openscap-utils-1.3.4-3.3.1 >  A _0p9|DVT;y T:fлƙr$srwRl篞&z(&L=[(Tn64};s٬oWmű:ntAŲ*ʤ(= vP `'Xck*ڿ͛ś uF1ndO+Y1Qv9 븎AZWu{&Kz\:(n ݿ_zBX(t ʎd08e5daeb84dff1072262d5933a3e88fcce088fe9555facdf8c101afb3963a741fd8e056dea865b0b8af3e039c1f1ba4cc2ff0f2dn_0p9|w|)U©@iQpM m079Y%r\3$Dvn[dP.zwȷ{qUH?A(gKCZ`x^,IȧȍpFx?hd  0  '-3z  h     w gT|d(8+9T+:N+=>?@FGH0IXY\] ^cb,cdXe]f`lbutv wxtyz"dCopenscap-utils1.3.43.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library._1s390zp31SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then # disable migration if initial install under systemd for service in oscap-scan.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service fi if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : fi done fi fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then /usr/bin/systemctl preset oscap-scan.service || : else for service in oscap-scan.service ; do if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm -f /run/systemd/rpm/needs-preset/$service fi sysv_service=${service%.*} if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fiH TP; /^'aJ ˁ큤A큤_v_0T_v_v_v_0T_v_v_v_0T_0T_v_1_v_0T_v_v_v_v_v_v_v_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-1.3.4-3.3.1.src.rpmopenscap-utilsopenscap-utils(s390-64)@ @ @@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.25()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.4-3.3.13.0.4-14.6.0-14.0-15.2-14.14.1__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shs390zp31 1609314591 1.3.4-3.3.11.3.4-3.3.1autotailoroscaposcap-chrootoscap-podmanoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-docker.8.gzoscap-podman.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:17736/SUSE_SLE-15-SP2_Update/c8e9eed22c84ec00df6bdfbe83f3c4fc-openscap.SUSE_SLE-15-SP2_Updatecpioxz5s390x-suse-linux Python script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=899884ad89d2e9887eb12cd4a47b05761d33ad16, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRR R R RR RRRRRRRW0l Wutf-8ba405e9259736a4c4c1ac35dcf30824325652e42a2fb9b43dc50ecf0129b5844?7zXZ !t/a] crv9uh8rRw^=qF}aٵ8xg;8Zh~SK ذk7$VBwVr-d-_󕹌B=dagW,孰̩/cY b(!wZ0;RXo$[Z5q'0gr76qX mSM$ю|&zeLRÜ3 wߚQ)1 κ¿ZZ,Ov(q/ɧGyÿ]= X zw6LmwT!\ܝ[4nq7]Bxo י@b<6!2py+-8&7 p i ؿ^yoH)+r,Ǣt Plr5`5>f%66":zΊJK8 ic[ʺ֑|V0]5Bpw99I†u‹95O?}Bsv{;mxMj^9엝<xg31̨IAE# QsѰ v> ӬF|4+9p]n;p,n$6EͩY? vgm*h*>h(9!!bYkAEg|YIB6WlMzM6$., e ąc뗽w`~ aS|m6&اvvs%pO'd<*]$ '07 2jl}1we[\̖<8J:@r6iWQ+%mxB( 3WX*0>#}s6,wFJ-ԩ$({k.͹|fdյ҂<c$+[jL:6O3LVlP~KYU@qQm  Tyi8$po_e Ia6gr_xtiXY٦aClPrwvQMH|!v 7-^5,D@HnM>A<5@y*GWjy,*ďlZ[|[ʊw\0"YOq" fr7gE64>iOpt+lReQ{֍ީ8g(4 ԨͼÎB0~h ٽtW 8^v(RxH7V}STٚ*}WuOzfcHT6ٷ\@|4mJTz>&;uJR=胕t`3n7UT ?{bUH,E7/ N$08^4=a "M#|aJT)M@e=>.o>sꢚBG>o GK O0UXctl? .yP3hv`̃WHtʫ]o9clJx2۩ )5iG$B%{+KwH֪iF|C&Dqw]LlnKzl28NXPs7[h?*[Rd3SBoPdɬqkbq=~(9o cI F {y\>[dȳ J:pz"/=Pk@:>{+(Qs할1jN$Zң/>=7t(*WGVwq=8{J 4@Xk[_fєR"VGEjzNXQԤJ@xo7Ljy@Vz{U|5ҫZmuO!$-7TN5VLӞw 5 VP?sHyb)C">o{Bj%W4:!WNZNd@^Я( 2Ĥ_XYԮ3"i6UI-Dm1L2Cvس`ѬW>{?YuG3jnн'+Nj :I5mڡW6\+uj6N Q݀3%9oΝ4Q'hv:Q,d#E쑆ִbbBQ'N(m5\70Q"ڜ@)ن8a3۽,ǘ [i^ IWj*l8` =㓵k兹+ / }42;o}X.R2Rkg&ٞ'mh]0nHX$ ]lN-7tT c`i:m2rM^5u-V^FBF#N,,yL9U:>vaEhIs^]xfRBPEmgDz𼓖3Ğ&JThwfq ^!p]a/f̐I9H1ށWc'$<%ehnA Iը@m[R TФ}^%).82LL) ]gk?CWPEB-x/x|poVۿqq'Ev-Ρr7;$ONgW=e!Y>˱пhEcU/?xSL|G^ikʭY1{0+ݦ߫q(iҼlk> A^Spj{^R`;j[(7Eg * q+٤dONJpP|6"8!sX?l|Z,yR`9{#Gߩ`)13bމ/7k  xqP͚nJ `4VDY '1ϝoĠy=<9oIў}+rZ3i%#WMrUGeѱ:55BkZx#PVQu+N*a[Ќ>[?4+cXR+`B^wV/u(IEbBkV*T9#p'$ _Mҭlp&W p: 0)<'9G #oDzͭ_AkǍQ7%mϧC- 8. K|L&b2֦T?7)oye-g/keޑTlChǪU|8DT@jv+@yR1>].X0̩J.WbT+?B?05"$IVx`fi6yn%ty6P%MܥىL^J#~@xD:`p9Ru\Ϊ~ Lep-aU*Yo݇GЍjcT\jRG7i)^pͷ0RqRl)-a0h%hBnV.fVG= v#z2>-d/Y XMZ32c))Qk'^N'\&&ǧgQѳ{B:46[jeA09׳ 7H'e>Ŀ׽ )VZrN~Ii:}_0+Sw j0W!t1ߝㇴUw 㮋b,VW's4zѬ.] ;$ i v^§!}'HMk-8aCV-!)HjpB:rT XO=R(P9ԨV{%COw^-|m#E fro;\S"4 =zJl+]BLqsՎ]A P0~!{\C}Kvc_Ib4?WyTa#;|}٠]pXh{zBu_^@8"6^P[P@W:Rkb70up K_4{MMu$ H$k9ݔb/GCS7?` IJo=rjʇ1A)mQ5ԚGZ#tkY5?2֮ Vf:$bh5w; rvp:GNӢR;GzK6g%֪xp?t'<QaQ%Z$ '\(ֳ7md~HGW9P_B8dV/ch1)u ^9[B%]ӿE.=)[B&Z̲K9K#º%6nSmet4}/&H+Kóbhԝv/`:\ž2krk$#1l&QMiXUicH(kW!gl@g؏;v 9(ȣ'iLa$̀Ē=x Q=b_^ wF6ڷM9 U8G7[ܾl^GWzyꋂ=$6Q$mǀJ@T{0 G[q< n| QLl@b; j/Ti[mpQ9:Rt?u<Ԛ4 ncǙ@cmfu2"fa9n 3rxW};lp?}ײ hM GeQ5Hp 0Ӎ=Tfxص5'`Dl!̠>D;&*.T\:(YE/.U.DzxůZE!(AAf9u!1VEԦ͞'ķ/`iR__׵3>HFBEžEZld z|Υ{7buuXU_dY06 m·22,BScڤsc L4| ,y2xoz+ +cvTq˻d®u50cM FrJĝ"rJdR^3|}(Xyy%}dwVٳbˑ-NlﭮHb[`8U&2aŴH(d8ƚCA:\UU BkqPlE*,C;@5V4L$ w+Ӈ\U])>DvWgzڤU&ΤƒV,:/0AT7mnbWj!-?i?mwӎ SWoiB0D䪒}+#ci6v~침bL5gEk]3:m;XIAKy$ W@y(eqbUija;Ǹ&]ҁ EDԑ.D}G9#Nۼf>/nyL 4Ri,gX W "4Zm/3\9A`\ab0Wƅܙ= [uDpQ4,qW:*O?9ϳ:S?,S/>_B];,s`RW+ux-cZZƽV`0[YQc  W!m01ʞ7z%$oK2W6,nRvjdb/nÉcȒzvT0Խ,qZ0r*/ dsHS@ XwbG`g>[SʼH4(}ȶmE$Bv"7![І~(}tQwnt&G򌥈(u} O\1G;DK H;p^L` ;(C;34ϝ ]+wѽyF ռD jCAoioSQ¤H*7LJ᭫]n?BKuK1Al@o&yՊJ$`1T;?-!(#EeˬBK$ͱ\Ъ$'գ$\ju rdkmFD`tg-L A4D_2M"U9JQ? Ya7u~caDupiޏ臎,*^cb1anYDT߫h1a ")t|t<~d&'LM\8I\ɾb妛P !|>d,6Ba?J{ڬeg3950n"x暰ϣ*썺w"&[N#yK{H,b qY";&̎XX ܔDd,^OcSC7h.]rdosq> 덷O꟎.ViJ-,ŋDlcƜrk҂\œӖuA;D;RJꌿ.@8n7PIbP'B\<⣬E=&Msr #]_} Ii \$Z5'/LǯF 80ڗE)D:9 +>1eH;B/-yqDBOqsfr{GfW@nVc5_` Y9 \kH#TI`qsTM[aϩ,rKWJ %N11B=aEQ99hj+ߴJʯ-HFR?8^%mQ7nnag AJ%[ ArXq<@'eb*@idGjeS;tc|]n+=1ocglT";n&Ozb&M~3mFSV['PHB|565◊ S}I-\נ,<MuP`i5LA=1[Xn3c)>^Nh"! p¬ B40[\ HOsqѡL1yp. #k]pf?Q?A 9)GN]V󺯭Lџ/{) YTt -*7~j*nTޓÿ]15Y۲0r0 ݾIMefzuHE]zywn5Wڤ//,@1r$:a?ҷ<|Ȣ Ք%ܚsQzq4[wx! jSI{cCei X1)Ίn~o%mr*CRǐh9 8Mbr DRۤ[~1)|[J@>t\ DE{4'-0`Mi$gG bvC+Xdb8NIa(F('ŭEUav}L m>.ԛlq#@WW'4:<˙0c&6206A˱sfŻ;6~EEy{u$#jh^KAM{y7K> k:\U0NagZEv9 6LIZḊghn?+Q:HklӞ܅ev2 B!t`GxoY8/vdb[V7;`E1اm }ev$'h׃Ns@[fm~}m7G3B$'w#M-K<<0ٔwqc&bW_-["J= /;YFSslH"K ixYjAMP \0[M.v`^V im G,iC\CfFvY49EMe9ݏ[eġ>]Bm,UPt!hewRt[5OBỨYTMX?JFsE\s8g)'a(ݐ{ ,~|@~ǯ_|؃ lD.*_w/GE =S}=f61Xh}DŽ)=#=}[  ̵x~LٞRxMd_-#WXB=-?z8ܿ/SquyPn`8$"m%5¢l| L( T_?ne rϫlK> 8eᒓ/vTwaqaԼZ$+($}ʲڪ h]wn4A\6T[@FEǜY{}(kr@T=u7*iCqLQQ&1U EaH+.Tn󭟤5O.2ew_eܕPa'5Z$]n}<)f5Ň\}d|*utx[K U׭r0/&GjךNXvg gXnJbB^aoF4`}bf>v}44ѤAh~Ba ?4kRCf w*$unye|="z*ȉO=^d"o9LV$38%J6;>Yg~E=~75iTէj{L.w?ˁ u9TB@fuR2"ȕ(br`:g65<8s{ؐwH 'ܡ o?ӽ0i*0$i|hot'-`Oӧ+lwUݭ,e.Wct4BpO -7G4Wj._h3HfTN (RQTh~C(VY갬":vM9 Ya5خDe>y+-Nܔd@@8(x*9b- dz et-%eA5C&1Z`vv:z4sUm/`3Ĺ|9tt>@zY}Seζm~W C ZlfgD퐻T FpH}}c(u%we<3}IA:Ʋ+$M~Nupư/d? j+5i"5: ʮbyB0U>jV:x{f-{ 8Q(28.5\(ZZǐLlw#]ʾ7kH i&(AS~wŔ Tjެ*3dZ$_X>9,g H(aTycEdN:%}:Y7*(ߺw֭xG/E(Qv vBT So?Gzp`?G|xa5>teRH a6&YT]^ 2|jrA]ra4p޷-S!|Jw4|jX%Nc)7x_¾$) 8Ymop29*;%SXx!Ժsڶ"h -| cؕd*]}q55khmb.kk[ВPr 1ZqBO[z4w.eX>'ږ|ɯGbgjhob,Rk`֟3ŹmJ*BuOQ?E􅇅Z`RwpT ]6_7Fyy_m8=-ծji{WQ2xA{JFFWD_R%)m%111y>q?ވ\ [kowGylgnSor{ɟzEY?ԀtEU(tǏ1M0ٓIه6L7+ 4~Wc$P0AC[q.,WբQQXJX:9Itפ;!{akٷA 8Rߔ.^ oӾɡK@l8],RAfq_цOiy'EK|׺JiEIucq G<;)WiFP1.L$ቤ`tF}gTj1jM>Hאns_2A# ^AqdrvvJltu57Ylg40E~iHwB4}sV=) Wq3^^t א.3f՚ʞI]&"'W?Ձ`j6G7 ^9N(q|43 e~7/"2wȨ) ӤQ(8q]zȄ8;j..vvcc$a>EEt?'VMگ4bR~)an @2)e@6w~OKΥ64b(HAӑBElNݍV=%MB/v0GH%wݎy<_p8{h$03ҎzaW~x1WAߋޜmİ&v f5򹌢QNtN錥afWً@Od-涖vdQXLTuK|.P’; 4ʝv?y&Ugnэe5 d^!="LW3S2n #gú8h`m&F'aafH++f]Nߙ{ŒR0.!Y NHP=ĪLb7l͘1!eO9AWyuq4F 4Bw *hs3\09irMbXh,^:O E5.>=lWc:^XU ŗ/ȂjKyR f~ޫFCaf\gGEms/Ddx>L(J;[9}Y`q}գRb Z)w68XLz^6Tʁh2R7/`כ۲I0C[k,1_jǜ4'QysQ~Pr++GKcU) -WrbT|AG_Q@f2{b0a~#gi'luI`1C"6B!!()a-3 i5a $, $ bœk;;ƟRI3A8Yfn"{ I+aa-C-q sKE~jT#' ~ B$*vU8g8*+,t+{c\4xx jMH$]nAoIb{yK}@ym"^8sBbP\^%K?;7=Ndrv4j ai0GΝ@H'&ڮ$A7}"/V*՗ сfOy g'c݃O|n'5O-a^Mc,A,]3_,V?(` FFIu/~1cJھKh) \$G Џ:5A-yf8_c6*U9ϼdre!Y%o9_=>^i:-ͥѶy<҉2`kFoYd0fC:tIi6UÁ_= {М9f5_-*z^]e+|I}*=pÎ^Sro<zk y,,a2;:p )6 Я+"UOh" poȎN9txJ-QydxgtOINx Sa\>sq؅zRQ!%V.6Dr ,dHNH!f=cy_;rt30=Rg\֮AcΛPI"( bpI"10;MOkFY;:lt1Xoˍ9"y_8 .ޅ#|UQ~ />+4UFᲨq^R(~.{!պ5;כ78sOd @~!*y >c B`-.2wP%ߥ3,>8.ZtҺ6 ;A hQWhcU,*p ๡S+c/OjÁ`vy^jy̷: .1gBӄP{=<nD萱NPu0(O*mZtD_)|,s2Wd.ud*fR1P y #ζww}[#h6 9t6 HbݺmF]vFIUBB^&ZUL/-0aq9Č$4 K)f>S56pX1F~ OHSn(S dPm4}Q .t>`ƾ /jHb!Be ޞnl 25,?s%_5&l"X[)OCޜǹ3E\@`)Yܞ0-p6@(!SP}Ѡt,ͦx@$ľ3@M OihV(. _˽&(?eȽ7M>};A("0)GrɢnO?GF޲@0JpεyF[m $%>|)8ޫLiaj\*>KϠ ˭>MPePJdb/9]kpG տ@׸!G'}޺ؾZ~y`{7(Ls-k D/ R͘PWkr<γ%DGCc@#&,P%`cl>Lw8Ф鳎,SJ:f@:+Qlri),dmv2J~mDS im#O>Q*,rf!1uk+ >yth)ScA 'p9NhWZhY0^130~hށv|cm{[*(춡$bga,B>yn Ri(oAviRǧqfh}aN|7t8 %"cqfW.u/Thͮ6gc /m=9|ecS'8`XtP,ȍC%znv?_i--Wsi)q%-/^ҷ(z+1Z_AqIQDX-V HR@H%j)4 >)CǑ&~VeGI/ YG;'w>Թ^n4j X, eB@iG^^fU%+Q;PP&g[`7qOO|.QQgZmחMX$._3S3N'<]fa摺*#*>H OTeN/Ce:kݖLOHE/|8*E.@u-.KR<`t#Ob܎DA  E"J0m7NK98 Q zjؽnn8)1}!{3C.FGKR밙Vnc>~:< <,3#r]LCFS =@&xBe 5:u/̚[G'0c'q-H tpd*u!hмhXeMIZȦࣣ6ůY'+j';.>} "%K(HƸR.Q$5 #C](w/) X (?:{ϸ<-蚦z$ uVCl@G' >=Z-"݉Hr+]G- iz)!H2[el^Vd ֽ!*XMo:v;'C/p=S%ag/>IVC*BrrM~%@F%<0VbVko6 fi~m N$uߝn3怀'ʹ <S;'Ԋ9arߣ2X}!5T)N#C 1CS9Iȃl,z"$1>ߋRI> u bNwt饪U1sTvjugRWnR\FDvۇ+FQ<3әhmpc `($ҊǡK23ZJƉ U0( UO;{lW+R,Ss7 >te?~K:zwCVG2R)( ",JkZ5,HTw[T|niѻ{דt$o}~0Y%N8+עӫ\B8"'œ~OpfL:+ygRPj ؙzkQ­x&[vR},4mGtKFҮQD4p /sF@$n|0?`e">[y4X쾕pBR)G1CGʵ -˛Rџ/c$c}nϡl(;2˖ܨ$ҋF4;a7}/F[KSxx zcoA]9$0T"yGSWMC6e|ʋz,&.&( 9 dUab%"BWE[YׁfZ ^OPvM}_葰nlnk6<.ɯ#iӴN#Kc"O\(J $1Ѳ-ͳ]jA(Pv/u+@@zq"r0TBafL8OPSO`\3Lr87F]ቃG/ac~ǸV!49iw¤&pG~yH[}%c/ꏕcQcqL!3km_7yδomv`7e#.Fyf9߂#?*U_,Tq)E)|=dQSo%3=FR^lb*' 7jD~O-) HM=9[hr2;_*jt8[s$|7k#XIߟ(&e7qHL{ُ#4~P(quY*&0o?MUJoIճOp5%]8#Iqbzwa%J _^_"4D6ܢc9\/s5κoV  ,~z%-͖8Hmpq+E[p Im=G~㛣=X'7٣鉼&lkcpg ,GY-;L*-ukg;N8<9MrM^y-mԒe]^xMFWk׏ -, z!<"“?"s{s^CH (`uwyﭶ {(0\/kRˀ) o|]L:10x.鮰F|p*\c@?üSfwgzG_!YL@8n>}y1V6|w$/ p榡d9l}dvn{H#C7Mm  Ox zµkI]+y7$,9C^%zk|ؑ!r(›JmuGPEC:6b+櫷[z7;3k be܁%@k/,pkȭCзN&'-|ޏZCį)dc{=L@bZo /&~7ٜI DHy,M$GFlUJ^Qܬ^P.UjL u_5$)sD! S fR>W߰zʘv8Sf"T#ǐU Us凌 &^Mr|sHƛc>cQC!`BRZƟɟ]ij `o;s}aTcЄ efR'1< \–9+hW$V 3GZƛFĩ2OLsw72*ɷ'bD$^|i,֟\- HGp jbjyg <,6>%GYu49!]cJrq'+q([)h&bl\C4Z@)m6U$ʼn6?ymvD[XAwv-zYz$D=4sF\KI_jx"|]/޴;j!5zMDȹ#5xˊe8]WΫs ]| N/IݝUups}j\a>oG@X3mE.s]kǂmM[cQWlAfD5@A3\wb~JJbL_236dz`K֖8m^GÛ}q|4>c#W;-ρ֧U& ]H1@͠NM~l"Ř9?SrlP]rۯ`yQLd\hg]2Դc WBg$blziF2sZgԌǼ3?v(Y yi]qWԱ-cqz9sk.9.ق5fӲ";pe'C _qrCKN:h | H3A-ܮytshQ9[قlѥ5Zm5+|SY-4,L>U5MxKڬ+բGfzݦx|y>\pBQͻjaW( $Lnl]>*]&J 4ޏ5wAAR։|N˭aZHooQrp`ޫWy.:?e.5F|M*a(j)a[dRHtXłBe:r͕za/ecP/RxE!OCNԨ6nH/l`-YKNl9+A5/w嘿&3ެժx;sl=6) FmV.4̉#tphY*0LDK#J ފJ%z 63j[Q h&h\̎7@.EyU\ :#A rheyg)R #LE v阑S%EG ܙqU¹l _~kp䏠0H.9\Er&|/{P!ὃ` \$E hT꧐-#*S6F4絉J+l5?hZ &C?*b4^ƒY&&iw`(_Tøp+d]Dz\ȞO `w?8Kkxq(I4>oW?C+/t"ifb.RYW hB&0tܥѝC" [cq,-JfU+ĀsRIzԋ}B^5<6_G\p\ P@A/و"'-sO},M<\.Ǯs&ik#t0i2]˩jGr!w4WJm(h>.]ǏJ"ELf^χUKjMG1g n#sWzOt0y`=GkAjtL'(5T%l gfM< 6obҨ\pq d_0X 9`nz\i3~P^u-OST}b[qB`oܢ9J զGu ܎O+Q6^Pr, s^bC-PHqtq%Bߓn!k>D֙Eեt2}A\FS-v-͜D SJUh"׫Xc>F[5UˁEϭ Lr]&.m4ݯXr)K)S-_Z:12}[Vh=#ќGƃKWBg kr.H NMQLiuPY*QeicdC [aܒ .Ծ0ٙW)7m/`I* k0FH`YMRWu#Ƨ~zJOEuo4# rG Qk#Kbqv'~BU"<7CpVf<#ܤ[ Wٍ#&4#Ҝ%ܺߒr9njZf)zHik>ʘ8IL r}~A=O7 -_ X_ `+U?mָE%WD`1|,c=Dtb)N!i$$<.gHZ>vƋzh `VZxrtg7?'?xE v6'2٦pI2Ql9$;Z>JB}W  t_XՕK)qg$y,-)q~tԺuSz} 5>IY/"1`^9䂝Wm.j8lO;PFsV'&>Q12kcp׺tOXc `wХo^ UYt\VBǜE42?SnrC ] ĝGB+ Pe>m**1mޥkp9XgOږ;aE[8bg(Ş:+P]NVw4frE0К1rx~K38]2iF ,YX_ȕ5$ԇM^I{nA۟[JPWjNFy0آ4)K۩G[ E3r^RLP\~Kq>xQ|P17%ӹHff;5N]g (UvAWM]AZ25ex`T,tS'4-Ro 6q(||RUPj6 [Am.{$u3ʈù*@W>WxڶK r:᩺մW-<_-v+^F~5]LD=`G5o>"Bni% 4EȬIj:{Va{e$C0\OdskT< p#d͢w55vś.7Rsׁ6wnuMpҺj躠tI;~uIX 7Yl4)Dbe̾F"DN%C& m,A@I8hX=66 6LL3D o*$[;:U,5*!H:ɔSѪ$ cXPXŴѬtsl*&/%xBr7j)(tv '}ȉayۈylTha"32<<؅wMzPLYU$AFrN:4GV>HGmIRM)<&~#K7D魈"PLGl}^eAfWO݂>xt_gRqߔG;سT|%ut9vGH-uBO* !J),3`fU9 OL;w a8ESezx ,Zw~;s\@H=4F~!m|mbMNb|Сy`G7#F$0mpsB>Zcyܽ*U:`zܧ.%a"sZHRlb7W/mh.`M2Rn.aT7`c4٤Z̶s4͵kq)cv}l.EH[{UzZr~<\uE(f .=v^MzeU*Tj\נTlNO3ֱ׆ 'FlA3up"sD"sH;zܲ9pБ=!lj#;dz.+xW`rgpzI)dְ~eGVc-C洂/fB$91U|e?TNS@O;B1Yso^V=ǬOGsb(sʔ)G(2o$V2ĝ׏\ē+g.we&QiΜ%ָ:}p+筳_r,l|=z `Aqb꠆?3_^?Qjth"?mnMX_椉/w&Va8 m[d͵4US? ['"xNVՑӈ7-DI HȲšJk^ۊT6gB2 ( G9ÚR$H}cO!"5LͿ5TTIn~t:l/8GiAWm-969:K暠Jn}a{öcCQmJ\6rb E/]P# 5#= 9~0#ixIһ/>xsodV.6J{%h4,D-H2ĨRHaMpj3i3)!sJJhN\U>&g2lWRIJU8L:P\\ՖYDl)[" f!]sd|GNqA$B7uy34 II nu+*71b^^n]Ď"Ѡ[#FZƱzL L/x0ez&S^KgBg Pxx^HJl.aˇa2wS3Pt31`'ivl_'墽/i6\O{5#PU[B&(Ӗrٟ_j޶oM/;Qg h H,4IxUC%K Ev3n8|B7AI+#<|b}7;\n?ȲYk[s,A(w4I>ã1F k" hV]-.14-^I$hHohWt]nW#*_1ѧӭkɟxU#HR4ts/T$ j&l\mJ[ߕ-HG~8u/^靉2)wS%l(EMBKݖY"+݋N2-Ӣ*77܆6]-r K$OZ^󸑫Goqq9'(;`,aD-$*W׹|xڰ=U)03^9BVnkb*. 騻5V%)1|ItUc俩BefI\_z—aQݺ^9=R-X2y_敖orTQ?/Q;&bSCQcSG5wRBb&s( bBafArZD7ViKEZHaqXueziw5?.^@tߥ|>4$r^57r/lLXA|ߛ# 61]S!dkڽ(i1$0[M|7Р@F `o"ޓ\o&ʢu{. OK<(<^^2 iLѣ͓Pkcs!/\n5]MDRsKZJ,,nQk:h1v#ѧ}/i G~B^TQd(.꧰ :ϫPT|*3UWod9"{9@r3=4_h@  WZ)Dj;hx0/~V^WQǞt[l2)XII^6)elb*G P$7 ulyĂp!&oqx-Q yRrӻ[<|x;^ ^QE~ Pjro7#+jS?u>s`u[+VW>T='B)qa ?o_N ZpNՊ뤐U"͘hc\92.LmS@Mɩ+-P KCkEI`vH9C/PKHZ5oB=q|Za^4"o)VDJ0cz[V&B>Ư"䶏t 2+Վ=1?:Rc7?c׋UUMp>MrNIXmG y mc:QIv[扖׆ag)v@/ {OEoBwAXB?$FX-S2o+Ethb4T|[ziK@FK,9,.or;[~1 6۫V!aAQ$$VWkh7*.9:_*W+H8GkgKYӄB%4n2\gwң?R Oh)AԈN^5ʖf#HUe8 g.>E7z#2vQ'J"-*ұ#$v;a.7'T^F\|)[pͪ vSǞ?1"t$a}9hY|-mh='(uiN\m۶Uy3BC-k3:usQ<i /%7\w0vW dV7Mꄌ:-^P{HĄj,o1IQZk9P> 6G\7;f@S|?A㝏aRb;iAK{ LıN5XJ!G)^ t8!d^_V0aaJ7pi*}(pm*[Cx E3Q`K4>á ǚm2Rrw!ƾ w4!#8U}r@qdj } 'a+h1*gIOFã-  c DG;zج6,+΍8i[(px(y"T Ǐ̹iWBY܂hLv2nE-=ETwkۃ,?ƨh| 0N#Rvd͉\GDbD{s0VnrʷlJsiLF}}$bYrNKq,g,h$ӏsN 1$beFO {D BɵPaRTv<#5 W^5ZCFRH?R1].4[g bDGaW%Ptt b_B4S`Ȝ {<:qv D·pha2[|V]X<;;lKk+˙O۔_F}-p Oz9CL}%:gMy0>v!<]40fuҡڄUCekjby2EЂ9˥@.]$ou"hᇾ>+qT#F;Ob=XYi ^Ml)C.^c碼/iXhU;@E7EG^ Ђ^pD(MY3|ΔѓQ0ؖr̤ͬCYQ3EWq+8-ZWn1`k7n2/,1惝r@,*wė[BGs2%"Awg27Y5MQ؁e0'x'ä~͠f2}`/n8T)|2۴OO?ԷYzDRQ;v6h}\k"˸)DX[f73WnSBb3$Y"+*}cPa[2V7bLdҨoH.(9Ԯ+$ 雀<ԷKDc_14Ϳɮe~)HXWrE⪿])9u`4,7]*2jPS j6T¶G0S$zxgÂѱWP>E;6Vmj&FLq;ECw_$lNu5D7Z)~q_f wY}zG'G h ZR,k놀g9u)7C:0ZḥKT`ЖS -Cs.a=>74Ku\5TL@jU6d<%\`PDhS"Ϗؠc}$k2Wa?Vv#@D ֽGXUztݎY?Ijpg7ɍgy׎h1wǛo1j&tmrrkCI9`%1V*Bٳ+7VR/M y~Ea`J{n:xܑZXE=c]a2#9ZC'L&Ln@qZNAw[Y3`u"ւ?3ū]KCp@/-W_+qy"ުx_ܯٙX + ;};ۘh0 'M}(]ڭvrvrVM1= _o[\g9T$WQ{e|=-WeU_xYq0Fv=Y$vTv}{,Ģ !kSޥl/Ka.vB~7.;~e8jyj+p_ ]ָdVYʝ5R /~EpkLiHZfI%@x$,:at&?.,S|*:{O\ǺJ6zJnq5M-$s)uvAfܘ9~"'#d`NB=()nj)0~v$5B2hcjtvT_jp2mp…(ϖ P m7vBO〰j; ބ*ki+w jׯ̸ޔU: ,)H-KZ~ 'RѺEo0"yl2_0 T ta=.Z4W^fd̥d_/[&:̭`nӕ4۽/PT^UlelQ`96,>W*X{f=u+r :6c6b񣶘7ʅkjQi4WI_m15 F2GۣhAg26G:DhMz5i-L(Jj"^*򖏽6DmY:/6k0>If Ou*DK[#Vr^aQ4\RWߑ@jM]CEm](™֕iؖ]<{!by_1N;޻P0<`Lߌ2F1e|DTA? @tnnJJ li䤠nȭR7>q# J#WlaK >ևނuy&FJC.vi]/>H;,Pa+n!?Mp>\:, O9ji Z=n=NRMM.m G3~#ج$ |f,áD#5&sm.Nٲۢ=pVy0@f P' Kaf̱XӖW$@[ГZH3ƞJ]iͦ89SOs"9d]L.0BNd0)eJ tz=_VP\4$Lv`9_,ǰ^G+ d$o}Ou Q{%dPQ#֥G)d]֋'p׶\M4=E[5jAKDZ6_@Dʐf\}n.Ԍ?23|J][Ic}gxGkk$&hϪjISWFu65e$D̚O 6jH&ۺG\{vS@HY9sdFGLɌŊ =͠,+=8sbpц$)~BƖ&&hooIMz,Ϸy#ܗA8}vmKTۧ$/Eʱ>.UQٵ\u"wT{4jtzwQW*FJ5FKC+j(:`ּ&dL&= UZ NAev#Yۄk$j|Ί^Ҳ  2:OՐ8JHu(5!PcNh3Ќ1 oUt_Wx~cCRU^'?-d8+MNϥ;pG @sjj/'n*չ15@;L,KCqV|.]Toeu/ Ɠ.3-s' ]v=!jzlJ {pvZ;E!u _EާB+''MXÙS~D$uZXH6J_ Yb_j0vbpʓn0뼴ìkOWruOAM(`}ahǮQq9ҚC4j?U{6Gi@K?k]{]a"49'FCgy$A;Xl*d&hվx7Z4Fh1Hw7هߖAFݍVd)tDʤ"V:LKk$6)ȉ)4q"o: Z2ֽ̠9,\#xR_S4Xm\+!apn}Ux^)ܙvTJ2RXyFC92ݲ^z{eNd@KEF&xDU JOW As EOp!Z1q9g(#^}(fB Nƞk<|;""pW:vk7I~PK*d|0x@fD6˕D73Ⱦ!eNSh\;K#}EStf*tbZi!us;W۬LuE?-< `H#:z63o]׸ d٬8L'tR?{JS>joȀfRaSgT]jA?q lJ%1Fj!-->B w9ot}H_R|CXw| x>Bc Js5/uo!A1=Ck,9L{puy|Gɥ].GLF8Ӂm}^BGA> #7HT69mVpRa_gxg%JyiXͷ؞t3$*B}ra1؟uUL[aO`h"Ss[z?s`Z|@įeҪHψQR+g5ߑܟ.w4 /@cySℲL~ _ůzRENy4Lp#j^I[J\on {N~L/p?ڰ>[*cA©'k)>)bpaX~`C$T"8FhXrj((ܟ>No *xuE`Nv%oQtV[|^QQ 3>#~aa=垽)e {8v%Q*)5Wt'gZv[+*q|PI/v }"|(5 ˑo9E0kӱϝt(mcTp+BNIsSqH!h|Ihq`$Sx|M..BWTXZI$ ,tjiq/[^XR8 sݓJo @i+HDb\rMv7)TNw½ jT5p 㽐qkR|FPZ.b 3V"s oM~F*ߋ&wnH a]JL`O::˖ĵ@ %]aP AJ=-iԴxO1_Utbdgs_"uju!=BiaXݴg$u'i-,jGY8'S7?D}'!,#Ĵwt(hQWmsx_@kTc,Hp\J+Ń݂`fXhe26zu'jJ5 -уaߌXZ(78mdɛ9JII6N^3KWQY%Qa Om/ 0:q6~{t A'X>]ǯ5m ᅕ;C$]GOEzF@V5ӎ3}պtYTr3upHhA.+xӜDȾ4r2'fװ_:p%pڽBı_MP'dȌzr_/qJbj\;_\lfԤuI7b k_6T=`0UȰB" )nШom3I՛*,3hO޼gG9P pB^Z]NMx r)M6VۏmZLuzsݟSć}$=AXk 3<_.YZI{$hgR=! |CTEϬ0v~p({Pn$`BS%)oes B)3Έ=afX3@O8Vf,S\beXlP[y%=?L{oG*U|Em%-K}.i;s)No <$/Fv38x.ʅ2; .μӂcv=ӪC&6>IEmDRImR hF~ůS͐쁭kJgemkolǐIĂzͲRO[߈#p I"eH!jISF}G^< ̏b#1GPW|VFߵ-Y;3u$Z8X%ś vmðdIAMۚ}c/oH^X_=rUdBa5@lr 5H][H@Tڒ:l~rOOU5 Q2iylTv '-<`]h䆳[H›3 |ӊ^UPiH/R{qim ֨ם11NK wႲlkKސJ-(5&>Qqg̊DCRveJCvjXC)L೩X|A_sZ0eaߡ܇Ldwmij:#7fwZEiK=!7ڞ׼KxgMov p.?tNX^/~ZThElܡ0;{g&,y#=e?.k)ڜKve#p2-xVZӔs96)RAG肌(N䞊aQH8WcЃHGj,rm]8Nd[т"]R&Њ e[#OxG|LJ'?@>Vd+IC&E+cs2YW ΆȚMB33[!3 _K.ŹO4. FTNSj&QB>Y9cЖq"9L`S0q~#<˘;ջ&qlT1.DBlB59HBVW5u,,qir")[Lu% wL*q:Yr! A~TVWѭ^3z%k[ۘNf:I)8l̸*č24Bbj-!5; GY(Otg.-H+cqq( 99H+ڸ-y?cK/[,:zGQ'UQM`;J_ *FB OHC D<3iTIB}rl~T.;u~"`8!+gs\ ԃsVZ۲j@;9|)KˊnBdu`!%Nk;~/ZRGFBUhKV<D 8zE4HHpmZۜQk@v+0md `G"n\jI <X\t'ڄ$YzqmM btxtͥZhA(Lka)cAa}IYN?TWՉj wucn *z^#"Hb*)BkQb =8FjuD0p>\d8*d@'OV[9(uT5Z|وܧl_lhy}#]XW|ק aNĢ0":aV孭)9/j CV|'Au)+a3$ɣǩJZ,}/CYUj76TG 1 {[WY302g -&aCG?AOUZOa lTsеA9AģO1X5^a`b75\5]Ť؜DH:#L i#S1!;.3_3ZyҕwP8mg#{jvC~KYuJtݝ%_lԩkIpSx>jd{ "¥;Z:atp!zt@E#<-n)7{Oo?|Fh\1Kb%uv-tr_Y[bCP~tOH{-{$STtT0ƣ]9Ot+`iރbhslലҘ3wyrB4ʇ2Ȃ{&ԺK,Y7]$a;`]r,Mn˙Bw8?PdwNur|h7VBWEfm;>HZiLwQ~;;,onKM6V]geJC-QL1\Ȍ^Rd{S LYh|*9?l~_d4,?N?9KhrҐw|.ײַz)3 +9e:#)^$B12azRgI%';s ,8m{RW5B:uc{0OW̑POV ;U 0T s8Wr+pu9b|ZE˞H~4aNn v1H7l3|ݮb0860G8ߊ*(G PC&1X0?)͠iwYi0k Do@DY!cTݲI+v§FBGd3?PXK3kQ]$#NYMp^Ylj.2WXesC-/V3M''{"04-#v:O p+x蠘f͘]+G@>TǞʔ&]OR2̎_xPmQ<Ӎ h e>x4\tI^^S%jpY췞;lYf4T<ݠcZ,$[+˜alUڰA|e<u\E \PXmx[?[tv{Gѓ nAP@aҮjFyԶ.H4=e ,ɥ =E_ʠJ)=z"Mnk=^ Hv¬LUWݰ)) "ڷq?ڂ MI$띡O[0;o.+=IYΧΝ =IWDٍͣcK<="āMȑk^ 5i>b_>??0l kJ< k F5oh|Vw6Z|KJt \ `爐Afj<=9 ryeotRxNZ\v׷$'QM/jjH+q>0:>E6ٱ*k%[O,vU`Vj҆(br#_ rp<zB8G"rPqbW7`wHȱp0EðS{wLG`1nDi,gXkQ"="Zv!f_ݑ߸T5~P>mRdĴ(f]Q̽VQ/V"_I1`i}|xŶ|X1N`em,Րt=p3Jc?e|'~ Y4!lA:Y'9 ݗ_8Ydw%q3?׵A1e= <V ;Q.`) :Ps !G͸{[k\1{@{4cxD+_Ñ7['c8&. /bC63} b.h}kE0#C*p&}iP~ /A#uf^70ElnxNlS h p[;ǰ}˜Q6ʮaɺR$.h8veLb @|K6-Ɵ)82z9(UrKҚ@'b і%tF*jҜF͸˹ %t^ГKĦjRMv`eәS@֨Nhx}>sXm4`w J_b9-/ka ስ#XzG,bK`n܆sA]7[r/O-%u>\\6:zl-,QOkU7yR∟#fGK&Bl:3A Ml9{6+ج}Yvk0wqˍݜ77J|A$EM&rRT@q5 F6uշ|⺤Sv ō=5UF#yQb6Crkw,wD‹tHh2n0*. IEpثwK 8N~_o CaT38COƍb*X4ovbKĨij\W,xl+z/gML 8 UH23sl ]W Ljȁ]ߋj> C)}9 B0ڄCƗcL2' 4~nTpwvfhc.ᙜ[sns>MلH4Ə"#_iiV /"̵iSǏcAϤo?1NF-Շ*Ǝ vjUũttU/-$j ,{ l<N]%%c |Ҁ!k2qyXLζSgVz{jwڂ98'x2< GPE^de!ȿf1?<28vJ!CS H K%dTLb]$;C6Ǜ5F6o02Db˹2S9/O$KS2Fx̅qAD".C4VX,lhSJX;Yqa ]y[ʰ;pff(T#XxΉq^X_1=JN6?XV EZhz$ъbߵU\N܏&wӋmk s )na쐇2^x#c]Rs[ת]2cɢˌUc!0P̙?h,Yns5@z% <fKdM b&4ARМ (ZFH` +\;qp] NxI¶ދ_X OF+w˪ \8̵3*HTAtAyYqXtӧ1L\LY^_?H S3~@Sq^1;(.މ)]kCԂ ҉AVg9Hdv;7R*iL?-|OVZ/G"kQ!]+l:{z}~5q f^¡XMˢ蒎GQ>Ip6W\KYLu4K丐4x@nKu*Xͤ?kM]ၾCuE 4)^`W7aP葱\j j cTTYwmNMXY~8сϬM~!LÜrh͕ڵÓ v1#*F{b,>vYVhGݴnPFJN!ѵF`%hg"(z'&P̩~V\ O!&}S) JssohR/yI:sȍQ2< gl0S LbQִ᭎?y%Ƕ`yQIttkRyO9.PtGW?,pր%b7)3>:eE|ehJ8%>U1{>8g{_pW'1=ZfBQ.>#|AtZgpBG=>eC8:; d{/U%3sy9NVð_}kcy)zܑ%ˇ8ljp^% 1GH`LYzVeAn`Po)'/,JXRh=; ^׏B;4jCm K1;_BaM{f,L FJf3 >;=Dc#}S~jb%=4ca =r|ZwOOmV#xH) %g53#Wj<[9?.Nz%&$c8=Onī)1N'U|bkeZ*ǔxžtKp7e.Q9FwUEMrK8\m3mC.6k$G0:h[IؾZE[SA*#vE3ޏ@*d80O!x$V8 @"#6y:WXdB[i{>ȴv6@P{X5Ab[q[3rYHQ$l^E젰@ 3EBg1X@wԍ ̠Pzu&w_9QHr1:#xrnh9y|Kl7"ZZ?'H; _LH+r@Pf{ p bEYQ†; ɗx'x{-h¬MIiL;0zaHngv0" v>ey|z:pefufHF/M3v Vc} ;:[)Fa5$Xp FdoΥVc)xL@q*"L{&EP3Q+rc@]8UdMDxyaVre3]Ȏ:^ ho1VoUF0Or/Cҡ;g;>OG]*|Wa?3x|MዘG|EmRxHz+d;* XL*RMJ$Su"Ec֛zGb}*P`- Jy`ď\"z.17tv?])hWU"MElzEb(iji$/a >/vv4ԫAYfd`."g2I/)1-¿e&6Ն$\zr@?~!?]-i4VMQ)< { if JP. d24dm3_(k?V`Ħa"y?%; xRV 9HNJ)VeXDkf=W: ncMZy.- 1Դ?{#)2t)2e\sB+`ġ Y}E,%A$Yw#HlLlf1A,ᝒF 4S6}8s?oMk&@v5u@{FX+!;J!<%NI5d!knMH:ZU{5 !HuO+'5 *''vV<HKTظ7n1 _lXb0,ХKAL,5> ~n6$E'"8utץGN(kP:={1Cvom.Ƙ=z*_6 ;`z `i YZ