openscap-extra-probes-1.2.16-7.3.1 4 > $
A p [}=p9|f(cQp/R,$> N7 I.3Fg84$ΡTQ $ɧĐ/u<u7 =- R>&X{j@ tmT{ bsGmKX IТ*qsi?N"Ǒn`Kg|06qg/Y>g~160n0R+1Ǥ][fD=2 یD B;`\4ߍKNu$"FTA} 98142e3dea7583246646876bc8625fe16d21735ea 44d72f03d5bc583a595ef55e3448306d460444915abc2e10ca62a0a01f521198 [}=p9|y, Ͷ>ZALM8˙R'~{J[& ʁA> gw -|w6V*F~ O<TWFZqZC_gz
17*Ѩa
.ymt6/n&Q
ӊ1 %y|x$8
;m?[0G/|D T~yvwK*<}Yz^H @< -\CtR "7qog 2t > p > ? d % 1 & 8 R X ` h l
p x
8 @ x ( U 8 \ C 9 h C : C F }M G }d H }l I }t X }x Y } \ } ] } ^ } b } c ~y d ~ e ~ f ~ l ~ u v w x y z $ 4 8 > C openscap-extra-probes 1.2.16 7.3.1 SCAP probes The openscap-extra-probes package contains additional probes that are not
commonly used and require additional dependencies. [}s390zp37 0SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Monitoring http://www.open-scap.org/ linux s390x P [}[}3262c8478c980dbb873a8de44ef11f7ac68f6aa70d634c56bd7c08fb5fc32817 edeffdc74fc75ab6400281283e3087c50bd7ba744240ea9a901a59075b6245f8 root root root root openscap-1.2.16-7.3.1.src.rpm openscap-extra-probes openscap-extra-probes(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgconf-2.so.4()(64bit) libglib-2.0.so.0()(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libopenscap.so.8()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.12)(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) libpthread.so.0(GLIBC_2.3.3)(64bit) librt.so.1()(64bit) librt.so.1(GLIBC_2.2)(64bit) openscap rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.2.16-7.3.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 [{Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@TS@SS5d@S,)S)S&R@R&RRv@R0@RRRW@Q@Q@Q@Q~`QyQIQ-@P
@P @P)Pe@P>@P!@P@P@P@P@Ou@Om@Og ON@OLM@L1@K3@meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com meissner@suse.com meissner@suse.com crrodriguez@opensuse.org meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com mc@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com dmacvicar@suse.de meissner@suse.com dmacvicar@suse.de aj@suse.de meissner@suse.de mc@suse.com cfarrell@suse.com meissner@suse.de mc@suse.de meissner@suse.de bitshuffler #suse@irc.freenode.org meissner@suse.de - 0001-add-a-safety-n-before-the-end-script-comment.patch:
append a \n to fix scripts, our default ruleset does not have them.
(bsc#1102706)
- remove cpe id from sample scap, so it runs everywhere. (bsc#1091040) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch - openscap-1.1.0 update
- HTML report and guide redesign
- dropped support for docbook
- Introduced new probes (that are to be part of OVAL 5.11)
- probe_systemdunitproperty
- probe_systemdunitdependency
- introduced raw bindings for python3
- dozens of small bug fixes - openscap-1.0.9 update
- xccdf_session_export_arf must not return 0 if the export failed
- expose xccdf_policy_get_value_of_item as public API
- skip "Signature" when parsing sds_index without spewing out an error
- return non-zero when cannot resolve XCCDF
- consider the last set-value as the effective set-value and export only one
- test suite fixes
- do not destroy SVG data in XCCDFs when generating guide or report - Remove unused build require on libnl-1_1 according to the
changelog, it stopped beign used in 2010
- libattr is also unused. - openscap-1.0.8 update:
- fixes related to Asset Reporting Format
- Inject arf:report/@id into nested
rule-result/check/check-content-ref/@href
- Add hostname for each fqdn when generating ARF asset identification
data
- Add all MAC addresses from target-facts to ARF as asset
identification data - openscap-1.0.7 update:
- fix namespaces for attributes in ARF relationship element
- Avoid ".00" as the score in HTML report when score is 0. - openscap-1.0.6 update:
- fix process58 loginuid integer handling on 32bit - openscap-1.0.5 update:
- XCCDF titles and description support xccdf:sub resolution
- HTML Report lists only applicable cpe platforms
- TestResult element contains applicable cpe platforms
- Introduced XCCDF 1.2 schematron validation
- XCCDF bug fixes
- tailoring profiles shall regards inherited refine-values (trac#373)
- rule-result now always includes at least one check
- Other bug fixes:
- Dpkginfo probe collects epoch in evr
- Updated examplary openscap-content based on the latest facts from
Red Hat Enterprise Linux 6
- Minor changes - openscap-1.0.4 update:
- Introduced xccdf_tailoring_remove_profile to API
- OVAL bug fixes - openscap-1.0.3 update:
- bug fixes
- a few coverity issues
- a few memory leak plugs
- broken comparison of huge integet in OVAL
- fix-return.patch: removed, has upstream fix - openscap-1.0.2 update:
- XCCDF generate fix now supports tailoring file
- XCCDF bug fixes
- Generate guide points to RHSA pages (rhbz#1018291)
- Generate report ommits remediation when assesment passed
(rhbz#1029879)
- $PATH variable is available for SCE checks (rhbz#1026833)
- Tailoring of top-level Group elements via API fixed
- Fix-filtering should not drop fixes (affected SSG)
- Generated fix file is created with sane permissions (trac#362)
- Inherit parent's namespace when exporting oscap_text with HTML
trait
- OVAL bug fixes:
- Handful of xinetd probe fixes
- Handful of process and process58 fixes
- Obsoleted textfilecontent now supports text ent comparisons
- rpm*_item/epoch is reported as '(none)' when needed
- Fixed dozen of flaws in ipv4 and ipv6_address comparison
(CIDR handling)
- Made integer and floating type number parsing much stricter
- Fixed floating point numbers comparisons (trac#366)
- Fixed case-insensitive comparisons
- Item filtering fixes in probes
- Consolidated some of comparisons in results model and probes
(trac#367)
- Other bug fixes:
- Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248)
- Fixed static build (--disable-shared)
- Format assertions (-Werror=format-security) turned on by default
- SCE scripts are notified when parent (oscap) is killed
- oscap info now recognizes all the document types
(adeded: tailoring & CVE)
- Documentation improvements
- Handful of other minor fixes
- fix-return.patch: Fixed a void return - move the gconf probe to openscap-extra-probes to reduce
dependencies of the core probe set. - openscap-1.0.1 update:
- versioned interface is used to handle internal SCE plug-in
- build-in gnulib package was updated to current version
- bug fixes:
- selinux_domain_label and posix_capability properties
were reintroduced to OVAL system characteristics model
- selinux_domain_label now collects the domain/type
(not the context)
- oscap oval collect reports progress on stdout (not on the stderr)
- typo in the manual page (rhbz#1032537), and another small
clarification - openscap-1.0.0 / 19-11-2013
- Improved heuristic to distinguish 'local' and 'remote' file systems
- Improved comparison of EntityStateEVRStringType (trac#355)
- Link against librpm (if available) to include rpmvercmp
(on other platforms we fall back to the build-in rpmvercmp)
- Bug fixes
- openscap-0.9.13 / 08-11-2013
- Moved SCE to separate shared library (libopenscap_sce.so)
- Introduction of scap-as-rpm tool
- Improvements of sql and sql57 probes
- Improvements of SELinux policy
- Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf)
- Minor improvements in state_entity processing
- Introduction of CPE name for Fedora 21 to the internal dictionary
- Added support for ind-def:pid/@xsi:nil (rhbz#1013011)
- Improved error reporting
- Bug fixes
- Changed CPE name regex to be more permissive
- avoided reports from the library to the stdout and stderr
- plugged several memory leaks
- improved xccdf:check-content-refs processing
- misspelling in syslog message (rhbz#1021695)
- fixed OVAL's element processing
- fixes based on static analysers
- test suite is locale independent
- new library major version 8 - Updated to 0.9.12
- tailoring improvements (@id, version, and benchmark ref attributes)
- XCCDF 1.1 tailoring extension
- improved robustness of CPE dictionary parser and exporter
- and added misc CPE 2.3 elements
- added Fedora 20 to internal CPE dictionary
- updated OVAL's results_to_html stylesheet from Mitre Corporation.
- profiles with duplicate selects (same @idref) now export correctly
- test improvements
- bug fixes
- fixed IPv6 export in TestResult/target-address
- consistently inject target-id-ref into TestResult in ARFs
- improved rpmdb manipulation (rhbz#999903)
- solaris build fixes
- spelling of name of default language fixed (oscap_text related)
- fixed CPE names matching (generalization vs. specialization) - Updated to 0.9.11
- bugfixes
- Updated to 0.9.10
- bugfixes
- Updated to 0.9.9
- --oval-results also exports CPE OVAL results
- added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to
- OVAL variable_instance processing (or so called value multiset) and the processing
of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and
Collected Objects.
- improved test coverage of OVAL variable processing
- introduced new internal data type: oval_smc
- added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm
database offline mode
- bug fixes and dead code removal - updated to 0.9.8
- added experimental support for offline mode scanning to the OVAL
check engine (i.e. scanning of virtual host disk images)
- improved OVAL variables processing
- bug fixes and dead code removal - fix build on SLE11 - possible 64Bit issue
- fix-missing-include.dif - updated to 0.9.7
- bugfixes - updated to 0.9.6
- new command-line module added as preview: "oscap ds sds-add"
- improved xccdf:fix processing (support of DataStreams and CPE)
- internal selinux policy preview
- added Fedora 19 to default CPE dictionary
- bug fixes - updated to 0.9.5
- oscap xccdf remediate (new oscap module which introduces offline
remediation; the remediation based on existing xccdf:testresult file)
- added support for sce into datastream (sce scripts can now be
embedded into the datastream file similarly as oval can)
- improved bash completion and documentation
- bug fixes
- bumped SOVERSION from 2 to 3. - updated to 0.9.4
- high Level API
- improved Text Substitution Processing
- technical Preview of Online Remediation Execution
(the oscap xccdf eval --remediate)
- improved Library Internal Error Reporting.
- the oscap xccd export-oval-variables now support DataStreams.
- improved documentation
- improved schema files.
- tailoring file support
- profile shadowing support
- bug Fixes
- DOWNGRADED SOVERSION from 3 to 2. - updated to 0.9.3
- Embedded CPE dictionary (allows users to ommit --cpe argument)
- improvements of DataStream and CPE processing on RHEL5
- changed API of various functions in cpe_dict, benchmark and
xccdf_policy to use string timestamp instead of time_t [1]
- fixed several issues found by Coverity and cppcheck static code
analysis
- bug fixes
- bumped SOVERSION from 2 to 3. - updated to 0.9.2:
- rewritten the heuristic for pattern matching on path and filepath
- CPE 2.3 language applicability testing
- new ds_sds_index API providing a datastream overview
- CPEs in source datastreams are automatically registered and used
for XCCDF evaluation
- --cpe option autodetects CPE dictionary and language
- CVE support (validate feed, print CVEs)
- introduced info module
- made "$oscap xccdf generate custom" work again -> man page update
- bug fixes - updated to 0.9.1:
- the http in the check-content-ref/@hrefhref support
- the cpedict support
- obsoleted the oscap_reporter
- send start and finish messages to the syslog
- the XCCDF multi-check evaluation support
- "oscap oval validate-xml" autodetect a document type
- bug fixes - updated to 0.9.0:
* few public headers were renamed to follow common schema
* cve and cce modules are not build by default -> these modules are not
utilized by oscap tool and thus untested.
* --enable-bindings configure option was split into --enable-python and
support of SCAP datastream support was improved
* plus fixes in OVAL and XCCDF modules. oscap tool reports support of
XCCDF 1.2 and OVAL 5.10.1
- libopenscap.so major version changed from 1 to 2. - updated to 0.8.5:
- added rpmverifypackage probe
- added initial support for source and result datastreams
- added xccdf 1.2 dc-status support
- several probes were updated to conform to OVAL 5.10.1
- bug fixes
This release is able to evaluate the DISA STIG content. - updated to 0.8.4
- added OVAL schemas 5.9, 5.10.1
- alloc.h is no more public api
- bug fixes - Fix schema_version of scap-rhel6-oval.xml (to 5.8) - Updated to 0.8.3
- added XCCDF 1.2 schemas
- changed XCCDF report format
- updated schemas for OVAL 5.10
- added additional OVAL schemas - 5.3, 5.4, 5.5, 5.6, 5.7
- multi version support for XCCDF and OVAL
- a schema version of an imported and exported content is same
- added rpmverifyfile probe
- results are validated only if an OSCAP_FULL_VALIDATION variable is set
- bug fixes - add OVAL/XCCDF content based on yast2-security checks
and set them as the default content (using symlinks) - Fix build with missing gets declaration (glibc 2.16) - Updated to 0.8.2
- XCCDF check-import support
- XSLT transformation for XCCDF 1.1 to 1.2 migration
- SCE reports now optionally use the new check-import functionality
and don't need separate SCE result files
- bug fixes - require libnl-devel on older SUSE version - license update: LGPL-2.1+
There is no GPL-3.0+ in this package. Also, the Fedora spec file states
LGPL-2.1+. This appears to be the correct license - some cleanups to make it factory acceptable - Update to 0.8.1
- introduce Script Check Engine
- Added an OVAL Directives schema to allow for a tool
to supply a set of directives to more easily specify
desired results content.
- Enhanced OVAL Results directives to allow for more flexibility
in allowed results content
- added new OVAL objects(all OVAL 5.8 objects are covered now)
- update dpkgprobe
- all issues reported by coverity are fixed
- add capability to export OVAL Variables from XCCDF
- added cvss score calculator from vector - Updated to 0.7.2
- OVAL 5.7 is supported
- content for Red Hat Enterprise Linux 6.1 - draft
- oscap tool enable user to skip content validation before evaluation
- bugfixes - Update to 0.5.12
- Proper subpackages added - initial 0.5.5 import
- open SCAP protocol implementation s390zp37 1534952187 1.2.16-7.3.1 1.2.16-7.3.1 probe_gconf probe_ldap57 /usr/lib/openscap/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:8520/SUSE_SLE-15_Update/abe30e7adeaa7355b222fbe0593f508b-openscap.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=c4535589f4c7439e6d789285c471ab7b5ea4fac3, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, for GNU/Linux 3.2.0, BuildID[sha1]=7a70caa00655c62d22f19014aae4121df59cc91a, stripped R R
R R R R R R R R R R R
R R R R R R R R R R R
R R R R
R R f11O>ܛr utf-8 72f78ceb639c467359af270378be5f107d2c37f0375120d05ae59a665b9d19e9 ? 7zXZ
! t/2sm]
crv9u!ܶKC
f )a.؝4^p)n (@ӫ {8[-ÚkxiͶ| 꽧$/# vtX$$K+ T!ōKy^tK.Y
aCAW"
nr8n6=6xLwL. @R)HI w`#i gIS,2pP4r46vTt$Ni 4=`֘yT {PQ""ԜZD9gt* ,W,gS}Q(1hh<*B0 .9Oyl=>>zF\30s#A@Z
5i
/^y!+ИX'O+.Lp! $x(J 3
ґsqE;cniʝkB{ybX3U?ݒq۳W _<Wd(0 hB>n&B,~G]R1^agsVo% Dyv^v8Rdžnghe>7DNmexI~YL9^̯ F8 a-pik C
ӳt>fh%d?X o: MuoTi9QA> 䭌ɻOz2I&)P`dȉHj*73ɢ4TVnl<)j@M /2LLiY%S3-l 1҉BDny}?ڈ]EpАm/4`ClLI5KgƻWDhQj y wDlGAbʄm#^Fg :tF3V_`B\@γk@h
| qx l9|L `?"1/F+!`~Njr `z"WpAv08 '+l)D߂Lis)<; M<,!a' #29"DS|d&n;Gܘh,",6YGe³# Q=W)c e Ð I: He_QoaX[, )h[`їs iYŏߤ3B/mYB VIOtA Cj`q}&`'A][ȏ5 /;>8
rv9nbe>5,cYqךs K |Y @Gy<3IюOƑ>?-@v'IQ=Jvgծ
cRkD]Wo#闇6i@V=VLUO&ڛj^O<&,ZF{zֶЯe$I6hҵ3.Ajp;{7 e?f5j#RpjȽO^x HsQN I1$~%uSs^_BiIwB62
E Dt\2 u<2TgZt =-gfTO 1 1}}Fa^ Wh[xfvn驊!V&m{0%c&>4#hQC5^b ;xj2ZPUj0i*6/)|.9=NHJ9VOvI* z OZögF#$UHm_yhئ}mt_4Oz6% k K6EmDq%ڰx6 Ȱg %˽/R nKsZ"!h'.ʎ:f;H!UOZIrsaT wڲ6:>b.òC
w5 B/5YHx
ДUMnOqN;YFcQ{f =({eY{0E$H =\Z4/59 M4 ~GNt-OGV?.od>[ q\.~eȵ)/Рl
h&A"/ f.SMJ-`g0tE o|nM86?:ϤKsB1ug{[cY-oI mQ+] x ʹ] Kwڼ;|9[ Rh
NyQKS-+(spF4$)0%G㎢p'CYJ`N`flJU9{,Uш6G#p䵚p.QKx~K v :j=oA9l3}&_8xt 35)/ !<`y̻`e2t jF5rd b5
aˬ蹡ߣ]ھ4:4GIIZPT0Z1]#IDK4p2\~^nXoノrkPϽϘܱb i5-cANv4g6 JE[SĒF=f*>D[AbOw{`k9e?ǟc W-VCjw!Xں~,?a ͂(oƖ"*
zcƨ:Qwo
1{~%0QFsrgm?
*awG 24h=wQeA{x Sπ
L{ܷa6rrr.j$
7LtĺcE|_ЧM["vNQ',tr$ 41*w*}}U@=<%?|4$OS 4e6"bc# 8I _)τ"Ѽ+&[YO=3a Pr A D L#ƻq=k BСF7uiۜІؖj+y% &nXK2vy5uX=,b筒=T_p,:Y|l6ރsI9헽x2uwn/e?
u;GP{|U.nd d`"sο 4o%W%1VY⠹`_cn_3er2AԨ3/lc(-+G9v(FUcg=;] n~s?:/^c-wZ {[3u
lbY[EqigQdR7P)Oi늇cԗolq̆+7n Zf6fJ&>j=ъW
#ӱy2m&3 6Hr?Hd$k-,+eH ZVN6áݸpKZb"&aÓ0_(w}wx41dP j
XhTF*? z:%Y:FaQسToD7֘w0/;ͳըWܤl. JC̀X{zeEkoA(0=O"s!Q50u?f3BgF #%SW+Gԓ1V~rbu4ify0FCR Cns*qrp%Y\g[O ލ>e; N5m``xƇK)f@zF
\F $)QT<<@ێJQ$҇f3lHȁǎδo.N1xYNk 4 H5~dGr"]K
f8p 3 c- ;{<ڒ;.!eГ|
S旤ACQB4k XS`ߛ$'z 4Ԛ܉8-GΛàcNW4)ۨ4xLex̷?.EG$Қ
-; )zT;NlnG8,lqr?EPJWXN(ʹv%1ѩ}kUķ=©' o!$)nr,"7_JTZ 3|F*=w-!2O`)!Aa(DxR;P=j4#]N0IÖ v 1[/L^ v~ *SPyFRKsNZC僇:Hu_h+9 =яDa^7xے`e2đlҀ(Q~p kyP#~ʯ72~Ȼ_r6'yH.YdyqlTRj -yq'dq p~sqj
:-@߸\zPt;# R :mwT}ԫJ&*O/0AAx4 Mn_Ȋ<;ff |wUJ{ uDJmj~*,;O}POZP4`ߥ/*7CnuOm|l6(ݦI7Cōiu @?=zXI(hR}qOG Dq}|*1T6C
"_(' hwY5m3 N(KX.z;0'S?ץlm4m)2+xtIBNjv$FŗbSi;fd!3Zu&ul䒤
$4aBty"1z@<40. ƈA^G`& [D[ۓ C{'6F@Dٯߌve@V]p T-ߨXR-r xJΛ^ vN tIVaB＼foXnpLb#PҌϹlѱl:c@cwύרѬ>A](Fېhi"E}Jx?ՊU
a h-ubnF卵 ttػϔ~b(HfB̙.}QUs\e-)&u*N,Vs^ڌK+e: R:ZOVAf_W#?XU1+Oc;B8nqr|CQNÓ?/ Bσ |&p yt<AS .*7F0r}5j|q~_7,*J8V%X^_|vǻ@MZvg"if|OTz K8tsN#Z1o ^pA#B61,,ILd|V^\MgF
fBF3^ViD 7׀Z{ MĐ7"hӀA?\c!@ˑ<$=(7b3xRGVwqU{N~;0X*2
CR*4%F^،yEqtT9)C & :IB"Qs=hNwےECԍfger_f^@]~ o?]hJp¹B0 ݧZ-^`a
uv|`}hK.M>rD8~j'>ybY`ݒ\ _k2<`ۧ=|]+
iTxyӲ~A\SΈ#C~ya4AP; \@an8%#ab+3r)XAD"Cۖcx 5;LXa (x8cN=6ٲh尜ܯȌ1Ь.߹
EwҞa. W1ˢORfW-1vAXCwQRLHt `ѓzΟ-6= 1≄VQ(`"]tʴ;
Н.3b|H4O2?rF].2/Jbn'Z4z?oR-$f/wXaH8 \?M͍P Ws ʭL 8H ?Of- oG~?Ω "Riքf$I̵'$-CZR$)
4oV4r1?
k@Eq
̣shJU
hԃh '}Q4y$h$O ./~^$X0)/-zm7J꣥췲
_߳Fed8#UFg ]Fs$w`Czt*eVz䄬Mu:kUBԋ-]d2,iuQ?m7FV @5wbwI%m>Mj~ׂ1o^ěsvDB Τ~~ a?C4I1qiI-hzPÉIT`c;tmlvM? !<4Z\dj~@|<=4OUl59p&:la+C-h`
<.Z; pEyTH {/W=k+`,@LbdstN=\ r)¤teu*մZ>剧Z$J
]
٘GuZdϤ-;Jj=SR3ʞmU>U:VX*gd,}uFNh?mS P?8`Zgz03:#5ك?δ}WuP?)wFPjMPY'MyEon
JLSJke)E g1VXUVM|=":Tނ41 +ƛhAkF&6>3<& ̵NP $ET:,Dw0(6l} c5CWݪF4 +~Ϳe/S" h6=ܴ4 'NdRә4yK Lޠ\YXe/1V9T_ؖ
4w=luz"徧= 6YƏA4OUeVS,}$4:- la$jaCH
>{B @(4ZBbhּuiz ,I_;ߺ< -5F˫n#؟H)Lճ.6;ojeOrn,)f2 1A-'@i%@p
1.
i@ʹ tAC@P)(0u (m"ih6A} v Ѕ"һJF=7 x+o f CIf)g7͏u8ıaP,G32MH
7?e%~ ;ImfLw' 6 "$0R̛MN_hB {!
ص1bf}g>!Yf4_`ͩVP`# ZF@eA.k%l3>ꄇ=7fs8~KoGġmK$|
:]W2mIt:~ L8dZFjuqLC<_w9:E+#n,m_T54A///+UʿP!\m)> xʷWZءH$ͨw
fՋvmR UP״Igو={7S7>FU~ &uQZޅ +ڽŌfG9B&z凮 |- 2 ihx ߛ?a,R( ĊV;nC_o*)|Tkۙv$eq0Oqj]vD!Ԫq^P 9Ndq6V VmRt.`JS?ZۋWuȒw"TxCT~AHӁ$HݶCLvGڍ1@sǗ b?$4DYwߔML$!F?Z\ŗo/
d>8RyF>"P_ |SӋIʸ ێ>G/u;_8^Y)'i1f0 5hTy?cnhG6)y~z9N)ɹN/eRCgxs0255X_A [ P{o]?|E-1(Z07ϱl3bu&Ui$y/-Ǘ6 fL./dB ԩNY ]3Q16-{*4* @- >JO> BJ :x$ H+՜42V Tk_彾v7hԆ S.
)۠80M"%s0"-BӠe~S~#Y]v5 OzT 4qp1`hsK=2I/9[LU:wzo"vYL84T1yc (. nPa6neP_;v>`TU/ I; -nCvY?%)+7߀lgPq6 gWލ8 ,^E}F~AHђb"ȢMBX15jE QDedDJ4>(<uBFYپ?6~j{8Hpn8!j/ A·C
-!k,DŽ ][WH;@|!]j%o0[/ (Oh7Br; Y)1Qx}{6*Q@[7B
,SJI"LA*`6Jڹ$fe HSo5vyws+E^Wr3Y3Ⱦv>Jߗv5
ƪ4ډ>lJHLѢ- bahqjl5[ ehilɻR{aFlHn _*6
d+J6tQ¥i&. l/:AI0k_r Ƹl8NKlt^F Z11-
Z*7=O}8VWK"@))ޚJu(̧;U|[w6I w?`/iNlT,]cX@I}e Tx/`7!ˁ" nX
49~ 7M}f1׀fĵ]̰b?ªt yJвX'Sf_|wBxk0)/FL'?_A4F.`ߠ!F mFo濽[CzC~
yNoK@̲,+)Oե~GqȔ^ʡEsRmpь v;o 7jf~FZmڅ"9,`^bz}";<^0*|>$k;f?1%˒
T0ilI8np'Xi;Xjη\u[v_> #$)*ޝ0罔# yP
R \$r6Q0B4HF*2j
xRmJXN{Rq! Tw8?PUqm^>WSHFHyNR#8|l#a~/x[_4]
Row៷d.X
ԣ_fO[Q` yKu.׃ e IIha,xx
; ~k[
P,>
~}OJ'ѧQks?\nGtfU~,Q.Bٌ!I\O2w~iJ5Xt:Y ]j֔c}mvFx&C1164Y !:ܐ?ͬ(elKq;ZU:431wȶl^[
:]"[ 7ehj/ }LÅs**s:K7Q V8=AԻy{z8PAGՁ!yzʲ vGŸ>JS_rǔ|1 cVNĶ\"S7!/a+=CoczamGE?}!#Gt|#J>
tNd-8 $ d8l/=|9m<{0n) ۲7ĊCi-3CT
F;4FT9.|j$fa W( -uQـ9 de?em SRnb"F Npډ(qX/đf3bfBQ˄jC?' Mk]Am 6$8D!P lOΪ#%QJpզf1
r0Zd(F<[z>"9?e'>U3-=
kݪ=Ũ %(gs*X6輦';[ytbݝLqUUi_-o1*,/[9Ops]@RTS~ xQx"7217T26
NքNV7{Lט*s7i[u* an^
pJBR[EHn9ek[h3JL"ǎ_T9kHP?|,Gh{V;[f͆@03/'lf(5CŘz8!ٺ0Cbg8/ހwup236pxӪX3m kZf]Ke_
3Iw?& [4H߶*vB4f?3Kmfo&(}WkD5{\ *kC"'}`
C2s4࿎D\jY';x>HD=Sgd+9DSe8,'#cjZv7il/[0䀬-jTq#٢/@#==:_kPD|
СjN? zp/G#/eM`ՙ b$b| G Ya zX6=V!W2dxCHUͫcD0KM}@4)6az[4k;6~~ Mu WlcJ3,5&7KIo-=wm%d8x{mO x>eq\t2[`FiB''zTTw +6hJ, =J%o=>WF 5
]^{jZ'۹C _.kĤ_o0"'ߤb\֩S++$הbX\ -}m?Hcm=8[x/+x<%)>HGҫptp200Bhry<as#yp3*
PT o5[ǔz]218 -eLQIƑ >Q dڶaլl'i'j}+<\Mo6Zw 5k+T6GEed55?xK1b 'njM&QUߡ m{":ݔIBW[a5Cp!O{\: #L}5ӷEV0XX l0gGc{cq;&ko7A
~n=9
#Llʅ(@ y+x Կyo}ea"HRXaL/On;$iΫ$x`OtWƷ% !5J4ZrCc&J<-Sz{7 !egl"N#Y=OWp-nOI\iϚr[`fؤ}s]HZ6%|EoR^ܝXr0hv/|]YELO?] >wHH_* b ۧ zSҡ()٥SZy˲X8e D0|bQKu@; [j6e^3ґ#ƀu5 d_B?=g$ Ԇ'Ae<bfw${gwW TۑRs︹:?2,[c E+`Ֆp FzROPQ?F"KayKXj ˄rzi;N\>WW̐G Uopi!VS1U' ~ڿc5/+F +{2 L#K z}mV5A>ʦ)V=8qF<5f $ 6w ʉR(v,ˤEJb{CO
6QcAUtA *N DLȚ-Tw@hJ.\\EhS* 76CQށ8 S 93/\ZGؤ KQ̴̈\馁Dycmq5}o<'f9'f V`-i0>`,Ȟjm#}
'"CWBйjJ7-jtp
s]QF=\D =YT
QUܧ;m *N\2?&z}l1Su I P< HPYQ$$51Pn+yۆyd_mM+/gz f(iuZ-1S 9
m{ߣք_h:N-yA1ߐv#Fw b8}})S%^97{^1tq& :8U%-/DžB!/[nϒd ˸Uv
ʬ3 J_<M3Y]Yir.Yik҆Ej$XDi!;vk>7.Ȥr1#dž wfcf dž*ts.fsl*
IxJnw3P=#JXKYjߙ>ݦbJ
[Y7z,:SiғuN
b>qzX6o ՜G(e"0hqA U25qVl}+NXM|q+
"SFLf:ɥEA[>C8aRሮ~II
tfhk * +iv#bEiNs{=jl5 N}mU//V @K,jQط Nc iz 8lSkVzSOW#4M @~m Z[N !_y܇ %105}0<`{Xȋ%ϗ( #FLCc R$. F.w5lMz)Uz Jڇƶ%U.9eU#5AؾئR@૧"wjoUAʂ '|)
ypաOd/3UQ4H~y+K{bpwB}o ݕ/A<J
C3~>g/C 'a.Y :PJA~ӞfLSt [HBB,w?wI9ؽ-2N=c4Nx&뵵(P#3¤#* Av L#OCx#(
)>72M=l6`"C oaN<"3am!Xe?h'H:4XlYE+ 4
^ .je°VU 鰂ޭ cj ڨ)wE̎>
771BO,sߙN@Nր N[Aį LeSoǑ%I =KT_&]~9L)*k' +S 'N%VL
P}Jф&znk3QUub< Lf7 Y :,o!"7AVG7h)V ̼0fI ġ_{ߚ:.C2Vƣ1пOV3{[ܞ見9>/|,܍PR b d֟Eԗ. F,ˠ ^,gqGZ+Z
@u ;B*}RԸ*^n*ƭ+Rxuǩ|Z=3tXa
7LRY[2J">DA`$[ H+i!]w#=H@敝MxFC^ } 8jtfT
-GI\ +Nd4WsTV㬢ɤ,WQУy'ܪ:9rAq\s=b!^P2% $=m3˅⻳8yKuSdÆ,
PBLo*&pK0Nbl5*^,0iy _fS'6xCw.~ÝLDhM,KKWkL['ԥJ ]4nn\$qhY ּEy&!KaO34_1]gjg'1[1 Ӑ ^(aHO$?=exFC
tk ;B/qWyUwd:([} k4uWO]JJ?ɘ$/`9to#lfy09^K|;v+* I\ PQ
9aB*\stEmUv""U+X|iyVw- g`#Xa*={XA08M?g^{iZج[t!A-
3^J
2F: BpaM ]2 z'.Z3LAe6S_J!ďUFhJa9ftȊ6]b:@جRUv`rp} <0'6_j7pG7kZQts#̆WǦ~%`hB:~Di$,ֿ 6}Gr}>:O#6ߣ0=t~9h^3jѬ %u5|ᬽ
bV|ww855
o8꾄R".P5=LYx1{d5 \3ڏn5"l/X,R E4ix;6Ig9) ZMܩPd剳GmNQ '1*8)Õ kzۺٖ@n{L:
$_bÔ̵zCm) *I
"i;o-ǟ:Mh!^)ff|Uƪ.`;|c\;""G4u1 nv߸:>=( mtxo byz./10)Y9D4/6NSr v<
Z ["V˸0Pɽȯ,;.]B9Nݶy ].CڝT@pTZ2ԣ]R'/^0&9W\D: {Q85Hbiyf:8{8*Zd6z]w*?\20mG`k)l^0G(ItVv{Ij `N=|;BEB~`<4otq7,n
Z:P+"ů!AN1 t8\1mJPh!lgF2-Ńjq*zD:Ƶ[ \69^*lZRg˧9(1}X|L4K~J ݀Tk.sȴTU d|eH{}{qql[Bڕz'7,* ]
Pf.9m{tp&N%bXE6%( ,ӷ1 [vJt̿kG7תlVa N#dlu+x;|LRr'ԺY3ZZu/jaȗ 6uY9Ye ~D *q+։N}7:K?.h kh]~-d "'/UQGo)O˄:ܰ8NcG! ϊ`F'Kz $4YiV `[jsc94 /D_ a)v% ]! rG58@wAyWgcc&2~m&jL>AFwEjPs2$RU2S"z7Q 4p!k)"wLB2;Z/ݎ BGDl `ȑAٍS0=.\5M5t+d: R&gC}5o|X<.m_:1\LǪ#^|GﯣCkڻ#?1ājPK3֬̀WC @싘 nFփh&6
ɓ RmJ8nBgWU"q{)ŇM x,ɀ`RDgIrpMHװb֥>9yq 'D+d((|2RnyL" %&J@)ipew#Cf˳5I2g:X,Tjf(Y;@Oiy j{
`n~agPhp*zMOzj #J^.OTP?h!4& P yATK 9ɚ8%
p:xA(GyDc r~^Kn ԘW@11%z1[G|kH;⻠ץ~9ۗZuiETw7= ~s N@76|81Ge 2H:˂j*91X<',p:{JWƾ)ubϰQ6|bAqzp98C٫0L#:OT HrQJ(R16ߓsM)U\ x2FO B?5ӈnY FJL%ZAS)zy((q#KϪ˿f6wdrC%RƁK䯇P!
Cn~IQ/PK?G4h:gG _x" 93!ךf#_Zb7WM$xs˹>ig-"9V ?ztZb6+2!naWi܍k8r|ˊ võJҁ /XhZ`Zsg-J,M3 bc+C08l,IcL Da\ J"je 1(GK;6: ~?:ԊE 3kNmh0ҡxT7B+ۧ`R5f
a5jvǧ=\{q[ P
Uw!N! Vɟ2\ W[ ^dU˥/Dz5x1W?l'6G p'DyyJ4DݖFJ(H9fňGv|/R\Jw6Q|UpnL -o B{R
N24?uaYq
u:b6MoOr ' Q!zXy>v [$Ւ%a֚ xZ's$ pRq e2 o~:##:{Z+vU]s!2 7|دUBHd t gޱJ4
qG:{A>S6 B*> _a-B كZ}P L#_^l(^Í漉E䊯Rd`ҒG^v46. בb4@>
53jܐ}vUC(W.RHHbaA{R71.#R$O820P}^/ ɜ ]'!{DCìov`3\{2-)2`m [bndo©|#Q ~SsD`W,s\m.q[E!Pf
\6)+/}?&|-GlI$nH2Y6TJiN8j{"K!AyǦSf^?sfU JP[Amp DG6p൸z3T>."ZW~A[&9=ۥ*9ِP~K@P볝qKlz*/L M ۷.e7EHlʱ7#HzͭihXRPM
uhnbJNk '^˞ W;<0ng'?#|v `.`M m$YƷ;/uZB{F5*;
0ΝsK ! E@
2Bʴe-oГM}컅4HA깬7e45sMK%L܍0c^V}oz,^#J}̾B.vibn
CBhW XeHa^->2i MMV!lI縍N9$ E[ 7L" #vX
Y ?hGQL4 ʧ|e$
±'C\1xlYmDZAq%ZvE W
n\
eT; }ia3[T-2 +ݞV
M,铝'1D`Qc2YjBl'.{92.f!Yz&ƽ;T`%-98)b9B (
?l3{# ?{>{k" J
)!H{Gbt/:H35LEQ:Xvo kh *V
G{! `ZGO/M@C{@wPDҖƸ#"- ʥMd{ s >viPWѪ C Ke&oi6e*Z92*8=yCʺ
ȦQ;O݄~y|^G_ eY(@QCq> 7t~Rt=[K@妹ϡeV N0
>")K6^Hx\͑ڱhjy~5oEx%we䒈0n,k> R-F,3BI (]{xO(Q ⦏jQ!8 oC$ZxPO>6+$4$QmurU6m/d6n*f20XR&YΤ<"[N 9ܝC? «E0fD)>Y Ёg
YZ