $ƸO’< 6_?66Um.53A9ewQdutc/}w/_/.o,>@{Z>񬡀g)# gntڇwr0 uP3Jߴ4w`>"lɣ̊` iҭ 0vH:ԸYuô(ʪ$lּ.n 32'ZnvL#FpmEN-v^5ZW~js1zA/uS8D xʳFvrh7F G܏ 䘷嶪 y^Ua{A7fě)[RE%q8Iq,ӂ1ƹK*/Z)ׅz"y#dar]A\ 1bv[ QCXknѩdTzh]@U  6`Yx6rE^S\!!J%E#_ x NuWW2FgK'w*tt*VjY+IJ [~O R,*3R!}\hI7NϤ0iliRA/Ό\L,I"LBjƚe`䎼>nj/?%j%Pxٻk~ʎH0"G3"mi[xȔIS L)y~]q{VZ(=Fiҩ>kx<;YU|RtQc9 2Ba/$`pNAr*V~(UU†yI.2PZX 㵅Ay^ {+8s8LO.=98n{UyVPB_3{r iR6Wuec{ȹ.Sɤ|5ƙ'SJD֣#*z>xO :Z~I[{Sb?1=.'UxNiџVV#D~PwiC&KChs&Y3 J[E 阷O|7;{QE0Wge ĭJDl$*B~c"pdrXIغiH>%2 1)3i}JL"Cc7{R4 xTxudG!_N:o-8|jh( h|aN캄tV3+ sV6} UHlgn8maŃѮ";kzI? #xF]-r=WH4ӶY{]MHy§$^焎0^2"٫R e˩B_/ &*@T4z͔`0FCqg:脅C6 %N!K;ǰܥݎ4 ?iQs, $L f=)e]QP"KzftxS']mY"nǾ2 fsarllzFCӳ 7dN^fS{b VL#~&zbq?Hׁ+a .4Xǣ CEP%ҙJW4%s`nh_e(ƳL ڽ(0l*lT1Bzaj'K"&%%"c )bSA)MIiS΀cx=фGR3Ix8bj*] [9R&-u"46 _ܪZįdsp w=ۣieg%]w؁C>w@>[1-讀[Mߟ;]X?bLZjߞO/? أ?{Z5R9ÚZ^:mF﫛gUm)~_.ձ5j7x}N IhX~fж,׏O<&9Ƴ| t8H˧C!L(I]~!oA.bV+{Zy; $Z̄r;yjӮ,"R`aE|C^wMPͽ.Dx϶3{=qdeʛ3^'ݰX5ۍަ䝢wr]e_0;*!=^t}1~Pfkگ#~7nc`NnghmNi{}50V O42Se"9B_h5Ҷ ~EɁ\PǣIm CBSj4j9>Jθx #f 4!<ÂƼU=BUNd~81o9z4 R]}\A>PNUzY%[jy/(L@~}x)‹Մe( IV{e\LB(-C'R#7`ϺB:7o +!@SBJ`ݪjhb̝ tCH[6j}PVR8G}leIu!^on%+vBZUkFo5&\ǣe aOXENp(0iИ9M hFA1G\ex^D5Luv<6@8VEqߴo%BGZ=HīqwfDW0!-^t|)kTsQHCami*)݀H1Un0EջoIbPIVǴHyo9S,ۥҽB5nj+~l)g0Y:xȦgpxp -b\M51$ "b8Fީ8 0>v>)ơ?GID_V7y*]]&lk_'B'GGg8헜\+~ھnefNz#e큭[lg~"J^~ts9]@I\{">~c9}?#Nu$.LPU j ۠t7 nd{e`^y[ֳ^~+]bŢ!"zi$\+^ K+1VvD!p2"dB`q薂OxXr}#'*!zӒh?)#jPk48ՏO5G]HWr˼!snFM˝J&MѳMW#x¬˔K$אY3s9f$E캱_b="@l$ ~(fKQ.{mm)> =.AK0wwLE7=>VCu&gFu% _t[l[c4j2iL\2͋2 T| 0l/;0F"$Kn1ivɓ"QHa?haRài2bV4Ɔ@zmy~)Lh9`rhLO2a(]%ȷ^y5>l-Vr Iylbdn5Ue&GhIٛٳ|e"[sC}^Qk߇^;|fOiFՇ㪋<`4Ց^Ji[ܩ-D_V!wٓ@ֵB{##gGm!B>xqe_|߁JJ'K),DxK%Ea|9KŒ@ۭ[NЁh<.eBi^A,0pKJLk<Å:.T2Z*׋NIv;LgۂY7?Ԍ6Ol:ol!%5e#\csYDcS& f,5_O;*/_|JFLRk |(#ti=TéC8NO}dqZS^Qnl )G m|ڭn4FM_ oK\2 QKH~p/I+Ub-,~(A2?aOHںj7&U#F K |+^*Y9Yߕ0+1xUyu^ i8RQFWܬ̐@) $z4Mݓvg-FR=~;^m ar8x\&^H~Ϯ!~ݩs `dDSv*\bsCX.ɖ[|-s%-Å"xͽQKDm}-0Ӥt0W@bmR{ţW\X]BMic+VD.]kfqed7 b-9biНYgރ /~?cF `f5өTjX?*-G~`khoMFI!%^7 Rcf՘ӷ:y'ts\IȖͲ- [H#[wߤT ]j'uiw!s;*ysS+pr74G'6pG>4P?r/m7A~B`F53&`5ёQRB=;2|s'Wb'}>u rgbwC%d?诿]]Pf=UdDeOi>DF'3Z5]0Ƶ9ڄʊFĚb5i`.UӻX:rQ-5ǫ eC }vܱRb<%ܽv)v8xk /`eG9S,_n74TAaNzKMJUX%ִy[=#$&*(DK.0 QN !'ka#fO/5t3׎Y"܋gch>ao"ᘏXZ`jL&9U_ ˤE@!os1þ0_;$ܒ0:D?6>>WV[I@ķ^DEOA$:kaEgĄHU14%r8@|r I:xtj<+\Qk)+L\jOJ5K1*kT%Ocv ce .J|k ixHMa|c.KJ]R/ #f Ŷd~b&VCJ`G9ݑf~v\}8*tK7zl9TZ 5>o9iCA3Dб˳կ>۷>+ϳB`׺KW<- K]m<K5NJlT Ho}yuv܉ï K1L['-jz,`UsJu)z3-dl;̸:'"‰!/ު C8%y~V H=#͇Gt@ã+jrbi:`Cšފ7' Ⱥ-{܂VcZ(C"|c1j<5S/MCh}v65a wHJp(. U}0n,L Cf]Y' W:]p^dr2X}~_C8b8BILv "W@ʝ`lFM 1,ߍxA2/v:xuOOLw:f'(JNE24C۲ ɭ9dg|A41 g)lLKs# >up:R)HtU+2uVK@$sDr)d!@_tc)lk(cK"u@ǍTG{ Lc^16D$I=uw .~99a';G!DFv铝rOv蜄˶E6f) !ŞdaeBɰ.(+y=%^ɐ$3# l3޹I@pC+.LoNא2F6l*nEF \5yʎcdYl`\|.7GF.)s`6i4"?B@MP=żkh%^ծϥ rCw3j =2O'.gX* "G&WoׯIҩۈO3\ߺw&wf15b%쀘'k'P0*āW_Chҭ z$=mTsrb[fOBY7nJVd?YwR*[@=' t^\ ~?xZD:hQŷ/&5Q0-9+nk-R=j-?jgF05`lwXKe^g/F}8"zw[[C^C 9#q9[ D nfkʀ"a}t9= C빁YfD>D!(ehHn-H*f h9KHz*4Ol9k%DGW-m(RXd5\EdNܳ/ *)Ϻ\ \X5h82Q> I/:a4udio{Q(|$A^ݷPVzZG'nMbM8.a I"Ef|)4[s& uݷ LȏCݱWk;'VbPLZ I1/%ŷk _7[! $"Iau/."e;a BD.{?G1]-ʦ D" ^&^`h82cd(Ua3Xm O} '{n~AZW }\d׿ >0%9+,SЊxH v%ab^'<Ɩ?_ maTv,N *XF0ў3msSu])LBrfeF8#=]]~+de "8D6oz2ۀ' 8Iښ̛Ak,~4"X1ET2$#X20-F]@ }/ fF 'Qme{cp{u^ˊ1زb:{Ӻx/9RLUUlo~8tAu),@=> B> l|KMy _`z;G@/}J{}/+iNʤbsߥ_d*ٶ*Ip{^那q{WE34,L50Ysl0, 樲ˊx],u /)+*vk$cI9L5!WRP)7uzNbyb(Z#Ħf 1Nތ8JsPШKAwj튰ޅ̯>e2uI"r;>KNooa-' P\2=ɾ% ܼ3_ Es:C^f?:"U6#IcT,k \3Eۯ Ɍ#<4MZp']ψ20R6íZlj02 )Ϊ`@e'S5(ªhfgyoq/T:b% <KC:h AHͨ渙2Àb5lyu ZW< > bvmSS|u YJmA! ^Z2fK`K([_1s87yf=)<6g64^O ?&Yx}/(/f ą+vQdFu=;5b ^m&Wfpa3"i;ZyƦW?ix5 .S&K{-,b5g=({HUtBzS^Q?]6S`o8j[ am"sa6crR `BAˡ~ˊP0 `iQ/Oyݞ"3}F5)YgQrY=6,ӱЊ"l1G4tJ6eZr5jBj4: F"M"I2B{W 8APkUmH`N1.)g!NjG32.v{ {93F>M"?cr'C2 W,kYԺ͚5C}&(neuV?1'LХhcyPM>MJJ&-k!= ̢Hw5/"Q(d}$WYeWpzP,Tơ3dȧ#S)96 /-D[ X\^6|OpLlסlp4ћ9GRw( Ts:3l`\j{k"ER4}*TQMM@8EiOT0Zl 2Y@@iϧepVT2:1FLo_1{o6ALE.2sv R֡%a e@v·wB0p0 (ڂ:X-\)[H UIוF?).3u\5đ9s5 fM%c-X֣wlw&s"2ĝqٯy:~Om|ËҎ_IG_d(T~"uyQϑ+9Gbd|)&)uuT־&tO"kg$!KSr.;{O6woK<@o)IЁ)S7%ٟ8N\Yy ;nE_|sۂÆ&.w/CYQ.:5{" Ek6ȉYFz.p죖,ZxabRj9!mF1[{Эs,  opjgmg+*gV띤 Ιʋ\IEd'Uf ӖfkU2xUAƇ=Odv_ʸ>/ꃍ*iLO;4b:F.Y/>ZGJkd*AcKvyuBB3/}|:Fx %hTx0jăs+`})uQU.LĄ{XM# unqQJ īY lBv7! LtfJfTLG^zB;*Gb n=DEءj")7Q#IsUPG6RC*)̿o Rwt2vMf>{Iϖ"/+CBL%&cfwu&>wVu2YmF㛫P/;J/:> *A0J/k!V0`AzKɑlZZӂt +~U̘փJ#ŸA8nԃ%`zK\XxEJ4GBnRpCQPzrW{ I=Kil;dW C=8 T ,RmU uxaeJ >WkNo gWd*ߙbm;sgT ~s'||$$?f"iHԾLޮT߭;9?W8!# ɮ50bo&tJyF?iUV?U9yYgs@&feSrۋ!/Mm UgnC:tCkj.V^nju+Oyq<4 Y 1i;/#EfE"TN$XDSfO=P49P{*?nhYvPPV[`i;jW}SZ_] "MFU^ H-/&{';,7Q٣i]#epZxfr /Q YrB"WQB\sVPs zL%2z/z6k*֪d͗>}3oIj,ӫ6C2r֘9#N' Ԩ(=c#*Jg4ȳ-<05BvELڎx.Nʭa庡k :O`A,—~}<F=" >Z6<l)ke`#[HsݞX]=V&o$ Evhq$?0=~g`nn^aT2GA[pN(P[ٮA {0hi݉RЖhT M7N9w8~,}׾P2@w1CW15cXUSi1Kws>&U\d  /DD;|Y׿<'#MnQ j l/aCAC?Y1|מ>a&oӎ e.^ٿC)&-Y3v0n1҅r1i:@]2Pf"17!f @b }kG&"GuU9Q(Ϊ;0 |P /F|_k ݬ F=e]{4GZѨ#pH?N VH JOPrb5[pN'ҁ:M(4EL-cevLwh(T {L/~? G|f<:9Ub)~TCou\qr+j7(7}ꙕ5Wvn: (Q[i Y|: /S`IDd$Yb[BⷱIS!=m]GlЮ1!;|F*6FAg#DAe*ȊX8DT%,l?I;0ŸgT.4HLT+%"1}aǡ$"<COl_zXN&  3moy4}n ȧO4,wӑ=g@ʡE_WF72GJO/#S%IEa' -5SLOhc$@p&[f_P[UZ1p{ ZY~C`aJJig;"8 kRuQ:n@#"lxM;O0kt7FaeiQ&zWU0hH3.Cywں,XH8.US60yA]w>!%Y='u|&?` WAW~"*b"[҈Hc! /Ǥ;51:+>z^ 'Z4 ~?X}.0Y9y˺1cEL|6i1Vcڢ0?AVfF:jEE9ާLQHSpv'2;Nd*(oJ&*I ]&QV ֩tq*)/!sirYIutȚg_ع`#ݻUHw?vCQ#mc۳,@0 JVֻY^J+>QO&J FN,$ڰs)]K;߼LC?A]"C˪Ch.?D@Col6GgqQ=j@#lP }E>l+b“Y AgѦMi?/+*C'e[FO"#hxӦ3O&8{]BsNE_#Wzp>TS*4)!eRe:(b߷%:<^Hm /Ke2XeXAr^f)ᤇ|/JH覆]0A=ɬZA|dnΟÂ"_(13CY'ɏngz~+*s 1ZUp)uOOLkRkPЩl@-.y:RNW$>i_D~5?[I@ZP'UR{\27yx0QY02,vo{fm *ʄNX:s~rs_Ae`BRPHQg˭%ۑ8\Di( 'LNKGm,; IzÆx YZ