openscap-utils-1.3.4-3.3.1 >  A _1p9|M @w2ǼL ]iy(e9Tbms΋4_j )ٛJ{зTBXC\O5rܑ0m0 y`=gtf~_^LE|< ؗϑw6Y(yj%b=L}g|/~g&e:~W{PqCMZPvk@ա? &4Nq qKgP eD^~ :¬@^ ԁd<-$pBAl/|XW8% P~a;bABGNؑKT6 D{h2h|MM$N՚wهC9=Q}[o߲ @[?Ζ$Ma7ӔT>LHn<' -<>pF?d  0 #)0w d    s cPx(8+9+:+=>?@FGHtIXY\]d^bpcdefluv whxy z`ptzCopenscap-utils1.3.43.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library._0wsheep18ѪSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then # disable migration if initial install under systemd for service in oscap-scan.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service fi if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : fi done fi fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then /usr/bin/systemctl preset oscap-scan.service || : else for service in oscap-scan.service ; do if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm -f /run/systemd/rpm/needs-preset/$service fi sysv_service=${service%.*} if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fi TP; /^'aJ ˁ큤A큤_v_/_v_v_v_/_v_v_v_/_/_v_0w_v_/_v_v_v_v_v_v_v_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-1.3.4-3.3.1.src.rpmopenscap-utilsopenscap-utils(x86-64)@ @ @@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.25()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.4-3.3.13.0.4-14.6.0-14.0-15.2-14.14.1__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shsheep18 1609314423 1.3.4-3.3.11.3.4-3.3.1autotailoroscaposcap-chrootoscap-podmanoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-docker.8.gzoscap-podman.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:17736/SUSE_SLE-15-SP2_Update/c8e9eed22c84ec00df6bdfbe83f3c4fc-openscap.SUSE_SLE-15-SP2_Updatecpioxz5x86_64-suse-linux Python script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=e883c325ea0b51899afe0105c5259c05df29e2c7, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRRR R R RRR RRRRRRR`w=L-#p:utf-8dba31160174feff69bc05141e091c3d27f52812b4af2a4d868f033b19c877f00?7zXZ !t/;] crv9uh8rRw^=qF}aٵ8xg;8Zh~SK ذk7$VBwVr-d-_󕹌B=dagW,孰̩/cY b(!wZ0;RXo$[Z5q'0gr76qX mSM$ю|&zeLRÜ3 wߚQ)1 κ¿ZZ,Ov(q/ɧGyÿ]= X zw6LmwT!\ܝ[4nq7]Bxo י@b<6!2py+-8&7 p i ؿ^yoH)+r,Ǣt Plr5`5>f%66":zΊJK8 ic[ʺ֑|V0]5Bpw99I†u‹95O?}Bsv{;mxMj^9엝<xg31̨IAE# QsѰ v> ӬF|4+9p]n;p,n$6EͩY? vgm*h*>h(9!!bYkAEg|YIB6WlMzM6$., e ąc뗽w`~ aS|m6&اvvs%pO'd<*]$ '07 2jl}1we[\̖<8J:@r6iWQ+%mxB( 3WX*0>#}s6,wFJ-ԩ$({k.͹|fdյ҂<c$+[jL:6O3LVlP~KYU@qQm  Tyi8$po_e Ia6gr_xtiXY٦aClPrwvQMH|!v 7-^5,D@HnM>A<5@y*GWjy,*ďlZ[|[ʊw\0"YOq" fr7gE64>iOpt+lReQ{֍ީ8g(4 ԨͼÎB0~h ٽtW 8^v(RxH7V}STٚ*}WuOzfcHT6ٷ\@|4mJTz>&;uJR=胕t`3n7UT ?{bUH,E7/ N$08^4=a "M#|aJT)M@e=>.o>sꢚBG>o GK O0UXctl? .yP3hv`̃WHtʫ]o9clJx2۩ )5iG$B%{+KwH֪iF|C&Dqw]LlnKzl28NXPs7[h?*[Rd3SBoPdɬqkbq=~(9o cI F {y\>[dȳ J:pz"/=Pk@:>{+(Qs할1jN$Zң/>=7t(*WGVwq=8{J 4@Xk[_fєR"VGEjzNXQԤJ@xo7Ljy@Vz{U|5ҫZmuO!$-7TN5VLӞw 5 VP?sHyb)C">o{Bj%W4:!WNZW,"{~J7sN@[zhP5*]r?2)r@`㬲7?腈 sm͐[,ꯥU%Q֓쑷hvEǻ>'H?^67"|A9۞6˭ Lt!#ȃ3؝[שmt# p/41-^W!oFkش[Q5zxJ{sԭBʪ-`;p);"Ձd[; -l>8H Z8/Q+5,ڭR iKPYpQH84?QHOAl8-"Z i]imqDE <ms!*j >o)+نmèCB<Aƫ5c4"B F|TF<\`\7"L*-MLgM/XU\]X*?`~pP3A=$x6gutE2nB?l,I/Iwx׊7ڈUA\tbsKXf_= !lک05qD!PAܠL) /k3.A),^A]V⚩*$۲PO},q{2&Zeǚ35XHv''~1;ԭ/XMX^KF+pKbDVJ5lc/ub/>LN8Vt!kKL5֏'̛`7Փds@~8_f S>OӹX< brWI4ɗ?}r?sAVxb>01RHv,-J-)֙Cݕ!S ٞx4Iolb+E1$5ν-ɒhB!h :᝷o.(m'clȇR䨐 'p彏Fv:Ƹ['lTȯuM3wYglWq:Cq.V#Nn_F}"4<[@;-Q%}T +Gkz(ɄۚǤDBH_2I !`;Phag~Qݞ~ڍm,; XPECe%%EB@<Ǔ_p 쉉ϳO0驍0y9{`Twڂ,Vؿ \UY잂::+vy:C~)=`) Kg%-!͊.|C){ ;jFыF|#9*1R.N'L͑+75Ҍg,\^u"G٥RpiV^=HN)K}Ӫ]Rdh=&&u"K1,텸w{7D jAE"b,ГܘjkdG4J99ԟ͋~HgJ$@< IA_]_!J]_t\pmaqh~~{{^k)6EO&ҳNV -J9cY iU(ay.mF:> _eF.3͸;3gudU/0[52'P0{u6 H :P<9I$7`îܦx܌.si4 ҟAcK -EօHkl: [1$ L| HJ#+PQe?!uҨFkJٱ5™ cii+[uBENڧwb*wZ8K<+gxEn4ԯOdBj΂) {ue@SMfՖF_ +>E7pfU;P3~D,|3hkȠQkPf= _|Z/:v/-. mj *a}B:pihuM@xvL N)($3.A5*M ii}LI!YQa8 : > p,ǡ)mZ\; py;ʽm2C L+a9Έ v<l# JBfsֲ~_ Y↤eG+>!u 1~ ,t4wPak68)}[ Xᇘ QΓfgp}F7 Xχ<,z6E٬U)GT\[p( sj i$Ձ?%3[C=M(gz7,!I>C* b?J'︛|&~ ]+-O4;9 (eVI^@ v,O-ͯfaYKPKK=0=܎5B!YG8,|9zj%ׅ_ChY·+0cqܞ^p9Q.鎷PU Rc-58/9Ey_wtdn:Ex#q#qoz,Dq{Nw^+)ٶz Yt'C# GVf2T ]C*8!PgUpz(|ى.DyP0wh @PWW]ܴoxn~#.l /Ct.lK mݫ2&KkL2%h "MoJc7ުse>>yk`Br|F*K}P+Ynߘ @5e=Dv] qx&VQ>pKC5"WoӆT x="OߌhTxl[O9D1B/զ2R:uT]wSvƙN3éLjP!^JN00 +pKboS2Hre%dllt: =/iYu!KLǓ+h~=w]f0:$QdĊמs`k |[1Mո袑^"(|GrIsѲ)j#Bݷ}!7ZY,`]yݨK;zúCOb:ʗRq5Ǡ1^?7^Z(C%׭ݕ{7%*O" ~Hk 0@E}V kTB_oc[<ޖ.(rJ:{12zN 2dR˝AU 0ZTJ2ܦh7axuT- <&]#Oeb+'{m˔^‚@TUSsRMC6ݓk♤?6Sl#렉b9zD!H][r4VdXsY]Ł% Bz?6W~ Wd^yLڕ_w3NT IL7׉YK@l QtP8N>, UUM%}L9IMvn6krt?hi9p3> []6\1.::+̇1Ň{P7'[<0\@tWg,!q^ l?8|h0>sU$.z&ѢDE\g,BXz鸯X? ?n-o@VG #,{9˛.5\g#X:N8M9͡eda:h(LzÏeK~Iu7_n^_~7ŰɈOWzM FQ`ek AΕQW\ݱ147CL+N-a杔X"E?2s6+8"j<2]dzM>;i!LpgUL;b7L63R.boqC"xs{F/A[*em(pu2L.<=-Eʏ 4 %[CZve|!b)FsHRdcLY}`υ$9!1Xf`-f˫]Գf"ُ&Xk$F1TStYyd w4Czr|Cc˞:OsuvKvj5|7.$66\΁o@"SBfLSm/tϣCb̪)ZI+YkfS %imT( M@5~D>+vMQqūl5=wr7Rjg)+,$8Y7%1T22~aMDH"*WjT'f**a?hJ2 +\aat1.I/ۼk_ jTF4xՃq nU@N*?n𕔠o t.!K+dž MTUV[h@δF`w~KY׺{2SXKĚ!:DVg5r"LܕOLEhN JLI$ǣs0ևoe+YFey1لl,Hu YG3Uҿck3J&.VfcCߏKCJw4?9ƩLvypRYbMB{Y-2QZA`U ^GcU" ?KX<)dUBk4'94Z#CyLJ/rVA1JH袕aEao !dPexi4 _2)mqBΓ|q YT8vM0K XPm)@@A}=~T U7teKeSf#pUg~6&r au߀gPQ|!zbBə\)w^ƨ A]"6`Pu-tLpil^4924F64!ل;0a-ZY]ԳX_8ɬ7%"v(ʢJܹe}Ov-!T;̎]s׈SZݤb>C s\+%:f[Q$aop pB#V ulbe<ȝ@8$ g6b P5G91pnA'6a:T4nQwX 1LygOo㰩0lB02ϹʙV?0ݔ#E5z⬇No` pqAGf乣[GcYg(},D^BDB]D 25!rompAqԩ6`K&E;dx{x3lTQ.W{*TIB;(Ӭ3kx-OAAm~*( 0&:}?/{0 f D9O:ڀΊ}@8⚲9/=qNuvd[u8RC[PY <̅%]= "M9MgN1 fô(TH ! ˦_VxFV}/K_[$ v垌A# 1LYΚKP:8DX(Ǧ׊|#TYev ^bXu 9O_WQwg_/4S87;ҭ .OsvKx?pD4]p.zigƗEY}Owmc}^}UNbBLp(WFfg3lfGޯQʦFⅶ ;a&nàt8;r +@;>/dz 6F;F`Rk6P!ȣ?Ӛ(NY7_fj `n [mr{ l,%:/' bW. a#ܺS*,V6< q#@w2GH*rKM,AK+f !^?$Z/qQ/#D'띉a8"29ˠB^X9qFcBIY!y(rϴvH‘; "(-df^qFѰZg ]^\1ϱjSL#Dg0cKs߷5yɖ?`Aur}GnZ9/̦9#8Ћ~@%:itۄ))w!ʽxL43R.YzFڃzӻeBEg̵ۢ6*61RXRަ7mC[ޒ)eYK3*Ys79<] ury_|9 zh+ $ !nfz$}hu'),d,.]W 'OUQS%.~TVWrI#SR6On˙0*ZLWD]2dxyT9&0=P0x%K/ɑvÁhΈ&%E.5k[iG`lmh?Y4ċ}`Ms_T)2D؁hj9'SJRvk੨iy[gHIA\Bƣ⯥cq4W͠t>W(93SCEV[q!p}cwէ!uƐO)lo`%K+B5g#:G@H *sv{g&pވ2ZB W@`g۟"S=)d1B3 7pY[I򿁨kgE1 ~[p+Re'#>ox &V vK&f 8n{BB Z ѳzn5zM zv}tVNV^##ixMCxԈ{KJfKN۠nt&R:d(r @U՘l]*E~J-PXKP40dq {+&9mi3vKXŢ(\šD$yi[ܼT~-d%AnNz529(R% evqJX, R(-FӱfDsh"2UgW_/=OW,[Q_@JLcqq#P i| 42]CKOHe //^UDDcB&u9;! .N=GEQB7J؆l)/a4Z#>S[3Lw~l8)!es&Q\ȣ(yYLޣ}zDb(lx!^OUS=%_a@4e^S=Cp21Wg+%u{%9Ynsr`Cc3ܯLn-CdJJj@[V89qDZ>`[ģяw\FVm K0[@8R\%ӞC{1м>ݿh}'9Q`-{}is nWixXtW@#FvIi].h$2URhץ+"/Qeek%;Nsxơ/"{°vOCrƐ iF~gEi[\ H#S*iIݚOSpz,[]lo8d9Le#l\ypm^b ~۩ t+d?",|dD Nȑ%nXȳdcVЮb}Kͪ7h]l~l4B49 Ti Jzdi,.;\ֻ͇ ,,(iڹf"SZ.gވN (azgocq$:!-:͝tHLG:KS/C%eГ#%sCr+AmW ujnخ]4HzB1|ح]' 9R;bٽF(h"SYnQ(>EFR_?):Vm&B\[DTE+ gV5 E.{!Mc Qk̀9 pLzЖ :L ,( DTO\x2U!,hUާAܙ\b d.4Dž]j7)V{ұ&\Y6"\Լa)-S1s)s2&} y3GP+KHMVO^lw' -4 W?]50p_;qRg?ڪvttdUtlF4UB|,p s2oeK(u@pܪyď06A]MfCP0"arσ\OUE.O@l{I ^\sB/rb=<<=Jo?qXF- …(P,}ΙNc0/ Кwt 1YT.T*i:|a}C쵀BNNMWtsH¨I` f!HLx>@8o淴OOvjp.(yDr$TG1;>;kbM^&ZMBs\;G:.x9&E="0|Oҹ딣<3r+`PBv`pz_7.Hh;e5Gz*b-:Srj>$;^r0jlX"/Lq]l9z-*It3ZjRfgp E7:ߑZN+ }AE`f"KoM8sLn$H& @h7Q+:ـ|/0KDqqD' "a6coea)^ؓw0g5xK&" $gT)vڱ)N[Ckh g_sipk! 5DNC* Vlά:R&ʿ6N O03,0G {* *樫x2Z-%!Gah?5= $&P)`[0Y;lT$O>ЭƵI!{o&9,?Ƅ|Om2ւ'+OB^%n=JdTı WE3q4m䲸Ը_%l'szܬu55?~x^Kɸ0Hlҙߤ%0Gc*l^s[zS_}Dgj_qMγF4O!yBM(=%1ۼ0%Qꙴp#3ݧF|J˓ EK19mP7Сk櫺n4)":KK'cm'IݤR8@|MXtA0R@&<9Tx_ +43x=&;e )%͑l1Oh[-]w`N2S8؄ޒmfX>r SLL{|?Eu+(Ny.ppMaYKEB 6`m?RSb.4VaQn1jûzPS6n#U=Dp򑥬Oxrh雊O#uQҏ17-8^2`oZs$pNB,vDݮv~}@HDgTn;<R7mJK S<6.Mth_ս ~0d\9Qhgx>$hzöUrʑ~Xu]|t#r!>qd 8۠$WŇE4aejvI 08 c Qo꓎C;s'`FxRWR8&:Rzbn5ie^_?C礪jE"'=0|Ix)Wqqlx9@} 7SL 6f'T6( J]lBţ1_鰴e4"AczGͱA˅l#\^ z5dAO$J+FH]*@SDN(9 "5HBէAGneo.@:P!P X'/y?*z&8q2@`rD)X kh8"WbYi)16FZ[/Pԛom3XC:yr7cCSmD{Ս5} 'r$4 LCˊ7Ic>acF.f קT>T bݎyPSwc(SnpD^_6NGޑq(Up5BcLٚMMr @3lo\MZ-tu O MzSQdrm.д2+ 6d aϫyxߣKiw8m[_,gsew4 m??C<]{)*EǡSc0ËLr%TVV#yx wwjZl*Raj)ZV3 RKK.iQzb41g AeV.809ҷO?T 5nJy2`?a\X#VslF/@W`UR+In3qzV84Tuګ}Z[.6˘gvrq|ݕdK`wU71BޟDq>ì[9s#7`7 y=֌QXAVizNZ6TĆkቾׇe;Ǹߌ\sR?cջ4$I3K·qNE늪(S*u( ǭ Uux*Iz%}D ~]9/cx "WGw8Q(BŻ$m6 jZp*p>H ܠj4Tp mK|zjg ׃ZL?OԆ@((|1ȇ%~ga:Z1aP*9,EbTg4a\.T[k5pM􅑫 _( %CESP4&Uo {taH`fj0;Gl+|?C D6tQVJ$$N0~@du2Egӏ~Do _Bb6m⫫^tJ&ȡ!r&_hs]6DA 3M#%/e| /m-$ oЈ?(Wԫ -D'CdyURoU#=hŜ{4&#-@#UBuPEA=NU~UDoCd23v/7vPǤ| uJBm;]V[;W pl(rL0U:{kit٨5a>E(P8joo=ɖYaϓl2nUj'd;E;a 2us~~'F̭hnGWkə۰PJog>qcp5v,J=P()g6';'8 $[ G>x;|OSރpio("ݴ9C igi{Td_xAfTv1v*277-;P>+# "푼 -X \T^XLdC{!>vE"l_+L I !䒱r tBZɓ@t <8NXZmz?P&a$Pc/j:ŏ ԄܔD:ikc 6qmsaQLraHzQЀՄλ;Aj  .T}Ms}}Zyeŝ̅VЄ32n>#'qc7=nJ/GKDZtH=*ru~LL'[_=HCl $,ꆶO9\h+/3kD s ;Sl[QbQ蓚uO e^0n(3~)T_$řr,D&92[J=zx((a~*D.3AkЮۄeDZ Yj Ғ ]?E9.gm+M0`ҸeHW$l ZGFdIj;K#pЬGץ3j;cd(.Z%.; Ddt~X9V0~EiX`F#d/l=¯}#YVḬq U~X~IS1})+*v"yk4\|>TqǾH}_L?_'Ax!'5PR8WP_MhC7$F`WP a6mK\lrf9aeۊ_82rX]uxp#^} XGo$7 p=qh/R ^MV,Ґ۞lǀݸ1/+)+u>'F g3"?DT ea9|ӶL @cehqg@ruEb1>Ax&BۛqdPb4KnIZgHa}ͤ4ǽ+bb]Ì\'8A8ն}Kp Wj1{z&5'IёW3!y3"Ƴ.>AwTa-v}LhmX}}skj IH HM 9*?4EN=5o#9rEml]QȺT~zL!nV'}{Ną;ʞEÔ &{0({Vɑf< ̓E LD1wJV}[e];MsJ6o.)sڋ{ǧ"Vt%|b,چyMZׯë'P r@Eh 9[5ϸPN{ u8YW.6^ڮ 0%|BN@+P!mvTi?Ө)CE~4(fz"9xvOZ CLoGV'Oqm: ǂUkTh#h7Zңq6B*:n'BmKG@B:KcF᧞>_q J`jhIa@Ru&:~fΟ3k` $ !ڬ ]*%WyWC2Y?ԩa%ꗉU&{y!_/U~@%:':uX"x#+Ia:=W3ȼnÖ||deխ4S044Qul>89$e כ0W( ɕ$k  |]WIַ~X` )-W p9Zm>l1S%vH>rUѠh{؛!(XB֤PAR;v#VInX$Bl@!DԵcX쫬3XNע43K=5be3^<"ԝk΍'UE[C+,|*I[u j|q񇰑v'FqI2 _S~T5X(2I)A`(0?o@ 7LO&b(pb:ɖ1􇦍coESkrdͽhbs>X2Zhҗ=&.\{u|`E6J_jL4lDK+nnX 56alSyogFCJP Y?^q=qkskח R")V5cfd ( Pn>a|X.a.,): 9Mo:th׀t+Gg&P|o)7=HbAqPM؊X.ٝҠ/Af;_k HNJpILJNy(mY& b11*-pn~18H* x 0):FTٲ1\b f no-)+W+2[oȏ '2Xv^b=2J0:Ou;%{ ?D6aw%.SF>` ^DPZ6#oaKl \$>_OA=] nS8:oe>ݜ2ln^m(\1B#8k+nu,[-eB #峉6fEv>50>@M7Be"QZ(c@RzRl027}#̡7#% <9]s4^9 9 |#hcn&{6g"|=$X fFK2U:4\<?iOyvS"Cq~"%U)1٨6 QMCxp.u[A{x^gq߇-d5!${DiAz<4_8."Lg\c^ķ:ł箦EoXxp' p|ǜnZ&YS$.jɖw hSMG+#`Y-RļȾ>pbx46͝A߫,؃9!0z5b)7-/֑a@NȇLmS< Zٖ-{{{(jm)kW7HVkj+[hHq|Hkb-f $aʁm`V4&+toCyXDka$8#8A;+/PIO\LK6Pc:^.seҪ `&Hϒ g`LW /ȣkۖU.mjO_ro3aTUPsEDĪ;h :8U{}z#VdRh`všb!u1E}q9="j DȱB66j*yi|m޳čy:㱴8c#'5yه1{Ƿo]nJEFV%5Jn0!bhBh/kɥldlf ͅ ō2*\!X[f%h6W'qgFp9, ɪח?*Zܫ՝H$W~+'i%lby0#i44 @]l:v~seG2(hND NYt;oT.k88x['jn;?Wa asGM ?ٮ%#$9_& 3g y3mפ av` $ I|*ԅN'Z;t͜8gإZl(]K4\'L.MUtN"Z}M9c'F! h 9֖w uyR)GVHB0uFA\UDalnҰ~"}yT>=;gt& FaԐT]XFٺ#iYC=Lg hVx7ꅗOR{JIk<{j|(vn;&q.%X0 /~<:N}?vM`<]tec~5%@}_!qqhy ,9& PIFcJi3"%mnav ީ||.Qz -cH1 `]=ƙƯ=K_:BnhfrThP)17z ˁȮ9_ Į`Q{VAQU_R9*&r8Sr3b7cj|C-6fJ}kB+=]0v!*n-2"Ϫ +&uEN%i9F2خ ;>gLhOlݟB,G1X +ē**ulA~d,˯ӕ>}?׊ޟ>eE28 h,O}},z7Y8EOE{ŲBnp6e maFJTs7-K L jQ'WU|!esϫCrcT%))rME鑪N:Z 6u❟Tkr@1*a :c^[5fJ9 Z8F7q]Y-QթM}4bj  ڄKW節| ALG6֙1VHWy(S7jtu̾=WP$}KCg)]MRf~=K>F%Ħ\,E3 d43qiLxm\h?7ULdlpؐ@ n`,Ǚ^)o *q 3Q<7K0݉Rۣ8i]8Mz4"L0%+۠%YfUb+җ VHPG i~w@9q1 Mxj;W8$6GӄGM#Gv`z5RQeǼ+6_ͻ^Jϛ?}3k& xYv1SL+WLV =>}#;Uӝ$lzύCKke|Fө.gpuGf"hErd?{~Jb!/'J- ڭ VID+R>BMX1e+d UQ  ?{-M'94#rj-g/,[P<%ׯvHO 6246d! =S!{G7{$_!ˢ=[Y<}NƇ __Lv7Ɠ`vtQ(FsTֿ(D6v H\m[e_!ps?Ż~2w&zBYLV t914zOFtZ?GY$Q T/Xt1a|in FJ學Inxz8a7Lj: wՁD&kb%$aBamOVDHC..GboUa3钸ϒM&49N@zݑÍ1/UknITPfWÎO{L(3隉^qmf-?Oi6Wvu8 [ VEf>QVD lPȷ% /"'kl>uy0B~4-X)%s]6Kys'-UUSU᪱nڎ8hŢ\ دPp~HCmWf>aYm>z:h@/BT$)=K0= h>Xډ#_d#suo1n2mvn}1%RHer#fM.H @_]oE:)h KL+U4խHM[gj1_5wXgnj]׼ĸ?se/N:2K8g9va\!eqbn Y\M_ӌVGn>6+C @DvR*CD8 MAȭn@SG[U;_g![P\ neX3 ?6[G~mQwGM mvI-#𭐅]7d\Y46InkgG )59?*8_,~hgMD˾ofjBb~^O.yUox$3oB`.y2HūM&FX *@iH$3D U$ `9+(Ywy t!OtdHc$}0isqbހ7*-kNFymz)JĒ"i*#goɞ+ڗZTDb:O P55􍨖&A*˞ Mp[癤9`%&6~xb K! +DyWJ0ᜩpB×p-]ij'48P)V7!`DY_xxzw%LpSdCO{ [}oh;"sY=.)P|<s^pQMRlPDyӖ1>5*ږ(k'gwB &Զ78d: :];pk?sgahbV7֋Z!9Ӯpgd,+&]` ^!6a"ZMd?Lm[Rg0J筺oFݯ\;Ieʆ-ӈ8w/-IH2En~[.C@-1gLe\S5"&FAA6]D3׶%YADê'm! *Vƌe R’wesEyܻ_YNAU!V 7OxU-\0Ic[wd{X*8*C%y32QH&g e6{GacDcƚ|=ϗ D*Ma*.+'c}DSV2"A%,|މǯ1PY9Su%k]9EMTL'2FqVm~G"wh}% kcjRN;ۺ*W`x^@C?}3!p<)8бM`\ ^;|jR2-M㚎0pͣ^(7~i/:(0A_ s\do>Wy0A°1 ! Hl% DӆY&hU0AهǙp8:^v+ftGmm9"Rv<VBVcݳ&ـAG64N|W.Q()5ooA~;SoM/@o-$ VDACqҺ^(mr$hxwuRa']  ~FPcQmEWŇe~5#-eB}XBLgrB<yI$ !ow<,m9B`vJj $*^* }@dce[OE~BR+DhHoï+ 27**>]ސ`Ui4{gϥ9 .0#Go랸 8q NfV^ه>Ʃ9j 2|?+D.㑲KRq;Bs F;;}Mbof$ŝOT6 Iܶ:Rb ߸ q0l!9't Zļ+.WwJ n9+5 AY^{ؼRėXZ b[['ZgS+bXR5f+R=S J x݇sB\c.Mn8VN )7؛9mhFZO G;tr2^#~jQQBtbݕ;~ jMvoR^^ȩ$ C-LDf/Ʃ,UJ:3:)9ͱf&joqo.xAar)ۤf$B'×P˟;84Rܥzfac_,{OݕĊV1a[Cxwȳ@ä`Y$%x1jھfݐ!>G*=a;32QF1w} Mh4fIcQ䧝C6?ܖx]{f1KEr@#;$OIQq_r"hBt4jkCv/*(Uz™7CH!$uJ3WS?sca,9˶{u^//!_G$Ȕ|Cz1fɳY?Д(:&dfbN/>QmtW@-e2a- 2B&,gh(R@#7\kH4ݐ؜z׾4aT!Iz5ۭj xWf^Ladld s?nCbP˔9<(@lpht*/_7l6"%бZąZw̨PM0%|J2<<4^ ! #b ӄ9DEY jZeT!V{iӚǥ2nskO~ջ5L+ڻ}OV{tni%(vZ+ G!M]~+_$OmOL7v8՘Y7Z-E~Tپ^ܠNEb_֑/E56a܋rp=.HN76\vIv cU1Gaܣn8G~YMN@6Pȴ~'2̽ <#[̼:f k?g a|D4t^e2;*w٩,ھAND+[Zt-,?'jirIMӡ if B챭$-e&}f; i<|P&-Jԙ4{q2Sy0 oIB[UЍ;uP'-S-NԺP6~w=,YA#Qa苮Jٵ j|{Ȱ'` MĖB| C-_ܜ'C$_9@>Bуow(S!f] WX 53|w>h?⸡pmm} s=Yɜ*K 4&F4J5 2bm/tQ낄m@F|%)1m̑b$S~빀ѯ"" 6;oxQ9Nxˁ-& { `AX>+M eR,3JX}cyv׆l$!.D^= wWU X}oǨ.i@Rl2л[WFh|lMc ys Ep 胃v?Iݏ"L\j(']~&7R]CfU<Ɠ+DY}d؃;Xvo;]Lvz\PaFGWWGƬDgm]zoc|&H7E|0Sǻ_\0\"*f,ݏ!j)AQ#?CvPd̟~vX Und sB/ L~^C`>@bSlpx2QNj6;Dj37_\I`1b%>cp0BA&" tW; Ppt7g4Z}@(j8,uC/UMnd⠏ ]noRt~|T]q4 ;=r(/7PW Ve.CxsR`wa6走*3eT `ɂA6x2A. $[GlA :Z40gjU_!cSH.lk{ƺ8]ó0ۊN /{O\1JX?;-vrE@LV2(/il,L[a/x#vY"e;:#|4l?Z)^f,M*h7`A_lt}EfǠ>!2%!.[* CkX9Pʳ0Yt+'%4r92.U]\iێSQO4ND|TRKug! ֽwuCa pD2Khh|84,eLO|@MVi,O-̉iM-S(ٗy:+vtPL1 у h9^ťVȲ#v(jrM3DX 34) # П i!4kЮ"':qYXX}VȥP[R{,r[) ᛫@z)r##˟]]iSjy$.R NhDQ$g~ B9Kvv}|T@p:v +v> i~x)4 %WR/'w*.gZRMj`G<ឡ*W=m` o]6RqU3lrw#91\0TR5jB-y U5@047e6c^ܔE,%mμzEש9D1]|l3oK:l\@"dqX-@حF}@ފ2'G,O YL]>!=,#|,k4/ պJ^!\i/wdc^|l~q6;lu*[qWe5}#qyCzX~ HԊ@pz#j6.A pHS-T'"+\F|t d^]ۏ-<\-N,3=,j͜ux6k~VIna ˸ŤLǤg$/sF >1mV 64같/E^KF;47Ǣ`m?ߤ},M#¤+GA lu# 9o$F=hd x]kM!yXӔ, ,|n|w䪎h(fXYtSFOu?,#)N`$է"")9~yfe2pb4SeX/ZSp|J8=/Z#%.#lG; 'nF0lxGByScn!0W >zac-VcEbpnE=Oы]GnĠwϓ8]H<@ dmtۀTsOaO?k.XwY,Z{\jx@QH!_t(e^B\TrcfJ -!_FDUJHgį$;s,yqnݰQ @"tS P?J vTܥ_.?&u"gzn7va._9'&մ__JqW6%PtdB b_XQE0޹B}`mWwț JqV݆T܂?#jR}9vEa|9Qu6_ؒqJ ~ j{Htt,7)]w*L>&GB|u o-GZ4BRiRJ/xT&vnqT*ir6r4vkQ61{1'38Z^Žc=zeJcJ+N~ԗoP-L-80Mn Da@YG2wx4] e1MD۝jNk%+V˾)Oy騍PxC>ecPaZP:>@Hh(zo_+YLߚHp`$`SU#d]|0 \=ڭi<"qLٗ}QM(1 #X%7mPnE× ̶`2@ Ne0eӱG'5f鰍J Db0`ƷƱB6fvK!qܵur1 -mǍf>ѹ J3ZVdFxƈVBzFt"KzΥ~mRFvji%9*=fۙzD[7t팊KȶUZgEP02eX)~1*G5 U ?xnO$\ب[b/^y/+X` l"1,[=yr0B0c 5wGI ]LSR_=ݔ95jt̺nY6o "ߞjwpxʳkAӖ7oV%9KGOwlr3Q ;\28A" a8^M+t쎓/yY`uLH#jt+-rlm2k)\uRWFq$090ЌrRH5O3V+ya1sPl3?Y&aޕwBƀ{Q9R] %6WAczR+Wm} /KDX[LʫɌ C' ʄp$8X#m/2ŋtߵ_ <;,TQ$ #x1nh"K""!._4@z> =,j=6HB< 72`QF}r~Z.f!`Fp 4^_R\J YR6IGgi7 ʓ`N1P qzKdG4.94>.>ڠ?BZ[e»Jԭou-"Ѥy}D*#B8'ZZ Db;\m!Se` $nʂSWJ\BYjdp=1`ךr#5#\i8#>Zvccd!<'g%,I=,54 +}}K^<]פObh2/ ~piդoJz-J0SHl*uP@**R}M-܍ YE6'#<W< Q% !cRx` Bqޜ\| Gg"/Y<~4B60foOݻEbr\t"IlѓdSZd>i="lRU5*#LvEF04qƩ$VJOu'5uHaI&F`x8/(xՂj4?^8 3B lr1:eepE\0d):$[ߢ]D;v d +hpǫ8m&hN,ЛYxAuO%!)_e#ȩ?Zi'b}VpgP+%uq`&Q28B_:4ܸ`"oFXIWͭOQʹ~;z"1y<HhYU\ؖF4`ZyߥF':͂ɸ CvҎ{_1 lDnhvu f!kj$j/-c8mZжR[K H!1R9)p7qhtNIkyG>w[lu@zk Z@Lhߣ?k,!7$MD5/잌Y^aY_/T$hkbۧYO~,VJBhKDbC"G%(I$:)Xhb^#w ]bۍ6}?FO/js_E,~|C'3CwJhe8wRҮ P|MhA-A Z)I_6JFMжP;l m /XVwf%WljW<+9]ٰd(Ä3L4R$:>woeXXզ ]?nfR!sN4':a Z8@cv{ ed q#?=iiOyȺ VM(QX3Tte-f q8;t!ZawƐiH/l#(:b0Q#rTJ!=Kk0;< ڜe]PK+V;?`Z1ZΪJl%iE#\A)tbvS=Ȧ4ôJDE"0oJ˓fZQo{>4ww-7-ۘ ZHcJ%6]ݽǍ0ER^#[^AgC "NtVI5XK\U^&3j`}B1}=Ȏ:"c{[gWǁ7 z8lH l@k7Qÿ_yp?s<*=ֹF=cg7d),\S T0GbOO-n.ZqQin8}-1Q9inڛ2gv F[Еv}%*FQ9MC<#\9$ ʴ ^RMHuy_/,q94f]o.XXŋjc\qB_2_s_K߶&5Mͭ}VQ}@ҏ9K AF"&V4%O!S{`+%Ȕ1/09dHH*o9xpnb,ǯℳ Fݻ# 5K\r*%mMTXW+Z3 -5Ik8)ͱ0|y~_m,o6vkM 9t@CV-5I*TW䓉Mr;n#gvm4ŋ,F O38a5h4XDSՙTBCMxNń`ϜeUԃ7Zaj*ڎR۾ yMXZg .K&dg],P ߴE::S샼O Ŵ.^m& QAt"8xRD[%CeC1!?-ޔjލd2C .}|AjgL^Q#V غ'T8:*5 BۄHeOV QMy=d=DWAѠ YwԹ $ݰ>MZ\sl8V1ܝY'm5}Þv%Oθ2!\O͍d0ZJ}\=?^Fv=DS r-uJK(JX-: pœŚ3Zq:,;+hFc+0EI綏l ٥5]Z,WD¹. .vW\r& Vl7E.Sc]F5i]p6> ;[ pSE= fo1v!|60ȣluՈM"(p`f~xރY[Wn# >!/p&4C0_po1{$$1)p[n\\awrf*[󎃆[yZFƸ/KkY.,'tth(eS%J,ѧr!Uv/tX9l&!k/M$fcH5/9-9?'D3"Ed_Cq9fsEp'0H_8>`Mcr|!8rN8̙ZF^gOzIuz!;`HpܲI}T9z1G\pE=Ns.6׵{ [_,2)a/s]u;I @Q3K~)#NK@*~5/;Eop$>]K @ݕ ɨ`IW;wJ+Ɖ]4+GMb9,6Zr2iN,} ʘFSe %Դӗcypl]쳅&nCDYػg^K}sGTG ϶\ 붜?>@ /ܟH<=,E$=L%Q#3_8)dfO:]ZQ@ y" `_rJ4*T[KJ}̝ -cs BfiW{+2jO9'PT&X6T80A3Խ(1Q f&ڸ4WS-$Ixږ|L*KV"#6XfT+S$ջ)c;4 J$q[TBYqxtFoFL79R"n]X!% d; ^^'K&լ) }u,ł]0OyA]9sL3]3D6W?od~,yƐsD/0k$xa2RV:ڶLCj /EU宬޴nG9ZkAG<A#6ކD!-+, ʹljY$pXdUv+}̸&Z:}?q҂Fuo3XCQcАleXuhj"{QT[Ĥn Ã2[si <Ƅ)hA|*?n$&9n ^= 4ʱ0E:P`{I*LZ!eis!yA]cc#>n,4j(a[ܧDr˱5Zhs=W<Ə!pQwg" (4t'o Cv6n "a(["u ik#s4]L`76# K{xǀή53Rŝe+^C&ANecwyV@z$SY6̊ SjnPӈZVUBr~:25< G#qJyñgyT 뼎IZCGUľHޛ;](s1ʺ*tp's"³U\E~|AH2yM9LjBZ{ 9y'k:є. s]HR0 /D4ܓM٭2-їm.Cv9;+{a!`~d, ,ޢW[vnP/qqѪ AK۩X23ߕS=K <[-P]&Zj/+*݀.XuGNo@ݓe@M//A"&rLс.PL;gU兄/ۀGc*U=(r>糬H@(>XPe'ʀ9 {ΫW൧d>JgT-8 *8B/4s GniMe/-/_4k)h*j~J!5}?CWDEnkt_ &?sywwAV%(HyWOwG>R|;u""@84> [p5K1v 6/6z3zvG#U G~A 47`V%vJфmݘg]!x6l>"@ Cxg9`Ƅ]}o9J1n(+Tg^2eK?ᓺȞLu[#Ű fw2o?r])E쩂}[x[Iwz\n'vȑ(J, J@uR(߈^E_-L}fw[]c~ˬ ;i7^$|`Ἴ cz<46|G0yLM Cj[Q9w/S"IY$@V>.2x> (c0 t P}:Df0T=!.LO,}9f ELvvdoG|}+V`=;kYý,7j Ii mvGrvr`Leim0rU lJVCi^}ٵ0vV-4d:#I, RXoOƖ]J9 ̙~:DOx-„{.7Yۿ kNaH4r |>ڢ:yyo<5'eׄ9qm٥bJ 7Ĉj6‰QΥ}8bb4 bBq#OV:ȍ1T+HrΒBWvuf_?4AAW, ..ظk(x?stEnҔZCLBBrudASPh'@\ KuOOuSRv989fa3Y Nz:Nsvܚx'ˌ?͇m!M{tݮurPC.1Lg1.Hdzxg"izu*ѻ^ !Z=e޷? $X'^SD (e3 b!wEJ+2y˳T*A dӢ'yv)8b i>,]{~v"T)~#Yl޴GpS@xoHiWB<̠Է8FU/|VgG V"u^Itoj&X\0Ql9y6K~OaOM?o|WW|C(˜ZLrY鉘okZ - 3"1t-V02!@V`wpg [9OY{m=&ڈwEyi` N/Qt &`@I -5WJCAd ρl9/``GJVBボ zƬFqAO3b& nn [W1ub$X:KӍjb+ݴs  i;1$F镓 Híi΅"[L=2<{>֚3=V}L깱+G^< nr!< ]jG(];C[wrO?HRӿ}bi;djU>Jю{I(d$)Ac:*xeކV!gFk楶H灙  \;b?(RjM^ -hcxcBN-9cmabsX9t%^7z)M3$^͌ÇJ,jFL֫Ey:s'ÿ}2 z6@u9 !u$#n"^؜!~dKq%^7P8qR\c!rD&f<zphx⪡\WX:I9~~xUh/rYVH!pSNǷ̼2ҺN pp1Xɵ0k9Jm'l+KUiZzL7f[oK[ױcN~vdDcu{>"kcݥ)QP1=/9G{>ym\ԓB"w@߂gf y'C z:SasZhYڵa*vrߠRH@y*8ئ0 ȴ- 2&Șk@A9`3WޫW挝>sH4^õ s]pF6>|o# nM d~/M[ 7x}#s{ xpۀeqB 0Ͱ_cԼ*Kƙ`5\C= !xChi:@ 9m$Po./w`I`]#gŐD9m6pM+O^L=!A>ΏsAJ}:So3&}lX  ~5P:l grUU ?W,T 7?OeSZQ@ֲ>@HYiQfVl%p/lfDFU4!* \ƶ`}Ӆ(:4՟e@q0.хW!ڽuMa%%Y*缑FH"'Ԃصÿ}9\®1%_M6`a03 >Ǣȼ8fٺab> O}-Lt+,> ?{F!~8׸xЊ ] `u1ԻBVf9Ɉe`,ޒ͎a_Eie93KJ^ŰVɅq^|,CM:PZ;"U)gM.o~HIGt~)6 (\W#|`?&2ͨu{:_xV4A hp50țrAh=h~6j6(0v6w[p] k{m;2E59('ڇ=a "c Yfl' fzA]d\Pb|c~@(,uS[4^ѥ}G)cIMQWXVir8Ak:6 Dؿ^؆$H ^NO hlՅ!O4 k.8`Ɛ֠N\<0.k C⮛ryQG QY+5؃G`4},iai>H k_DFubV\~OĴTf)~Z#oY,ͮ/oipxRi&ޤ0ytCτ\yOߛ3isrq.9 Aʐ֨o2%7ypn( 07ݭ9^I2X2Ba^b3"5K,-h A\Gpi/{<=s87SVL޶C5RmusBX[kWpYˋz qq,䯴GWޱta<HiBhT%;v≧;eü4Iӗ6tsHF:bRNuk̴{;h_.z1YD,;.;%y2~fۣ_JEtM-_ݫP`t=vo& cf\uA OD0Bѩ{Cc/! XU?1w$3(bXSLZ;{fPo>:865 pLrt?6l$>L;G )ґTp%auY˞/C]8c4D?@bv8 Un6!~x:~eD _`&= 8*(#CA!m38 m2!3w\ ysU"VM W,m".YlEb2f\>0 D,R?nUcTwzsr13 mo ? psm:2{_XŻ屋IC S4 *AdI3!^lvjIe=Ժx p*׭'bmeB:/Lwt|=v՘s\=9PUC2q31vkX eijCnmY)ſ"ӐuE|aIK0vE&b$w4'#k6qNQG/mpだX:KU!b0 {w_𻂣.3TG8cuvګо0I~RWS?ֱpnX%d+`:ȼM cg/C˸W+ reqۜ)!\DO37J&=BN 5V-[6瀤O;Ғt)r5HWTPum+z'cb"0 Ƶ@$X`5}؉mm0Dg%boC7$L$cдc<$8SV v$xa| E5\CtCw`e\XНLK2|krop\J0T#т{K>eRIhq5ҮUgb@s|;h|EZ:;yµ{Tk 3LH,7H7>DP(%L fˬ{`6qO }OǑ:Q>ljsʻ>}/^v!ȉKA&X/ d@9Z: 0גZ۷<>\XμT~QM: kj7f8wj& ccbӜi(f,|sY̵ճ]G'7me,pLrM.$bX ͊,9f'_x4򙖂ڛN`eS4[c |&ۙG6)# 6ur;}Nd,Znp4 ㋡!2wA6u}lM+fإmo5+)H[2ok}H 5ΙG֥5`{fX_| ,|Z҉SMIB" ڗ>Y&nuW6* #j)tL' *5\"K8'>Rx΍6PZ۽A_ǵ BdJg $fϾBңgXbM<*in 9tzTR5YR9#V_IyR1l'o] E*kBPr1ObTf&wC"E/Π?Q&n:Ge"s7'R@K{9ȯNP:SeWFERj5hnΙyJiﻜn5 a@ɪϒ6}N<6ؐ{yl42L"ڛ;= ݔ6d`7`xUv%qvVEn6t+Jd6S‹e0s^}m8i)\>^>tf. G<_cfC1 z];/rAlPv~O4鿻NEpjB >h^J}9\ \ZtY4>{f)v2%HZ ݨT;5ewVS4v+Ԭi>T7-QPHʾJ.&F ^D֧ظܨ#HI&~z/4A=ݣʇV2_LYO96IO,k ZyەD.8kAP%k~0&B+.eF4 ̚j;NT6jZm~udBmf_T?Xu&)[Ck3k9/x9unlzL%KW}t)./b}IPbuf,WE]q՗HqcXL{u*Nն~Z2>ݟDGc6_>-CHhS/ v:H22WM;UCcC-P_Y/K=NEl,rC?Y1_uhZo սՇڊM\*&#Lsrf3y<Pօ zG2_ eb˾n=5?y0dY>\yuk C$RE"6!M)n}RٵD#%\f0s6-딏mwzm%A9 /, OyA <$g\Gu&^I/? 4NدuR\7pptmGqR?vkW5eKt  pðzĭi:&T/#['z`E}XhSAuO9\+ mjY%f+ʙB|\n9%m~,sQ~X׾v Ԯ1Ʈ/[sCəK`ck(BxP0Ŀ4p[P]͇;-G ]?y]=IKMUakeV1+:\UU|Rɻ s~; {@Djle  6.fQB]"dW%?@y2.Ɠt =br߫_fP juvç'r a׺;^٠*S _(8R^2qe421сl>r)b#'dO׎9|xp#'ז0%G vyMakL--5x+MzJ3LT+ܓ 1 SPy;M~O((hK҂gwYߘMm?#vQI Ms } ~]7)tM>/t-&FS8$+ U@C) Eu@Lws쟽 j\Jr;VP)sI@ յHԕPJR@7?#0łz)$-gfX)2nyKtlGl9UϪ X/jav{ڇ OwD $thTt|ڶ$Z>I狄onݬ0i¸ >jg(HK<}yA+3!G$W Lȳ [ S7hxOWe*ђ|AKj؈,r'gߡL#/˗4Ly-4vOf:A%zElȋB3XMf_eמ=eBáC2wgg 3O)yϮƒҰr}+Bv=*{~u~~Q])%:WVWbVɋ4N17p$Ld̷~ j%M]sy;f3YhPz93[GI^q>Efdx{i(1)HMD;R,ԱMfo"|dƺ e6+\Jr7?=P|ɔM0-Ӌ-!""7y`v=Z)g)(%N5ᡂ蹡}+aNt^`DM2NWӌ49?fnTJTunX 0']^4±m1}e;¡uqK;]vKQ!?Z\Wn$m9zXҌa_ojO#mnKْXŹ_N?nf@"(c%0 ^KW \;iA.Xc(Y 2}%g5mI#SD޺>i[~ɡI lYI ?/'$^(6Ri||_DtX/.2*_NKpTh:qc˜CO孒Vb7C1@%N Ƅ{@["iҽ%a' "ãTs<=Dž ^0EeI{-FbaJ.{[`*~^@A}}rh*Gw¼+(ɰ$/J*qStL3ʄrS5XיcAP %us*B7ɢAu|ۀ0|S(sWɞˤi>a"> nQߑ^nE'8np~>zg;t2;sO kMxJqh1v X.֖} . J enP&"\@+$3)myE-eQYVEbN"ۦBru.^ocp!.7p^<l ݭu*둟y'Rv dG'J^{./Ȗ*?iТ$ph[„̢6: xp 7Eדv3ձ`EwzjD]'h:犝|E\|ڿ_DEB*Ɍ⼅Jc< IJ`=W~NlwB IE-0v^PZ]}宯IzEV Bbh9,Sz=.q@?-сaSXPrPbfh_>U߶GQǢvj0tR{tm8 H&@M&b|ؓeu>j[ -B5p rK=}7!NKdΧڗǵyR"n .8!ܼH Xz;(K4r80z6┏P_c|KG^vi Q9N6ֺ `@>?4zPN2xkI_Y0LtiEѫU2(9:(WW;c(q>%˨|h 񼶘kB 0H5-E"6IN^e (3̭០?ӝmVd3SDE1B:3@cKwV5OCbvS`Ls1%(z$L HbNSnaN5dtަ2<1_FeBƅS/j@Qm>N]mƪRw{KZpx0Ob@7b0q8H,*L((J3 0Ŏ|aCbHbUc 1x#0 ZT\TCbIe0K'N^煔;ꡘ"FLE7S;Ȉ=DcrDTIA#+}ސ P-bÀEBع1.: >H3ϞXq_4;s&<"լB϶ @V2lX .3`J.cI VFZ׶cPu(AL4ֲ2/D*OH~I5×0<{j, !O$}Da!5oI=[S!8/v Dt51z ]DZi1H}4jt;ڶXVDLdh|ʵhMS;Tif| )au>YR_ӷp.eMXL&LlU߅)|ȋG~;n-6 m|F89%NCMe6UFjP2g5Jz- 1 ?]8*ܟSsNk/Si+k[ԖY[&&!1ЦV#tBRZFG❖D=,+!$5kdCpB&$eMiq;]z XgIИS CXU;6,:rad14ބȭGI ?wN/o1|VrVf bġԨ ( ]a ,ꅚ:5儠%Ib E+Ze !q7pLAx2xd^MнX3rTykZ/x}H!rV!?|oIʖ32H&"R&E'©rXCLd45$ۤa; .⟤h!0IO+l.8<;UMǖ/KZc~3@h4~&.-<S.*SJHǭREc v:$.Y?5sD9 Y `?O"}Mz 삓(}XK֯#E2*)bĢ5[1?Etfs>DjJ7vCFX[?T _nDHpLj NsXW |Pk{!ilhՃ14ܔ}PC2 mkz]۰7t (b"wx{{ӣ6UK̔cf!Qa8:ܗ s*"Mj\AK[=?dsFgZx.~A֔cssJ ^~yq';KgLvbn@3R)s-A(G SOj\y9pSo-TAw;nq2_7445SX*|zM{t=nE*j/cz` ̊lImݙ1ۈLؙPJp(YuBi8n݉< - d>&[:2WLSfENKVBA~==$G@"Sʺ$ԭZs{)3r pSmyfu*5,XʴHg[7aBjNGn0'nK1&)>A{rpc A zxL2\%B}LZ| D7TS+^/x{%ߛ,#&¹`I?T@9s?է%wS:쵣gEwL 8  Q. {_VU7 m%S~r['#)E_8訜#|D=Ą{dxF\IR=|h.pܳS(JɄĥ?::ɖh nG9oqh FD,S=BXkz/3'L,tB/=FNQS[8Vx8 ޠI<\"W`ETyRM}uPR_*r- A x#L%uj45Y12< ũ.U_ sƉӣ0-=O9& =]`r^6^]6-U!k x*vT`ӛh4bexOçK}>WHG O' nUBZTB Ğ1ЊZL!Dd c 't$`YRmOE2tuui}&|x aA0eB'7~P5xFJtM+,  }yB,;({ {8 YZ