openscap-utils-1.3.6-150400.11.3.1 >  A cnp9| 0@C[y#l;KPCU3鸜|+`9?c`P~P1=U]eFuЂIP o ]$9L&@ ̲ڇ'hÑHfan593p%&X!> l]l ^-M: ^!_[J[/A%KJP\ R;sS34ap31^MtUdX&G86a4debaaee23b1d3080e6187ae097ee0a0ff00a227441836f84771dff4852d85fc9d6eb3a611a6896274df18f9c3cc7b923fdcbfcnp9|mS}kPfirYHeK2W oA'eU?*Шѱq1I^7{"T@Xp{ *O VcexC[wii 4d\NDV|Ի %3zP<=c-#ǶIa2d  rg/U @ʥԝ[XL{-d q,ɲ"D[Pjp|T([4ymVO"E7 r)5+Zw2 ;/4>pF?d % 8 39Ae   `        8(P<( 8595:5=y>?@FGHItXY\]^bTcdefluvwxyXzCopenscap-utils1.3.6150400.11.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library.cm}ibs-power9-12&]SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxppc64le if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in oscap-scan.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fi & ; 36'Zˁ큤A큤a#cla#a#a#a#cla#a#a#clclcla#cm}a#cla#a#a#a#a#a#a#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-1.3.6-150400.11.3.1.src.rpmopenscap-utilsopenscap-utils(ppc-64)@ @@@@ @@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libopenscap.so.25()(64bit)libopenscap25libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.6-150400.11.3.11.3.6-150400.11.3.13.0.4-14.6.0-14.0-15.2-14.14.3c*c#aNaaLaZaG``r`__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@dmueller@suse.commeissner@suse.comrfrohl@suse.comdcermak@suse.commeissner@suse.commeissner@suse.comsteven.kowalik@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- require shared library in the same version or newer- added Leap 15.4 and 15.5 dictionary entries. (bsc#1203408)- openscap 1.3.6 * New features - Select and exclude groups of rules on the command line - The boot-time remediation service for systemd's Offline Update mode - Memory limit control using OSCAP_PROBE_MEMORY_USAGE_RATIO environment variable - Allow disablement of SHA-1 and MD5 - Allow providing pre-downloaded components - Introduce OSBuild Blueprint fix type * Maintenance, bug fix - Fix coverity issues - Patch the `segfault` in dpkginfo_fini() - Add an alternative source of hostname - Fail download on HTTP errors - Compile "environmentvariable_probe" on Windows - FreeBSD build and test fixes - Add offline mode for password probe - Initialize crypto API only once - Fix UBI 9 scan - oval/yamlfilecontent: Add 'null' values handling - Do not set Rpath - Do not split `XCCDF:requires` with multiple `idrefs` - Allow empty /proc in offline mode - oscap-remediate is shipped via /usr/bin Added oscap-remediate.service.in.patch- Rename oscap-docker to oscap-containers and provide oscap-podman as well (Relates to jsc#SLE-12852)- openscap-docker-add-suse.patch: add SLES support oscap-docker (bsc#1179314)- ship python3 docker module always- Since upstream has moved to Python 3, switch the BuildRequires from python-devel to python3-devel.- Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735)- add old patches - slightly renamed; cpe are needed (boo#1186735) * openscap-opensuse-cpe.patch * openscap-suse-cpe.patch- openscap 1.3.5 * New features - Made schematron-based validation enabled by default for validate command of oval and xccdf modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added --enforce-signature option for eval, guide, and fix modules - Added entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report * Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added --skip-validation option synonym for --skip-valid - Fixed behavior of StateType operator - Fixed some of the coverity warnings - Ignoring namespace in XPath expressions - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about --stig-viewer option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in --stig-viewer feature - Added dpkg version comparison algorithm - Pluged some memory leaks - Fixed TestResult/benchmark/@href attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element - dropped, because not needed anymore: * 0001-Fix-memory-allocation.patch * openscap-new-suse.patch * openscap-leap-cpe-15.12.patch- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shibs-power9-12 1670344061 1.3.6-150400.11.3.11.3.6-150400.11.3.1autotailoroscaposcap-chrootoscap-remediateoscap-remediate-offlineoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-remediate.serviceoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-remediate-offline.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27062/SUSE_SLE-15-SP4_Update/ea7f11b22176aec6b877f0cdf87d53ed-openscap.SUSE_SLE-15-SP4_Updatecpioxz5ppc64le-suse-linux  Python script, UTF-8 Unicode text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=6325b1597b83dbf9c1db48b511499d1d755a56e1, for GNU/Linux 3.10.0, strippedBourne-Again shell script, ASCII text executableBourne-Again shell script, UTF-8 Unicode text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRR R RR RRRRRRRRBH6!X*vՒqutf-814b1a23d7ab09f50337269dfd9b244e62548ab8ab3d9b9b64ce65bed44f806f2?7zXZ !t/-] crv9xsr{Z}^k y%W4h9h\zxpRF!p^?K]6>TUbq"@k3"ႜ 8ܑC6v|/0Z#Fcee7 R roѸ$ܹځ ˔98-)]p/ D+cZ.;0p 1ˎ46 no*ݡʖϒrߝ3»w4OY0^P2/3 b5Pz5xҡ{Y*D_ظ=|ӵ5/ԕ`\!:On1]Saj7vnNQ~QAJq~w#D ,SQ\bPBgc0YțE$ '8psaіmY:W҆ƨg012VG/MHnuP /sE)UK~R(ԌKe-szuioJ\7BynCjIZ U:P+.נa0YeWǤ@ZURONtBlBP;F'm;ݡf[iPj̀c%a5,B`+9VtHf1HU^h_̉_Ȼ@Cy׈Z?,Xpw:S\gl. Ȣ D]U}HŬiV| +@A%b|iL5өi 1dmo34l"hnۺ y'*jI*60#__oSF*=]`2N@N( V&q #& j^S$dg}Mեd7I?/lwnע. b͒@"4@MzH[Jh+NΗ9XXLvx*?IDNT,x';?%IWva_)aƄY=I8]׻u ] n &P@qü[1ggjHuPŒԁu*!诸]joD{dK!vcwu"թ= m$UL`a?Ѷ4hGZZχ;;(#CYM\GWB3crDf-6x5 n0._9 bM,T/爣8 c.H֋`*|%>Ck"0]wǾ@fz|kMCq/vzJNl3<;L=w1:xw\pnp~Ƴl6)gS]ɎFɇ թ0#v}'4vmXʍ aD;A8#v{7ѽZM+iPP(LP6:Jj4,/sz;u$DI絃|B߆GWאIhR 8Cn?K/>9ѣ)v-Xtn_=C~Uh/=F|SN4/zPV0& $QZ kBLp=Q1x4' 3h3}NC-;1gJ+p٩z,R]4zN`PJd:EGE#/@2\u!G8eD)_/?FJ4L"4=`Fć+JWF\6e]-J+%!VH!U>..E_S3E C)DQ+S)+/1OzF܋9Z{ڍ6YQՔ ZĈLO5;sMc~`+#M$υ0 9l=㟵:.}6N^UuDd /S0j+D!4q/2XrGq5-H~Ab^4PWr,Mׁ &S"@ ͉4w{掌mv`@@);۝^/1diɦ&a Qw=X{z9'E+IXv3~= ޴I–+׳ fV>"=&7+ z M=1YSr~5r0%`m%<@yNrV|7 N)UZDNdkV~Ίt٠GHe-؞md`OSy"`}yLɖ1-)F/|-Te]Ivboj"|j$Ȝlat"WXZ~ >-Mg4U}FbgniA-Fy:@Q%_R]%¨<|w\n϶$Mج^rJ2׿oo$lD)ּ8Dh>X)?ˮ{;ncj_%YG]ymԽy$4qs="Q6MӦh.,hYPrNOa3F i^k_cፊ\ %z;`åPydI5jRT,2Jjol0#?"y1\BDzﺝompЦv"T~X7u+u0bZ:rA`ȇ bp؏(C.R {g1(<Nln+N ֋c^J߫6=L>]D#'Vn4˜%b/e$3OQntLS/Q6ЛsG8Id]kHY%? @u팥nu#NI%dv?Q&zy ٿ`̆Ih9u]Sھ M,n}O 4j[Kit58_tIuV<^-hš=g0LczƱiDvJ~[bÕnSAya><"0 ;Ƃ?{\z3cYuwr撳@iGYu/ҫ9:j,s@Jqm{/(/uz(;mv6d IK v@Y6tОlV/9Rڭb)=_CŹsY762ۺ[3}ק'm`* l"D?7|\@3;(0888]fB[oK݇`]Tʸhj)WURsG^ې$BWC;:FJ㔁B'' Y7#Dʠ3VX>41 e3m.| '6jŨxa*C<(M+\8aMoa(^uR،8cuZmt^lqdo]'SدJ OPr_~#Dbd]ɴ#>U"Ml77BκUjbhR#ped9A&@(_hZ@:wc+6E;j\28-9BPf?;҅+!pCUI+x^Wt\8]̹_:e5 š!aPԭ$4}1DnޫMT+>m\ 6{gD /EΗy3Tڸm)l4TaiTDqt*'e?Z,߱} b;ի 8`h^H7L/ʝW7O,CތL ZdCj_PLdi)U{%R1]wFIOJbMsβ9{W sR4I~p3p^Ѐ\|#f= h H:", >4F45;lסDK@$ëۑx#2(A2#haBU`ＤތYnˤIcw{ƞ/A TI%,;a5zmZI$֡Jf*i7sx9M"_qe,¢~{4ej(.xg0HQAs lC-FKa{}Vmq>t[uˑ+ܫX'dټ>q_pQE~u"X(<) ̏4_,pGFM=f_- ;;5@Ŭ(:b!VX`=*Yݙ_3eQ]28vA6WTa1I ^Gx%dy k{U:/cZmGniM8ka@fҷ 'qo5j.y/NxMyDR?q^F mGlk36SQN_dB覢[ԅC7oJ= cC0ϻca"⢼?ۻ=M"<ڈhzO%dI&T 3>=Тނ7жKl$oUm ۽ ENa`J s!dqt>Px==Ks͂$){dKTlCx َ 8رp? x~y*&w}f35b®ICH\ op]dXy&hi)~[+B{ "L4\@KrmRtX,&8igpGٍlN $4=X~$#/8FwgޝƍDžZhKMܒߡ+ Y:E 7&2M.!W唍`P4|{-O@".jHD{GB(E>\ҧeWp8l Q=o HOAeӤvJXwh~JB񕽕+Br:f閧< -?$[B.gWyNOPf7%n5H lt A eݧESQA ᝙?8A<54PTVp E0uYN{{5IiI%!dx-Of1KbK3f5I^6c>L3CϞ/$3exu?{" rc8=J)HJzum @!cR̶9ݮ~B)+07!HN7é^n|Z@JJ mVeg__@=s<)\^ڵ}_rM֡4&ڏx&  ߙ50-]Zi:s!IeA@a/?-KXQ:v;J ljH#/ LJB8c/eg~g7ʮ~/,zM^,OwK'M,P+?ol},ǡV҅ MXoW" ?A?z3(IZrP(`" aTF4tIӊaӤ|Ap2]ȫO6S`gy4W>RyqXBw:b4KX=r!?%o|2߱?yļ2ʁ<5-5w0 f/C:8xq6Q14q|m5ȝV՗$4S&* RiY\2"0j0o!d%2H9dxbX95UFG'@bY @W.ꎃ;~{D~C YF`~dɼd 2iMl_4b fް"e5j/#mu"t SC2 k#h lx`an6ZEAm:3fzv5tAbZyO2&&۲"@U #1} P _D-ٚ0'K_nB 3\[ӷ ',~x Eܵ'\Bf@@ \h5{Y0yճ6VETrሏ6(~Bo,7 x듆]Y+L7l#PqCjз Ɋ |'8#|H>=6ofvM4M]xi2GEYlmO'0,Ql<XlM-l%mZݞ@0}}DW\eΨ"ϔVOhkrq`}bUrWK?SlK?]R-A[UkPE*ʣ# ݋܈!37K.$?|;F'hqcSv8L!xwBktCaL[m>Ca|ݐsk3> X5s]]T,ZV)4Bey'ȭG:3c "1I +2)hw*ΚDub#Bߜ&l#:ywg*rZ1@#P8(٨=7l^`K FC|QΩ (Cf3LAfHܮn~Rs2%)S"0ca%=ni~@IS3y1~"V_e|0֤FoU}2vfUj+nA_;zܿOxFIXb%T)-mY9Y+*ӻ h+N1 \< jWap/m&EQywx-&Ds\K?*t s/mϏl?d^^f wcc*&pXb#U`칳  )Aiie% iϣPpnɁ.bAf#՟]7iKO1@I , Ϭ R+j1 <1&SrjY' ,0d1cHJU 7E'7xstz╕LKR\'nU`n+߭KrXy@(aI$yնg$yQfOCa*رLuNaj%G?/mC),l?aȿ04)cWl6Z; !!c 7L# 4P̟h|"2RJV>?bcƽL!Wհ\1-sefڡRc2$;0?G. i4]p9Mz WLᕷsN&]n ۜ&-<}]Mr#q)'߻f݌dE|b%u52+5iS'._l/w-BTDeF?mrG%Vy9)0Ĉ֤ͬٿF-9s YyZ] ?6vb{lZ]k)͵npeJ6+DZ}W:ZafowRh㭪{~J&Z/el1rMj `*ouۈ&G\=ǒ'V f;5C-&i_KhAăr ?M03]C6@XבI?ckV(W?:$5Ɖa9aժ:(s(!&'(Zc"$v"=,) V|LTVkV%-%/+QR'z8+e<Pjis_-G55C2,0Tޙ.!!J6^re Z4/z R+Ѯ~EG%;_?=+p03wו^H?O~Fg^PX+VN ;E%]ccbh=Eu xw_Dg)C8m#LS[\ X>QHtVCM 11byG  POr~ZI}֔mvΗSiIfp!Ѡ$Cđ<r DP 2ff*ʀ>P?LWhUP~"\$ա- ._) /YL.y}OgJd\T1xy-+ĠK% *@(p^uaYəjQ_|~ƭuX@ʯɲP&EKkX7h ; o1jaKɌysْEXx'_5 @eإr$}}5{q O=_LW>⾌^arpڴ},Yh\Rf%LTM5wl˿[mCb}8Adw/]w=U,<;8Y30E-+{ 6NA]TF*] х XNRw"Q:*?@rKݾG\.کwb  " CB-咸-,Z6)jr:y_ρ̕DBHZ`5Σz sosVy!D@Q[XCUNJ Wj^RBw<ͪ(ctuݬP&3EtRs}|d+ *d{\xo-o >K)cfȕQ ,+^YlŅb!ۍq01_, Zi!%bHXȖ,qo,%!̂}KUyзygrqRK(쬫lT"* 60T.Ԓӽ$L:4V2cM?3>">Hj `l|Ɠ%Ֆal'' l/(@deJ<}~iC+\wFs%юwrbl,{u IBEZw 10a»%/zA|4VBme&LƜ׊MRvw|e\@ψ}B8"pmouC7WNMDU6 „489SdCB &BkQCads.o;.K8+Ktt[f4`o6f].匊oah0? OyW06+=/`klLV}0Vh/#+(),W)G z|?ۆfE񜺫W9L %-"t~םZ)ÒxTʈ`osBCw΄n¾淉\Ѻ*˫hD r<$o0=Ǵn%&H3lVn;"JS%YU"nUjJZ(E}k8,<GUPŘ.Pٻ$dPw7$^MjB{F2s~cu ZE13]ؕ[u+oX )Nb=|iPhYcN[TTӏ`#$vr*j@FINXh~lޡp~ [z&bfgC.#í31]#Q=.it4GC?LTGOF.o!x8riY섪qޚ޸lkx5=0 65JԖdl?: zճ\BTl1TOOA?|+Μ`} !M:qӾ_UOA.y9bҊ)'Vs XO]g[i+/YoULv/Nx]U $p(^c 'd_h QlqqX񁑰5u~^\8^jʔˮ%:?WtdNɽ\֭u%-ñibl*v X7he.nOCB?P pJhG6K-XF l1RW |o2ժo@I؀3dU?[qw"j(+iMsHwERnkvz/SuClz1DtgD8iS b tN3mWpaj qr? 1|\!d{]Z yqBFв@3*3IbZa & A't4*4g41UZO'΢M„mPkXP`4)XЏg)mBw5[{$Q>&P8a:"d 3X/GLj*9~כAc-&wX_hqT*Uˆ]Dzڌ1˜#9#@2OHubU1,*,i-<=C|yI3vc<ʸ'5ŸwķI=X e ̳m'FLWﭲATt`. ͩ?mu`}-s'Ic J @1K8zR(EU7ʣ2quW:\m2U/^0g5@*Id~!`wpIZ4tT̊ 0#2$09$f+'. \~ 'r]Զ BծGS/t+A׎_ 4gJZYTY-$Mēz%պGQlR7[TXFGESa?H} i)PLRd_mزqbR,A*SF|``IiP :'{v>ÁQvj3xqC̒UH{AAh(.W 7$TF  jHЁp]Ѱ ݡ 3f&I,o>gSڒE~p+PY0 x*ak0S2p~ٲ >_m]Tl,9HДwM}"[ TpzoWȢIά¦|7iO~_?oꫡ^0ZQn }.`:Fs攅ͭ'yr0jP ]=[Ipb"+:[$dU#r\a.K+7,l/rZX217{ʷOJM g+Z`TW_ck֥wλ|ͽ*V%8w2F!AG@UɘqQP(NyH=bC+n%}F 7w. Dn~ GRBd1ޗsF{V&PD<5hKmuuVD4ߟƵnx'/ Пid,ݶbyXvةɛX@ "0pKa)& NF;v}f}3v=> +^AZ,J6AK1j#x ^,~-n?iaH BI>`$EU"X+4(]Lf.7R ykU`O^f4%1M6HT.l+-n:~/8C!u̻Tgi`/&!]+܌9N:_g]7DN3SS1X/yr$ @'* ڡmG9LIL=j$51,q+@^pU-wj2//ү E֒Q]4O{/Y]~OQDhAǷtdP(-ZA#^R( 0UKC O\ג%d5~0k9{>Ai ;_&d'!//͠,.[^2* 0 wjS BJ27续Xa,<xnP%Cmyjo ~*(d Ms0i@C׊X2'^4sEٕmj3y̓;}~-J7 ӝ[=G}06{ϚjW}cN)+wdu Vo-.B ĘN;zuel b 390/0+2G ˂-og^w-*9Tae0NL/!amjK0ej\#n`~9E @p.! >$ZiChi#UNC"*є6)_/~S;jKgs^ܶh6$JX`wN6<+]X?|ֳ:,,?m˻ؔpQ4 I<N[b}mlz4 3zQ֊)yJNt6$L hrφa̭%1D-ߵ@$I(+ ͷ!g$7DwFe`,d-l㿾`jƣ?WQl`E{2|Uw{"%ZZ4F"U2ch6g pWZlJa idKs7٪ C' 39M]ۭ/p2/eτ-3S Ɋ xz}mc5K!T%}ЏMf 5@^Ȥs݅*]G4IY{Ue47 ejw./舴A&WUdwNmV2?XkS5=T]uIEj]~`MR$c<+C5E獪Zjq.,#- 9":'wHPi^j}|S6α̌K)=wh,?K@wdIj&4sָhX RoJTbTU}.i0[ɒ:A3ZBHܾ^Z0KlSbgb˒"1z[@JN#X-`TRaxQB l:yXHݍ`졀E+a3'x8Tccsep'h疷q?LE<[|bJ31'uB\X&ؿU1?Hf2ppRĜOTBy/2} vlJ&iP/JʎN,we{C­$|]9ź eL*̧ưƔ-ZknoHdC&. kJB kcDronQZokaQkvb/0Ѣ4Tƨk@ FCHT# ɪ |NX`'"#6[. *3RPLb(% D 72F dJN >_䚞 4rVG# k>'*84qhq\i=oN @=`MHlxk̗LB)]Ľg,6(BТpkGpoƾ5[ޖ]]Q:l[7$j 7IXƝo٬`"s'a /7;xz$#iƍ'~LK cs윻V21Ixcg6@mc6IKpڌ8`%v Pbqc:D +3*":2T〝ӛed U˯R\`t6ԩD9gMj<$2 Nnd`]s[uBAO^tj+z,)7Y4^S4?վL>(˶!YQ>kw*F tWcW!'At(ޘS樀TjDhomqM_`>T-c xu?4>(E$cqŸI )UkB %ZX޼Ͻc= KBV>g$>/4Mk lD5VhEb>M].+5B`}#U` wY?QdJtZ[?,_B┗@f:ke&V|WȝT?-g%2Ցt NE26`e+]s71Z  fս|?J7./l~aT~?)e?H(3HBI\Wt)"*=?gw#Ԃ߲1'/QOo f[Tm$S8*;JkQz\͓'ȥspW- @+ #F纫5OKR@ GAf>B&]J2ם\jSrD%%HYG}+]:G0\Kԕ5|ԕp> G`gݘX/7TCVX;1+jg?;mk.L㚊o¸.>}nVQ\bÖ`DrgR"6dMCOV2moT@RW0Wġ6e&dC:-ٔ7̉a}v R3GղI:˦%?Z!l)e|ՠ_6`I^_G " \ zyfyrZ2K0dR)of1SVzW]C h:3F@t cNhAG97z0m0{}r"e ?,!7<"]q #|7x.Z Oӆ5-m3210 I ,b9#@O FykW>fi9/ `~M -fܞj=%q86~ 1\4;nW˫z oS)U/.C>eKbnGA{snN*$UZaWQmbImtlm 1<o TQl'? <G!Xse Mfυ66]\)|khyDžB%8$a&IOL|T%*?'۬:(o!6ggwƵHWh'(ZDfvtֽBeS$ (k%II<0\ېkuOѭŻ^/FrPktxLxI.R<[m+>87[[^/Q(p{Ma%x50U%q(]&IRQ*4R,>p/7bW+_ؘxeP?A¿Ş8LYZXk4e@7H7tCg0jC4.YNrѯHu}q1e=&s)׎:l)Do=)ԣ;\GWq0h["X*ͬϺy ; ߐi_kYwقQ>աeYnūL^>m-XR`SPdAoE"y#e$e!lu;Q;{82г4W^:wgq$ /NKmJJ>EOs_˕aXt/lEg9xJF蕅i2< -De9LWZ#ڃgjltȥ'3H{:< V7gJ89 !IAcݰo 7PxP/ynÀ-&X7crP>@e%+'>K[lb2_ P5S]Chce!g]$' _&ʵ#vc`\B]]N91A=kUλ+Ӹ[(]g'G[4J/Q&]M3 q']_/2d_"tw+MYK*^2߆!ܴ;?M9I!NP36ĚabZ>5t$Rx%3xN )'B[FqMl\dϢ_ߖb@4sӔ^$ BfR1&pu;(x$ڝjBY@RR݅_.|)5(k;viEouLGnz:HaKM+$L)AR87ogg W*i k =V^.trX *~7A|sjz(w1r)%G VA%C WN~Y2OUTïMHs8:pAМ)7OAΠhFUt 'G irvS1>DV#FjB!6k[BwۦN+k2|Qct/z1XZn/v^l`"hfK~D܀6mpa-"0 cz bAc,<)KO>vJI`z|g):$JkL][FŦ-f(T -Rd(ꖮl rz0K p`us=FK^֣1tpuC Tңқq3rS$ߞb@0YMn,?S}N*8WwCih'֩:6`]bma񱱿1Vḙi^xU%$}F֬ЄR,Hڎdh1}r4mN_ufHpJq g܎v&~ZU\twv-ӴT3λ UEUL+^,;)S+iV6E{5bBP#jӘT]qS;0h-|NIHV^9s̘]i7E3<o,*`UKf "(C}~jN-vU Я /;S)/7T%w{tCwoF|/9J<`) ('3ъ )"NCaa>>C`>H5-b1݆J !,bGK~oyx9vdU^<@^ 49S>߫8oF3=tC(&Z%@ U&k9O׫׫*}ֆRnw0z@SU #)Uo½[0#Ä9:,㸡o`hG&7ј:uT#>EZToÒ?Q;j|U3$٧E@4[ʍזASg3xƌHd;'ULxW"*p81+<#yi84<v8(ņ kwͭjҖiW.,i@AI{y{.aS覹s2*e}ap5ĭQHJ@hurYڿϽcϑ̗R  7Yw;MEoȩc*yuJ8w+@@I'EeagmR p3ݍ$fy34)_|N2V#R(iX6$$wli1 G0-E9G}Q$oۿ`4V6֎'԰'4]]˟ $"p'5{.?|-_oyA'-͉.zW#Y.=@vl|j *oA_h9pL=n\3Z͐ %AƸmyXRշsDodJU!;ukȱ`\3#S쓎PNUӎux@Gß´4+/[ 5u];EL\ wF2AMn")",(㰰^+c+{3t1S)r=@M}E4> @21za)mXKϘ/Jο 2{HPtAEb ;icOdM˃ XGg_ [FjƠI_q.y1}9%4A2qBfYԌ=֡\>mVy>BE䱭Yw)m?(P8NvHw6T:sAz0_ U>̻'q?m$1sǞ(^Don]lOe\P.wL۠:iIfIJ.ABV:r[ OjzZiڹ7Mv(Hw˸U{&Á:[ϧȬI'2繍^[H}Xbv0W\v\MDroXspeA7:T$l Hx>xe@םqI&7z]e`bUUmFϋZOo*zmFPPXSjNs5O❆0{Ƥj(W`YUpf^XkS6 @:gn]zK~L6{‹RJ&PA> JPĀ5>Ah܊@*gmHQdɜZX0+CF|5݌`Q]cy5\_J:i+/N4"TtuR>"BI [M.$81]_1}pN9>Z<sd]+6"GҵY3?rWYducDDwl_)/VJiЖ讽,ۆ$1#*wrXW%Y٪6L#Ր8'Z[oj#O)Oz)lE}UΣu^iu&],L)hS=MUs>.*(y9Gb[ m˒S=" ̉ ,"=mkt^N)J.l$BEG<+2^S xf'N(U[q@- WXHhQp2`ń9H8T?`~]]K*< súϺ9̯ lWsHzN>;+9!0 9 t sAkp7c"&ScKVy vm ɥ$hݥ0U>ǽ(K "(p*q/" } cD|inV'Z`]aL% BJJC+:'τ .!QO+MfÞd̕K,N"n)[ם\?wk*6cYrS@}Ӷ䃂TWr[ՙz]cǔa~Tj\AyhRskk;FXPZ! 20 s,I "sԠZ>>UGᐓR*urc~V50ww#XF1bqwmH-aD$<zգ|,Qe/(0q_:s^*P6>aA(Qe0*[ e3 f. -v0l FDO Z&ܐ``\.419 : A9Uf{ D*Mu)b6:yaCZ# !ph/٧͑1TI#>[J/rI([7 sb~W2!7KRQ&2~E%7etM՚ӈV*;tss3.XBqk2 Z*[[piE{!P #n:Zc[ 7; HS񀛳I\5ӒA!hG27+8yUl8fqA>w}Ѝܚf9ĭ'az5srx9h3\~I.DLl$zFB^<& ! A}%RC/PL2BpxCe>F3߷8oP6Ct(;Zk]" (ƯlKΣ~*ܝ.Nt҄ SdF݂c=kw[j {oU6<"CLq xەڣD"5ޱ~~r<pٰ2TZi A*u O3ٸPH+̶pᨇ~h[xb"ˌT'¼퐅7ĹIo2uohVX~cb R ݭ")Y sՇP7[e]meFb=PĞnΚ`Vi5(_4 uI[?84tkOi=8кws_ÈU&+K)F"%3`Bbmu|UP4tϩ~,^TU#F6b#< '̊eֱkU} vBI*:~m{QGҏ[Yf3+/{A2t*e>'/=ATx5"9ǩ>jLVeF5}W^4U4Z0,LڀCS;*E +iz5oL&**GB60V3SpzTp.X۸/8i|a_r[ТU %iZΌ'2C?uy >6Gk RuD$.Ea$s,kQR<գ`$Z뀍i7gvlN9q b,;NSb'bL mF2B͆.[oϧyL4-G h2J+еo Mnfũf4rC nmؔL+&"nNeAn&KfoǨ^;YaW#* ;lqGx6I7J@؈zxu,b= Gral*Vu|oKǻ~׮ANR݂(i~cE `B3+֟%ŚW@.өt!Ljt 29٤si2+"tM~o·Ś״t F[͖ _pGLΣYD,UMM`5U6_qϊ7 ;cSe9cnGRc7Ca\6)V[ޮue$NOV:owLdJ bUZ'0UE}5%MmAeC7)<عVaqqWNlu4gӘ|S&JnN}se]{2r<=Cm$Պ@yBͷI`}~)4 I˟OY^ZA%j[`b}.fuOJsdK&^U1W1ݭ*?+df<~Z .큰rWx9/,s<1oJKW3Jp'&+Z hB6iO6v0!$ǩpaV=^1 %hxC,Aw,,,@ٴD2lzX89x؇H':zFsToS  4%k*GCIĢpMI.A s52A6DڦM 5C dz8ŁT0%;ǩRϮ d IUe,#2 &16wT1Zu.g 6k99J$?;!|#H#|Oj̣^EPOTh)vYbdX߿{^Mfa0* zQzpkL3)`sRQ 8H.~=uJvm1i)OC]EPpK=z4as Wz/IAy΄aLjղ7/>:tCVi!ɫ_IV~؁zRA)}3`䲸л\`{eG?loX=enAvx`5rܘriCB- ^b5>KZ5+4[LOIH/җ#"BF?*KCCΦ*|JS٘a||m+4rSF$ځ"[?qDǏ2mO}OՊWurg[g_'M))]ѬxқEUfӂMqn'W oک}7c?62h]~ׄz+.7UF(b<*KCkB@^r3ÑBt^b)"3ŸXu'nmW Laotb4RٳҠWl$n r;]\R9 180l"U4NtU,BiO:uX5>۶B1 6Qv6Y1E4 80M?5˙c^zyKhJ|ip@RWab ū^IG>J1vq?0¾u'i KVe=HXpA/kPZ5oכR(Ñ`č!it @= .GY+rEk% ('{*{%bǪ0ۻk"*HG0iN$Y+ Ij:09d˶.VWr PkJ dy XC^Oq4E &C\u׆BZUFv.ܩI,QG]EeZP^eȠ4J\p8 :i\/Q`meR*F SKK0M T5K1 v4#!3Px2>NS/vnr|$U +4NLM%?8䙧mt~b gXPZS{GBhn' xm*_&{>!!b$bOolˁz g؛JN>[Mb{g441S+W:(-@u`ZrVcr4޾jJJtK7GХa׭sv)rq)H3VEݘENU}'zg5lޫA\O,Y7C%aІ7TOQ%@+|T_ ~U|)37'ԾGaFנ l质J~ [nRcp"mߧ}2|'1;2JH (CVKdjDoP`gE X[6[&okIjc.*NTGvwY;<iwROnL[:] 9?HRօ A6xLMx_Mwl }V>J_ ^Bl -~5AG +sm*k(*ۻ_opxTHcXs^;V ЉQ8#Z5HijM ښ.5= ky'x|@E# 7;$(<\g$$^jjYfSKKKܩƝI~UR]#[[K02'}Hg@I<6LX1(խxlnR"e8{JXpym yg Fotdhs*@pmɧX3 dO,y'A[`~tS07-}EzV~ G}t=*7VD¬ =Q*E]5BmV4؄ˈ1ЃCrH6h@kD>ٰHu V]i 850g9$5"ŭ&UCIWr |+^e&_@:?E\Hθ#KA%r )를E2I|1 T`~)YlϢu) ̗gvxKzΖT -6F;i;&֌Xp/IXcL|AƬP&o)(c5 PHW)iy{>: LKKWS[25Ax_hOHoԅ(fgln8J ,'7lY~h9<|GJpiLN)@=Hr:ߒ<IgTXT> @-T:G1ͬف8JxT[:&us-&BWr2z-3wIȇ~ކ YItAA_tSN+k] ow3Xvhw}ax,ê6 ·^殖1AxT \ C5I- p6xJQrtp"\fpx/_Pn~YPL31\B䅾u1'# 4Ȉ?b(@ ][^}y{2|c%tVUFmhwYPC HdÈxL^˄z{ ԨBI^[iNσ2}B~;7G2MRq9ٯk3VU @ؑnvz#w4b?pPd]9F%Oe\>~ԋ3߫K~C,Z&j5o#9"وz/)&ucі@&ȝ Z+9/KVZ@fA 4p}-C<OZy#ʦ֋١ґx ?-`pNYib,cS6zSmLSt^x=]w8R$/֧+˙B^a>ؕ4itew{/Eg'vsqAo*4o5]1)dul-TsV_RPPŷ|ƎrB둚C]\8 / iBڐf6,tnl#gƌ.#Fd^:P5љ' ?{uI;Udd*MpܛP @ }}K5AO@C4َɔ`c_Z /p,bk ɐy~Q+i]apE*^h(ث_9џJ siEz'H>j]{nU}'6R6U8ό[_e C쯬$DTkc+~OC߈US_@Z<|+zDTFEOܓh5:uiz:sM)Q7] -' ZE=K(vv&Uen`SGJ%I9rM%c Od3xjm(*>{~ ^jD]ˮ@R#XGVeaj0 ;)/>cGƒ)SYvk._/ IcTj<7<cPd =QBShC+4\) 8~LDXW IK/Nb,kC5ZgmN+,.1f,jPPv7HH>HaNd.屗KXS/]12nv:4!Z>IoECGCx fЉz+3wVF(U9X,?slݗ'CYaJ TKT|z gErkvK? dٗx9ykjb[ &?s@H E.Pθ{H#9Йm;=2Qkj(8}.T m0\\CUqG%I1/[YpKp_|rc]^]yf/ԎǠ_ o)YhɱtRuA48§\6>pڡX\ݱ3|7H<'Xk Y i#]@HTܐe.#*]1wK) B:m +{RUFCr2xavGzg2Ă\Bril:fߌ˪N9>1;ɬB-WqߏTmv0/9%Ou'Z(rqz]E_ׁr0($>dI0ed3tf׻@u-S`%qNo?KFR3^;-5*n=5'>A/j>$ί Zms9Lf%H0ihC&'Y +my='r9v:HVGií&V8ճjPTCa H"6|oC\ŽHҜN&{ _ƺˤsO0hIv~C^Wn7~h-̼/CItu*3s˗Ɍ36.mHg(38aۦJM(Ǽ"H̩K7>Ȣeڞ Iݾ@GxyZkþ[XkT nϵߪ-Z&5ĸ ^Jdx_Ȱ[y1(R՟%sVkP0y%լ21 x_gsbG8oxuv8ơVe0Y:4J|&g渢/D0ҦFD#As7y":+ :M:pқLzd҆>~<2f&荡u\(h u[,h hG+(0[vʎjw0g3 K°2ےd9JWM@I3{\C2^+zr"DZǗ)cǚxqS2Lۀ-Hjw2@zC۲7D?aR4u%/5] ןXMV]P,3Oυ=d̨`j&EN=PaUxYhqvg~tPKW{Ѐ9t 6b eV"Al ]ԸZ2V 4Kw$e(h̟ARS7)[uWZdS,0Qp~}UsK2#B gI(d)XwIK>;Z Ue!VMiAVt][8d|%eT!<=4SlE6/Ṱj Eg"2-݆_y[N@EGYOL3|H|SK ĢKTʌ YF)NjKGeTSzJ>{7nPx'_:~\f3GS~!OJ i@ctʡg zգmO iWB'v{+KܞuS~ޜf7<d 3նt.%E֊ZTly#?qD޺ 9Bٍ0<i}+CZ |KrNGjw hhi=dZ:nX"#6b!Z}θ!\r_.ۭE@̍#WC\l9Ѭrc@V`߫p=dm%}0FvjrIJf a K"e3qå,N=b>4ִѐrN̐g~ .~p ^&!0pJŽa?lEPŚܯ[`P]Ay=,΃lGSĩXD#yvŠrZO'wY3{b%)qU:U7[7r[qP!sVTz~C/'2x8:{F{T+Jӝh#„)/ż'/S\f)vsGTfj)B!`qfxE{=Ψ4 ˅:I+~O@8\1" L MHPN:R|,&֛{&||FwQ(V53Կ\f~Z!9@#Mty<$Gŕp5P98PF3=R8n1K!SSouNyM<U.JӼvYs?C5.iz4!ovH"]4zt<6qY!D@`L.ꭊBH~Yvj0q(I4|Bx{BhWHIX{ΓV [Ǫ;?KqI5( >oIG$V1 J7q.{ؠ@߳M8A]UIm8zIFTG/[c7m}^"A b^9DķB yMːUd-rۭB+LxvX/}~ }fQLO?).Xըa^Mc8,JCx:_Dv*AerNAJILoIЯ-]}]G>ҟ}4z4}X4ٺE*-WvC }=+TIثl>N5ykɁF.<K2g\DxPڡA4\ɼxmQA໪@+#v?9+c<XT^ :huϊj&,kmQ5Y\Mx5 k!<"=RI7H=tu̔k4$tXw;+<VM?y 5G%{[eW* (IO rcnbɛTSpinB`ǰ\'վkq Фx;\se Zkb ɪLaKOcErY@*ՕVh#,WCmޑCX (;nÅupJE2)Oge.|}o["6Lpϰx;R>[( pvbDj2r r](ta"gskr&ɚF**3dO (aS ?`S/0Mz{S&!j .Iw|FP)P{1=>4vj7fb\M̴ Ys}i#16dI?5OXX>=\=0 ;P%7)ҢqMW l72{Z[APE,vEZXħi*)>I )OpD@ϊ N6'Y Asb يՄWs+{2șb?vQ%eB݆KqnOI{xII,b,kZd1.L %v.p?sP:kH+ȎRns Ap06] au ϵC"_ 2HIЭT#>Zw4p^D?qd9_X RrN6cY McO'r j.pW%L'|Ap8JYs/ݐDۣu[`U:^U^q( &vv}: $k-CkWu/aU\3bbzә9||濿<%5[#F06keΓnjdvV*͖UZAxKWy^B8e2-g A 3AZKPpoHjFKU,$N" 15P)QZOP t 3VG"qדr(R[jK~9( ?w;dUkQH>wf}'=_xQW Ze@N6po@>ɠh=Sm9wdif +) 0X?;3 BhƚKlQQ¬n(ݍG 'E!xN$p&łۊB~j"ˢD7'[Y|c`>c0B;%iCcQ+K6g`)ffm+_Q m0 M9~*>`rXQ3gOG+;MWuz.f,\+bNI"fp 2XHut>qoW7p8.tSp-YB1u:c'rx5fG3 4KC^g+H$cWHJ2~^iOz&u 1@R՜ꙇNUv/s "d *ƣ6iqF-gX\/Ƀ! mIsCfёMf*p3і]&[X>jq=+"Ʃ< 5M{@Y:{(fb-,+/L79qe n(pW2@,m`s>ʏZ&2θQ'`Tnqwl4$zRhv9{j°.`L7y(T`T'X0~:z烠 ;=fqtm^N}6ߛEV!:8񇹊\YYV([Є5P ;2re{8`L\y (O~'C㞴'&Xp#W³hl'+%% :nO0!y$&޻cBDǻ.c '^Vܻ$c]ԉTC7~T%(+4k*&́%scq6efuŵv,^GJUcQG#c& 2Z a:Uj7#ͱ/#_'/. at<`&!jb~ *- I}XʊHEﷺp+> FǹH&Y&c5 &5!AHfݶ 3~[][S?eAնOc;ѳYBoAwa .6a =^#j!-3m/x yJ7PI{TIU{\%ě`_"w2vE*?ɜE[c? sRoE8wSn龍YlotfI1{;6z5CFU;N{c^#~zjU}#@ƼuW62~B7+ү̖'*Bs-5юsIYQE N_8[ŝݚ0gWuAoRȭm Snk~_7U*.NߠYL0ȘMbƪGaP[JOQchD! "-М71y9 KZz7`lxQrV@FZ DD`󰷠 a=Ct}SZNhiԳiɠ,12lڜ?'xv:;+<@o{AKb`a٨M#k=TMyW̱Վ-_ʽ_c!7-haSw=pdQ*ICԀ`t}q1Ln2YlYNؑ eq٨2JQ|F6޿w*A5Zܬ27 "ㆻ,WYxM4&6Tdq#Gn@ր9|aS7Q.@U$AMyUP=:i(9}KQ1~yqe-`#s>YI(gq=J )Rbށq AdpowL=it q/"bl~09~\w`7\ Cψ>\=`ߩ㨳]~:^}t>,3FW+&}(-''ϋ[/7|FٔƼR;AYԂg`c$4N\c]4 iA+L>BroI@ oa;(::Nm9k$p*Xt*$ˤޒstъǹCp yWR/Μ,]X1Mʷ5[09ʚAZH)3UST{IסƓsn'((mb R99]yV׌ܘ0f5t>Ht-)_5xX?#!MRnZG3M=DPoWe2MABPܰӼ.m-9T;k͓cWck(Nc$MmHe{$1<7Q@βCsP` EW,}H4f42v]yy5=~ c'9_&]%␵YB]Z;mm9(# 6vZ`Xuz'(V^!(g"?S`42>xэ70_E!;x~a^G-P{F h/ne7FjSŅO.cڹJE Ը4o_vITpnЕW!+y`-H^m5I?Bw8/j'D0- je;&QPz6oirM ni9.[_Bxv \#`J"x]$G Qox?TBdSyQYi}vG3HJۗt~,:NHW=fk.ڋ*JV1{gC!Q|ˊUc#f)p9kH)3j!}W;77F%|H[pLG, USw'`R`<u.](;á1G CTՆG}.lsEk'ϑfCT,s"`˜Ldݕ^̙ *Ɔ>RKkrzzTj fu*ܔeԏ&#1ѡF& hd#L*`Дퟂ\!_л>TI,ŔF)_ukݱ%{:gm/ҽ,hTN n7Mȫƨ{b)=4gt2z9OZtvЊj5Sk$.H/#"v}24!.s~};x[KšბE)B/ uY?Q 7{v%;Al*uhvT@pd)]Ygt^%O_`Q; F9 ,9)6.;Z[Xs$ E9-w,;̌Dͣ6Jik/= 2HWz Eh%%KF[8EY(w/mJ ^uP͌g;KΏiʈp};ԭ/wjڌ)..9Ssr9h>O[DHU'Oj+'ndyJ7LVC1~piŭ}ciVܦ̀TD@xXL}قɌI1%MȈ)ɫixs|H?QK'zWys_ݲcG3rIp4L+}8t}&JGM?উ1hH@ڦۆ ?% v@%.ޯa-{C F+Mڶtƍꉎ]Y-N".Ea6M ݕO XޘR9^S! 9$.3V'!3@B%!_94Ol oW<_)X#Rc 4YcXhD0q\s),Klq_uУts* $Ͽ}TDX&ddo bơOpcV]/#9ޭU5x?SL+s!\Җ{Xsjl[Dl:MgN[vo h!r!͐SFچdrd]a)s^[/hYaƩ2}vAU2P@6#O)n4*|U-'Y(̏٘rqTNbfW A [f8m/ZdpVzGDWJZCmG\kՐ'LB`j-onr![F+|^{n= xY-r ^vfVrِdNʭ273#N"f)_nSDڍ|+] 3P1'7SpBNyQR`g~zrVG݁gy9^/mK\bmJSq*]8\\t=ryP$-4 bEM=>A9촘tzk=C(^C^&@k[=xUmɃXi75g~6P-E h0?q>L.L?w8eCL<4RNǚ +N|Izƒ#(L~Z"rezzzҁVp_{"x OoQ˲L6*prʅS'gi㏗6. s^1qy=7i!f~om"QbVVA>!F4ɍxo-0m~BPp>bskаpkce0e *{J@Vԣ_Wپk1g#ɭLl.G%ZR[&_45u-^5˼qضp` P.ʦ@ߟ$.#FB$s9bz׿'O CΜ﹑Bm 9N@|%\M7҂0)~6Wč,He9Sz7>fa~;Kg[%A zOnR_pT\T!. 1]ݲCbepAz"'_8D5\U/'Gos.xVۥl&ӔLoN' _/gS5+"*q1x,4D~~;;(0%%k])p2.r9ۭߤY8C.u.RFbG˜ְ[#CIiŴ@2[4uF),Ϛ"C D F@'@YFm&J WS]5\J6 *=I]xmmmZ kM$16qRݿ&xց6rm)L@ Y~*I:,ݯg`(_2Nu`RKJ:FH4dH5/8 ^1\i1!8]m|K= Vt g%1!S-_- ^}lУ, <4}m DbǭAʿ16Lr8eMRk# Cvm>%ģ `X@n33 Hʾv();µ,x> ZNR/e;+$n /i'AK.rvlӒ=Up.(Q`w~S \gpy-]wR^O1\FQLϵ. \`$~^7SxDsSvN|onE\"l 쐇&lEHE1_L?Je2_+*UJMDy3@&>L'llUU3ZG|R4R+aϨMJ *H Qz5N# '8E.QjKlSEh5ih֢mS@a l f3%gk'[60-:?VboΕ&;i2˰@A^:8p%& . +f䋪qurHQtpvpv:qЭK]4Erd QE67ܞ 3| m\NQsiYGffAnȼ)ヘG L5V'b5v1c-V#;fLw4^~Ocj=lsQjH`ixr_-Jx<lh]\oVJ儒cOEQUB ?VZ)ISK8t!` tȞFf/0zo8m9sWPU6_\ ɄИJcmrf~(n)HmL"&67/JIh(o6%"z= Im_#W螼| M)h@_0vsU9 ?*L^Cuw̤bHJgzO&beX:ÓLD3%ލ@dAQ3|Q=ǩ9i'&7/- *D!} y&y! =.֬{M9?VsZјS)Н52WßlQ ڳa$N+]gg0 -+׆9:` \ȖԨhУ ulqOZ\` WNg_#ṯU .%!)΍M[REps^/.j5:)PP$%^ixif]eE.%*SG52 *j* !ZJ?bT6VF=L;K.# Só(w*kk0/]+lr_31(קּZN;+|6썙GFpj`8[z=+9BBBDCtpYȠ%FBf˵C* #='&rS*VS׆TOշԃ_dqH= .ún3SY˯]C>tZ+@.e8xJzEN:MD6X~H_ \aΰ|mMͨ;v4ݮs:sM?Hĭu['+##]o#5.uH\4%1Ͷs&C_?=ڙ xs|F)LjG2S/*SUo%CDp6}gXF5Gqd՞3C D0&xH_80L #Xr[ñ;Bkr$fVH*Z?O}w Wt%cMį/;Z:] ұq*ʚu#z: nG.(W»FC*2Ôt5ܳcvs@]b 3G 2PbF{ 3/bTQZ~wvoX>y9:Fyvv8bZ WzBvBzsܷH0ВTb\BaiQezDTYmXUGGk%fr#[M<)o=M<2ZB2]dn2h91^yQ 3gT-^=LLEfFd^2dF1A"&S/nǑ,/d9Q3l-?ŸԅROI҉SCoŔ?1DŴIk'}LaVW3骱o%EA:ez*`hvI%[2 ($n}ܠ3/Y+d3nӮ8ȼV FU?nsJeEmޣuyN:Pgfu uCpR*[\ZC"r-ĮGÑYYʅm{"-| J&T%&쉻]qZVx9l3{gqNI$V''ϺDW/~&Ul {#bDTGWu`͌вvF b7`* 8e9HIrUU}lnI"'핓sz-Z`:[?вz6 7݈:4|PŦM3~<%@0G8EceF&tYsF :Ok2B: bjxLW7>QCӧ1OЧNF#iO/|i^-R0G8f TޥH$EVo1V|veU&å^GQ}Rp/230O}Dm.G F n L֟kn'ߘ$QH!ܜͤUMwmqrmEA(r(NnsjU+v~j$Jl҃ɎF7^ ''b@ ~3I) 7S)daa M7>2?M].R+7w[a@>AX:0SShPdC`3תkGeKRS B6'Kp_ f^\?d¯%)kռ6L\nNWu?HP9L_"RM+~rI PeG^5p

_pl_uȅԗ~ ;ՎMaݞ[%d)8w<jcՍX :8. u J UYi4D߶O /pdQY\[<,W*ѷAng qDaEiv_LG r 3X>^`o~fkZDP=?E{EpM<̛ΝWR6  IǪsO,>$NU79 U|vUTBlwdz `֗z+.Δ7Dr"$BCI#*pNWjMWIsu(i$=  J3 y #je5^\ܔ-_ԟ,7],iD3îx@s^i籩rW^w`O+܅[Dߠ?LͮR!sVȨg t⊠&$۷MSӦ\4bIC /G`2ݗj#vPNRjEZ%P3T֞bdCy}#O: @<2gkAgƦW?vyN=$L ljN|bY )*ۡT] ϥޒ&Գ'ALޖ.xkӄ7RQfʩɬT=v M#JթYޔ"}dc|Cc$ޓt7~9HCm +t vvTx~:۽{7-|u0oZNj[k>0\*7B]MK,]odvŬ\@4c57 ]WAbGcBVkՙ P.[;[ % }̭N<0amU *'}5R\{գ_dvHLT8֕P~z67ڠG[9{XmH\G $UUDK_"<%zjĊ'x)T,A"GuoJ\;v]¶#<9s3No>p(HRb#O;A.g0|8XV^Yqf ݘ7JKR `؀ƒ "yNZlN2g}M3%]d =:}KKRUe΂Vgf"zh62)ASTw AA[cRN=^ϏUbw )YJxg9ڡ(XՐykŷHs^0vzi̶C 9Xo_\a"З$SXo'G{"]sҨ>Đ C2 m=/5*C[]bć5r ?box qp|⹡1eڵ ز+&Wp4pGp f`9XJȘ֦A0Ye;f]3[l!𰫜'd=ȼAGhb/@ńL꫈+/j@u<'98Qݡ>׆zc];]oHO2On57 ;z4<%lVؤ `Yxr66?Ui䁀Nѥ.g!S|ŀnaRE`̛ r>2q# TzLcw¤C!ǤGǕhױ`L:e<& +zj@ވnu-dOD@M dMV-UAi/hGJ8I`P!D9[tMlc7[|b2=Pv63{m1%v'w~<^;';w}RAbp:fݣmrioGj {_|-Qנcb4f-3 o~?1 9JSMz:SxHxb1da>_"#ӭ`y1ZES~968ڬB_'i"j @ 3HV{ wdRPS+1~P2; d['r3 CwE\G!U%S-hB9&i8CW# ~?йlt݃=iE ] 2K;"M _SFas֚ k1庩]+:VϠʌv0ȞY<INR&wɆWyp:ڣ:v2)m;ǢJܠe-ZE͵W͚|bUysleq*'A`wW1`3AfX H["=mԕ9M3tlF{oO=޿k 1l Ù^Ħ<p%TGou;ȲWZ!~<IOtj@ Fy,eIS| 8kẽT5M]<<`f^QHBh< )QWX<_88 sqhfQڥ 'QIRvsޕ3UcMC:xC嗰?2ⅺ~U%[Wb(S3SbhcQ~ Ԙ}m|'))E|>S.LEĨ@C~5Z*:zoctx7@EpNnKrS{jt+xcF5_ makmRsaZ+a˰(_Z?d~ؖL!|^D\qs}ʿw =fMX`5>{_ɛ$Ѐz-MfbajG"e ~xJ-dHSNaF*O EP-j4HwqHT:d/b=q̖/"<_[!hg%BΧVtXBNvo9EpY>Ya)Э e|!)]HL,ƎoᘪG?5ճM |NBH"ۛH;,g}@u8,e\( ňW(R(VmVOl5a{>\QV^cTj Tg0̉@3.x7ax!Y;@7i/Cm#I8g4z.Nm+X]N=#ȴRhr^gd£Y653@Y\d\/v]mT&1|=\q9 m[)t Ґ|9x.P }_Gc$6:qj9 t#5Qj|D]MZkkP m'#$54q)YoT$ ^?uϑk'G7 _b u P2G+ Z$Tmɜ>e[jʷ;&-TsGݶ¼*[hoxXoYI]E3_.2mѯLިfgœ,7l50al}U^bLߩ[ۺ376ln/ X 3.olHsz$K)M]yss?Η$"gh'q#s 2GQ?<&s>@feR0>(\'Y/*߹┴K%'"|pe⧋r`aO1|߇)8 'mC&)2V?@=竼,(E>`F'sZ9`֖Y^W{|j7@uJrS_Dnt}HĕH0D':f22Vy?ŁHeΉm 3L'ox=<,tQ$QBIJhtF s'C=cEq-<k_P(JK_V $$OvxP]FGE{7t#oksR19L8G2z@%%;bv]ϮrܾaJr".m!>oV/QC`/ 17?B V'bO fCǎKӑB5hۣeqTsQ/Be=L'- fi>e^g" IzśqO8.4.u4M2~%zM'co(f 6k3{Z`pʜ%0ѼvLL=esoh;LC}4#Pzhyd*zIƈ)?zPxY@ =w/RS*GX 7r K߮b~H&GK\ltz-{dq<:(Fa2Ə>c&:HT|M K␩ B=4rumb,*m.|DO(ȸNO;\zݢr't`ޖu`]?ZXnnu1}fDLC{*YҸ= HLFgwFwO9:%F:{&Ťa%_g@^gq F }+6Hk!:UT?{U 1iʋL¦YqO8#JHC8ę{7 R"$^~vM@N`;{VvǨVd#y`1?(6(tR6*9`w4m8ۍ4E2뀉 [5"L%f|TG*ͷQ*H}xY6!#cbtQ!vtJ Ծ=4ƽr,;VI6i~,GXL^V" 4E':#<8 䉜Ju[AګiY;SJfyS0_ CyO@Q$˵;QF8?㘯`2m0({ՀOUrPV(d.rg<[8n P`~,JH3;*hZ'cFz5iODM A0h'馔͢ۻBy,?daO59 nk˃"V*ؔ^@tr6D~)MR^*9?wpr&u'|Hڭ5K:9]*?灇q<ly'9ꗧ k/qD{05ܘ: lB5֔NAR Ҙ"~7 kV &^fc豔w V~OqQ0kG[crb# /18`ML?{}J)~\c˛&HcP9E+E|Q;@(blQeG5Sm̔u^-S}mhQĺUWb2LATweQI _gr?/t[YlJ瞣1h< Px>AMÇx&1[zc>:Z(\5$nὍ߰@JeU,쫈N%.>) 8`՜zRIѫRh@ %!*g#." ^ިn'ܶ+ב7qHzY[ l!2uDYQliQk){yOi#~&_a\g>q~XZcUk xYPιhyQk領i1nŃgkdψL-ZH=˔yO;&F&mL;~)ۥ QdzK͒KZpϔk#XB #X3ҸV:=*gY OP6$dM#h|-53s ~KNũ+BF46w΀TNaFJY72 B!A@0,,q w$ _ zpY1jI9e|J5<-/ 2}j;C `QFEm4f.k 1LH-F= z@SI0iκVIk9H!L Aj6P7Тw`srƙMu  șQs.r&5ݐ YtZE1D=kfu;h۬-'EK2D\{J'-׏Kj׹^'f0DU [n-9 n2P#-toYf6;ei"lAճB{]9[f;5}&QA9T(5aQ yYwʆ x1@?]?+1yHQݹJM}\OM_h#6}'0?XVx閛VrÒg.OX?=ND7\Rup%5&Ko jw2pN bt8?D : YZ