openscap-extra-probes-1.2.16-7.3.1 4>$  Ap[}p9| TD1@3sESg#ڶN'pTZڡΓOf_:qgY R,107098876926fcc49bf6aad92ac5d9f3ab2d2c5fae9caf84fbd21aaa3585bf7dd8aef9df1a06c4b9ac421a672daad9266630aa99b[}p9|v`[Qd)O B>~Ѓ)3)] \eKp>?d % 1  "4NT\d h l t   4<tW(8C9C: ICF|G|H|I|X|Y|\|]|^|b}c}d~'e~,f~/l~1u~Dv~LwxyzDTX^Copenscap-extra-probes1.2.167.3.1SCAP probesThe openscap-extra-probes package contains additional probes that are not commonly used and require additional dependencies.[}Oxgene1SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttp://www.open-scap.org/linuxaarch64[}5[}500410ce7eadbc1e6a098137e72b5e2a2b92a6a478795e298d31872163508a6740281971ec2352e35133b83d8492907627a8b5accc3c28703cee6dda196daa118rootrootrootrootopenscap-1.2.16-7.3.1.src.rpmopenscap-extra-probesopenscap-extra-probes(aarch-64)@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libgconf-2.so.4()(64bit)libglib-2.0.so.0()(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libopenscap.so.8()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.2.16-7.3.13.0.4-14.6.0-14.0-15.2-14.14.1[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@TS@SS5d@S,)S)S&R@R&RRv@R0@RRRW@Q@Q@Q@Q~`QyQIQ-@P @P@P)Pe@P>@P!@P@P@P@P@Ou@Om@OgON@OLM@L1@K3@meissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.commeissner@suse.commeissner@suse.comcrrodriguez@opensuse.orgmeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commc@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comdmacvicar@suse.demeissner@suse.comdmacvicar@suse.deaj@suse.demeissner@suse.demc@suse.comcfarrell@suse.commeissner@suse.demc@suse.demeissner@suse.debitshuffler #suse@irc.freenode.orgmeissner@suse.de- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch- openscap-1.1.0 update - HTML report and guide redesign - dropped support for docbook - Introduced new probes (that are to be part of OVAL 5.11) - probe_systemdunitproperty - probe_systemdunitdependency - introduced raw bindings for python3 - dozens of small bug fixes- openscap-1.0.9 update - xccdf_session_export_arf must not return 0 if the export failed - expose xccdf_policy_get_value_of_item as public API - skip "Signature" when parsing sds_index without spewing out an error - return non-zero when cannot resolve XCCDF - consider the last set-value as the effective set-value and export only one - test suite fixes - do not destroy SVG data in XCCDFs when generating guide or report- Remove unused build require on libnl-1_1 according to the changelog, it stopped beign used in 2010 - libattr is also unused.- openscap-1.0.8 update: - fixes related to Asset Reporting Format - Inject arf:report/@id into nested rule-result/check/check-content-ref/@href - Add hostname for each fqdn when generating ARF asset identification data - Add all MAC addresses from target-facts to ARF as asset identification data- openscap-1.0.7 update: - fix namespaces for attributes in ARF relationship element - Avoid ".00" as the score in HTML report when score is 0.- openscap-1.0.6 update: - fix process58 loginuid integer handling on 32bit- openscap-1.0.5 update: - XCCDF titles and description support xccdf:sub resolution - HTML Report lists only applicable cpe platforms - TestResult element contains applicable cpe platforms - Introduced XCCDF 1.2 schematron validation - XCCDF bug fixes - tailoring profiles shall regards inherited refine-values (trac#373) - rule-result now always includes at least one check - Other bug fixes: - Dpkginfo probe collects epoch in evr - Updated examplary openscap-content based on the latest facts from Red Hat Enterprise Linux 6 - Minor changes- openscap-1.0.4 update: - Introduced xccdf_tailoring_remove_profile to API - OVAL bug fixes- openscap-1.0.3 update: - bug fixes - a few coverity issues - a few memory leak plugs - broken comparison of huge integet in OVAL - fix-return.patch: removed, has upstream fix- openscap-1.0.2 update: - XCCDF generate fix now supports tailoring file - XCCDF bug fixes - Generate guide points to RHSA pages (rhbz#1018291) - Generate report ommits remediation when assesment passed (rhbz#1029879) - $PATH variable is available for SCE checks (rhbz#1026833) - Tailoring of top-level Group elements via API fixed - Fix-filtering should not drop fixes (affected SSG) - Generated fix file is created with sane permissions (trac#362) - Inherit parent's namespace when exporting oscap_text with HTML trait - OVAL bug fixes: - Handful of xinetd probe fixes - Handful of process and process58 fixes - Obsoleted textfilecontent now supports text ent comparisons - rpm*_item/epoch is reported as '(none)' when needed - Fixed dozen of flaws in ipv4 and ipv6_address comparison (CIDR handling) - Made integer and floating type number parsing much stricter - Fixed floating point numbers comparisons (trac#366) - Fixed case-insensitive comparisons - Item filtering fixes in probes - Consolidated some of comparisons in results model and probes (trac#367) - Other bug fixes: - Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248) - Fixed static build (--disable-shared) - Format assertions (-Werror=format-security) turned on by default - SCE scripts are notified when parent (oscap) is killed - oscap info now recognizes all the document types (adeded: tailoring & CVE) - Documentation improvements - Handful of other minor fixes - fix-return.patch: Fixed a void return- move the gconf probe to openscap-extra-probes to reduce dependencies of the core probe set.- openscap-1.0.1 update: - versioned interface is used to handle internal SCE plug-in - build-in gnulib package was updated to current version - bug fixes: - selinux_domain_label and posix_capability properties were reintroduced to OVAL system characteristics model - selinux_domain_label now collects the domain/type (not the context) - oscap oval collect reports progress on stdout (not on the stderr) - typo in the manual page (rhbz#1032537), and another small clarification- openscap-1.0.0 / 19-11-2013 - Improved heuristic to distinguish 'local' and 'remote' file systems - Improved comparison of EntityStateEVRStringType (trac#355) - Link against librpm (if available) to include rpmvercmp (on other platforms we fall back to the build-in rpmvercmp) - Bug fixes - openscap-0.9.13 / 08-11-2013 - Moved SCE to separate shared library (libopenscap_sce.so) - Introduction of scap-as-rpm tool - Improvements of sql and sql57 probes - Improvements of SELinux policy - Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf) - Minor improvements in state_entity processing - Introduction of CPE name for Fedora 21 to the internal dictionary - Added support for ind-def:pid/@xsi:nil (rhbz#1013011) - Improved error reporting - Bug fixes - Changed CPE name regex to be more permissive - avoided reports from the library to the stdout and stderr - plugged several memory leaks - improved xccdf:check-content-refs processing - misspelling in syslog message (rhbz#1021695) - fixed OVAL's element processing - fixes based on static analysers - test suite is locale independent - new library major version 8- Updated to 0.9.12 - tailoring improvements (@id, version, and benchmark ref attributes) - XCCDF 1.1 tailoring extension - improved robustness of CPE dictionary parser and exporter - and added misc CPE 2.3 elements - added Fedora 20 to internal CPE dictionary - updated OVAL's results_to_html stylesheet from Mitre Corporation. - profiles with duplicate selects (same @idref) now export correctly - test improvements - bug fixes - fixed IPv6 export in TestResult/target-address - consistently inject target-id-ref into TestResult in ARFs - improved rpmdb manipulation (rhbz#999903) - solaris build fixes - spelling of name of default language fixed (oscap_text related) - fixed CPE names matching (generalization vs. specialization)- Updated to 0.9.11 - bugfixes - Updated to 0.9.10 - bugfixes - Updated to 0.9.9 - --oval-results also exports CPE OVAL results - added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to - OVAL variable_instance processing (or so called value multiset) and the processing of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and Collected Objects. - improved test coverage of OVAL variable processing - introduced new internal data type: oval_smc - added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm database offline mode - bug fixes and dead code removal- updated to 0.9.8 - added experimental support for offline mode scanning to the OVAL check engine (i.e. scanning of virtual host disk images) - improved OVAL variables processing - bug fixes and dead code removal- fix build on SLE11 - possible 64Bit issue - fix-missing-include.dif- updated to 0.9.7 - bugfixes- updated to 0.9.6 - new command-line module added as preview: "oscap ds sds-add" - improved xccdf:fix processing (support of DataStreams and CPE) - internal selinux policy preview - added Fedora 19 to default CPE dictionary - bug fixes- updated to 0.9.5 - oscap xccdf remediate (new oscap module which introduces offline remediation; the remediation based on existing xccdf:testresult file) - added support for sce into datastream (sce scripts can now be embedded into the datastream file similarly as oval can) - improved bash completion and documentation - bug fixes - bumped SOVERSION from 2 to 3.- updated to 0.9.4 - high Level API - improved Text Substitution Processing - technical Preview of Online Remediation Execution (the oscap xccdf eval --remediate) - improved Library Internal Error Reporting. - the oscap xccd export-oval-variables now support DataStreams. - improved documentation - improved schema files. - tailoring file support - profile shadowing support - bug Fixes - DOWNGRADED SOVERSION from 3 to 2.- updated to 0.9.3 - Embedded CPE dictionary (allows users to ommit --cpe argument) - improvements of DataStream and CPE processing on RHEL5 - changed API of various functions in cpe_dict, benchmark and xccdf_policy to use string timestamp instead of time_t [1] - fixed several issues found by Coverity and cppcheck static code analysis - bug fixes - bumped SOVERSION from 2 to 3.- updated to 0.9.2: - rewritten the heuristic for pattern matching on path and filepath - CPE 2.3 language applicability testing - new ds_sds_index API providing a datastream overview - CPEs in source datastreams are automatically registered and used for XCCDF evaluation - --cpe option autodetects CPE dictionary and language - CVE support (validate feed, print CVEs) - introduced info module - made "$oscap xccdf generate custom" work again -> man page update - bug fixes- updated to 0.9.1: - the http in the check-content-ref/@hrefhref support - the cpedict support - obsoleted the oscap_reporter - send start and finish messages to the syslog - the XCCDF multi-check evaluation support - "oscap oval validate-xml" autodetect a document type - bug fixes- updated to 0.9.0: * few public headers were renamed to follow common schema * cve and cce modules are not build by default -> these modules are not utilized by oscap tool and thus untested. * --enable-bindings configure option was split into --enable-python and support of SCAP datastream support was improved * plus fixes in OVAL and XCCDF modules. oscap tool reports support of XCCDF 1.2 and OVAL 5.10.1 - libopenscap.so major version changed from 1 to 2.- updated to 0.8.5: - added rpmverifypackage probe - added initial support for source and result datastreams - added xccdf 1.2 dc-status support - several probes were updated to conform to OVAL 5.10.1 - bug fixes This release is able to evaluate the DISA STIG content.- updated to 0.8.4 - added OVAL schemas 5.9, 5.10.1 - alloc.h is no more public api - bug fixes- Fix schema_version of scap-rhel6-oval.xml (to 5.8)- Updated to 0.8.3 - added XCCDF 1.2 schemas - changed XCCDF report format - updated schemas for OVAL 5.10 - added additional OVAL schemas - 5.3, 5.4, 5.5, 5.6, 5.7 - multi version support for XCCDF and OVAL - a schema version of an imported and exported content is same - added rpmverifyfile probe - results are validated only if an OSCAP_FULL_VALIDATION variable is set - bug fixes- add OVAL/XCCDF content based on yast2-security checks and set them as the default content (using symlinks)- Fix build with missing gets declaration (glibc 2.16)- Updated to 0.8.2 - XCCDF check-import support - XSLT transformation for XCCDF 1.1 to 1.2 migration - SCE reports now optionally use the new check-import functionality and don't need separate SCE result files - bug fixes- require libnl-devel on older SUSE version- license update: LGPL-2.1+ There is no GPL-3.0+ in this package. Also, the Fedora spec file states LGPL-2.1+. This appears to be the correct license- some cleanups to make it factory acceptable- Update to 0.8.1 - introduce Script Check Engine - Added an OVAL Directives schema to allow for a tool to supply a set of directives to more easily specify desired results content. - Enhanced OVAL Results directives to allow for more flexibility in allowed results content - added new OVAL objects(all OVAL 5.8 objects are covered now) - update dpkgprobe - all issues reported by coverity are fixed - add capability to export OVAL Variables from XCCDF - added cvss score calculator from vector- Updated to 0.7.2 - OVAL 5.7 is supported - content for Red Hat Enterprise Linux 6.1 - draft - oscap tool enable user to skip content validation before evaluation - bugfixes- Update to 0.5.12 - Proper subpackages added- initial 0.5.5 import - open SCAP protocol implementationxgene1 15349525271.2.16-7.3.11.2.16-7.3.1probe_gconfprobe_ldap57/usr/lib/openscap/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:8520/SUSE_SLE-15_Update/abe30e7adeaa7355b222fbe0593f508b-openscap.SUSE_SLE-15_Updatecpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=c386955bc4ccc040b286d2a85e2374f740008831, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=ef44b3ee6f50ab15012cdc771286a7b125dec08b, stripped RR RRRRR RRRR RRRRR RRc[iYn\Vutf-861cfc61ed5ac0de628eec7703eb15a3830f15f67616f990e4d7f25b1beb89867? 7zXZ !t/!Ko] crv9u!] VC} p^;AkL`7$,25M:6ݗB]h2B3Hn,`a/d19+Oa|*:%>ª?#TBig;~5i^&5yЉEW!di!O-=gGv& -X̘#J2Qu㕆#Ogc^_8&Zd '&|\ru7@HcÔ4![{$iVBr<S S18Q0_2[kFnD*J<[S\&K =@7TևQNG@j$-4grv"wvSa f9T NjG0 O젒mazLBqRBk0ѦCy be ;fHO~mk1:̃l^fE.Dᢲ0D62ؙ?([7Ϫh*DGݕ9iqC 4"o,gɂPQreL^$H$׮A![~C˖&[ؠz3)5FVlflWfBPp/ESm%³9eTcvZYf*Y?m%e]mMhvXʙlM:7;h.{xg6 C# Sožy\#Ӟӱ Sn6뾁{Y?^՘*TIY$ׄPCWК{@ [ [G8"VIwzǤ>CPI3qwI'"O4h~TIS5Ԫ9St` |R%W`NYh<B/ +b n3M;dyg ]_oW0qi/KVF7 ߱jzI> $սB c z;k+z9+u.q u rۙ-}ёM-.PDъ=6 Ijf,eP7c<^]rQآ6* QYf!Sqb!hE0 }U#tISСT OV8q``kGrcEğQϳZgAҔ) ~ O4 7q &hu ,lX/Z,je \7G;Z4:[g3pnt<=Ns E fh/bun_PCíbџ4\h>m޼:ޭ'?3ڹjq0y];JaXш> BPWme4gІ(tO@< ) pu0Znh H^]7̸3#cbAJeNz"i;(%u,hZS-]Q#`OCA=6/R0ny+U/g/E}b-:$&LC=6B#[4?8cle"-[z|8j1UY=3h҅IJ芃SEߝɪUf&+h>"s@15_ l_Lc1 99[>^X]kR>yaB<{fL1Ǒ/_bLHok,T'krH^YHD^Ƚlw˱O(5^юHz~:)f Ns{g+J5-|slH)4y>tiĀ[!IftK9cWnPN(Pv>,D[/e_2s+ Ah^2.Y8ofԬ2*QH}O򑣲W%qX9T~bf)8#bY`A8T@ 4Rke:fj\\%x_cF{/2fQYڡbrcCuEXI;Ig'B|4zg MEWȄ2N~Qu%RzO{d۔Ĭ˹\kcL(d)VAcw&DBQQ1mcI\6?`P˒LbP`/JA1ѳg\*G9 I=gC3ݛ)t-]=g_xZ JkNKA9>J8T -T%+[ĵbQӊėvyȋ/scs^%P&txhcs-l sEX}7i EgXN hJRf=DK bIq>iyw|Q)SAkE=gr[<*_^m"*nD g-$jhbToHq<6 H]2wf9A \zɔaW$(q~,o8uJIӛ|Ќ+ek&b™%1]4O;uؑԅl$' L~=+kb?-j3Cpլ{W~!=%zlBT Z\Ѓ\5~K ұX[35wvήFa;L1G8\YfB~"|tûKFh f MtUhv/Bӡx1'ؘ=tKξ&?_b_> \%`$Cdj2jK[X] F:jy27RZp! $|g13_r^U4!1kRHsjf1?l[ADyMtR^'Iq 1WQ\ab٣jaG"0ѷfj E7fzhߖz + F^0);Nj7mm_[ _p7kX{0ir#3{މ*&F#Llz/`SEIT cn_`Y&KROltL-Y((Dy !P7^3IK9.v"3K7_Θ3$kSaߛ#Pa*-j)Rt=>2=_ `1l ̐ s#FVf^ j{1juv*Wɖ)V{Fz8i7Ydc[W7YyD";Y WTBmWXr0Aa,l˙c!8s^ !Ի@rpK3o#&HpM (4@|Ak p#m}lns[ݣzfbnI2WKr]^Z D*=^pt CC"OKY|\f0(gzR[ˏr ?//NniA^ۂXC+Jgf&kG\+{om̋A{6 2iuGN4Y_ӵH5[a}VH3^;TXpV?&Gi!)&(U ju"N7WPHߺV35 ,Yn^M4=`XwsrG(;(SKkxz!|6f:򣷆*T (I/6w51~Իu>z+{ rIo Rv`HN |QP5׺B30xlfu`/ E*+<7Zf6=(nnۯEagI.l[̬\ M;v@bE9>Yn/&ϲD40H◼[o`?#[*禅D^N)hI/ ?%8ydw˳\K{nzE1C䇓,h1nU!7ۣ#dz{C*_.Ew\KT/;/Nc!C *F3; szc~xTjNEYj/1"Z_r3ZQk uh>\1bWE* )\gaBX@~7%԰j{ۗW %?Nꖇ7!k]Oտy*jQ4}ؓtI%OXE/^_O gJ{~ KX(}}& 6뾄dpCV]PѦ9@]%dhڝ%^A O( eY-&Oe4YGAHNz xdcEc ѿޘhRh޴|MKJ>qhIV?{KO5wFmO \~GmJwL.<|I|\t||!4 r.<»=QfŁ&P㑹åOAפv GкLjOmDLYG(z Z(͟I 6PDhw[9I2=S_B͙dVJK^lgZ9e1^ y A˾jG78jb;Yޞ~jy O֙\^{QIV%yxklEK!^WTuʕ3e>%N?CO}j-Mëou{leDdNڤc1\1Ϟ&?sP"{;};5J2N;Er$7?lgƞPRlTWTQ5ߺn댕~0_{kq8^(rKAM2\E!-7ӜrUNKY9(W9!P9fuSPɃq4Ȱ4Q6s e4: eZIuu7 529gJ* |CO,s{6Y@(UBRzR_u3*n6:M9̠~9nH$T6a =i,#"Z,5y!J:ї%ؕ#wTLt*oY\r_<\^2Ft+V i#3( 9Kǻۦ*B^vH% Յȍ}@S$VҌx}݌e_WH-yofOS Mq0E^}@FLg>.hom)ԙw^%|l(TSX\5qbYQ hb1'nTM(<6*h;{vPk]^'*h!b -\x|6C%u& fgqW1ט9 SjnScHAb|А̒MPS +g  m4yZ_OaOJ$)Cח8|Q]m.j92n)a:OkcG&/0ɼEUZ:10ŒN|m(9QNy* 7s!de(%WgWj,*aMX C8vCڈmȰ<h= mPb"?|elc|&2Z6a;15ۯFկ0"η%[ JRULNl'DScFՕȉ g~'B0ר6F-pHާs{pTG.+]J^p<⪃ςXã}PZc]O7T+hQj'M*'=9#TORWe7Jp~1 _5'|ل"xl 6K_WXSpᛑ[N#nƓPi#󛳧)]:f~AW, ɃG? #-Baԣ4"E AxMad==o j4HIP$(hS(F~=qeGBgK%F\Gqդ-ę[N_ N"a?J^Pg,bH靛n$*.3)ЭNlom{Oأ^;T7sl@J!XFmG=>hIY0k]6}RPȒG4#drwJorY!B(ڠշ [[..y6]""]jɎNU2g@hӸA%`Xf:\~kf{{-SA#oYRί/ ][A:=G4961bBoA#m?@õhT6mDC>|.O)'rCl 5 /"=gNЇ{9ܟٛ/@6Z)%.1]5B;dA٣jqIe p[8J/|TG ҃" N(jӖ7lal^9(pG?4Zȶ ;ϓESGMPUUc0Uz P4A"^P* Ƒ5U/PqqB%{iզ&&˕ C)֛DW>xZqS ? )"Għ(1KLX.[ 1|YȰbSWw.M zv UD:~tZǮmlܭw=5[ze5A[yp3bB+b=a/y*[Ϧ;I2O՛0Mk=#a!b}~aV<٢cw\C; -+aD,=c|)cdH7e3\ VcD/wor3 "r)1!Yso#ySQVS w܂ ZP_#{5EUAX"eILkfa@3pJGII*C@@^\.B!CH8_1,?T|=ꯕ!bnL0q|)^tkVn|smPgXiȖno-X^٤/p3T?ӎ`аdۊٰ.tXHpj G|9j,Xi:P4L.P '+/Z*>//U9fpF)l!WYg )pZް<Ą +zmCJk]oo=>Tѯ.3p,y^& ȥ! }ZlY{"cۊ<,6 0%r=6Jfqb< 9R8f6it~4FGΟH?d~khzHO'ɋ.{k*I7B9kg[hv|2$=♯$56|@;kM:>O+-l'hY RAԗ4E, Z^:kS| b{E5aC:#NBNjt'JAIҮ]N߉L؏# 6-V \T΄8RPc9ILJG˳ݔ-uɜV[ U6v)$nAMu~mz >'ywwh7[|_rD7/ÿh5n7"lm ?ܘb2A\:ׄb4OZ wpU5Dxr2`;A!c>Nn}%*2%-l 1Ȥ³dy OǪdVyTD+'Ym,kKOϋ2O:>֦f< kUo8'L$@ݲ&aeέB {)H 3fd TI@^*(.dqS&St` tM%--$BiТp o{R nO<)щɁE?-ytok=yqijC14 A )+b7m!K͆8$ {Nxp%”Vl^#&0!u\S^ ڳ, n͒ˉ [m.77Qr.kph&1i:KNvv{>"**ԝ 8Giwl tSjrnO (-QHTIbc ]Fnؼ { ؟C'A\4GX= YQҝ@zf$OlP]h1Ѩ'kd *%d\{^6(̈́}/P2eL-RD|;r8$Zor,G CZנqq|h0VJ®(XZ 8>_h8&  >W 1a 7&7oζxF+.Ul'$ N1Jaؐ4#V#T30C,$Y]TEЪ4zRi0  Z%dj4I-/=I{^xYO6?+ yy~Q RVր>y(Oۨɇ"2+ hKF?$$B&A}U^^o%n-p_"VI9z)J:4~-n,^*u x E*E9[ T湟ǿ\GYU'Gs^E M%Nzn,snٲ0I:3#x V.mN1f U/( Zt ⷊ¬xU Az.Mdq,Q2doa%(?KT)I <9/ۈ6rR',` K8v-"T}a:m֝aK} {1딺#wzc Y 0 yN5Zi]R;? pQȡ0"'54/tIGssi;%ܽ'rBv7Yh^Lb$bNZ-Pq\94,XZa8). +@-{PƖ.Տ6R^aQ8i9AqZw/ ooW\&DfY׆-$d- +)W O:(8R{Ҿ=/NpN#XcL!_`.mxܢ$$FhFЉ?/["rVJTkى K7L I}>jT g3gbT$r丆G2<.r-R,%&B/F-Nl< y=o1A0Px_6{I-ǷoIyAqZ6)gJ"iB޳bݲbA6jo,Ȩ툱0WDO{GkMlTDgtmp\(I@Ϸ$\U8J5]3`G~&_o )W'q428 >3H2E1AhKaO;P>Һ1֚dR!KtHTс40Rc2?EH[|MW5;1oeUHM32yЀ\DO؈-i'}AlUՋNlL?T(_9kF݊8Mz7-f @UOCO(̐`r4T8`9T8"l+QMP11:#M GE[Rh/ĮG '[X(;ȕMTΙc3][}֜q\%zԑp 1SSB(/#hZٙ[b*lrјYRτ4C ґm݀gk/OðFD\۸f;Qjmpk("B|6Fusլ!jN7/؅u)ێ ^gڍ,b&;ɜ%YZΜ=ZVt~0H 3 Ao܁r #o@u23F<'\ӏW(<21+X ;S?p:$-5"Z&_vu>MaR>qGrbcy6v<ȗUls\LJd5FfR̂Y}Ş8;>^21vw|^\J&0uXXڥܑNLڛ=Ǹ2um!1I\$ƅ#[f]HFDCwuI{o4E 1QAwʥ0eA:lu5f(Yt x2 7%)}}gQ%[$ΎDeK5w(y4ǏRK-xzkң)mL3+- " N-RגYRU4R^>jҕi3b9& {!{aR23LcT샹Krq%jw4Xg5CBI aӐnKf$\KՕ6q f.Z[ӲcDm]q0uZݥ,VǕu1v p&I{KAce5FS̑ހ* i Ƕk (l4UBT]r#srVEg.ß*8uQG1;a[wk}@W+RUΤq0xMnrsMpqkSڷveٰ{pF/ĂLzvqlt+c[0x3उlTe>9Z)߀Bh !l_9XRV L.Mm͸"DZ;j٘ԫ]ʳ`7W}ՓOmҷOg:\'yԟqDH0]9Ղ&凯!8a=s+ I&p]>.ݐXA7$^,!6WrBYìΉ㊶[ f eߞ wUhgW7[dsrc(/%M釘d`NZ֔0ඁ99]Pf*場v/2 (]29֟ED2oogm6pOu3ta W~[>JYw N$‚h$QD agnv2dfW˴q-JdÍKt++*]3ia3|xvh!z 7!#? fzD!d1ƣ;Tu:-Z惯yh&::"7T~UgZ)9s9+1 OE ~&ęS]푨.zc\z$OadX&hM~S5nz5ћtԴ1:X!QݘJ -9dԩ7رx h}8}JrK[/Xe|~800)3xˀUݺ[GUK֋#ZVjKM7Wܢo0Hhlj9=…@nQmN'>CQ-p)@I &"XrkBB3B3́5R$Y^yIS~ jhw^=]ljNa : P # & *G\GR)F(yR聎V'7k 7DW/Ey@On(bHQVwұc Xz맱p0 (>ch AJ4.R49wҧF?fK D0p{7varcעà:lșElhI+:9Z/x$R؄#' Ǻt<\slX C6ZE"#2o Y[NHgI .I[d^.F//Y6u]kd$1NΏN%[.Xv+[_4 e(uUry{jA16$~D>2\e+S.mR٩$0u2G)?nsCGNGIU0J ǢH b7("]~#AĜZ=xUKsb]I52&HT-'T7hD+nF&$%Rh6sJ쎇fkV6kuЅzy`j˸i ΃L;^(v ,7Z{,͙ xJgKqXAlq؀Z &K[ZDNNR𨷜[ .Tg"ytx >,s閹"LrhJ}_MĽ쬮E&<WLi86 83sUM4ħo|rƆS}4CJt?âj~~G&~ZQ&dM?)ZTf1T`t2&_h~hbW!\Í;ݢRnJE@y\;=W;߸*Vtos@IIC'$б'kbR_*֟p-Ύv0!RgDZ Ԩ8>uX,ΛMJk@&7RˋJR+/ A<:B4l z|Gu(i=ߟwj_**Nj'dfO؃6!o ~6E٭5bB-+iK|^SbuGO%iYSz]AMCKb}tU;;Ue6cL ђfx8= ʐ7IPJy$j[z5b ţ:El:4jq g"-R##pxJFҟ ~3ɮ`wE^v۲7ٕ^w,ց϶CI;/o?IG8|~mdZ^.2 4% 8"nߪbڴ)fPi@*Y[ AA^*VK0#C q/ѕ+F"*~q;)cmA}bˬztL|J&t|w/б鍑VϠ^EGm(ױ; _flơॅ#si  0HQUv~a:=嗾]w/8!SX^? Q9юgb l4U2bkkB$O_)78WoK?-5$ރE,` ۭke :4Š<qb*&*P aCKț :Mj.j6ЗG*A*x7N*p'(5J)YZ fV s8 m s/,v5^\Xdc)J݅mwJ'b++#nM"';us4c{؞$nMHk]/U[[p!)_ko[[e4$N{}GRJT6G|^? *ӏUSMEd%Fo߽zh#E&)5Tb>˷XbuVP]*@DoW1$^$!^w/q:pmnMtJn-Yɨ:#KL9Ƥr=F70,Zu"-? TXr=$\&)D3#.-# /bx3x 9)z}g˚EBT/kN i=_,xbÑl8eDkU;L|FCBTl {w^_18=z N'Y:lPw*$:se."|;-G{m$!V0wc 7G\,HYkf#}T2AR9>3Y}cmlv\@O;?E-:)w#J*1IwAg+i@.@LxƔap?7ך cx/)C&׃p`{Sz: k|wmO*S [=S;>jrSEMf@&'h;0Mmm)3WEQX+542cn ՘6|)qK!2t̳z &W^d9XT2էHT:npje$-IP}Uagg &iJgaJS3"'#&ҋKEC'*B=&f>g˱\! َx8 W6eOO8h$TM.jNy|9 [Ut `"f( K Y/GXW #-q]SFwEp~BBY>F?Rzy#Xi;o=]}b,! Ԡ{8NJA0hX @]9%Of5MLgJ_t9jm*@`TrO}Z zkw=L LaLH"Q'-<PrW^œɍlΎfߙL:n[yӴ!ZaҔfYErL1/1C}I< XxF{Gk|9},Gk+8 0QU #姹"eE z$z *P! `~A,8K$?Mʤ|؁LZkp|}y'ISmLvC:66{(;T$?Ȓ$[VC3D&ˎqUzRzT7.}}TN7t_Ân?"|?B$4."?np)qX/b}#rsVtu?A3/k1#^Ae˽"ݬc}l3E>eYY"iUY[VgY*u3N9\Bzߋe:v! jouPyǜ@T'`cjcHb|Cb\XO@r!>U{VܟCV<4 ƊELȝbw0+gpp5I2f-qcaÆodRy[|p;}ҏ,K~hG쏿ت0d2#-8TZ#̣B IK${пvqoYGtʱ7Ejeh",7K["k(;wL?VׅOڇ?iFD+䒵a$qUaU`v(U]Y](_/rhqCӕXE >; #ljnZ$kPEj!%aܞVc䂴&`6 ,i X+ ̎hufYv#eNJޘNK-..968&[%X-KȯeB]x9% ֦ˀ&&o{9d*v!9^zԦqjꩀ8{ [ں6Hn/:ֿHeХ1e|V~o䂿kR~ hSsbYEA}sd4p> $}ty=ѵJ%sX,B$!s,!Pcql\m-3!a*O@Eމn *x)<;8eTWǑiD }V.0jߗDG$:>f{x$:IW9fCtT%_DLIt^.Úk^qXuwj֪r@pWM-42!eRRX&#d 2~nnGɔ_<!@] I`I.E[e-dgUwR-c+$e1D Hoq>rB&u]8F9bOoi>P,:"_<, u"L:T\aq0< MĽ$DqK4 7l2_/_DNsoZ(];wZ`EdUVCܒڗot6KT)4_[}]ٟ ʘwLJ?B˻خΛ4~xT'@@=(վ2y=G~ѩ; ýA5>|W_%00lv>սAw܈>ep.9Aay#f2rcӷ%q?R5`D܅ŶEu{jyxMBEU)ـ{M0 !eҎ+Kh۵qjf@j'vkDMBw\\٘(.[%wq2_JUQC#o~ՒO {8(bA q}7tyTCa2T֔⮴)LA.t]f.(ۣr1&R1 (LN':s!L_6i?+?[n lX|`i>`|3}X,~>8M)}ͺ~d;T(n Aa eI\o RMVb8w3>;%/w |1th|C ˣc>ೀ1iч1GCEcV4!)21W='#38~e ;#N]Ry)"n}$C}^NK_¨_f*)%@Z/x% n؁ 0YijCk&o.wr"Nw=MφDZamxf%kL'pǏ&M[vkeaF,.MCu#i!1mc7DnCOlz7G 7Acvcj6 %z[P%JZ Ie}V'C#^(a{##5Tޘr2J(ozQz%&-s+*r^=9W7nwC#-\ yHG/<zCQg%Ji__&M'#AŘOSCg^.f=̘FoNU'OUk ,!y—AގR H (򰽤%;"VSqt)(zB!bT!{PDZkjq =O)<6C8SJ_A8 {ft{~U ɟOGe`MIzJiI,cpg~+ʝG~x~:ioA*9umP G<@R>4M f}q\g1N'ޡkuy1ѥ280V.XȎ_CA}b-xfEcB9 Է~|<tݶ3g>7y^d$mFb~sPuX'&1T48%(wO"84FL6/ʃNGHV_YdQ1.=m dNO]{-uj`JP[j(Ǝ5舶f܎ .R""~kmȳL8|1'P?U*t7cg q7̄Xv灬U2sWGkA4+%ICOY-kᶭ#׎h=Y Atq!v Fq%Y'!0/z_pRa7y0mRZ&NLG̊\y*bظRWU,~eZ[)Z]^:@@ǀ m!|MP-9~`gWN$;ZpeYޭQ-6\o Ȱ낍L0teI%CbĖ`Y Em6#84랈 Fç/#w1jvL+$J}?#IT\})T<}y;DYKr/yWZϺ( y}GAKIr| ,!}&/\jcV2ks0W=fH#RO$g if,Ēfc*Zz!ϡn9D\zs<sߵWo&ipBKe?텸*b﫸UJ1o@_}X.A=Lp^=XҷUcj_m$ϼ]CZn#~닺9͒p 6ązp' f}T7;$#f{&v{W+J#FPzǀ䁯Y5Nx|xzi0$1=<{5zPՃO| lp=MDcZoVO@ dDp4pd7jˎ[@F41!7yLL aϭxR5B8SIˣ~.^qFN?`.RaQ sdB9[4V(o吜*/چErxeI`UhYu\|ahZ! 3VvAzgǠN.5+ 폱B |,t+L>UicBņ s(.D2:y`Lln ~,-'zqz@kҖdXKj>aGi2#gD[6j,d=kҌ\`?!|_3hVKݒkֹ>.^W]ҼJg,K[҆Mc36 A?nN;oQ\(rFA^%:%㳠ߪj< ߱]XߔPǘ>_JraP@⹂`?<^d!>m?JCo,hTU+'`_s_ѮHH>3EdƑ+-&Y%Ҽ8#}#I^Zȇ!Hsu^Lڱ/qm 揸Bf8G"X GPR^ Хc8>w4ԐyW|!6 ]O1eKv F/D H* <p "2Fw!dI.|,f+l9[st,sfZ+HE)"K^}'ؗWJ=KI3R7oNoDנDkl3q|^;Z^<*PP5¶;AuehnCI.ц }Z+Cy&ǥ_.,ۗA k?Vˍ'dJqmH[S=$ccz4DGpZsq-Ie?=ic-˩߅̞|{톭f$Å& kCcA##&2ηbbX E<Ǧ\ʨ&lD?-ya#2ʎd1NX[se_[jZ߸ks>flP @`Y>CTl݂.cn cr p FTE]95k:Cdi2QV#O۷xvZ 'Σ0 3] Σ(R_~;^C(ߜ5 Doȱ"Uunf崟, ~XJf6 Ŝ b^ r+gX8P{"TΣܐ,acB3qe#Ƣ@hJ۲Cv hًw{BCY| (%dӥЦHKeϳ(4[mٹr^}okM9L }Q!H1`aK{.O-~`QE{ns5 fS?۟w7 & ,+Hv^5ct;ݼ+Ҭ YOȩg}4tR oxt6ʞ2^K'b7S)X_ί2Cas5 K?Iʜ Vr~bnW[1LecԄ.6Ctz~ly0q)6t Wš~qov5QEM3Qbxv>fo&9{l5G[U[6 7+SE"^p0<ሲbJxiJd~JSxWC,K:G()0HS,oU>!@ԏzEI.GsFC`Rf;x)pmdj!@,۶Q2(?$O2S ̖FK7:u~dG [%q$ACdz)|Sm%x/_ԌF85IS8{]z1[Rk9cVg=x'[2~:O_\Oy@zU9T`+GZ#n#`gr ѯRRl3Ere E;VƲU[c!G{'{2<7F5(,*ҡvXQ]t(Ia|6#UwWe݂\2q1)<5)zМ}J>|5:u XpnzHڼ'GhFXŊ>zj ={]%~2$ϔK*uc'az-%FP,||X-1r-Ԇ_']s3',yZ؏(Pf%0)e 5># ~ěC*1ncɌ8@C~,]Q,WeKL[&+ tRq̔&tB^Y vs$TrT!l"hwA^BrFp"|:Lm_>@\Sʜ {X'`Y`xHֺZmpW8Ma^=L"٩бV*иӊnUT U0T!;ܖCWYq"^q.Va|PQ݂'ߺֽ3ǫ;S5Gr{lDg ,''T6V:=~!+<^dyD 7xπzE$ɿp>tYcIT/*F>M:xbs ҙATS,i.U 2{x`3V̰ysp'H*|d2c|Nv( { #d滚QX =>`<=H| سs}/7 jst&8kȆt/B~6G.(KsX5xYT.f)e2S'!鷓 y!mPX;b-__vI۽\_ag2T@y咎$WXEB!W""<0) /`ZsvhVi:47u\ڵ9֝8I8JV-Vpctd𜬻ٙby:UyRO9I+[;!L7~X01)inK ȧ"S-t,I~WA9DpFn;sۦ՝҆wKL\?<^7qfAaXT̾#>V+keZLϮ9 㟁 єw-U̚G}GEv~8(vpv37(dF?-c8XsGq Z )y4+ aC1x\iy-yNoro"=6ge-.1@ܤHh݋ x(?撬[-ߚwUq]?` M.&W`0puH`tV_v--Ы6#,Vyw=髧LJ'i9ΚMn&#;Mm)}+KcFұ.KC5tYUTU=ᓈ}M>CwS2'NW@A\iC9Y"Rlr.iZR؄&6l@>^)Af(@w-4ranhź2bInP}ƻ:_%R~B%ZPܦ2\`$Dٮy)8Q&!Zq_ݓJD0LD.ng3]Yp't{ $'/>baW:-ͨ`N2.EzhVdR[mmb_HiFh[t͕CwKd>hεB|pI䛻gb&x *ea #B&G]lVU= vcڻnN)3wk׻4gֆzM'N|9K309J8j 38214wFOhNƶܶȈĔ9pJ=ٴrO07:nK(*bu |:ϳƤ\ѫ_*ε;f11.=w,w(Rޒ8 Qbm2t/6R~X оdJēaA_:^R5R/7[.fH b #6ȼ?3rN7W|[PdrIJRe);F$\|lsQ֬Jzm6~D6vz̭!a\>ٙxdVAK(ġ_*n MvnzC'UwwP |X . $ R<[X7&-26_F2l+UVldH~21HI9SAحfߘFD^Ҍ.|A;)>>\ܙ Ku[s]>'Ra ;cYYSNÝJ[.Y`NLlq\زĄdJ,Մ؁mȿW2!X^ନ?0,Ep4,v]~G,~@K/T.V!W ߛz#)$u}K_?OugN y@}F'3kcj-@&<5޶h`' :/ȧ5XLP_s"&8,:#Qt;8 YZ