mod_proxy_html-1:2.4.37-54.module_el8.8.0+1256+e1598b50 >  A c^U]+ NgepPo}R`RIY|:*Eq>ep kE'#?TU??LU_`Ɗt&(Hf`i~WNuHJu5/Wn,-OP@hӀAhG5(I )ik͌jD fb`L…EA'*gs+q[ kQh "%f<-Ȩ27όt4S Ȯ:A:6WM,eN>LF(P| G l*!a61aS<0Lx_ @ ![!HUBl2•!rAѷ DßA6)p6AbW89#'˾aHN]d)xT (m#Z}L"84Qπ)WpGgvkYCIsc9CH-Q(X-kq_C6p6 ovbRqQ 54b1cf9e1ac23770f4b08a014cd944f3bcce8efc6352f8e01e878c7205247c6895ba1970cb7359955935ae535734f421f33aa18c2훉c^U]_\bHU ќSܛW m gS2r1J/'46O?_Ƈ{Ɇԓ`|A}E[H^؁W4zP# V9SH?l:?5U6aDV@(.U`" cı &"@YҺkVœ+AiXmo92e‰X2@$F'yh>`jQӓ+:Z_diWcg/;% @+>c=WqM+ڠ3&Uͩ9F!]ϟjW:KB+5йX4Oۖdll .7NZp+w-! KRcO-7r(8wTE3&5>/u[PRL"*n%a0T&`e\;gȘ2'c2~'m!edum6"Jv~c\^3c L>pA?od8 < t  <Wqw     2P((g8p9 4:4bBGHIXYZ[\]^7bdefltu0vHwxxyDHCmod_proxy_html2.4.3754.module_el8.8.0+1256+e1598b50HTML and XML content filters for the Apache HTTP ServerThe mod_proxy_html and mod_xml2enc modules provide filters which can transform and modify HTML and XML content.cَx86-02.mbox.centos.orgCentOSCentOSASL 2.0CentOS Buildsys System Environment/Daemonshttps://httpd.apache.org/linuxx86_6425_0Acَ;cَcَcَcَcَa2211995b7e55b781f68666664f0bcd84550ed9a16edee07121f63477dfaaffa9b1d532d34f67a5ecaf794df963c5370fe2005ef05352d5654cd690ac47ed91ae1819e8530a9cf93dbd6a99c73dac74c2a7cc33ba5f467d974fc1fedc361b9b6../../../../usr/lib64/httpd/modules/mod_xml2enc.so../../../../usr/lib64/httpd/modules/mod_proxy_html.sorootrootrootrootrootrootrootrootrootrootrootroothttpd-2.4.37-54.module_el8.8.0+1256+e1598b50.src.rpmconfig(mod_proxy_html)mod_proxy_htmlmod_proxy_html(x86-64)@@@@@@@@@@    @config(mod_proxy_html)httpdhttpd-mmnlibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpthread.so.0()(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.2)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)1:2.4.37-54.module_el8.8.0+1256+e1598b500:2.4.37-54.module_el8.8.0+1256+e1598b5020120211x86643.0.4-14.6.0-14.0-15.2-14.14.3cck@c(Ybޅbb2@b8haNaaaawaU`:@`f@`@`@_м@__@_:_^b^(@^@^]]@]߶]҇]@]g@]-@]]@\7\Z@\Yz\T4\\U@[@[[[@[H[u[[[ā@[ā@[ā@[@[@["@[YZ@Z@Z@Yp@Y{Y@Y@YéYéYéYéYX@YYYYx@Ym@YlYf@Ycl@YV=@YGY5GY@YXۡXP@X @X@XwoX[@X[@XEVX)@X@WW~D@W~D@W~D@WKW@VVVVn@VhV.VCV@UK@U@Ua@UF@UQUQTp@T=@T@T @TT_Tk@Tk@S0S@SGS@SS/SS@SSS"@SS5d@S4S&Sz@Sz@S(S@R@RRG@R@R@RsRrF@Ri Re@RVQ@QQޞ@QQo@Q@QQV@Q@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Luboš Uhliarik - 2.4.37-54Luboš Uhliarik - 2.4.37-53Tomas Korbar - 2.4.37-52Luboš Uhliarik - 2.4.37-51Luboš Uhliarik - 2.4.37-50Luboš Uhliarik - 2.4.37-49Luboš Uhliarik - 2.4.37-48Luboš Uhliarik - 2.4.37-47Luboš Uhliarik - 2.4.37-46Luboš Uhliarik - 2.4.37-45Luboš Uhliarik - 2.4.37-44Luboš Uhliarik - 2.4.37-43Luboš Uhliarik - 2.4.37-42Luboš Uhliarik - 2.4.37-41Lubos Uhliarik - 2.4.37-40Artem Egorenkov - 2.4.37-39Lubos Uhliarik - 2.4.37-38Lubos Uhliarik - 2.4.37-37Lubos Uhliarik - 2.4.37-36Lubos Uhliarik - 2.4.37-35Lubos Uhliarik - 2.4.37-33Lubos Uhliarik - 2.4.37-31Joe Orton - 2.4.37-30Lubos Uhliarik - 2.4.37-29Lubos Uhliarik - 2.4.37-28Lubos Uhliarik - 2.4.37-27Lubos Uhliarik - 2.4.37-21Lubos Uhliarik - 2.4.37-20Joe Orton - 2.4.37-19Lubos Uhliarik - 2.4.37-18Lubos Uhliarik - 2.4.37-17Lubos Uhliarik - 2.4.37-16Lubos Uhliarik - 2.4.37-15Lubos Uhliarik - 2.4.37-14Lubos Uhliarik - 2.4.37-13Lubos Uhliarik - 2.4.37-11Lubos Uhliarik - 2.4.37-10Lubos Uhliarik - 2.4.37-9Joe Orton - 2.4.37-8Joe Orton - 2.4.37-7Joe Orton - 2.4.37-6Luboš Uhliarik - 2.4.37-5Luboš Uhliarik - 2.4.37-4Luboš Uhliarik - 2.4.37-3Joe Orton - 2.4.37-2Lubos Uhliarik - 2.4.37-1Luboš Uhliarik - 2.4.35-10Lubos Uhliarik - 2.4.35-9Joe Orton - 2.4.35-7Joe Orton - 2.4.35-5Lubos Uhliarik - 2.4.35-4Lubos Uhliarik - 2.4.35-3Lubos Uhliarik - 2.4.35-2Lubos Uhliarik - 2.4.35-1Lubos Uhliarik - 2.4.33-4Joe Orton - 2.4.33-3Luboš Uhliarik - 2.4.33-2Joe Orton - 2.4.28-8Luboš Uhliarik - 2.4.28-2Luboš Uhliarik - 2.4.28-1Joe Orton - 2.4.27-14Joe Orton - 2.4.27-13Joe Orton - 2.4.27-12Stephen Gallagher - 2.4.27-11Jeroen van Meeuwen - 2.4.27-10Joe Orton - 2.4.27-9Jeroen van Meeuwen - 2.4.27-8Stephen Gallagher - 2.4.27-8.1Joe Orton - 2.4.27-8.1Joe Orton - 2.4.27-7Fedora Release Engineering - 2.4.27-6Fedora Release Engineering - 2.4.27-5Joe Orton - 2.4.27-4Joe Orton - 2.4.27-3Luboš Uhliarik - 2.4.27-2Luboš Uhliarik - 2.4.27-1Joe Orton - 2.4.26-2Luboš Uhliarik - 2.4.26-1Joe Orton - 2.4.25-10Joe Orton - 2.4.25-9Joe Orton - 2.4.25-8Luboš Uhliarik - 2.4.25-7Luboš Uhliarik - 2.4.25-6Joe Orton - 2.4.25-5Fedora Release Engineering - 2.4.25-4Joe Orton - 2.4.25-3Luboš Uhliarik - 2.4.25-2Luboš Uhliarik - 2.4.25-1Luboš Uhliarik - 2.4.23-7Joe Orton - 2.4.23-6Joe Orton - 2.4.23-5Joe Orton - 2.4.23-4Joe Orton - 2.4.23-3Joe Orton - 2.4.23-2Joe Orton - 2.4.23-1Joe Orton - 2.4.18-6Joe Orton - 2.4.18-5Joe Orton - 2.4.18-4Joe Orton - 2.4.18-3Fedora Release Engineering - 2.4.18-2Jan Kaluza - 2.4.18-1Joe Orton - 2.4.17-4Jan Kaluza - 2.4.17-3Jan Kaluza - 2.4.17-2Joe Orton - 2.4.17-1Jan Kaluza - 2.4.12-4Joe Orton - 2.4.12-3Fedora Release Engineering - 2.4.12-2Jan Kaluza - 2.4.12-1Jan Kaluza - 2.4.10-17Jan Kaluza - 2.4.10-16Jan Kaluza - 2.4.10-15Joe Orton - 2.4.10-14Jan Kaluza - 2.4.10-13Jan Kaluza - 2.4.10-12Jan Kaluza - 2.4.10-11Jan Kaluza - 2.4.10-10Joe Orton - 2.4.10-9Joe Orton - 2.4.10-8Jan Kaluza - 2.4.10-7Joe Orton - 2.4.10-6Fedora Release Engineering - 2.4.10-5Jan Kaluza - 2.4.10-4Jan Kaluza - 2.4.10-3Joe Orton - 2.4.10-2Joe Orton - 2.4.10-1Jan Kaluza - 2.4.9-8Jan Kaluza - 2.4.9-7Jan Kaluza - 2.4.9-6Joe Orton - 2.4.9-5Fedora Release Engineering - 2.4.9-4Jan Kaluza - 2.4.9-3Jan Kaluza - 2.4.9-2Jan Kaluza - 2.4.9-1Joe Orton - 2.4.7-6Stephen Gallagher 2.4.7-5Jan Kaluza - 2.4.7-4Jan Kaluza - 2.4.7-3Joe Orton - 2.4.7-2Joe Orton - 2.4.7-1Joe Orton - 2.4.6-10Joe Orton - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Joe Orton - 2.4.6-6Jan kaluza - 2.4.6-5Joe Orton - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-7Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Resolves: #2095650 - Dependency from mod_http2 on httpd broken- Resolves: #2050888 - httpd with SSL fails to start unless hostname command was installed- Add the SNI support in mod_proxy_wstunnel module for Apache httpd - Resolves: rhbz#2017543- Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via ap_rwrite() - Resolves: #2097031 - CVE-2022-28615 httpd:2.4/httpd: out-of-bounds read in ap_strcmp_match() - Resolves: #2097458 - CVE-2022-30522 httpd:2.4/httpd: mod_sed: DoS vulnerability - Resolves: #2097480 - CVE-2022-30556 httpd:2.4/httpd: mod_lua: Information disclosure with websockets - Resolves: #2098247 - CVE-2022-31813 httpd:2.4/httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism - Resolves: #2097451 - CVE-2022-29404 httpd:2.4/httpd: mod_lua: DoS in r:parsebody - Resolves: #2096997 - CVE-2022-26377 httpd:2.4/httpd: mod_proxy_ajp: Possible request smuggling- Resolves: #2065237 - CVE-2022-22719 httpd:2.4/httpd: mod_lua: Use of uninitialized value of in r:parsebody - Resolves: #2065267 - CVE-2022-22721 httpd:2.4/httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody - Resolves: #2065324 - CVE-2022-23943 httpd:2.4/httpd: mod_sed: Read/write beyond bounds- Resolves: #2090848 - CVE-2020-13950 httpd:2.4/httpd: mod_proxy NULL pointer dereference- Resolves: #2065249 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference or SSRF in forward proxy configurations- Resolves: #2035063 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2007199 - CVE-2021-36160 httpd:2.4/httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path - Resolves: #1972491 - CVE-2021-33193 httpd:2.4/mod_http2: Request splitting via HTTP/2 method injection and mod_proxy- Resolves: #1968278 - CVE-2020-35452 httpd:2.4/httpd: Single zero byte stack overflow in mod_auth_digest - Resolves: #2001046 - Apache httpd OOME with mod_dav in RHEL 8 - Resolves: #2005128 (CVE-2021-34798) - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #1984828 - mod_proxy_hcheck piles up health checks leading to high memory consumption - Resolves: #2005119 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input- Related: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via a crafted request uri-path- Resolves: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via a crafted request uri-path - Resolves: #1969229 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in mod_session- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records - Resolves: #1905613 - mod_ssl does not like valid certificate chain - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for usertrack - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer dereference in parser - Resolves: #1934741 - Apache trademark update - new logo- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML - Resolves: #1937334 - SSLProtocol with based virtual hosts- prevent htcacheclean from while break when first file processed- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile to be able to handle certs without matching private key- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd mod_proxy_wstunnel - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()- Resolves: #1651376 - centralizing default index.html for httpd- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool concurrency issues - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1680118 - unorderly connection close when client attempts renegotiation- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does not respect expiry time - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer overflow - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package - Resolves: #1869576 - httpd : mod_proxy should allow to specify Proxy-Authorization in ProxyRemote directive - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in a balancer- Resolves: #1209162 - support logging to journald from CustomLog- Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Related: #1771847 - BalancerMember ping parameter for mod_proxy_http doesn't work- Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations vulnerable to open redirect - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential open redirect - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site scripting in mod_proxy error page - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference in mod_remoteip - Resolves: #1771847 - BalancerMember ping parameter for mod_proxy_http doesn't work - Resolves: #1794728 - Backport of SessionExpiryUpdateInterval directive- Resolves: #1775158 - POST request with TLS 1.3 PHA client auth fails: Re-negotiation handshake failed: Client certificate missing- Resolves: #1704317 - Add support for SSLKEYLOGFILE- mod_cgid: enable fd passing (#1633224)- Resolves: #1744121 - Unexpected OCSP in proxy SSL connection - Resolves: #1725031 - htpasswd: support SHA-x passwords for FIPS compatibility - Resolves: #1633224 - mod_cgid logging issues- remove bundled mod_md module - Related: #1747898 - add mod_md package- Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount of data request leads to denial of service - Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length headers leads to denial of service - Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for large response leads to denial of service- Resolves: #1730721 - absolute path used for default state and runtime dir by default- Resolves: #1724549 - httpd response contains garbage in Content-Type header- Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization inconsistency - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd causes systemctl to hang - Resolves: #1673022 - httpd can not be started with mod_md enabled- Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control bypass when using per-location client certification authentication- Resolves: #1672977 - state-dir corruption on reload- Resolves: #1670716 - Coredump when starting in FIPS mode- add security fix for CVE-2019-0190 (#1671282)- add DefaultStateDir/ap_state_dir_relative() (#1653009) - mod_dav_fs: use state dir for default DAVLockDB - mod_md: use state dir for default MDStoreDir- add httpd.conf(5) (#1611361)- Resolves: #1652966 - Missing RELEASE in http header- Resolves: #1641951 - No Documentation= line in htcacheclean.service files- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden- mod_ssl: fix off-by-one causing crashes in CGI children (#1649428)- Resolves: #1644625 - httpd rebase to 2.4.37- Related: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen- mod_ssl: allow sending multiple CA names which differ only in case- mod_ssl: drop SSLRandomSeed from default config (#1638730) - mod_ssl: follow OpenSSL protocol defaults if SSLProtocol is not configured (Rob Crittenden, #1638738)- mod_ssl: don't require SSLCryptoDevice to be set for PKCS#11 cert- Resolves: #1635681 - sync with Fedora 28/29 httpd - comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default configuration; now follow OpenSSL system default (#1468322) - dropped NPN support - mod_md: change hard-coded default MdStoreDir to state/md (#1563846) - don't block on service try-restart in posttrans scriptlet - build and load mod_brotli - mod_systemd: show bound ports in status and log to journal at startup - updated httpd.service.xml man page - tweak wording in privkey passphrase prompt - drop sslmultiproxy patch - apachectl: don't read /etc/sysconfig/httpd - drop irrelevant Obsoletes for devel subpackage - move instantiated httpd@.service to main httpd package- Resolves: #1602548 - various covscan fixes- apache httpd can work with TLS 1.3 (#1617997) - drop SSLv3 support patch- new version 2.4.35 (#1632754)- mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All" configuration (#1622630)- mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki, #1527084)- new version 2.4.33 - add mod_md subpackage; load mod_proxy_uwsgi by default- remove %ghosted /etc/sysconfig/httpd (#1572676)- Resolves: #1512563 - httpd: update welcome page branding - Resolves: #1511123 - RFE: httpd use event MPM by default - Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen- new version 2.4.28- add notes on enabling httpd_graceful_shutdown boolean for prefork- drop Requires(post) for mod_ssl- better error handling in httpd-ssl-gencerts (#1494556)- Require sscg 2.2.0 for creating service and CA certificates together- Address CVE-2017-9798 by applying patch from upstream (#1490344)- use sscg defaults; append CA cert to generated cert - document httpd-init.service in httpd-init.service(8)- Address CVE-2017-9798 by applying patch from upstream (#1490344)- Generate SSL certificates on service start, not %posttrans- move httpd.service.d, httpd.socket.d dirs to -filesystem- add new content-length filter (upstream PR 61222)- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- update mod_systemd (r1802251)- switch to event by default for Fedora 27 and later (#1471708)- Resolves: #1469959 - httpd update cleaned out /etc/sysconfig- new version 2.4.27- mod_proxy_fcgi: fix further regressions (PR 61202)- new version 2.4.26- move unit man pages to section 8, add as Documentation= in units- add httpd.service(5) and httpd.socket(5) man pages- require mod_http2, now packaged separately- Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Resolves: #1434916 - httpd.service: Failed with result timeout- link only httpd, not support/* against -lselinux -lsystemd- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- mod_watchdog: restrict thread lifetime (#1410883)- Resolves: #1358875 - require nghttp2 >= 1.5.0- new version 2.4.25- Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of LimitRequestFields directive in mod_http2- fix build with OpenSSL 1.1 (#1392900) - fix typos in ssl.conf (josef randinger, #1379407)- no longer package /etc/sysconfig/httpd - synch ssl.conf with upstream- add security fix for CVE-2016-5387- load mod_watchdog by default (#1353582)- restore build of mod_proxy_fdpass (#1325883) - improve check tests to catch configured-but-not-built modules- update to 2.4.23 (#1325883, #1353203) - load mod_proxy_hcheck - recommend use of "systemctl edit" in httpd.service- have "apachectl graceful" start httpd if not running, per man page- use redirects for lang-specific /manual/ URLs- fix welcome page HTML validity (Ville Skyttä)- remove httpd pre script (duplicate of httpd-filesystem's) - in httpd-filesystem pre script, create group/user iff non-existent- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- update to new version 2.4.18- re-enable mod_asis due to popular demand (#1284315)- fix crash when using -X argument (#1272234)- rebase socket activation patch to 2.4.17- update to 2.4.17 (#1271224) - build, load mod_http2 - don't build mod_asis, mod_file_cache - load mod_cache_socache, mod_proxy_wstunnel by default - check every built mod_* is configured - synch ssl.conf with upstream; disable SSLv3 by default- update to 2.4.16- mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- update to 2.4.12- fix compilation with lua-5.3- remove filter for auto-provides of httpd modules, it is not needed since F20- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581) - mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583) - mod_lua: fix handling of the Require line when a LuaAuthzProvider is used in multiple Require directives with different arguments (CVE-2014-8109)- require apr-util 1.5.x- use NoDelay and DeferAcceptSec in httpd.socket- increase suexec minimum acceptable uid/gid to 1000 (#1136391)- fix hostname requirement and conflict with openssl-libs- use KillMode=mixed in httpd.service (#1135122)- set vstring based on /etc/os-release (Pat Riehecky, #1114539)- pull in httpd-filesystem as Requires(pre) (#1128328) - fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348) - require hostname for mod_ssl post script (#1135118)- mod_systemd: updated to the latest version - use -lsystemd instead of -lsystemd-daemon (#1125084) - fix possible crash in SIGINT handling (#958934)- mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119) - switch default ssl.conf to use PROFILE=SYSTEM (#1109119)- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- add /usr/bin/useradd dependency to -filesystem requires- fix creating apache user in pre script (#1128328)- enable mod_request by default for mod_auth_form - move disabled-by-default modules from 00-base.conf to 00-optional.conf- update to 2.4.10 - expand variables in docdir example configs- add support for systemd socket activation (#1111648)- remove conf.modules.d from httpd-filesystem subpackage (#1081453)- add httpd-filesystem subpackage (#1081453)- mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119)- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- add support for SetHandler + proxy (#1078970)- move macros from /etc/rpm to macros.d (#1074277) - remove unused patches- update to 2.4.9- use 2048-bit RSA key with SHA-256 signature in dummy certificate- Create drop directory for systemd snippets- remove provides of old MMN, because it contained double-dash (#1068851)- fix graceful restart using legacy actions- conflict with pre-1.5.0 APR - fix sslsninotreq patch- update to 2.4.7 (#1034071)- switch to requiring system-logos-httpd (#1031288)- change mmnisa to drop "-" altogether- drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide for transition- systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg- mod_ssl: allow SSLEngine to override Listen-based default (r1537535)- systemd: send SIGWINCH signal without httpd -k in ExecStop- load mod_macro by default (#998452) - add README to conf.modules.d - mod_proxy_http: add possible fix for threading issues (r1534321) - core: add fix for truncated output with CGI scripts (r1530793)- require fedora-logos-httpd (#1009162)- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- ignore /etc/sysconfig/httpd and document systemd way of setting env variables in this file- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)mod_proxy_html1:2.4.37-54.module_el8.8.0+1256+e1598b501:2.4.37-54.module_el8.8.0+1256+e1598b501:2.4.37-54.module_el8.8.0+1256+e1598b501:2.4.1-200-proxyhtml.conf.build-id7a8a756c9085b18e3060ba9000d7b855029c2b81d305500047903d8fc91c671ff9f94e85dfa1mod_proxy_html.somod_xml2enc.so/etc/httpd/conf.modules.d//usr/lib//usr/lib/.build-id/2a//usr/lib/.build-id/cc//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpioxz2x86_64-redhat-linux-gnuASCII textdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cc81d305500047903d8fc91c671ff9f94e85dfa1, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2a7a8a756c9085b18e3060ba9000d7b855029c2b, stripped R R R RRRRR RRRR RRRRR RRRutf-87e8115293d0e823704c4611fd983441e4151e589e89da75d9a3ccb8d85abb46ehttpd:2.4:8080020230131213244:fd72936b?7zXZ !#,KW] b2u Q{LUw~θ0C;$sOχua^؍<^@4|Pl۾V&ecol%1 yBoa /5I)|)yOnMrVc[yj_k4syx0𚃽bOU'G"e3FnZI nMeJ*yTBVS?Y6Ti{EG햳 g-/c ˓}%LC?5NZTe]BZh]OwA(`tf5yC7: ӉHC# :ɀw b+ȅOaGdUd_!HȁUN_WIWݩA|5`:En<rCet]SN ˂g/ULAh~R'XRYa7׉ Pp/NVqM}>9J/:@>$$#g]H\4Hwjiov;w0~Ű-sROf[={ȷG5)%TJ:V*y0}F 6ꈴ h'[r:{iTp1Q%(fF6<_oPr`Dדs*+lƜXqW?9}CT۶] ~b)y_ɫnT&\ Tj< lFa=䣀>e$Fg]̵pI4*5Zr_:.yFxŠO@TJk/HF-ep9rn_"ɌYܑ}_٧G۬ wF9^$AsVv[:PJuΛYOeB@mtX `;[6NIk֔ )7O=)Y7S8Oc<+L*cP=f+ȁ5r#s2-{oNOMߡ#@]l>I &+e zJJx3|6=Z`dL!Pul8'4ɳ'b|k<Q&HKiI S!ꅼ !@“@ؔAT*t.ٙ' J>Y;Jyyy1 `jOɨssf=[~bKB#oP;xGQ&0V^֜@Z"Mc,ҋ Ki?[.Kq߈JKf?alaYt:VVmtI؀xfi;Mt y3hc `P#]%r9W[55~]Q. ?\UەTL:JHB{8`f)ӑ J^6 ,"ݥ2qPfBGg`{DY"^g!q&yX Er H=(v^ZU}fyĘ\ 7 p>QaNd~<,@}d<6-y9 D v-~DOTj|y?(5~%DDrG Oi79A<|V3D)CU X-M8]3k'+tw"U "ś)LO6q@,4tXۧGQk)J 61I1hP+Z/38_沥9?[$N)̼ӻ.q@("xAH·]F=NЀJ\?]-h/H!{%]mփ8MK}4 _w6/iF봨;*']mLHQL&.bE4@Oڦ^{|4bbwҁ7g+16u48n~D$/u`yxj!\Q} 9 e$ 漊`:B M3Y,)Qmu-7O[).#W>\Go`඙ 7WKGHVށ>kuV?yYfvqym(to%'7zA祫1e'kb[k"boIKmC€Tb+=BGZ e(p,|ĶG++!քAlAtaܳ0x{Ǩ O7LMr} !Ҡ^Ac8bae.s"7$M*}~myimfCIH/Pp+Ghw7 1i{M9l&82w厧 o1 Qr ?M֚z¹ߪ\S{sW]60]A}c"tͨR쪺- l{Y¦\F#I~wIo.)Yow]j<:^FzKgOpK| w-mZl'a,n|Z45 ]R!mhciyoXf;eo2_n|0(IíCX;΁{π}[do,˄|LܰA/jFllE1b-JCnRpY,wgKv=90xh$Z J.$jIikG.u'z9CF6 g:Յ֘oyf Q?3tE3no.LҠfv@,!f+ӦAGЌ~q EQ0C 9.hl42ZouF9ڑzHu %q/4BX&gGÝ!&;0mxOށOtsq!r[9i %s?$/D.RtBvo՟GvQy@o&H`Hyo ^ ٍkR@\dȑ1bQW)^QzoѾ3_r9!"W@38gqܞa2g尫B+'be 0UwV7&Nzxr;ЩcM-r`= ]ʋZmnQi)MF(hk[R+m%#cg}cF=sHe;:3.EcX!5Cqb (w}v / ד)*+HWh7샂$1?FC;UZ2>·=k frJ@nJyJ;ZՓf&/Y滂7qH_~B%- J»/y>w pl-~눎4:.Ɖ1ld:^AsH7#"hiQlQ\ J YN[Ȳ@i~&v܁ m $O`[>e|^҈4jyu'~΀LD@ZUF Η;~KI]AkaK?˂ U&-CIp''YK[Yx3-xH-_|S`Q2v2IE{-͂06ZaD ?qwNe縴/4:Ovacg!8d_%Sb3KK1K06#C.گA}V]:c4 #Iu7os>v4j'[^&"OMj1<0&rݒ>!ң+;8, dSL0n|V>{s:ƒՙA,6jSyKvMxC S]{&A]TxG^zG8A]g4'&JO:F^ט`cFcN!<?4vEDb+DU z44.[Rx ךg<ŵ'D$WmsL%e_תݠB+[X֓GI}&"ҿ~j7m?.M[(c;,ᷞ3dRdՄO/")~ }z2LO$Iy/.ڧ/YM 46-jhu2_Hy3T[V!lJY3aGl?@%@j7'\h"q"o{`~*X ,#JP]$,;|Aҧ4Noms7رgMk@Cv#&4boPQIy&cj-߹Z3--D3`/qИBŖt$CW9wZĩN◳$c8^e-q `(jv~L RYqLI׈,:cK:0ؼ%R`$%Ugcfk")CX%c.߾ah%P -ET :IKn(r$T(:*ln4хo 1NGR|.0 UYs_.=)R^ѭ :hUNaoJa*xGްAK~$tN֡yYJb[ΑDj}&`ki(M&Q;.Idl"v_'Uc"zLA7L"Fq(oR?MsLKXU-x [xx&;)&0j/ɊD뢸t=<ydH4#E4t ( aE+kLƇb#r9`bA9!! mIʺ=u7U_pbgs䭉Beƥߚe.f%2PU57[dL}-ڠWORX^ pg7tkx+R?FH6 gN0*@Fg Ӧ|_{E+wTRRnٌC[a\j1YUIW7PSi,kE^DTB"V*Kȧ>aM/% / تk]he7,]D/,^!h|5g<|%nf~yT; 7 h0n%H=47ӱwd˯3'lxcM4 mUuC>&~1HU?悘2I$mVԎk(nQJrB`·3)=0=/.mvܰXgTY@aAU,>GFĺ-68tIUK&μosm5q(j\IYj 4۲]+C5_vʹ+Cal,Ed-P)\bN| < M! f7Fm: MM{lrZ-΂gejX$ $6|5Y[~*YH= 9Y-Y5F-UR U6⮧^u- V^,5wwIj։| 0= LjŃ81'OU.t<5<`ȱ=8)9m>nJ `ǬoFFZNY[x:a) +@'יek0| @Q q + jC~,t]pT/q;?H:o+VY6lx1N?1F "s=`۔=C$v<pZD-_#4E_% K\$*$+cqzoh{qQ?#2%+>m;Qk1s>i?`v zC'^1'L`d9:S^Rn)~x.qH+)mnc "pS0SN|1>+'#&cE9)B䡂бo[3e31VuPpLX( I%H̾,!tGtuw,7k{"M\/:Sm[:h(%籝Zi^ ]~_/[uG\1wɜ&(\`M)v8hUطg_%9xMyLK4inF]1#+drk<#n:(Q6qs(ȥ7%Ԍ|lpEўw+mSj]yrE?W0^<_wzC̍!(P% c3Kt eAgF峉Tuΐ5KGDj*Zj8u&MѰs@C8V_=zuiL_نwq ׽;Vbo><;PӘ wpC[ii0^kb?`XlBab&n ՞6q独k+B#a Y3XہI}8|,jE&kI䖡P2a8!*@Y܌y!f2U)N;,賷/ oʩLnθ V E^TUn \A 칅c4?T;V%`&;IK̂<UL\dN7.@^8>;(O(2`N miRC]] ,R5li4`i^,+M1U8/ rBZw-;HNOŔl+ETXjs&yY\> }w?MF>QM*]` ۇ~ %Ϋ:Nw1MwRj7-/=ѠkMBޕyuD{A_%kL qٔDGq;1jF?cCy>%_;L'PoSxO, ,e+vT :]sUY\X;BM$c%Ȇ{56]h#B|#QU6W[Ae捫B3r5s|IrJĝ~]-؋[IX&Бx*(ZKsA3Ec ףwU(h*NeC1eH2+qw+3P4<}2idwD"'qJu>|fWiA؜2dkrâ.nV?sZ2NevS"7'ד60o$-DCO̬g%]`ܐB/rUZ|WCaFzE@QJ٫~=0v认5faalMk:O\&llz U bR͹p-߭j!*~vIKlE^Y~uـJ)aƠ0aL` !R[ܑ(rŌNt!RHL0C:).?-| rY.j)0p@HQeɨ΃EdO4,1q0qe+%1>r>:SA#a!j&iaܔ_ =9dtұ؜xx\Iޚ3t_ꦋVTzmwLӦ_46J|T: Ю՞ J%K8O!ƀ!zclo^Ѩ98H o=}C˾׬95U'{ˣ+>OV72"[ T gB.E ;I8 B6k kPÁxO횴ΦZCv9ʇ2yuؾGj'NXߌ$[z'`i3 s.RPۗk栎 d_V5BQ4R:<]) ٺnN+ΝN&j d9ʁKAo֎(GGe UlV{- ( |e3^;\;} tVn/<5]^5cs}m7@}QeiJnCTǜ1=`V^15*mEjlpFJ1!uFvmܑFD=0r(wZ_ǽ;M#XY9i   B :e9o"` ӎ.*-w9`~ېηɹc{D#]nR $E'"ٵ:{и,T-5+ dWn2}9fACa *sـ/~~Xmk'= $֫3,At@$*o_ؾ-ݔ-VxFL֠ѓs崙3P5GtHC:OKl&d56ew7 FqjɎ֠_cH}u.ٕ$2AjЮRMShBA{oߋ:Dkdxbױuxtzls)f zo\gu=cY{ttҶJ4ńe}&¡V;.̼[*tx_R b 띳d-d_2IdB鳉9A?Dh/e '/<Lu6aa9\IP2W~#=CH97v&s1e' C:Fu[@y &|ᶎnsv$Fc1$qRкrq5*eW֥t0o!3dqC + Ô5Zvu;}K+`ב%D!fmt8>r8/@QՔUaC`ip#wL:9B n*ͬq ui b_Քܘv26i)5w<UriK͙.I$,t7iVӰ,Q, Fpŋ{[3[q(L c!i^a6n|.:tiCp'V_]sfиc\ p=ԥ-YBFf$!2%+w9P nRW+Qu6)mf\O3U[/ğ~,:2m"!k;Z/-2'uӐ0k2]5&-q7T*nHE Ѧ%^FհaXcU L8 dXQ^Di}mIj~|)i˺E|i/(țv^Y' 55Zހԯf7X%:'7Hr%p6yL3AᰑQs71e4$ !T>w_0 ˅6e|Ǒ ?HafxDI۬sO%ӱbhΫ*#ps[UI>dLD _t;J샛R7+͏BjzmRH7[թ̞VZQV%n}Xwj}DH.%GmSkj%8ZMW_8 WÊ0:? nݬ_z!pSAto-HQ}XvEOgX*%7x2̣0hiۀ3>湓g"w3-+ʹ;@.sw[sQj; Tju{SB6ioM^[?Z(gAfu0_﫷ƯjƊ`j2\<r[,>&.yM0aRK oLɔ/Z)q/2?Sؘc,%Y2]+JEܵJQ<6?)H& ȅ1VlD-N FنHݲK<ڜJ4eiQ9Cz_z f$RI΁hxC!(=Zua?>(5~{',θ9 yeWE()Նo5G ZU: Yˎ-RnazIUbà.@H͒BF.%]2PSEQ>1>AcSRVm\Ti=Y)&ꔦ3:{ɾ2Oo n)K݊?*zZV4 ʊռ6s*IZ4l&߰7]e3drD.k2i Pлɿ\AٴԿ|B?jF>o&8SpdBJߑ_Zr69E `Ғ(YHU j8SG->92e.5F+W}o;#tt"FǀeVbRu>0g: fJɐ֕>Cؿ`i{eHZG1]{1iI# S^2aBۘ=`%69+)z ZT񡌀}Y{\lW}%ee)M SB$};dO%xŮV4 YAb1/mֱ( \Typ@}o^03O-X%KCdx}],N%O9]'惴 Y'AבSH}n4O41UfI$Rlz +%b.F1*yqTvոY8*E=N+hɍ.eLn2kors V;^>*ѐpU8xeΖa>U+WoOv!öpCPnUfW $z=F- 7KtVnX z ]w 8#=!0]i71šB }|V4e'/öFb z@)R-D_٬+.?tHˊ^!.]/ e_Gƪ5 Xx{&KSZ#yzc5pSE#./ɧ=IR?|W^>F1A*-!'[>r ~0ھg'Fޗu%ޥx 7JJT N?"ui}46*{kkRfN3Ⱥ]ZZz-{RlC {yY%Ftb-?$o:,Ds$+cE5D>&-g.o8BZy%Y(3bG8V\>>Ԣa͖}ٓG0Ϲ]}>B0:л2D[ˌOR\H o&l0WQdA+ŶK'*aЫ֪[g: &0  #\x)˘uh39bQn:u"\qq.#u&A3*d*isԇQr=4jmbFM̯xC_>ٳ7Q )UĒE,Z]ύY)Iu˗5R 6΁tl'0Ϸ*`eCZ,eH$ ;jPb'ѣy7{x!0Y\)\bM'v~9K=Ћܲ \RD{5DMclFJ %=2r_ Rİ Xġ; ibYF "J8RfZޜk^,_> wh#+Ul\Fʻv!i H-0F{Ӂ&{j74N] MnuVgMl2,p']E8{mN ) Q'O? G17|Z\};Fj0&a/3USŤ/IW.Lf{R1& ߱6ahHT$y6tht3zޭJ1"6r\X0Dn-l;3B3ւ7!>KZJ΁?< dP3 u#gƝ=?ys*ʛMC{RQEx3oWERvQ,O$BӪ9I[ *]43gκ*Mv=26ץ{ZҊP6_@R6nWFΑ伿݈z#]q,#d&$#?2&Ŏ.]Ḷr!s-](7RJRaE++SDeFc f,C]O`-b/iț-Xg8zȂcB'@(/!iv {L,9! 18_,k ǧ9Xʧ&Z F}]{BN'u/s2zZeNJ@K-x帎tP?E(ukMqN[ƻ//zY?nc.R߿Wl\ C$ħ{+C8s  R$ԖFzqYQf[x:=Kz>K@-Oe·FQI*.yˌnsJ>H|^=bNFLbE:3z'Ju-)3wo} SaR*|L3'MjPDQRYjv>X!!.ibn `3+oiUn;7Q/zڙ' ?N1-YL>1w}`.i4Ue؝Ȑ3;v!R,X56@8v*v#ʰD)Q־Y70^ISvu>bZ,OJؗ#t3IĠ QHsjC9G[ T/ϕU4 4 w9Ɓ]@uvtd~+)>@r6^I nϊH+2X4+ NڝnXČć:EKnܤ ~p?5ޛLVd(egH" ՞5{Yy",q=Z)uֆ9=d9O^±(\9L8ဘ67zpg_qkշDhE鼮\Y*2P9,/(0bBζ(8U1K>MAiW$ES`Sʪ^綏۲fR^F7FP|"=Axj&#px-ԫXj~fLePV0M_F 3fa~Bei8 #zUFKat_ᥤr0݁^ [+y(5wS6j 5#`QA#w"A5V,7VKSjo/h(Wr1RBNn7٪ /j`0i|eT 'Ҹ y$0O|.a+d\?8nӇ(l>N*8{0"YB=j =!yIx-z+t!@˭>Eiirïɂ[ǡ9(0 Հ%h'~KCWj<k'oo7~2ٟ N *њ%~aˡFe`myM.|B'fy$~1"`왧d~|Z#[)`06q%n”*P 9z}0 65X y Dx|y(1ZY.ٔe /P@O~~QQo~XNl7S8 AsSmfk#Եd{iDLgbg5B:O;wi29^90߃NGCB$$-Bd=nRYW./[:-K6Io+"ebGDD$Y<$ͧ tZRu.-NWI{T陨(a,#p 1TC@겋|;+iW6%oIvݥ&ixE# Y{ёuqsx5Br4%m=ˀu z{tmyNw,յSA_ޒIcA|]} S HXu% ftM%V{bfpC)mgԸuUT }" N csS;3<[]]TT86_O6AuSrnNH*-W bpxrh~yT=)\=ZA^EϊeôCGbnZ,эaݎz?ɫw󛥔U֊y^Z=2שxx䍊^Nȥ;[_獩XŸ1` TⅫ8ծ̶ .!L:AɠOhbjlw:٢=0-\ `c1ҼaAl֜<{ VZ4K~fo]Wja79JkKYKaXR49 q0ӳPy\-Q%RVdF'; ` z%aU߂3o0p!fwVѴ}^ pLr`8m\hrK *UM 58Kzb2!l˿A^J.;u!ش4(zztsΓlee4j$Ǔ1]|fms]om3o*:nE>m NpSUr.p۪`` h0, cLjp.nc8 W~HwJ?fx>w7oLGNOb.L=!]śqkKWqn9au5/mg_8X^\yɮr)sX'<O,Z̑`MH6 :eM-8s%.~̬j jJ:1! sk]^iDNyCY>WlᣫM qTGĚwsy! &c;&adqq%EBS%tDUdSYw&٫KJti9v$hh' #q@kښGMR7ғO:>}d.u#@J&w%lTtw%U[%:1ivnEwryQ:<ϝ8O׶uYu>/w8%M9sj_LcFʼp=h_\)vk/N]g.Ff@H2M a'uDh-}bI=(z_nc>|Jp$G֌=gB]|۶$04Cs0F;USA?C\Gj5mprן \<:oJ}^q<6m F'ݟqTTҭAh)cb9zXV\Xg5E<foW -Q+nr׈fu>ıWPC'?5o]4}8(р*qsRZRRp]*y?;u9Z|)l\<_%~ 1l78rTD~iԎQھ<5dhHKJ4-ԯie̲@MC}+ICYžb %ܺdr?T8܍j͸c%v@SٻO( ,6t']$ Vi\{8j~~:+E~\e7uiD[#=K^ {'3 >s6 yo#6RJX?z" S1ݳ)_Vcc>cG1e\$ѱ)HLƀ6l뙑ӄ #E;&|M]$ٌ{U|j'u٧NJ͛,{uu40bB.ds5&2I F[kP[(;;YƮ!X(P-3,[v'z4˔VM"fNR[zoi[,fst޸)M]l(owSl\?Q/}۴d3)Cu)M&)v'VE S z28Lkf/0UqYk vX@4^bJc[; 3sf:.R 8Om ,W)Lzd4\ak329&R|~qNUE1b炓^ rQs~ _XnթdDbWӭE ty UxvqcF|-CI JT.z1Icuj)DyP:gǏsr(HcN/#u^2 1qhsjLlKk.U*]F%٭᙮)6hߚޭ粏E$ [|&g2'fDkEWIDeY:aB$1S_51/{+!5r