openscap-utils-1.3.4-3.3.1 >  A _5p9|, >Ic߻Cx@:|nEQ6}H>9(1,JXFF @cJJqTniy\+1XL׾M~pF?d  0  '-5|  h     w gT|(8+9+:+=>?@FGHdIXY\]T^b`c defluv w`xyzTdhnCopenscap-utils1.3.43.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library._3ibs-arm-2SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then # disable migration if initial install under systemd for service in oscap-scan.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service fi if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : fi done fi fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then /usr/bin/systemctl preset oscap-scan.service || : else for service in oscap-scan.service ; do if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm -f /run/systemd/rpm/needs-preset/$service fi sysv_service=${service%.*} if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fiH TP; /^'aJ ˁ큤A큤_v_0_v_v_v_0_v_v_v_0_0_v_3_v_0_v_v_v_v_v_v_v_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-1.3.4-3.3.1.src.rpmopenscap-utilsopenscap-utils(aarch-64)@ @ @@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgrepld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libopenscap.so.25()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.4-3.3.13.0.4-14.6.0-14.0-15.2-14.14.1__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shibs-arm-2 1609315313 1.3.4-3.3.11.3.4-3.3.1autotailoroscaposcap-chrootoscap-podmanoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-docker.8.gzoscap-podman.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:17736/SUSE_SLE-15-SP2_Update/c8e9eed22c84ec00df6bdfbe83f3c4fc-openscap.SUSE_SLE-15-SP2_Updatecpioxz5aarch64-suse-linux Python script, UTF-8 Unicode text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=27fa0f7cba9a52b764d51f699aec90946fa75b94, for GNU/Linux 3.7.0, strippedBourne-Again shell script, ASCII text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RR RR RRR R RRRRRRR]>;nutf-85b59aab4fcb7bf8539371d3cf0f4a3c49c8c3fa1c9f809ec342fa5d32b68c1e1?7zXZ !t/a] crv9uh8rRw^=qF}aٵ8xg;8Zh~SK ذk7$VBwVr-d-_󕹌B=dagW,孰̩/cY b(!wZ0;RXo$[Z5q'0gr76qX mSM$ю|&zeLRÜ3 wߚQ)1 κ¿ZZ,Ov(q/ɧGyÿ]= X zw6LmwT!\ܝ[4nq7]Bxo י@b<6!2py+-8&7 p i ؿ^yoH)+r,Ǣt Plr5`5>f%66":zΊJK8 ic[ʺ֑|V0]5Bpw99I†u‹95O?}Bsv{;mxMj^9엝<xg31̨IAE# QsѰ v> ӬF|4+9p]n;p,n$6EͩY? vgm*h*>h(9!!bYkAEg|YIB6WlMzM6$., e ąc뗽w`~ aS|m6&اvvs%pO'd<*]$ '07 2jl}1we[\̖<8J:@r6iWQ+%mxB( 3WX*0>#}s6,wFJ-ԩ$({k.͹|fdյ҂<c$+[jL:6O3LVlP~KYU@qQm  Tyi8$po_e Ia6gr_xtiXY٦aClPrwvQMH|!v 7-^5,D@HnM>A<5@y*GWjy,*ďlZ[|[ʊw\0"YOq" fr7gE64>iOpt+lReQ{֍ީ8g(4 ԨͼÎB0~h ٽtW 8^v(RxH7V}STٚ*}WuOzfcHT6ٷ\@|4mJTz>&;uJR=胕t`3n7UT ?{bUH,E7/ N$08^4=a "M#|aJT)M@e=>.o>sꢚBG>o GK O0UXctl? .yP3hv`̃WHtʫ]o9clJx2۩ )5iG$B%{+KwH֪iF|C&Dqw]LlnKzl28NXPs7[h?*[Rd3SBoPdɬqkbq=~(9o cI F {y\>[dȳ J:pz"/=Pk@:>{+(Qs할1jN$Zң/>=7t(*WGVwq=8{J 4@Xk[_fєR"VGEjzNXQԤJ@xo7Ljy@Vz{U|5ҫZmuO!$-7TN5VLӞw 5 VP?sHyb)C">o{Bj%W4:!WNZW!)ӕWٱ"(w`74C)+3[X#ڥЭf>b<Մ :q+Oi64>XFo,~4{76L($g(|[6d 㯡R0 X3ly)' z#R}1zBHYȳ6=fx!X&:'cϨed=%qp {'qoM{.X 5KDtotkEP#~I鷡-.p$1L+^㷠96cEIG_ڟ| Itu>xzsyi"Э&yFF#GܟT U_h r-2gVw||q0gIDx@lUpb"Zf{.38զƿ ŎA&0'\W-vTf9xH۞N_XR!$­@#/r7P|BEs FGm)Vi9L˝X{ c|TFb+L.84sd ߌꜭ#BB /Gu;\12"l!dRM?rP\<D ͘n%4ϣز'1aFhп_* NCp{H#V VPjŅ++4yO42 ~1AF{壔1iK}RiѵK z<7JBƓgEnVU!+QM*SUVsjIY\1]OM_B|gu=7^m-&)<Ex|cbA_uQG&3 h/zOe.@J"έXvD*ŃBsFyqTt.dn;f:T˚֭O"rATiIYիfatd&*HdVJ/CG~bgΤtl3{lMM,FUHݦ5JBńD2d&T:-QwMks5Ξ? 2HLγ13 ITSS4ӧt}7mݳK|CW ,{ &[HW@!XjsWGܘJPW&&>rXثIIlj

B.\gZXN$5iV3AX~z& ?lԂY{'V(3NU/rpyY{I=ԫ5b~h+؎nMv uAҗi(|Š,?X zgAHGS2sUF&!뭸ϣ\@"lwbU!up,Y;?m ՄM E]$gC-j6gH@]o _Ra9.y 5`@kFޯyeCSw]^w+y-zq:x0c(W|xmj߇0 h{M-AtX[lQԎdAeIqD=YXXM=L)i3_Z_Ǡ4ٽw#3U((RvY@]! @.~qeV|Te¦Έ΀l OYGR+l&)+rswKT[ V$B(KB)əu|m&Xbj^!UNYb'_e=<n:IeTrM"je5L~ ϳF/ms#4h^v=J($]IlyՀ,*=߅\A ҷtdT\]'do/(%x;zj 뽯-vӿ#fkneh'@fa-X-A;Ved+w~"NIId(MUU )gld.ѣ"7 k`6F YSZVq!QC>OWᵢTY^(`u4"%I%_O }{in4J뙖hm9 *Z2̣Bcn ~Ժgs-T\ǾR -X&F׳E(s.h3t;F{5&BSvf~=N1Nu^H/MIlp$w\@ 3rD:ċZBLA-4.].s] n8o\J$/ޟr(2G>"9w|qUe@#*LP֩O@$DDr>m:ύ,QK؁l:y;p8J5'Ҩ}6M8F |p ũ9u?{80,:js;[}h Ӽ{Qk;2) }u7^H#Yч'YVTc 7EXzi0L8Mͷث\UOQ BŤccfJ#wʋhKV fmO P}ۛ3鲘WV5Öѵ+E۷nbZ]{1\ Zjyo'ңB)en6FP5;+w2ur9 KgXIkeq]/ 5Mkk')j. ءE !ȞO࣫}7 2A?/qapƚ]^z):ġ3 <-n"REf[Y0IX&fA]--\+K @CIf TvƢ f4x*)lܚGB.esyIPM HnMu rAAChRfnYhfR7WdV*E. &)vc3o [LcBkks&')=^LPH=U9<"A 7A2J/1λ|< ͽi?䤭lèF$IHd)CPQ4X`F@|11ڼ;k_Ds6hOow2ٝ{A5%^rɱwֻa_}'״t]6c]D%< J$(?=IfPߐXő?43XBˉ=@'ϕC+X}+ O؂VʼD W] vFߓodD ->?9X,~lÈ@>cKss>pvJ@peu}}LXc%qPB!bILGS1x1E{ ݌=ڞ#Tf>Bb׀gDreynFI)GBtfmoN`'$_$W'L$gI3p1-uI/:tTu,5q^7^vD7Bgv @KXa_~6dȻ*>(I#01n ˀ;.rQ>mK0u_w ly ݷW`{ =4 9n1dnvmFDmn*Ls3}x)3b!34-ŕA$|h^Qọ)sg. e?ĠU! j;35Z~aS!# 0NȆ%Zmsz )V(XG7KSAd;$_D!PL v}旈oIn/l [*ck,o6tk~ޗ.7 2#D53q^ "N"q _L r:7 {-OH9qNY";V]."_\Fd}Kze/\gu3)3OqSHkt@ qkd;Mչhc͑$!YZk 308W[ivV譵p%:fB@n6t"cZP#J"SG0;+O1'7j;2c weN #Npmݍ+[.b t,lH7 %>#6+?; +N~Ō\9p+ qm`619}?vjY^O娼ps =IHiStb,avP-Xүdng/[u;'::? "X@VS h~ΉIG~WӔ4*n%ReD !IW;݋JJb/ js6 Swی.؁'08}PAܝ X|BRb> ZJ+F~=`' Ixkt8׎#2$>mC_~-mntmGHxXDyYx6W^Zt _sMOcWK?Mz֘2ՑY $?mҥZXOt] 3%=q% 08ũa_w˺6iٴFnj>f?}ݸS" $.\Ђ~td)i2_>6Rf^ $.0+KYKouTʝ6GP0Wted1>.~ά{,UwI3Ʒx=WkZ׏S;Iig'l9XCdc_j$hi3r3De1|ZcS$ "Ƚ$#~|al8WRy,#n wS)l^e;6*tI݆i4'𭅲iU>YB7Dթ=)9'\Ʋ$xnc%<lF"N}IU|?zD7|}=-ߠnM|I{}|nƬ!N`vJ}R}G0k[!L0-UG2؂P_t0r0߭7k?bC/VrɐA?"Ӄ&Z:w=Ti)(- H;B2IJ\ ?"ʳ!.OM:5zRa=횿 ːҒ?w)[de |qVSv?Fe.~8@,JyybD{NH-9Q:CqN6r#Z4t*37%f•Q![@SϐLGFNkgSl 揽uF\1&kNK([T(9AV@J{y$k5-`Z^I?#Ч_Yt{ԘNןOٖˉY29*$}W]jP%P1*N`Oؙ Wh)[JhkA A5c;DĒXvCQSq 2ݲG*;0.uTSʢS<\ۛ~ )-zKw8G ^8n;N3hI.͜krELZL;9IN^&-Oe vvOފ%}&u_.-6- d6P96rjpWW\^rM^"mʹ,wFGC6spb؏VpMQ<S&i%Fi@GKі)}H<ϟzDi.'9XEOѫ$L+z$uӠJK0O( Z] 7-щPĻ,UcO @U=RL2aDŽ69(!KG ]p>CnҜ:KCM>. ;q!BCˬCayʐT̮*H=P.+( 4f@jZv]QD6!󗣘BL4!/}!tD֢f`FD* 1mر$8Nb3\G,g| pxV@Yg١>tmJ5ĜVpۋ663I]o׫dv*^۳"&ajBD6Ɓ A<4\WL:;O7Ԡ x-9ϙ*;{0u@FN!Vv_l3q1  4V+U_~JHv0C$nfZJR/s_S fokhW~9)qΉТI@FWFqj֖V\3 DƄbOtO 9VgYKp{hHagQrU X?#'(of>KrYsPrQA';HKzҁ2x0-g;uk%zˮ6RӬepum .NA~Sg0mx 0;-32;o3$J5DՆ1ֆ)ȡecǯs13 TA I7/E@x@nHӠYfRwwUSR-C A}GC{̆baĈk\wӵ3rH5?z?V85Q߉K-tN?hЄ:a PӃ5 t.0Mq!µp#%&kdir]c sSrDFCa,ɟV_ơlM,C>zH$To &]0,ٸ^!g6)kkq8H73Z;RurAڲ}/`*@~ &jS),~|2>6+.ɱ/FǬJ2A n|'xl]D#Cu GsFm<}O@H)4qIHQl&r~ ta,j(křeGLau-#sDtD%o-As?w~€ v@e3nn0ئQfE(:]}PEhWlq(`O+RN<+TPŕv!~&ׅ+3jQlRӤ92U_>uߣ=$8(_ 5yY2ܐlAAriKnwft)ꤝpz_R ֵ.%qy&s듏] VG׻o#>Ld1T [lL,$yn =LP5qHR h{2&:1 3Ĕ= X9,&j|jҭ`\ WԊFO%3GCכ izu=P]u"55 ?+|bWҒcŪ*InfK3%"Yfeʵ=u.쥆"a"@\9(ͺWObɬ j/}ǜB XW[SeՋȳ$Nc}a _$\X1*CW:!'v!inKН^fynӚfaKQ]|`{`.4]FEmVXQ`Z0 =6 UH$:\VjnߠCiD5"ĤlOnz:@ѹz)kA;FPPwdfYR^36sq7iʼng`}X7hqp$I2vUGi&x$IBRn; tt{_TT}n V+=[RX#STx1P*nF~%Ղ*cⰥP R+_mp3_ujf|Kv ݆J 2dvι;=Fq;*%3 SJct}t8K '`ށ 2yzcKR|E1"4g&ڣ0$HLaɋuPm?`ce2a}i& #[&4ld-`GX̆iظK)$Zros7<1l"nL0βq;nKb^px6$)6"÷>ul\`[ӓТ9lz:g?m~0p4U/AVTʧWḈOWTәH{ث@)<߀}~@} {ܕaWo9ӎalLrAcH`R>Th^/JxAx-_=k$_9Ij!5|EL RMNAP0gg-ٴHdOq,6]5*ؘ*6ay""U/}dy3hc֞ o1ů#STCˣ(ӝsS^`MVq2u?5<)Ќ/xP'ol*Z` xbMGPT3{l!_Ѫ}즏{io<ȾM!IKJFHKfV{ ݩrf:˟٤ȝ.-wndPIP;O`&##bp$eMڵۃfuYSo.R[FUԿJE]>vz|%:A"# BGbYiu ,fgY\sDA>m0i 4HuuSC !ꬦt"V'NYD;S[w:1ʈ瘎szYL?{ZY27+© :)o0'3`$,bnhyrՇqsv%IFv]qct\xBiX=8F㬊9X)hEHxX{|z}`_SgyPp5AC<8KZվ@0.ZiȏXd(OB&2qVКJQ4ԋ64)C8}tʡ 2FJ M#%&ʼTFw_5%4.F u|cilAaA'+o ;V6UMzcVՈ:::QϹZթ]nbHgft)C4O׀,=ut=A/K9eDbAK~`PXJ7qνLG3d"GwiKQ͐XkϿ,>9ne|,&Ci8C7SygM:zKaUDywK$ή#ՊCx3Xjs o\HyckN 0TΫgv]HSus2"AOU%-(k 9\QRU!fg:E w̔SF۹~5DĜ7{"DB]GQ jY@В=͙2VԐb!H׈h_\'r Db@IhC|velCIWojhn4;Z- <}rE4tAl4 S^$~6U^ʯ\F$Fʳ[)qr*QA+Aɣ{pL* oD~>FgtPh-sN<_Cҹ]! F:81Rc[ܷC~"S|2(4cHY% (ahD5EP-='z 7FDqA|ba)?1ҪB0d#}ftO cV'Cb+U/xX@ٲ)g]oS9jv]eglJ{RIeBhr01d]k5%ګ0DTnfh*sYj>5w0`I1ELbvɲBzTD}mKFP{ }<}I |{(mKx4$M3{.D=B2"ۣʆA-KK֪'L`BtdM:BҢ Ի<\_3B]K&&;p 7v72OhfՐ% i]9Td;T2zqTRsCN+-$47C>8 |n~dӓf2P[DZ/Ds:B..R0Nb#fw-Mo` a ]4uo'_SB3U +: 9*4Q*l֊)be~3hYT+2 lZφ~ ,mz{;'iO{b ZPW*pG֜6ͳäɽ(w0}Bk릞n\(l bwִksCV+]h+;],xv*?{%c'}>U!z%!}WYlQ“ dZ#eDnjgٱ" /y94 y[B00nMJ<e.Nnbٚ z0R|<@QK/'+k<S T58Epӌ3R!P9Mpu}1. QbfY(N#uj\@3Ǝ5><u35X. 7 Lz?Jzcq^2 =YrZ A/4@Nw1C%zIMLp!׿QXLqX{'P+͕䎈_ЬQ4D5B;Bcc m^' -cDg̠~@F{Eh v~ ]ZAE樕ܛ)YݴH6HjT?xH8tm9.,D@S|1T4z{Ϙo ꂘoCKXK;ԉح] ">P>ī?@˱X^*Ѵ@eJOdĹk:=._`SM W:$YMa']}9HFhj6͙"e'YFVPu3m~fkTRs_V1\'6;|)Yp*?VPjn!bsc8X-^vglEKIiFCDJܱ!n!S"A: n[ܙGyev& ?E>^:;Gxq霾"R̺G!a}:wLF-՜ xy,Js]3#16f/9WZ;/5 #VRm}HH/pV;O^+3- oOÌWPMIO8&M(BZzԭ=o-+vB3%l;.4b*?/贚.ow%fsB:PYp$۷ޮNQO K3r~GEQSipY~2uŵ&at}hJMz6aJ3OZ*x@Oh?*gab-*ezI~Q4 uo)ln**v&֟@WJ۸: 0NA;jDODvhW'ߓ(ʨ>dnQd"B\_EHy2ڼ9;OiA4 d-cqil,zT? O]nc fOcUe K18fdnp$HxpV=i&&䱰eZ`^ l*Ӽ!/njH *^: x1 2F:{O㬌&)SAqTDL$eLLQ@Sk8 pen%|;l8QeI$ IɯЊ weUVYN" '._/dZFʢx4`9s<#΋_P"O;b\?cTi )stuIkT#|pSΓ4M*\VZ1=l|%,S# "GnX{!7NJ}OOd4v+M r W8 P)&(cpR.e&We>EnWKO %K`f 3Bô*( }}㻌-OtB,G0IGII $@~X{ IN/S KfkvȊOH(1~S9Fo;d0:ϧnunp3 xE.X(-ټí@߭4D&2+n/0Ύ֖ƋWTm,U^歒6:0s(.N!{-vCTOHlIaƏWy4 ?o+6Tz%Zn>`Hw sb=;Q1%i=s~[. ,P._%=|TCm'!m:n:ńb~0T x,˻6*n0CA%3|$;be$*{S ./8uM jFͺܘV}f9ٯ.%p ʙW6B˼ 84(+%lKJ2=c4х挪ȹ귰gK;2b;OA7 Օ']}L`9v̻'7t _QF<(JI(t]l&]'1qypl?ɶ~VW8p+p$}9q@rAlt r=Ywd< )vʋ\SblSW~ jP9zw m"5"KN| )x[uE ?8^S$R6L5sX"@DU"}(v`wZ=:^?pYu)[7؈""g^t9VEދ5Jc,Q"n#\E$}fUiqOP5~zV;Ϋ4Ucn^Gw݊1 7է HIO܌LV }0)( ]+@~:C8B&fFv*7?$7s7+{o {3e=uK:b^CH80!',i$>gSaM)=[[Biw@:&BWڿyqD^ہ qVSKjK۽IULvj$3ڽF 8f`mĽcd\o#NYi|2{oMy(Zpp.+?rUB;lmAH"ZCKe6q`1MR%e+tOɬAt|t61Qĸi!({ m]r gf4)<+~=ĝ^%.` P4ӛ)-k:VDN֨sq ly/ZHЪJ)]j86>][/s mO$~6*mh8d0ql .weNf*N7&$?FJVsZȄԐFh7ɺ^M u y=G`[`P<u8ڇԒm^J m Ob[ٸ6V~6T*F9.ͱRrR~(HFM $_9?0aJEth0j C'B.@`AYph9tP {JIxJX%=_aqHܭdv R}* #KY3X p=zRH򮆁7&&y (Ħ5KIփl޾Dk6tdt Є6eL\<0WoE45^{n*S%!DO.&Ag|7AJ.}(~XƇ3"*;pW L`4z];;Ifϝ4͘n HQlWaTRw|jkHYyT=9x[Ƕ. oQL٭Hq@V0`m@˝Fd2nq-ozpOr8&B x&gVk~' MaFL^s:{AF{OX]:g鼫̴ Fh+8*+wpKG5~3P8,i$ b&P2qir@lQH>l=z$erO&hkxI/"2D+OW-f圣z Kc{1,DZwǔ$R=w%$ccL~ۋ^t5I\F4pC+yQoe%a\ٖHia !P{ΐ>QsaN 1$*敻ll)Ԇht 4@]]]aFlwӻΌL>hKWSK3Py?ipPVx/䢝WͣDTjx3"GM&Zk(ߝ!hI{R NcON>GjI0.$DR~l$jONOC/񣕠:4f:Ak4){Js>^eL ~VLx9Z{JqݒH?O@ 0ɸ[*'4ܺZlSsuOyZ?Wz9 9/ >jQ%X@,il pcqU ~X&Qg W,$F,(*,-FʡY'Xrxʧ)Ō//D ]wLEk$ .%{hhgK533.!;U6}NMq=D7*6tFdk/U(Ƴ૾4w?IdB-={ /WPmQaBi.8]~~`׋JߵG3'V?:`#%a6#@~3z SlyMhmsfydG)7{֎fS+ڲe&'V޿Pn5GE9 DՐhOue'5*Tj򢝨k_by,XjnT^f.VnLeHa!ڰ$~^w;Α2S OG\-ب4]\XlBǞ]ߒ*\XO^zo57לCGp6cԍ[_XQ\b @*nV$viMpf[:?̗ 3 cGtr%|X4<~zSg~bݨ]I1CyE{r#ohrA?f/gi-aPZn :uΑj X:" ,&%nOL]2vWt&Z~5 fjM J+g֚򘚪J]E(U >Z0kEU@Os!i!<1wC{^!`LΈv*X`=!&ZW(\Z`R+"`(]& - Yj@0-ؚ۟~I8zGX!}8P_IZAOT-+BqSR/sf3xG qⵎ2p׮G1JZ|?ml u*d&5e#[2Hi07_7WN@6u~,rE 3\%qYYW^`gAd/m֬ ْqXpN+=y)-c=8:x1EO@hXD¥V;\t8 w:ܯr輿IPcz؊ )=2yך؎'vYc$j7R/vicI2z5(Nbdiᕪͫ! %kJV*M\ 3 r(Q^JA(CE!TYq8:k@ ,!*0NC{$ `rA\O{sfnGbvLgAbQDc'*ds9 KNP*,8\9~64? F-AVwo #ֵLE X}9P@龛T6[NSFajVvL*{{,B$pݣvV` 6\D s h l6AZc',ƲpJ;9]gYJ*fvjt8\( )%Ke2l_7MgA{nop o'Y(3-We(<`N 86SQDzm~ɟ( 7{m&'6SCI3=Iv|JF*%"6Qxo^6gs7هh)cYY;F0DQF[` lSί]:`Kɤ4=|@"=Z8{Ĵ!5Ji6@OιvJbEcp{a }0Irask֨,6w=1׌nvaFlϪ"̫n ~v#^+šrS;9LIH%4$FŨխ&c?H( v{ _4Vbol]q}DH1(@Ghjpu!k9hͰGt+ {ӱFˉ_zE(: &Kn6Q7A%L9'd?s<հbqTp18V %l&1V0!ÃP OD$ Z˜bI!c1n}An us)UrTZf@w{n0*$|v8_O n!ZQaBOw X\+R;&)R@o0{]@ݔ~8$傉|Vm2i*6)~KG.MO47[\zg\(KApIkPJ/!hZOHm_tP`o|ߛ+p'#[IӞ?ѱęlty$zʀ//}?N^=W; ͦ&@$16ݪ@.kjT *Uo:p]== oBvZe{=ռmJr ̺ī|.?>h)+TXcv oq,WLk.1e+iZ|[2[T6JEX`&Ow3Ӯw?d)3Mb"vJbmH4\ixwRG^mS\BiQu(R},L5i"0rïۮA c@>}\o*U<@f)8HÐrƒgƺCE62$tY;2%B-“P8B Lc h=H؀:D%dS5kMu8WYJ8J%Q' }%5ȣTCa, 9AtL[@o4G;ȱ'qlN.mvxލ"t!A{xwɂ9~~`Q~fFO.T^ 4ԅؚI__]+XXOkg|܏M2DanaaY4Q©Mz:-+l8@\PCϗ;>f&^TcEU$p8PFb| EYs#NM:6SXw}\'e{ߑ'][3fη .t`(&[ix&6 m Y{. BC$ S *5%`KV-jb: pYd(Vsl Z1D7}6U/ce;۝!fxu| Taoupp\K`J;*dOUpXDv|.I)1nf-]OΌsoV_Z|e_S¢-jb"'2x/ʥEc[z\|'Y7Ã';_P_蜛"pf9YB+pD7I8*H2YLv#ZR~mu,*ėbr: T<\J$2SU<+fTA'i֘vۖkq\sА2L]4P}3a(!zD*{8~C`M5Tg^K~)Yˮĺg +}q`~ $*n,`S;v(2єaPq`4-;z9>~"#cs2vh|eeщNHQm&f4)QcIjtjGU $GEƇA>E˂R ߸] ~ObFq裫fy0=){c@#qEj!nH31vYz&`Co e :/Zw?+9 C X?{֛ р?MFLFl"B'N P> %VWĢAe aBC7`zdQ|CP?UCp}/Ŗ#3 MpE,X*_)'U  N=`3sQ$%H.`g(}$h-#tlG%b$!X7l(ܱb ľl^OK~y*/)`? -jl[#a:7%ne1QoO֦s56n.c[TŐ2I,i7)H$C,je{s vpXy l hx3}@{P얚(֭_1HEP;[vBKYփyL(fWdq{ }w-&CM x|mԶϩ&$}(+|2sݧyz1"tsRx*AHsp I`tGƮq',P_vή+'.^+da>7楡tt -'搹%Q!at|KʌT,.i)NDUY8 kXة9]|߷r_8sfj?kMF=\BnA (Ҏ+yEf/,(Ӫkaք*vCWRu1C_J g2[;bj'b R ?ԡ/sO"./؍vľV2L ۍ F7if6 /5|ڕc&pv7$o2 B}LJ)gtdEВ!~I]ӂWbL~ZJY OI)Vjm9$y]3 Y?xF. P`5? 6י]z f|NmMcm&F%z#h^&O*6}- @ųx :ڠ" a (1!x0xHBXjSF <: M.MaTVB٘I!9O}GSX؉M%n7O4Sp#gerSd+_^]zsV={ [W*4ASdlC,V'?w7FbŨTe~iz}۞彷UZckYx2:Y̟K|ry:C0Hq#ew2 7uʌ5Ns?&usVIv'f4 mw*8S+F;.p\diÌuOCU/zXX(fZIm xF\iNSE% ܂I05PP,XB+8F)hQd-edYgYdDNu>)bĬ,ʣ%mZb_L?E ,:^\(DVf޸c HEZ9#QA)dN*}Ϡ}%d1='X=(1?L1_ K{f(LN :0w |v?Jmd[ì`x&1|KTMroo+8b|ҏiH|eɵ,-b+\S]ɢrچlթ! a%d sޤª 1"F4+ܫ A:NJ&+ܑ'ґ@f0L{?3ځ4vYJdƉiFy;XIʴ7$;ENGP)]*&/+( ~!,8tfjfDn&{ùjX1[%W3E*_\+Ʋx Iz ;w݈8X:F0ȧyZW :hUxK&r[ed7{,pr U{Jk4J}p)Ɩ1NO#@>nI;rh됓ꊸ[LycՌs H6)V܉n^X uvvG I{(\2~+$C-vĄ#SqED ܕ'$y QR7nteP SQ Ï!w1L=r'+ ˏ\c"zb GkwAr4JOQ KI/gU>u;v_)5O8kF"ޡBH` A~/ toat N'^ N2k#xdajZ<*h Ri[ wh݇FN*Plv^6pH7wP׏!2s[ ~Ĥ9 ,v@={B k2 &o3YqR{hٖ"B8<_> P])X6N>1Lq2dV׃n[7WN is]L̀9b>{ajC\:6٠ש^? 1'\*O]dnp}*w__VSsD+vwpyԝz[~k]XO@ga^_%A߭]-vZTx&L.?2 (QNglם(sD(M ީ68-#7jЇ(S 򿺹M`|u׹=-ATqWnxHWcS:%ځ[.1,9%މNtHG0̞bP"eu2BZ)nO sdൠmY6w-V0en򈄧q} @R䌜vfeq:zw<.gԲew_(^6dN(~~, e2ј 1* <̛>.$!_[B(QM w&NyM /9Aj0Uбp_~dD433*lQU[1Uta'K2{.S"/+. Z(i5]-F%pXP[:ѾS֠`IsJEzNr0ɇTtL8Ji)N^v[l= lG Is&A6<<דo%$%ʆú5:)Ic[u6yg1*{k^27vKh[ocY ?/c4wdW} 8_]$"?XA@5 SzBI?~=_p,=mOubE&@CE5߶ ^/-!'R WfzlgaH-/=bfRfYiL2r0;CB M]D8ȻH_"qێdtx+Zg&+pl Lj=z[B L;Bȃh7͉ #@gás߉l u%H;ԖxqhH'fst\^k?v_oNys&Y_'Lr`x<*e"LM"Kj*gډ!ۑ㫿䄺1b0qL*lcäEkc¢Y, =!Z+Gm >Nȷ pYG )"KgsJ*k6ymyiQ ?q$\C:S?*ԢzWؽeZ$*^IXXԄ78^}W;{憿Ф) r@J_L%Pν mvY d'±'&0'W:N<[^eBؙ 9S=}m!z{kl>n-/tV{='8ƶ&$ҙuO:{SaDNE9+1ը #Q|̹˖=g+=VG ØB`)%;RTQ!!^T_y iӽf̫e.UR9!Oڷ܏#z0?8J={|<kz!$vѣ]MpB:B}3o^դ!&ENF %$I gV}tIH۱ثtcJڣɺ;-U!dV7H5r#U.qG_a<yplcI6Wt &5fQe\.GxІ^KJkIy Q [ˍZ`&XH`t+#+tֳ5A>ASd{;?Gj{U. h{ v1;S1:O2VZoQ_|L `>0q1nUtS{1Kf#ȅb6dUcKu@je1W:і[s9V^ZduY2֞67( cڭKquw rFPpNN_-T^nr=p̦ /F̐$¢{j?p>x#9ܗ/=ʪ =sRU@+e<q6?xT+a;#H7ij C7P^sI!*:8bi~'TAb'ʈ% e\穓f` |Ug7>9FOeD~{ķw Z΂)㑑Eaa1{R#n<|FyΝ㱯JZ[OS9B`9 v ;r7B!?Ӡ@˕Hiݐ`jRy= ʯVչ3Z!=K?O=}c`/>m~]^I Ⱦv(dj]ZX}]t*'z5Y=cE uWs'b==s4?Ihж(_f:\$dWe<|k40,j w6Zhho"z(4+@i)8DwrJ~f]&JMg|,ͨ e6"=ʌ[W5b>ԗ0A`a_D3FVBW ^ e"Gt!}mja7ser_a5Cj`"x{;l. $"/B d !zvchCBՂ\EDz.|z+T^l ~l1)}a~c@3UQ9+Im$UtW@xwi Er-m tr AGJFW\Դʩ/rʾěPw airrPZȊ6/p$Q:UQOL:bP t- mp:hk' )7,Hmks9V!:mi iZ9Uu\23a^ģAxLZ~9A&-vGsx Uōe2r]1y@a]fW Amd6r5uDϟ;@qk/o0G.`j%P]Q [Ĝ'@ZHU(E"olgt/OΧ_^%|NCe#|z7TsV5 I ?Ը#߉c Ϗn|I۾ũUlًI%m\(" 7 j9/:oc3KE(dtX)Թ0)9,_ε,=\[ɯ+H*??e{]%ԇR=\0\m_'TKJ8lļ5_2i'Dvޛ9A0<EB7VIjO(d ZspV2t0%:vyP mzk8arHa)g6vl(1'84 i."R!NsXfk NQqC -~HJۈQe|p#ޔi!Ys# mljUo/N+ ljGY)kЂN_Vd@:ZAn2F-Q\U u)(-/ASpUh*^7XIGYU)E3& 7].DkMHH6#"bQZ`ε QWQ[Bxsk7ٿ4tC*/E{z3J;:DBs# `MFyhH,I1T]c><7oZ{AB .L6~C84 }8fZ%YAD9>J]8YˣkWs*yӷ̽ځUƫ"^QX>3vdGy&O&>__zgέ&քXG:F(݄(%#z"R=Q'L+O*q>xO0d[I{ ;ֱi؉?㎡ B@P16uUu0 Jkǖ'1e1KQ4wem}lS;Y܂;A|Xt +ɚB G̯@.@KzaÍTժ: A!q/w?,=/JFNy9ԳH&o;MWd"N$5O/yK,O@śiƽ7qysj=k l7Y?"+>i8ee`#xxIZ֑tβ#~əqc"&Rr سQ97Lmom:L\~NunA ] ;Ok$;S09੓\>HAW+W2#!s{ bKe=Ċʗ _JkMd kyDJKZ>TB76(dk}ǒ'AN Os#X&FUj!s`7$*hsi)ERY$ jZUAIN?GD8{.9a:zUr_f%Vel%[>}- GRW۴wfoh3j۟?Fd'==\ЎE9n)$<7@7ES 17bd#ý=tr*DT&|Sz 9ѵj o%sqJ;P&e@u2B艹fiq>pe焉~lj:l?>I: 2L# Y)Kfjz4'ͫ|_YV3(}0[[;&P08VX6$ ><("z):`g T0 .92F$($*$uL9}BZ5}H[d[E5p6Vy:Jar?wƐnVG 0nE5!p5Kt W]ƫXC{=ϽvuY8nN׭DrdA,xZxŇoQkմuٹAL#%`kc{4vNj&/G(){7:2gttH {JՕܓq4fp7E1S%_ 'f)Y@EZ#qI\ r9HbaFC@&ENSk^Gi@E]{gy}^ƒf/՟6ΣvBOf>ˁv?MrBh}譫xGΥJS!G6AeEg~t)"5i}Ztg.&h#H7]ķ~{))ۜYU|/kdܥ)/붭;WrKʯ1Ɇ8X߆''>. @8 xi.x>gF7ön]RJ 3J߆&埚>=Ut WHpB4MZW ('VIݭZ $MC6OVtG -4ueL DnlmpVxVlٶ" |un΢PTcD)8)EgH=9*ǔ5-rC{놺"֪EQڝŖN ne+"lmjrpAKbw{w+<_Uyy^ KpT'^IA dKT3O^UtZ^kT(FQMh?U~@ lgf )0K\q^)%RO_{D%ׅilJ<Ɋ_EfT`ם>WyGOy=4wzFoK X̀>?~_YҬ gUd|-G O56(EtӬǂd/?9^Oq <0ߡsX`vO#=yP(קՀUh bjXĆXY%|j,HbG?bf 6`I_16X3Ld`ޮ_)D1: *\RlAǽ#$p6#^8@9 *Iu.2坪4ն4C!(ʰz=tr\:u!iՊdAm Nj6LwD+13š¡cnK )B=1DYCQ?3 1־s73Y ݂֝"ԛx7#۾0 ̛{-r)"DV3Wj_W2V] cC Aq淨_}SMvIZ%!7*<L2MV#< jX>:7qϡѨjYXo?hdwƐurܦ1њJK7%FC$Ǟ3"o/_cbO&yQ-~U&߱t]38|Lc4:@l)hq'+J.ȍP>K<1q={wڦ"^K@hlHu*BDݦ\#4'C#ix3c$򈽌_T0EމPg'B{KZ~k/LAX##T:y7w3_ 64Q),~oݛj2SM~]Χ9jAC'ծ#ձ.H$^wF |1FԁKm.@!xI t{vSI})b;M:H0JR; QQ&sPB 5, tyͬmCߧHyDk+a<"Ēc:%@ʠWG1ڂw!\OHkZ< QX4h*cٓ0:͘;,S5]NC|_(ݰ(w;3_@}B(\od$"KEv+ch =iY#A_+V$ gL2^t `ubbݣhF[LB?u9l2 xZ p%T_4R#;f(luNrgPSC*!EPe{T)psjޭYpjhB3`Y0dnD=p֎JwUs4&Fm$|&Oo0|Edx$$W (d~MڧK;}8JiQ[ `K+CYxPJ d[7`vT21NJَ;fnՅwnLI.O-xRĽ*toIk3.X 焌Bێ%0.>!00lV؞AQ:T 1S76{w]'?GSL/O3ɕ7_U J D;KhFg}ˆ_mQƵc Wƾ)%5?uU)'8]LO8ףnJ!diR[2p9$yl濉:1.r]^;yq2Q$cL8a*Ҍ]|G%{#]POrS4T-G gu < ?2o GCpB㴅0ծc$QHvC|w =̵ZuXи xU ާ#KI8207VJCj#.4`& .2x$stV \5,RQBeoLN[n3mט}%fSS7i) ')Dw6ŕ7r%Fq(Gꯟ$G bvx5.Y*4 ILԿxM{5΀A^ mOk7FƣOu2HxGhmzy*zIк[i,5{5 c:9qL~da\aJE]7w2R>G֟x=3y\ $ wNfZ8ג߈RS`7 ZN~6hL: %t=b{(wоP~@SR1B[)VR ;]$tԳ{5}ML_~w?fFd՛OHWubq}:x))ڐ g7]Pavw~} 5}Bl&Q催 TŸr8 8(s¹v裸YXżQE)4qgq݄$NLtCp =Xѷ8oO \Az.GV5׽2+" QDlŠmumPMR((KvCgWK3A()Sׁwm gLIQG35\ ]Tp蹅M{G˕O-`07ڭ~!͢4PHZ[ɟe0j!{@Fmq!{.gfe!9mXñC]<R]Լ#k(ylP *WגOZHeضg TBoU^'$SYõ$A)A8[=IgPmsy "s[m96X!75~= ข5de8 Mt]lUYnVEY`OR>=&km- ~v_9OhYjy,Q0>&G<4Nz7w?qWjh6~[ Z~޽DP](^OG#,vSFQ'BbEiX(-{Ѫũ-gUhY1*qiK}\q7=[~pwDHث`9f\ъ՘ !P5%d( waF6;Uע(I'3S(cP*y=*7{{/J,yye|I7km?>>4~ T,l TPtA&@Yu(x/qhVyFH<%Mdw}Xˏ炕lxHuᤀc*y5ϝBqSUp]?%l)VT~VBdq ]&amKtZ,0]Ș9Uywvٞ_=e.{BI?srݙԗ1w\TW?sH,DFDžM K*m#B1â^^ *y1=ܰ4J-!6y5:E%'Ɓ.C]`gX%@4A/1 ?/:I(4#;zOZj2 ZC #EꇴWbӍHSs +%x0&r ;3\+5O8i&Pe(?\ٯ/@[+~HHcɋA6X>5VQJ*I|%ht)> .d֑pB3)EM@a 5j5{"aE WEqnnTX$:G SF0=7 .q}ږ 1XgN/恽6O D#Nh]TI$ӏV:U/ ѷ7n\+w!II1t}rp|*yC_7ҳN} p]LL '܀(m?Sd&PF@b%=`XDs> pf^1ZŘS]X:Ԥu:sL#7E6JbEFLpQ:SY?CƂ/! "Mq` `saI i7/&V_"|2-3!l‰ QE ~P$Xd(ko!ztP}:{rrr{Yt˪Fɞj'^PL1r9Vs60 ʟFӗޣi9:ՆEJ_ mWTlQ֨&!d:#C 5 Է!+s B=1I|"Oxd`"|OCwF{bXxj{>>)8 fm^jED7L#AEs_SieJƌ|k&:&PEN+joN}Ȝ8p vf0X_]1wc2T^)Z旤Ub mO28"Z{ ggO"7fGoet;-Kަ&z|u);?hw$fWhhh). %I!*t>5l^fScxHi]K^%*煭됷c*AgC bt1,+#3%|-U]ý2w/I/mWOĻZJ陑Q1z?rە@oXP[~ 1j mus^X'#ޅXBhn}?jOk8uYzid͖ ab%ȕLܛO#]H9.2 m&hb.I8ܦJc6-fq{n(9ˤ| = zbqVJ 3йG&k9c-/HG,)^ Dba8BB"qG9"VI i]6Y|EFޤY 6Y }* &wcUv.ّ ˈoIWf<]Fz!eEKuEE9qʤ!NBrtkTiPe <ƐN{ U?rEF r(}_RS$}I[~5궆(!ӷ Tᬓ?ڥ1&lѫ&~8#{jEGMR){mG*<)lv/OC`dӠ<6AD{Y\[en59䦳_Ralفhkkj^w}]vx:e1˞yq߬ 'G7)޽_rJy`TKh< xNJװ/|R'lT^ݧzяY]&3(rn7#6釁+YTc v65'F܌XSx1<^wZ; [2#v0{T>*W:܎ԿnUH΄֔Gw*'q ݵ- yN":=\=}8*`( ZU #lʓO$y_rF\ xӣqNCIC'23йk6, ڛTӎ1 X^kNeǮW#'8/g FM$yd -MO ^T+ ~~< T6GHLmr[S`BR5w`3k݅ O_j]#+JuG>h gB"i_f7@?75h6K*|;zmunԬ@وV%KMjZDN;zP)RQm/lf}oNW찇ys] Dj @Q>gͲcdfKM4 _ jzy 0|D/HmN DB(f.1ġ6෧r.Bfi0i&6k,q>I+JҽwtYs N_>HKCG`luzoDDR._꺃apk, :6w?~gqe!S6 ) :mSӛocqK]CcĬxGBZE6O.$y͢޵F+#9P[w{|%dWHg&ܘ$.R(|4*,W|s&,^o8 B__q- 0 ;gKzqd:WR+6,-,'WI0m_anrpjŞ7}%+y6@L$hw8vEV%KFU)oOu:鷼 GS5̲Σ7)%( ySHlR)6kj!g /OV`s໷+ۻZ"a.S3rצP<嘑d3 ̳~5Aغ$#@qHfҪx:PXj{*}{5Rf#z~At_Vn[gp?"Uˮ4$~!~ʤo ps>t~>1m hٓU_%Xᰱs%j>」bI0WHQ5A !$T"=kƕb/jLvv&T`b?K-9Q' pv.1龱xoBua E_Q)˒ΰVzm`bQ#mqX^b)g:[[턄nR==ɼ-CNqe?lE'8ӈ$E'~#!? 囸ӏq"acSH>Whk-ODQZ|l@1ظ-1?BciL4hdŽ_d}/u3kwdmW@Rstl2+50z4Gzq.Lϰ~л=g5BjYn"sm*hr_>NQ7ɝeIr",a;o%Ӎ~0l DqOۗRFXxҿr K`wCښW(Ed^}c4ug):-l_xUՕN:\/i7SKW #Ù*VOmjj g{L$c:}Co jSFVVfDqX'?Y2nv*RSz6IX#1f,6[ruaq8 7/+5glT/t0ΦAFk1qtqcGPH/Ϛg^F~l:izv{1ӦֿGM_U,On 8e!a쁵QT@0Ο|__ֺU8N)gP_?RD?CK,8tJuFmHF7:!QR`S$; '=~: ut#Nl :N9!*T` /pz簚D2[3e7)6Z+a䀺V:6cPi3 1[GDb 3'P*y}$* [^Ed1'*D 2CLLFD.KqCeT}?֡֊u؛ YΫr+1+kiwA#Rx%H}%|x?O%XjQJ> (Ĝ9%-vAӺ eydn32?9{ydbcK,׵iah>pYΏ1>BY|}Ja r ֗D JMz5NzZY H.b9q#o7MOd=PW(Q8Z+[7cYUoz4_T*d,Sp#(9uY:)#8R:x[()/jcH"Ot827Gi(:= !qyr} ~+5HCoHi7P볼qrI;:xzz]6# - [@_C@^VPҲop[N/͜wγ׹#-y r:,D:Wgg̍Q<(hkg&1mUI24obOXBgh7VxLV540xxg_Z6|q[!aEg@MځU# Њa.*~*ZE +:֥%H&_gڑ֮Xm.Z竄tmۅw@P ZOP8Dy]#a,fGȍF_l q6T" Ht23@yظ h5:rVlxG/M~;Kt}X@ޓS{w4Q 1m%ݿk[@ ar2sbev)Zk5fyzAF5PcC4:4BBJz zϧԘ㡅`>oDZMV ,u-X㚘3뷌nQ[0^$@q$pVR & h坛ɶ;}.G 4ע :[귧Oq,Jy}@v̓i%'~z9"er1I՜Ȼ~ t-_hIv/<ƍ@A#<51PA8aܯ%%130~1+\~ÀD_ ɕ^e]"K<,de]/XaP6\߫Ɉ%? `LG(YxSč-S)_۳Ocۮ>HzԂܜo=<ڿ+nC1}-PF'@1F v47 ZH`#HQ伋&|^NQX[*sc9X;/dɎۀ}H.͞e瞺K8GƛTqtvS'#E\/t`Ǣ**uR ["NVCtkh *Ю#-"Q%f[#Fb=/=W=_Wpnl33֏خ ^\^AlF:\B*=طZE:+E^LcҌ(=1yyXF"Bzẓl_a(# lNh\ & 'ZA=!JaNs70~ӖVC2/)f1e!k)$Qd0.d2R5kw"tRBt @z,%VIސǑ歺 Z*7zтT3dwJkjqxMB1g-C&>[=ⱗ| bߢ{6~P](ePL}y(kBد ٱB.g%7bqB_ͯTrE >Ԥ (M0ءF ";J),ɗ( "T-l+4YNUwcXQJ {jѩ\OJ6׭]id i,@DC`=ޅ]QTde$Dq\}VvQJ#DK U7fa.8|pԖSC1ʋZ>%bM{KKbcHg_xt?\"㮗ƐN+S1ʝ(˨}*jbx ԭ(+/+o _d.g_7]:= 'T{i c`^xq ,p!ws`+K2* zT%L3=#Vۧl̹IW["|ĎAAP{e-e떋t_ \W;ie bo)\\\c_oa_: 4+B%2ɭaVZ1|"qOD I=#a@ێ 'WY '[|xԺNd2m?mUA ;U̇4QRp Z4^ndHħ{3e+NyQyyILLVY_@&?<ʫZVs. +_îfALy~uxP\?"uSgh}g ; e7dݘ:l%!WڸF*L->Y1JX_o>E|rn}u]fPL\!I4G5ҩlS0An_!:\Ws-|}fWVZR &ʲa?2n|B@ągWo7 5͕(-nT*m@c# !B%xb#{ј.cP*ʬCaj4,$[eR< ޠt$6RRܚrT#[VvA}x%VN)r z+{+Q3fꚁ3 ql=5>p>4\SFeB l $"rrYc[Po+ޤg_2>^l{E WiiSb !qpۤ#HiFHKBQV R ~܏ՐxSG|֝iyuĨ)%\tH޲w}D o]jDL=t>㖣W-tg5CaWp6.^9DKp:\k  Tb~x_A%~^xg Ņb͡H2fq [* $yHʉ:m1 ǵbߙPvȂݾ'C.VrziL&Հn>>N_ČE>]x5 8iIƃQ&KӅ~(;8=m_0`{u@,,؈{E n@+A~TU-SҤ!qR&z~(sOl: Z"Rzr;ϲ7o`AdYc#UzP|h[Q9K0sgbh/ 5Jr yf▋RxLm.iHUǔ%N χf78BGnW3[`Y80J<^:3n߷[_;O&aڂ#C+uJ 1x39PeG)Us3v'pX.HB0]e:uuIiD%d\;(#6 0ݳd,%BC cL=H^Op] s9nsRl)CE V4TbkzoF.e|B(= I9t \_bzn-^n"J_EtTsVM.j$x).D UmwA;T1[2w< >,.kܥ!tC_eR$60 Bt3וs?<EcR]ifM;jGBZĀya>e'4Hz^?E5E8r&N "nMemg+WmJ} 04&O= $Ydz̝"L/4FbXwMAzgLj;J{ E( d%eGR84 ?TjKށ?Pt7`I[7H̸wsH+lbTb=ϤzUo!]z!kCԋ} _mգݲc3vxFz :.N9Ly@ˌ_&Cgg}p2V#ԂTKZ|t,ARȟ=4[P.mj@?#~1n+;lI)|ϻՈ!ɼDɏ>=j#K=1Mh{Иz7@jn_fVdVi@;b]+4Y:T>"&:Д zY:tI8/JM0gJ+/X%et0oۧPtUg/[Ir29蟏 0 K'dkBJb~IŎ`ՇQ 69ti kq0_s7[`d3P[yW0IZȄ;}Pױ FuQhmCgkDcL5@'f)}ow4̽!(D wR)Zn7xKtwx^<q 8Kh^9i܍3ɡN;7Uk4^4U3`"Ùua|ˑ0 2j p!V#‹*76DQNyԗ`n\si,w%,@/MԗaP3T1#Bǡc!^xuEK~fV ~Ego,:x%12Y&PW6<XS>]V➅q6?:'0Q!QCR6 L沄#ο#ۀmQN 媃_o=Uh#Vi M g"Dk.mHı7"4jk}[dr:qB?l'i@c=GNEbu[?Ąk4W 8 T;w̶D)9`;{DDhNa2(Õ3"5yՀ] bf춤ò`װp"X)Qz CQFxP08x YE 1^eڿh Kc3%dK͎_36Vj3kqqQHjA*ʴ^ }n6?DbpZڃD ƵHbE#a?|jW%