openscap-utils-1.3.6-150400.11.3.1 >  A cmp9|I2Se:̨E[bRd$6Yji#oB'*G"23BIu]HH?aZ j2zf6왔Gb]pldɥ٢(r9L`Ƙ.wXaqi| #aXWrEʄy̬@%42NK"s=;b5IE>}jFbjLhߐ"=Xp:oYrDX187ea43217ed64e06620728a1a2f34cf8952f9550e4dee8495f1e4d34ab410ec8ed99fd4030e70b021117b44e5d5426ad318fefecmp9|/^ϳX aX:cX=$ ܧ1/Ր8A?Mey\AߝJ|+z/'H xQ(؞;dAv[^6/zĴK>DЭY-c:H}YO0q_;j}\UDZFz&Č8Uϭo =]a!T>pFP?@d % 8 +18\   T       ,D< (g8p59D5:5=>?@FGHhIXY\]p^bcQdefluvPwx<yz<Copenscap-utils1.3.6150400.11.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library.cm1sheep06SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in oscap-scan.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fip & ; 36'Zˁ큤A큤a#clba#a#a#a#claa#a#a#clOclaclca#cm1a#claa#a#a#a#a#a#a#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-1.3.6-150400.11.3.1.src.rpmopenscap-utilsopenscap-utils(x86-64)@ @@@@@@@ @@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.25()(64bit)libopenscap25libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.6-150400.11.3.11.3.6-150400.11.3.13.0.4-14.6.0-14.0-15.2-14.14.3c*c#aNaaLaZaG``r`__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@dmueller@suse.commeissner@suse.comrfrohl@suse.comdcermak@suse.commeissner@suse.commeissner@suse.comsteven.kowalik@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- require shared library in the same version or newer- added Leap 15.4 and 15.5 dictionary entries. (bsc#1203408)- openscap 1.3.6 * New features - Select and exclude groups of rules on the command line - The boot-time remediation service for systemd's Offline Update mode - Memory limit control using OSCAP_PROBE_MEMORY_USAGE_RATIO environment variable - Allow disablement of SHA-1 and MD5 - Allow providing pre-downloaded components - Introduce OSBuild Blueprint fix type * Maintenance, bug fix - Fix coverity issues - Patch the `segfault` in dpkginfo_fini() - Add an alternative source of hostname - Fail download on HTTP errors - Compile "environmentvariable_probe" on Windows - FreeBSD build and test fixes - Add offline mode for password probe - Initialize crypto API only once - Fix UBI 9 scan - oval/yamlfilecontent: Add 'null' values handling - Do not set Rpath - Do not split `XCCDF:requires` with multiple `idrefs` - Allow empty /proc in offline mode - oscap-remediate is shipped via /usr/bin Added oscap-remediate.service.in.patch- Rename oscap-docker to oscap-containers and provide oscap-podman as well (Relates to jsc#SLE-12852)- openscap-docker-add-suse.patch: add SLES support oscap-docker (bsc#1179314)- ship python3 docker module always- Since upstream has moved to Python 3, switch the BuildRequires from python-devel to python3-devel.- Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735)- add old patches - slightly renamed; cpe are needed (boo#1186735) * openscap-opensuse-cpe.patch * openscap-suse-cpe.patch- openscap 1.3.5 * New features - Made schematron-based validation enabled by default for validate command of oval and xccdf modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added --enforce-signature option for eval, guide, and fix modules - Added entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report * Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added --skip-validation option synonym for --skip-valid - Fixed behavior of StateType operator - Fixed some of the coverity warnings - Ignoring namespace in XPath expressions - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about --stig-viewer option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in --stig-viewer feature - Added dpkg version comparison algorithm - Pluged some memory leaks - Fixed TestResult/benchmark/@href attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element - dropped, because not needed anymore: * 0001-Fix-memory-allocation.patch * openscap-new-suse.patch * openscap-leap-cpe-15.12.patch- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shsheep06 1670343985 1.3.6-150400.11.3.11.3.6-150400.11.3.1autotailoroscaposcap-chrootoscap-remediateoscap-remediate-offlineoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-remediate.serviceoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-remediate-offline.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27062/SUSE_SLE-15-SP4_Update/ea7f11b22176aec6b877f0cdf87d53ed-openscap.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linux  Python script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=327dbdeb450b291e6bd521d1b0dd10565287c13b, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executableBourne-Again shell script, UTF-8 Unicode text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRRR R R RRR RRRRRRRR5100L{Qutf-8a78b9e930b105fd40ab2be5982e21e3e887bf99344537600c4bf71a1b59659d0?7zXZ !t/S] crv9xsr{Z}^k y%W4h9h\zxpRF!p^?K]6>TUbq"@k3"ႜ 8ܑC6v|/0Z#Fcee7 R roѸ$ܹځ ˔98-)]p/ D+cZ.;0p 1ˎ46 no*ݡʖϒrߝ3»w4OY0^P2/3 b5Pz5xҡ{Y*D_ظ=|ӵ5/ԕ`\!:On1]Saj7vnNQ~QAJq~w#D ,SQ\bPBgc0YțE$ '8psaіmY:W҆ƨg012VG/MHnuP /sE)UK~R(ԌKe-szuioJ\7BynCjIZ U:P+.נa0YeWǤ@ZURONtBlBP;F'm;ݡf[iPj̀c%a5,B`+9VtHf1HU^h_̉_Ȼ@Cy׈Z?,Xpw:S\gl. Ȣ D]U}HŬiV| +@A%b|iL5өi 1dmo34l"hnۺ y'*jI*60#__oSF*=]`2N@N( V&q #& j^S$dg}Mեd7I?/lwnע. b͒@"4@MzH[Jh+NΗ9XXLvx*?IDNT,x';?%IWva_)aƄY=I8]׻u ] n &P@qü[1ggjHuPŒԁu*!诸]joD{dK!vcwu"թ= m$UL`a?Ѷ4hGZZχ;;(#CYM\GWB3crDf-6x5 n0._9 bM,T/爣8 c.H֋`*|%>Ck"0]wǾ@fz|kMCq/vzJNl3<;L=w1:xw\pnp~Ƴl6)gS]ɎFɇ թ0#v}'4vmXʍ aD;A8#v{7ѽZM+iPP(LP6:Jj4,/sz;u$DI絃|B߆GWאIhR 8Cn?K/>9ѣ)v-Xtn_=C~Uh/=F|SN4/zPV0& $QZ kBLp=Q1x4' 3h3}NC-;1gJ+p٩z,R]4CNp)!8){e$Q/_`IjpÛ|ۑJzavVLc / !5.6%MNa~3*-~ np3ub/i,gQ׮;]H̝34ޢ!N1(tI$+3 \?k!#kxVIx؋..BMgh6!=o"T%7Kk0Wxcӵhނ~@Q)AH}p$0V]Hl bgo,2 mR ؓV(hu,TQ]´*ӯ?i_UcT* ?,VЂI>>`gxH5WMp=՚eHFqHlwvA )K}PQr9y=  HNV̲)m}Mr ߚ72+7;c?"{sMu%e)Jua}*bIFY$s iv5p"E`! Mq5P8dI/#޵9>(1ƈLcZo. Xƒoq $hBxU}e5_TzFD{+-,HUkPN'.Ԉ(o$&Fx('Et]JW԰!Cz1mp$w |\^)]MujB+l8M3- t C}n. OSpVvH~?G|iq"9U'?ݸpIr5pdSVe♧J#jr n}sj{0CgmۆemeTb![TP=,9/޶NE'TI9׊4A?3ӨQOhk;ѹ M#F̊F^ﮱ3=bR#G t톹\9^c;qZoB^9D'upޓ)ij"uȞe#;@'dSIՋMTr[ S[#*jg}pB'iO\$tU 8٦+zV Nh[rmte[u9Z{asnyೳ ׶^)SX tRӺ(NR*qMEF7]@Q,fȮ{dZ̲oxƉ5 /Rm4"0T9yVQׄ~~H&׆\٤2օx-uO|mt!tk#\hq5WlYĞ,ꁥpJOvm18u>Fcͩ!i}!W|ow0ن^?a'*ZW䈍B0O w\%LNo"ܱM E͂!R%(OMv|ሟ`_:zUUqI8*_w5d&\RaD@1xM|+ WS 2b |'笕o) -pw^B:'|՘J d2vxi'YT&"_<鵠5H K;1) k9_RLcS k;`PA J(ծ{ʼnAĤLD3I|p[2Jf1L)ݽ! sc&!2l{+=c7PΫ?gɥʘ$ޒ: w3%0[qtsw pKKRBXv`Ȕ U|MR(.{zJ|xTFb>ާ-GhQ>҈7|<<ŀ勔+I Sd%0DzqKn{y}nY"X+Kmɠ*OO5O=dC/#?1(Jް  *VB0l"{&dobCY lm0_{_ yI`I8_o]?"b&z~qd:S[2'8|Qkkۯ[HsY;]8nww&,lC\#˃`1uTġU;~W-cvk t Xp蛨RaoeN¬fG޷>zZ)YQ|lPVe .%JRMx5GOLYE\$宝! %YyZCmwt#K8(vJ^tD`O{RqԶ ]bQ(cb{Kqe ??~ftпuܶq妆Jb)z#0tE-{Q:t*;!dPu6ab4H=Dv8\1K@ Ŷ`ZJ7߀o/Hu'q7H_M=7˃4VKbg@}߁ J G2In٢w>`{g cj5z9!Z~F!=!Wv9/cOgjMQi{ "Hc:Wl[ tTWK{)dN!iT vHc;9=6!=qcFNj2yryS<ܲN:Ywh/{ ,"%/jXwVj `BJPy8TYHH4Dv,=dk˾fu) lJ45lql,pLl!]cתݭڏ%5a7Uffn{y ,0,9 e"-[:du8mAt|,^1o΋DŢn2wcSki6r܄[p/MLGաuH`d=/*N,5昛[dRoHRL ĞkUA ܎ o5 ]%@ӷQpI29ߙ{Hna0S-Z+g/SZq%|Ve ~M p#\se ښS }.\{͔}~k/3VDJwWUbKی16F!c9V[|ьq$X$U .,(#QbI[Chi%v]3Ah`&z]\;P.q#Lz 祝'PK:Y#p[G7m]kf2*ޞ'쁤ӁKAyaoN$bXK!sv;.ŐPs0wv =cB)) kes\I|q'/onݼX Vw=ƾ2s 15 C`'JrG6Om%A/ ;I`8'6Wh. R`椝l ]_|AE`j&qV5zIo6g܆>(Vh?]b(?2kO;Mr#FР'>|t[RgqɊ}96Jԇo,pۯ '%`بO3jfoolu KrnHZM=*2JY‹hŒ.X58u8'@ȆQj}A Ob@]Q+{ߨ|:JTVWG~Af~]QxOͻ9<<fq2C8&Դb<>x(n~9|Eq$鰇<9'|ڂ5/|m6Z y.٤h ӏ*z 誧 #CyIjЙ* g)R5~4n5i*cLq'ƥeZgͣIXAPO}*Di!vUN 2z㤔-mC-qA)}O!iN-MHh]ΝG\}o(SG^y{ e0B;"G`g7IRc^W!._%|bCu3aHӗpO&WmURJ~O}$+8i[yf mȨc84)+?5K ]y?cCuX-񇳁,2X-4DDLj` xD^mYL]x,W3d.9M,+#c̛1f5ڦ Њ x1xowaչ4aawf6K$BJڂGD-OޟY!`A^qɾ2 /:$^uАG1IWaw4MenrMT+SM^%A8jflKA85D*sgCcBXv?Y{%"/(S 1ĥKY] $%GGyj;[h#.o7ȿCu<܋Zѧ4q_vV{d (L(ү4ܾg>n4jƠz]87|h6/s6#"!=zNe0PG5 =\g8jaN@bT(9ێǦ^6!Pl8tY>lcwMQymͥh#V&Zg9,/a87qQWC;椇"p#5Sx;עmJZey"+p@[~>9.u1PYHFy G I'SUxm*C'tN|ц-F1ŶlO0н7fD1`MATx~1.a4Y lb`yom2oJ֝"Z߷\4Õ;OIS8Sgy. 85 Nm*3Aa짻Ad=޶;IBo5 ^^Dwche*yJ;haʋWM1k<XW=îHi@.]u]8McnOE^&(MAGtpE7?F!(?]hU<0#T)wy+Q$ǹoP|T8C;ىӺ Xnr_Qiɱۙ ļKQ4jGP!1驥%¦W%i3QZwr2:lمϯFo ^Ƣf-wWe 9C$#;G%@av _F+ h/&-ݔgPˬ]wZ؎,gBE8̌ȹZ\Ѷ2:) uۖkZ%q7Xd 'UKDм\)3Ot3'tIqw)?~Igכ-1K8[ vvnq yF':(9]UEtRGה2沃<3,vu*Q|U/Cwp!- '`? _XBDto{_}/܎M/A 5?o4[d;8Y$=RP=y34-Q [ŒqAC5iKJBZMѕf )$K?j&-`/Ѐ%;d&J]1.WP2o i-1lyҌ}p] *pG݃Հ0S% 1egQ%&YBg6=sQJrTsA2}wG+.;@kMSFӝ-qdLӬ"jl'@ ;"nm7e/n/;pM劧LP-t[g4 C Tu@׊]&\I|oJX74-59j%GtN/f$OʈzZ@SWJ#OYȄ`V L_ܭ'1Yc `Zo" K.N C}@4 `鼟!&F<Ã[!YcAF6XqcRs x/b$/,خkm(I'|\Ur$ x4u W6~cyOH˸h?nmcjL0T9]HUuL$ŘXc2YkTBJY2sժtC `y!FЪ$W<'O6fK6͖4)S=Fm[iQ,$77}JUӇ H <MMӆZ%42@k^Qh$'AVxV0Al{!:-TImv~Iu'MF^2v58U+a<{j8duLN/L 1 +%R܂Q$5Ȧ|ZV%HޱPCּ xߊ"@R?-q&,2r%u2GP2ZF~ds4[K&  W +%$D,7@|)6@N xёs)A /hFYf]8%W SVBK㔾ßӍ:Z <(cy& W=bbx1b{D`f7$+$2L֏8$=OQ #U}p1B4,T:3Ln)%{MVr9@ 2!*VWlP|~$ޛУ7]baН# DPۋQVx un*f>`dnkq˩F%&~~:9+ߑj 9̍@H{$7Va%qZhqJBvrs\o0;'QB<^LU]smKj"%#CAk.[Ed_S4p:,6YBBtv1Czhfdd  W^0]?5>-cq2}U@!N%V~|5{ KP03o^ G\鍂UFx'G_&>xO!oY4L?x"BPЦaqűNk.vڗ~񒉃fb%v"*`m ?nZ;eO?!`DMٿ.Jve!hP ‡hbv 95$~Aգ D0 k6܊}(*&sRʸ 뫸l0wmzqv(HѓL4ԍt_M82?䏗wM\/:/^):q1,N  \b=̮?Q8JU@p͜9_&nƎ .r1HX ٟMqT'TMr=kT}$}4, %/ 񜽯eFzGշMI5WB܁1h]e|3rM#0WUr6a;5H.&32G_|ۊ(^kؒ+-8&{r2fڃ6Q,a?^ ?:Τ lN84ft{4x-R7A&bTWϥO~ۮZB}C5duoMh>!0sR% 6 F8(JY#;ZUG9;pHߘ nO5=KC>36@M4r&OmKX^lL]߳_ M49 qkvX t=7@ Ь:AD5Jg~L#w2Du7oJvüD|VwV >ۣǖ)Yci-d#@\Ƞ8!Yda̰NGfq\|my̕4yzeҪ2Dnb+[1VF_(s"$ҦTE{c_uj c@uSff,W?-\"^@G1 {,{@# ; y桉B>;نqAm$n; cXJ ľvk_n{$JB89Aաb"u(NkD=ԍ  cVMYd؉K {߬ܚ M{["vq>`3b|Rz3}DŽ錱tF3nOwMys.p1KhlB{ݮ|A(R&!}3F sQ :D4,2Q#u};_Xs tۜkO"xcM*8Fw1z ] wq`9?t KGI2Zu(^1*c3…N]h~v{sCL I\*"%uDi!bPQ@r0A!TNvy0> vub9,ޤl|r zZOD4=·֔b ZE@!T/ʻ*, m݇O]G^2FIT0PuoRg@I?Ee}b]afY;T}603e%)5Trt_r|Pi80f\zeW䑳}B}O7trD e{I5};9. 8yxc@-F*c#jQ_4Ezq$q M`t q$dyjyǐjZ͟ $[no_hQ9"dh4{:G^d-&f&s Pr8OȱffwF.άo{#5dh 9[葷-6c`ͧJ7>f넟 v[e^% +3)+R/ qGc%]j eom'#|+gW2P哦 x;i~b"߱} Zn-5®VO82w=fn(<ۈ %N\v*P.6d[+VBU - XGW:ŚӰSGI3ovXR#vo܁mWq6!S)BFrEGЃBrC8}eo[̠a#WڇCyYi^}{(tޏ{󝿱^R]D}~-Ebi馒^51[^~#M/D oܛ60er3ɽvԢ+L lo2IѽY شBKh \Hג\]i`ea1ZMIm_S]dRlk}a3mX#bR7k3ſDeT ]f{Ęgđ2CCaԿPMd35Vծoyٓv|c Z%< ţW=!LWM", ?G(LW&cagE׶cC qjl ϼ0vl;wZG(ADSAUiLP>ш+j . &ba aNż5&~qNzt1^ucx$?KET3PkVME2DQvQFaŀO|3 5B Ǹh^FrD%Bܙ]P i.͵hX 5GJ{Yz ȗ}0R'Uy3_]>@ڮ2X65pWb$m`OMYpi}+ sG*4H—):2_2o9.0X#EXsOſ5\_We12Qfr'"SBy1gg!J/0(hq_tMer^]%cw TYY6w@>P *.8A;a=Pb]³_0.uݖ@W'@qW,Gĺ)-fݻ 4G:ە^p;fUj]=I>ĕ{qԅ5'!YqT`?ίɎm;)B+dSa|pDv".v Οeu瀞Ѩ(QrjAjS T ;Aw{L:cImMEz4i}Χ AңuD$FΪaϫrC5> %4넾GѠAŁϮ*us>ܹVq]$$;_xmt&'iLWJPp:,]e*errGey+fGx?3m/c5툶[x_Fۍ `|:1-}$+eK׹U`I[YjS0HpV Tytl2u[S%btGq[6rl2H;8Tu6>p ]"{T2g#X2y2Y8`!8"VLO_KC.7,L`2Cߝ?A 0%6yNe9MyMPskKj&Vymjm#sº`o`-CԌP{۞CBq'?ǫ~+l5-w<[Y;`YOJ7autlaTu};JZ+ʘK*17$Հx$5Iqo j҃tbhT)9F8+řBIY ,iec9^S%9 eJ`>1gjOEaOihFtV^rG*4㐛_kamUP>nI霡$WHeִp19I: u4|4'HI'JhܩQKx XQϡcB`C"0w2fgiX+vF8#R HUIQ oAMg. _( PY<2j {Q-RwKpXV Wr yO;mN.}G\nwΔBbwoq˼=Ǎ*`{V˵‚ܡ]a E!9y %YĨM wԠiChED7[iGZ vZ4.{d!t˿8><*3Hw5:``IUﮜ믆.yz I*)Pg@>~oYwgB3gu#(>{04U7aUMĊx. | F{ܦ, ˽Oӵhԃus'I3*c*Bvxk&ӕVSj!"}{ҁZ `ׯK聪=v5x=b+W@'B|7ʆ\-1OHOvu0s(bxv&rdIݧya;:1OE*m\dt +9Sjr\9me7kV{skQ*|&(dQ-5b244TdF_y5wu #L}6{Zu!n@G wƉߘ,9\4#dvbs85 { jg%G!Xwn_u?.v<B$:\$ToktX!Fmd ]P%uv4esm{LJL‹G3u/:0"C ̞E}MEm5'oGJo6Tyw?>:t؀Z c7  R/DiǞ;ŪC)K=ciJ}!b˩ACt;-p`'^ܸ=b ڕ\V 9GT3\ͬe)RH4*kԃך-ЍZ/L,yO!Ea TtXZEjY)6BQx8zI$&mj*EB¢6:Ƌ<3Bqj+|h [y+z=>m(N2-1wI9WJW'(h=P>~h`~0.l`._t)]r5DOv'^WrP=m8dCKe4v/ <;Q%5Y;iC4,{nXB?
G|K\}`WH:ѱs*+,#$|W"ffY7f8*ưi]ht}R)?(:$W>? U^' 8/@,~t3^V\Sqᐙ [_,:՟71`\͸g/fTwB]GSuJ:$A+ϝaˌ $sK Hr̟~oⅧ2]ث@%GnT C5{'P3i:MtZOi?T|2. ;?]-Z`| V`þG}pX&׋L不1apD)TFHn|@2IӸ7il33ۋx0Iټԍoy wu*(Jȝ\-i܋?8OsQC{pxrHjB_:}WFa-*a2Wݍ/c8+DJ;ⴖJQEݧ2tzI, >+KyrޮWX yJƞFWJcH竖/gR%pk]ڐhsnQa`KWʰ>&Җ=Rj%qeR5%,jT {q6U4@Aa(ʃRoA1笈#E3T<*OeՂѨ+:s0N\c'`}TT_#*}s;좛t)ݎVԠkcY7)`x(}VqI~zU @.D6}DH(9=h~>Waqn :ZZ4Hc:X˻HCkS?e:9i'|xC-Q+\ z+g佝kY0,Y>03'CH@\yTiҤ ?K I&1)p'k0KƏ4,#9uqRCwմ %qMGv}FndIO4dwNQ C-kC>KV<(Q [̍ ~:I1B#"'Ia8S\{_ZA nT]8qM"FsߍN0t5R=S^U z `~q_[-3)7aW]Qw|<6`\vqcO!@()$җ/ו?v`kgbFM\Aq ϡ{3&" QbCѴ~pn 8L_M?SN?wmM!UsiwFN/l[3= +3î_&d*~pśd s13;n5:<,iJ=#+쮶kc:UAKs ^nWD7]Ɠ mU=#]);O(Lv5޸UVgcX߄ׇ;v'%5UT'AtwܤّyU=N,S|-/c~kٸ0%ـ}9;E9 6[.. z|Ԓ,,gNTTS(zv' _;On"mn?xh3*DP/ZkzVkQ!EZy:/|΅nvYsf1.k~lEn"7wJRaX=gP% |/+!k}r-Jf-VKx@ Í14F36dÇ1Uz7Wp޳AH6Ga` ѻ1+xpƤ4μ8]~ 3ӷlAcxPeq(Zst;zpl` tSgt .'uVhsLr*7Jw ^ZB_rbC5n@$!) fRIG{,8“`>w:`"/O籒?*P\IAfrF,/P9/ /Dlk\SPJB> ehؓ]_)מE9TQ,{vIX"LK?-̓ k#PYxLDcY2}r)*{{'ж-5/eݽj9/7ɰ:r|9ӊLKgOŪmf8e/u.c6VݹܔMX' ?U kR..u+t$*Ys-YݽY{j, ޞ& zsTY \׿ s>Qp3Ssڤ4x"EG|rPpтe>f6nXV$?.':J?r{;psS''c:ggVsgVX`3xu"z۶ۍ?ZL?ֈy/:H}LF/dRѢ}B!viZ/y1%HG`._[mkNwie-2q/@N7 {k+j .Ez^Յz&b+}9 Ә O2{lyN*)J֡Rv>RfD~?Zq@@-j%r[]J57#WYܗ 4(*Xf=*_7h{tn}DF 8[2EUZ@ɦhϕg>eY!84)EAp-+Ίխ,wʣ1}a-FiMlA௮\+ u[6T ]rn>JXY>MR*)4cd78 ?k@c)NTM&ⴝ7 "IP-}'; /dW Ϫu^VQ7҃do&M߱0$. $7i4c !ءHBPY$FJCo f Uαꨒi!Hب߆ZSš|u2Vv"]ůbL9@F&7H"I>|:*8ʪ(nft;Gjz3, t3͚?eOӔS)3vm=BlHXeQJL1(J 8%YiaP9XYs<~am5{1PED|y-$˕@ ytUlXTϹ:)yHP>Έt/aN#d{m1+w]Ǩhk*cNbA =FX}i?h/ֽM0Ex,.,6<ݕ1BRe?smp|Z{ 8P N/Nkv11S#7,PD|f3+/9BS0ljaU=Fc42͖+',R3^!'W.Cz<*Ȍ]5*&F3ӡ2]彪sN!E.Y*軞>(%(sgUpjKlDsy6OҌ'⇯ȄsIK!~W~>5]F ;acx3on'devoyI:雎;p- k l `c.^;OM:=lN:@ bb৚ SLv^H̲:<<)- p>J3uU}״+^Id;U.rU:Cto p)Ksrbb HWqqlعKkSw+U E=vޘ]k~ &y3q]58U6yh xjkˠX;woΏm=?9 #f!'%!y}R`̬a:+,JLZ CT'+L+J YsoSɟPGG!ᄥ^$T q=3Bܬl6 u kj6L :'J|;PjJ>|*#"] (Y vp1 wo >jg\E3D,._[J3}fAőVg 1('qve *:Q2,c ڸaBU_0f2d eY)-*LIX,u{g0%KjdI/F~;;r< n eX{IX,ݳ!%Ց١CM4dLµ K-gkHUo=YU~/iΧwh?Gv'ǬNś+#e;$>ɝ g _4ySˣ[GU͗L%dLH`r(/+<JcaLKsQyY&F\*h@ n[.y7@ ߓuX1ŰW!tʒk*8 ٴg5nbY"wh@ y(a]p`&#< tP*CuŇ?ҳy" _9<ϯ:|;$5z~Mqiz w:)HҘw&&iЙƌ'ˁQ+ %FV 7K~"YQB2oE.:/-1wˊ/ )n{msՎ&bVp”[ܡpTȀo :QdY klJgRgt֒K*VRTDذ]b=PVBv2μfWCJXP2VyP"L4b߬Bg8 ,FLJjx/pWs& yp_K 3Qas!f4^U,Hq5 n7Հ}=9C>ZCU6a;;b8 ,fWjI*16gq6TJ?=kQ~hn23B$:whs^+4RJ`V UdMJ|Pn(ӷd-Jq6p X3nd+rD#9 c6nv.r ԕȧm􉒨[*a>6KlE#&lVm&yp! k}jW010j4WTQs+SVN)f: svT={jk2lzΎSm> X9? Bmw[81@月ѕs0q`UvE<5ErL<ye;]Q֘`rG;weC>ۃ]Á.fdeJ7Uz&M]"""heQz[rE'ĥ]$Zcyb.?U}W: /2hR:,``C dY 0J$<&9*RP`p |bH7 }:'yIa#`YXÜdRVXX1ɧKFqmTu2,~xɗ "llrպ004*] l!ԭ^ @rW?"CPWBVC^kQ&6HT&sP.ܚ}VVB67*Moq [MO7ni jRz3&!qXf/JOf0kPo *%F*<I%#3_FeMz' 坝BVV#c:) "oMf<`>]HɈv:X-`c.,9H` t:A>,R!d "nS$8e,_CpB lt<&" ?tҷWHϧr6l#! oxg25H9qĸ'>||u=g-פ8 6$k Rs rXgxߩ#icx&!g@o'o$OFgǤN4i ۀU#9\ ěA#mc4 /@U?9ȷ4U=B@ix^m(,!`W/1c<쫑p[R,mp@6h el 9CA[갻d xx8UԢ'7)onED1'Q>JUVp`ZF5 x@S }:>[ɣca2~6dm{?KZf;Xf|Y)8L? AYf@.[NK2F "zPSM꾳é)|g  ?ﻋKWH~ټ9Ā|尗Ot-]సSl H{bMfO[AfN'Yɉ@w$cOD+ltqzJ*/ۤ/J@k<o))ΑU#:NٶՅ&Ѵ0q~G_S07iصlvWRC;G,o5GJՃm=+[(sprhw5(=R$GUO HBh I+M`0xֹq{CMRQgۉdl5T2܉i eAg)Df W`¿=ql|b4O|ޝڽCY8PLC4Ȇ]4F^[?Rѯ"ǿrlS庠ɖ2e@w5ȁaFg+zV\~4U}[ )a,U6-Vo-|+f+Ȅzlrq4ZDDѵnєBMYGU tRn}Hj:? q/Ƞ`P.nw*'5By%54%JvWoG'C܌aBJt8XeNnN- nb[To\)2 8|N3V𑙯8#Z-:|~LXԉ#ܩҎm>9Ȋy 5ѠOf_(IlO9HZjMK 3;];37ݜՒ }?8P?0~~$iڂRPې~ĸǃgƷe‰]xOqKP,èɑ9[Y r1{~8+tЩPIfƕp%Fn(UDpw(/3xQyEPÖN)C^qI! ۰Ɏow{B)HK pYft|SNAsp@(w3qo :@4LX$ _̴oo-.CҌ&&#i8g}z2HH<ꝑ6#/ (om%뗦KתEm[qdl՗xq6ܛR J\';ut`2i-2m_(Y,''zO6s#tEqrb6gNϱnݖSc/ ! ܳUϖĽBȿW:-5 KҪX ^mx>o k%kG IJM?!C8ecD5vf[f0kʤ[$2ȽXSMʋ , \9, gU-ϡɇfh[n4f_G󂠋sIS:xk0L=j nlsk8`JCؾp $9 z|֦_]IF;a !P4"G(AaH֜) yfNm .-s]Nk> S4 J.KrEI@?>X2&{w -VCMJ]1ޜk<ljr)q Fm7~> "+~ʵ9Aka6oɒO+]hm vzErm_В̱1^%{A[NA) ܌H,\LHG Z+6|%6dU@TzON$kR?e:R٥[d^~ubAc{|,?jϽp+ʿ.j wDF~\M-I>Kat)L t Eh}HM(+ڙlt!#lK,ZR4A;QZ\Lш:Y-P7 vDuZ/VN ޯLLۀF1XӘ*#^u& jHΠG[3^ '`o~" fHB8L:>x7gҿ`qӧr7PNӼ[(J-l aN9gXyF2}4;sŃsPd (K$L|I`Qq'7V~>q>xXYp.Jvl:"i[ր8C-%-/Xb$ރxEi5Yj݌es_Lީ:[m͕jS d{W-f 6im`JDx\O[ս"~O)0@IEH$ Q]mI0X1htyJrvYeьw@ֿokpQ)1r8pJ>-Q(t Aus݋Yؘ_45=wzg5? +mz`vRB:P]R|2L7SϵB"4<$}_Cja(* 9izK0ŋ !ʌH@9~07 K[Tl}aԫx>.BNfqYw+ܪ$״&!.NS' u\/~&iM3Gfr2^kg[-6Dh,R+䙟iDba)]Bx"!2kcPۜ3} YTǐbK9!9N?Qõ%e|"n7츠W}e:Qm/aD5N!N`zoF `PVoX%$7Z P'G0(~4A1^<) zoK'嗺bohu7;[[ avJR SXW!4jk$Q.(U~lF3ߚ)F ~BE:yM|x޽}|/=:^F`՝Z5^oA0WH`.h`Si(  . yۀ; $W9ɻЈmBnVƋI.)mOŏTaNu>]Dc Z* ' ޢNߕrhoBmKnBӍk|m[VfInQXh9u8l~[T녆K}(LR~{u,2oSOsLz<*B:W&ցBRVmޖ=]O[ e )9W_ںz-ڎce8<o6pJ Nt77UhdP<>iLtvy n'fmT̫{eϟx|dCcI ,U/dM)kEz1O @])-6!>   ZHj2NHEGjGC_&$.W8nUܯexktB%ǝ'iv:HL:EY#fn`6m,ar'񈩵UD-C`:/w| 62sC'P+IҺ8TA[:T= Hq7);pH?Eb )H:!iNWEfpvFԱ}dӨ+=74Gyk-BH@~#E:$^2I\h%.0j/1 %Ƞ^wfT@:0= e ʗ_ExjAIhi],sQI%/ʵ)dNǞ":eL2kZk~*'c ͺrę.#p@z3 s)O6-sM+9`@!s$u"*uXނYփl(W=1V %?O"~]GTpb_/Džaم?'Yw+lP|M1>7Ồ㊌Ak {JnKz `2W _r)H XebQW0#MncS]VV]GmЭ1~Nq%pg b!w,%uMi_T|e<׼ԏ$g6va}VA^qLl:& y~=x`#d+O:-mDl tk[be_STUYMdc8XzioLnL,F E)3(.Vԥ\PGؤHrPq5Kb.wl\1n,Xm6P@-"F*힙|f1/!(;C|P-m3[n1*b-[ٟ**kv"1l*SK֐f|~xٲ:UQ>cCS|(+)|?4ia6:߶۷10d|4-3.G-@[ I~e0 ,Jmk๏~`dm:RD5C_q:yhJ/C#@y#@,VDFapExCHr [;{J7Q@ASs&Tw;BhT@m7b2<laT> ) {<X*<'XqOfhr:^'Y|rrՋJ&ߖ*^Q?# =.a5<-g~߯N% "Z] @ge˕;c5Tzl7gyIS1DT*Asz 6P؟`)Wm'(SD3&9k*JJ2=FÇE =p5X|?I5)Abp,%_m?AgnIfk@%yg!\#q> {߂J/ <œUZz ./"c4˱R%j2YI\O;U8Ϙ.hQlO܁RG,hmpl!7j B"6mG%rzz(]#RǩdE(txѺLb/7~KMh0.V^ hL (, BGOa,o30 /Lvd^DJ od&{dH&);s݂㵉BXMg#xs4gjhPg ^uO7*荲r&fkKnb-AQռW*q_vn"{Ao&zvYwě*)Me_.EHq6hiTlvJpaΔתeE{;1c>܏?ǥ|G mKvGU Ӹ#&LtwMd |\jOP T[!'Bs f|t]0GFTۖR%a@e\֘6ͧe#ݠ(HI8a-(vݸƿVFŀa\x2DU&$ , U)$ j\_v&躤"w|juEs/}\c'æ^˶nBE_ /^ko¯1#Fϖ  7/D閳dރ)8~颹g$ȑyՐ]h'r92 ~@į]߬F".YǰU,ʹUb%qGKa"%8 ]+on`8͢JGǿ3q4 w(sA 77r&Z]",k1{{؀25&(&^ϻRV!QDeFX, 6R7S d*2,gq;3O_ֳo`}!5R g,S{[)9D o0% G*:.%k Ca+ŭ"G J6D#j ek[ />{!;HW qUcP.< ΖvS8Ŋpd =/?WBSwWܯ!_ӪJQ-A()憺`v/7:fmc+!\/Rp9V.K+R=6m&L f;}yIL.$~֤<:n"GHw)gm7UGxzԿEĎT L庪{)BI+ȟexC/낤*D/ԨZz$ْ(gJ^ݣ,aQS^Sε?ĮB n8+NZ%go7jp`@\v~MZªWϝ3ybu?W8Dִ_-v@Iu)r]g&M Jw3ی)NB0RȗW93>`vm+x QP ,i@WDL2)B{H8Yzvm<#?`ܽ]]3@]k}ckUiafvRsGNoQ#F-C9%EvǐHQ 2Ms// ;MNIJ`V/2ޒ}j(Sݗ!cyK2[uʶEъ-tJ7y\K&crP97)lj_X4Vuzic:_;Pb_8[Yŗ tB 96|^!߰O<u`nGׁ_XWHɆTH"G$pT!@&WZAvNjB1PڲuوR%"뱨>ѫ() KmLeC(9h쩹:Y.x({%zB聥\ķ:99j!jj1<*qyd)<ؗe0<69v+<ؠAvvkWTpt! 364sZZiMgI#NI{VvE:Dž<p^f1ws~\Cguޅ cΥ{wXD盽%OY6㪚P!;e'6Lw퐲^ AWq--pmRɼ>R1jBh1!>$GE]nEقs3tD9"!uWeZWDR/c-)ZԜؿ2IS{ksےdaԎ=wyN%i6iw>-ukH?ʑXy-)t&P5ZȃOYt-؏:Zd+n\,W}=}XRj(ɱɾz1SFe$8me"ngj'GĦ*")~\$0~zʼnC[ix ҳĘxePF sP 7HVYyHcUA?\ jj| 2_8  wB?b'R7RNFՐDھ`~vyj||QJY;{ρ0steOfURL+  ;q@ AEAߠ+~sYe){8n.hX4ܖ9X$)ceFYՕ1C@ Mm'}öo b=D\wg}'}e𼫩aw*Ta)0? ;Ӑ9t5*=r;W)c \0e9AQ[Yr5 h2e*?x6u^5DLDxqŜ^~*VڞRwsi5Q="L}~·xn^{l~3@E !-ժюa~T"z>Q/(cs o&yC8fKD$tL_zl~^jjJwgIkH|ݼ{s=S,Z;^ ĝkw0{ 힝-0MΌAdILESQYt*k}oGg3B\:0~| m'3>W8^jnu{t֫]@=Ww>M(+-oWcO cv53,bYd} !e 3].r8^$~)Yݱ?ɫk1[v$y ':^*)+d`=v $} }Owg `}?ְ0H[˦I}׭v>,Q ye+=ћSs7+\4HT#-^M[6#,k:ӯK8mHyDuh /0KBɐ[SLt~o049_2:SbFGEF0FAkU6 M@-弙F8|rF;EJ"DXrG,0o@JBh+=bMY6+=ضbٟZոL)":S(RG\H>U-E Lxۋ ~O{"=}J GAnµ; j[QӶY^%@MvEe\u[l̘f?|UJ)^%~Moo3c!3fi 5dCM' 2JOwx +uQ}Oa`z 5 "й~B1k!Vv"Qi_[gaPc@lnF=J"`=w5n=Tp9>w\ܻx{Θ5>wug8Nd!Z7P8ɘ`Dm(J$cqFΥ}I^, ;A;4 //m~B[JCiǞRL4w } ^a ƞ)5tqX3B ,U1s CF'+k#ÜE֎biV v-Fl£ܕkΰ1@˃0y=jxUn7gMw֞.a&6P~(衐RѝPW^)Ӭso;p2 '@}%66_ߞ"eJ o#-:/Y>e߆KlтoUsԟ,;sK :ߩpW0?i~>IJy2b;(_9ց"ة~NB"i֊Y(hJ} cp4êGIL-9F'HP*ȂݹO ͸ܡ4ծ:w"u!?oH}aQlj˥[2,#j?".kt#Mv@~>Zх*KXLJP =ŲߞaO@kכuofMR״ 1}GIsX|'*`!HAвml】GS[@S8iTu:/'F j1L{D٨! lp(;{(Y $.<* HP=p1% hl̰Ԭў_yHtE\>松N8C$R:zO!- *6>X=ho (>igGf3ccZ}ea5 5Ԣ†KN ˢ7>ސ$TEk= ^֖!ֽla݃S_qa7Ñ4/n qbU3k"By$?uXP}IreRcnѐs}%WN]dlq@"S pU1(9!5-h'YkeklWseu6:v: SHZv+l;-YUꐆ!ѹ} m`ftg+Cء |2hª%pLQ\`?QøBe| \ē*v\7 .y$2ATow%>w7~$B%:teMlӧEz[ħ~BF $ȁJYB Hӱ7Vf'æyy+N!y餘c%S:Z vo&G yCzQ1l|H"ǖ}٩+'ZjHWЄ{zZ#cx(P鑛>tEGzo,HOr ڲ]S 3Vzq)Kgn$S @WI#sM'kc eIaU a }Qu[8]::>%z8aћg9MPJz1hPԧVA8)&dx OCa:!4iAZ5'vf|q=vHm^9gYy o8rg1v8y=Vdɑ징)l|Da%asP.R[>;7ԗ I`< VBEuƺ c!DT@x|~SXV\'Sb-կD)Oe35r$wB6|O2*O㿘csϪCܝs^_m$(Hsp^mWgܤmȁqy#Lx/{1Eha/K) %|%7qU ,\x/5f~I,7 ¯05)_A͙%e'b%ސ%n$ﷷ´+yX-<+m"=p zAC)Iv?iĦ"&ՐH.jR@mKI+RbZ܄ҋL^4<0yt|5]W"{-j"M q`LMc :Q:4]pL w";7Td՞:Ѱ Apwq˾qsp|v tRO$~87M4pTS|Ӈ4|iJڙ:4W v:C+vAёdGj]1oXk"и]V? V#ܴE!P>3j2ngq9 vjhI~( /~`.np"rľBٵл#_oR@=%E }W$FӺ3@8#r Q)ZmFdCo~gW7O^FGg "5&" Z>I42ty1\A(㎼2Ŝ%놿JXIOȏǶە߾_3)*1-3/›:^֊NxemF͂.!(}vy VkS0sOP`cp@!`AVHC S:ǻ=zU;P/W`yP#chq98th๐Eؔb@Vь=h&C-[Ԡ&=*GU {lXwAb]4殖1#|"6WiN eڇ+pF̡hK78}™\3a,B='lc _TbYmډؐ:T?ؙ>.m ȆɓBxOv,ha0K%n:ܘ<ˤǺPn8+RY ¿4B>Wf!WĽ02t[쎸R/P'=Vzbw[C0}.XÇЃ({Er􏶓qЌ\`񋨓z[\T aŸuQng?:"I$ >hŴʹ\ڼ^\Z]]a6Aϩg(rk9LQaXنTe/C<(bXm{r;.h벗$쉔H~}_n·Q l MZs>htVɶ Jqb*Zzўg爺'>r4DA k:θ%gd֥Ʈ5z%w!/!Ho‹}|Ai!d:T""yw>e܏Sj?z<-;zXRs"E?ܹ1t[poxrk2OSOJKȠwȘmĎ $^[`KAe ;&yRSs;Y\m/ XLG zʸ2 vu {1pj f0ڗؘK:R.Q⺎J#5GmrzdH85cQqoeY0 ou_W'pb:۵gp_.!̔%_nH߿}60ڿǯ/ YQTobYgKz'sg[&b0g* 4(fnG"2 M(ʸɫ F M&F@.}oF_!X~;9?`+'ydeE%F]?g)wQGu`d6 {u^¸@_>ƼR?wÁN {x| ۄͽ/jѾd먓@i}os{nEhIOWS](uwq!iVY v2F…/j{JK},wL9"~҈#w'kWtxyYsm=R¨M*pX&M>T;p~L# iGۣgiZmڼ=Q7 (wDN\>hE*r{qtSVlWfFjM 󍥅+yTØ`5l.8|۞.Cw3%Ԁz-M=3pFTћpx4 W ɷ4LWw1ߪo4j?0?rʼn$_4iЉ 2_£)Mrcfy\R>B@8}p %ܯv"Oq-pbO6jF *v!-r7BdlؖP \M H -" aB汊#pi-Y& qV)eTNG51eu,@P+ lr3afOo&7 m}s 4IL>h\T>d v4FzL/`\-Jz̔a =.N~CXJJZ-r籽?=.}bY% ۗ2DuT< \K $i$^tT;U3 o@il1I"fw0'VH/(:b5a,8<\ej.}}~;{@^Yz#PN?n a9tY,|40C{ +U,{ g}?fE{:-D`n\Ve`UQDhrNDPA]ԍVA3hgȬDfj&I`%"J+Aw+U20vıxFhJq81``]0/)/}5A^qQ»N~g! }WO*ր:PR91~p/-*>a+Ʋ:Z,m*7Ь؆o9 hdӃN8FX"၌@ZFQir+R 6pGfQ[qm(soh12屎+f9ܦ97# Vs H'WX('Od֥6``+fUN7v+_-i@7:rA~SvM껇4Ůt$F& -TWQ=1M2& g|Q +ؠXw Uҗ wZ Z/:@ t J!VV_@95<&(ƾPrwԟ*䂳-M 玏Oҁ=?- ) ye>QH_Ssn䥿2zɰ ֿL\Rn ˁ>\pHH[(g9\+~˛n2O=Aҵɓ;~Y  6L鳑ct*uC#)NՏj:A&=2WCC'd3 7e|z \DW\GCc=A aw'yO".52_EK/LCF~ SOb M 6|->T6m/U4h q xUfO@VNBu; ˬ7cp۩BÛ$zˮⲕ$ C%`:ڈO2Ϡ4,#A{]_cn^Аahc1HpgӼqd 1 Z!M8\ʵKw3|Z"NKLk96M-?SM^a*HHkW89fA"{a7uhk'9"I \O p!=!qlng!j<(z| ߷fdFu{M1#Z\C1(It{ R_PgSc֚c ļ)73*o^h s>!U~l"ʁ{1fiV>9lpD,Iu"BqLcr4jkK=%#AWĿ%0 =O&uqOf'xB|)]?oIAU:ԜyPhwa$}za3y)߸xޛ'T:8 ͋& 4ܒ d{x֕nnQn 9oB TtG` Č[%T}Җ-/p>=6vmwІpC/7ߩzb8yee/Ya^Gm)_}_TFϘ5sJ. LeE搴<O^uf6j̀'  `BFoL/=`4C2R\lNJnz.!oG*|0ID&3.;pZ&yML`y%̡lʊxwGtI˅tRɝP1i|Zi(NʷXr~D H4/ oM~88kŞ|6KM+99RfvY#Z*1B%̾˝JX]~y~2!KmkdNcɦ EXQde@oɲu^1HPiOM*康?[1=qKy|S[Hrmǝi3.՘dtS9#"8j;#G!:@": )3wzrdOnߺomk=Urה;کzo tvh$ǃ$pg}MbMb-{NW`&tBG;d`=){ /MX^?dJߩ ;M $hdhMڅlD@ٴ*=I_pEhO>F ` : * 57RL 6Ocz;鞋7> 3̋6[ vCbD{eBt"K~0<((dEqQVh wJє6۲<];}FעN +I}I6B#-Y=_0-g \e?>\#m㴼N E:$$zlг-O .2␋š]F SOB(SP/*4g#c'@ճ/yAl4*|wIlΕb㢋@jD7d+n5iH!ݵC7nqi1 y!p<0A|$"wD%cNcx;%ˏGOj1ԐNNU=Y?ѧx1djܽ'T/U9ϑl֑ 6*S%[ey 9l 8tHd&:4k!?5voiMS2YLr6D41ǃNVݯi؈˷҉1߇Y*j獩\H{@vS9T\PA\2%‚_ ~%/,;X5و5;": =fE@h8\Q?vBK򁈋 DJb> e! s" @IPYxY ⌾KGiEH&?O%~( O^o{߱eO'ЧCqv:F!:dBx/QuV[#! H-3LBY|^7ID5M+jEݎW>ΝJlT3\܅xX<ө$)aT--:85m1]W8|w=Z)t@nxly v*Mt$Pu`f)o;ߘý%-1 ,qL\Ti3|LzKj ^@ r֊/!z(gl\{yCKU095 U]|BgS $S;i,ތi㨹XW6˨F =ӵ8 LXUD''@TĀ50OyyV=R_Ыp2 nvo"4GMҔ)sK|E7nOdyuԋP偷!gg`7bTjY+L8έ-C_m,E}[<}+{hG ܔ2>K\Mڂ:v֩#sw˜[[|J< |o-ZjZ 0[&6ݚTcj>Eg@F)BUyxw%f[AvʄO-^͈#[iNͨzljP.("Out;]TIdt;Y<9d1PD*q`Q`Y0m0궯3Swz>K_)NX2 R8P-dGôO`i+aH l E+2,C|vy2jv D8O@C?D׾o/ĪHLߜdDKdHEertX;u#0V=-Sz74*+-Za4A<^0 &`tȷbVLF,6 ֽs`E}-40.6oW/Q< ±g8Sglb-rJ <ݳei:FKRD du_.2p\kJxdQfu/*QSz]O=]f8-˺ztXDR.*Icx_=uKy%sݬ`) 5 ٽqy`r'~)BAB8 .ɶЇMb*aM뢻Yi\~GsGJrNcv- p6 &\Tl| EOoD'#v%눋@1Bܐʣm},n(V:Y<r{)&.!7{01$WOGgp2 3M${1bC^܄'F4;5rͦ - L2wIt+c36 lۯx?mq]u+h:LLb8,{\ӒL?aME%N TIRMԻlY֫-V UjEޢrgn ]UzvJh<*{vtAX^InKd ԏXl!H[M݇'{}FSMU)ke?yr@ֈ3j.'.u,,.Z2y}78*ݓB 7 ٲP{'"Rz_?븴v13;^![$#jʌ&a-lv(RF&:(k<M.[3I(*[]x5aںS\Gc}n {=s`#vF0VycgI|~jYC" *a&Ѣ$z:FH78Vq)ށ"HCj2Y,~đoY|FI.tcwٸ:9~wT mBC.VSN :X1@L[,#M׋ȩ 7}QN`Ǖ>l4YHI'.T].őjo\yk%?GFcrL 9x1.R{̍1IN&OsʷŨj#ZCd6vuN⣘EÜ1e5'xX#`~-f,Q &b@4強PY'߈m01J87 G%?ͳRTT/fШZ߮/ߘiyӈ 煨IMX!>u6 _+2E A۵/谟t2 IbsN%os"fD}0)r: jVPgqWHv<9Ж\ Vέ~\& 2H %7ʹC1Qk=!Foej29j:'N^S 7)&4\k>m~GF#/rAP+}fb0;@dr,ة^(SjVS' |Kpna\th,)M/ؽ(37ϼ6YoڜFsTbm 9XC2W Fiqv[{2WbeF>WdQRiOd-hF:#oq1ax&LӺGDz9x>̌G?lrN$zᔮƍ{=~;vTۨ,;7~l+'DT/h_e\-CiXUEpKr|K ɽ⇪iTPeZ&)c -b9G~mnDAEˀQVՁ.6fԕٙ"Z>‡DŸG ߱`ߕiD=cP8T%A5kfp1KvVPnZ%yQ U]zQ!;IF{g.~c0IJM٦8~~|5ryelцlyyGZ[ hN gx̮kpϹt>bɍ8W1bM9uwb⌟3u@{(D%ZS a]cEI`mJ>nCM0}0cYҰ!mЄԬVz~ZZJeyC9e&8'E6m8ׯ*&|Yq$vvWїm<˜'یIesћoa B}c|Q2@MLAYo:u7,T%t]++ LQhx,2'08"H,4ͪavWf҉}.jx\tp Py.Kv83unٕ>噄` ?g%{Ĉ[FrT-Wp(Ԙ:`8 !4c<nIf,=<ube)$x)=;'xELcI4Gw!k?Tl$m5wkP(1{Ni(<RuYBr]Dw]2։|! 4tEʾD5P.%dlPnӖr8>RщGZ" <f݂4 B}t9`^Y=Az掶B* Kd!Kpň׏^zɎ$֨I-7ϒzoGwdPTrR93ۏ7FW$P^"Ce3{K5lE05?[zJn&rew>] BںT:7Y?Wj}:7TN{2'>GiY^)DK&ezk5tݐTFi=,Ѡ-PAN/@Z].&u~}H$OL^j t-t7i.NIpVQ^Hѕ'PHv:ͥ?)8]w|X!*rlDo!kt%KY3_#r`!Fp)!qTzW6o aMu-c8@~'u=TGW\p};Zr00JpGpiMqv[Wsk8(r2SeH,+I nO oȕKEO:<=U;H匯un|dǒJn뻽Gt'bL5vj/q!k0i촰 vK8lJi?do$ڊ vEz6(۷3(S8h6V(0Q=aR2J7z⻛462v4emL=Q&a|HP>LIÒC P4sGg%>@1vؠǧ?ffjtQHE,3Ov WhսQmgե>$#ًbEŸ) T7u=7K@~G2>b1#kk|QmkZf.,:h'`^G6 Cjɳ & AG)D9qR55jN-"Ϟ((|H nvkJ1@ضr& R -E?˖>Zm%|EaCJOaYZMƎ])S3jKf'W Hx!|?_]coJgټOClE4eP WhufjMhTK1`-CZʉ:g~+x]ΓTHڰՕRTx$O3ۀ n[>)Q֙44ldw0sV½{$C9WqPD.C>q~N ak-.U!٬,yTф?W׉7׃aWS'ɝ_9]hc `݌7Rm.vF"yI'3NfQOŁ0@fLd*U?Mx="uw !0SWv7׼Ø,ۢzWI8~xjgzW89D 4ȧsMS5a2lsUJX(!Pm}} $:%ev9Y xO(öv>pQ5M9pX0ɴ@G4SItl4#n\/dHd#^I[*&tn3q}ێML睡P-ؾQkМۻw8h=%y\[\ʆSv(mLȪ8Yc!XO!}.ITf2^%'Л`~=PnCq~ 6KrJ\8H}Cj!X0'!Ï^wHnG.3IYQz 0΁R9w, _"!:$m̘F52eӜ`[dF jɸ$-==R3A/;ߩ *Yâ`>+9" k2S0_C@#»k *JA譂Wb(UmH_xM>h+s+JT>3 m+mh%I! ehϤvow9`„@@g`GhFwfy%@[L#ڿ_xa{4"Zjh6oDc'G_`xsE; DG|w{`EJrUގnwS zjrF. ӤD-}W3eX ϊc'vܫr>ǮMY<BTir/U gLys(ta(h:A_Z=Սh ϩXr977e}L)챏S>v$a8&rtC/CAy&#6HP/en@D.UVmz:x`%c!\xܫmq5q2qc )ෳpsDwR'M Q:8S;<_9ŽcSFHЩ%'jk?8Z0;xj6d܀0JGP8Agf`>EW\i hC ;  YZ