openscap-utils-1.2.16-lp150.6.3.1 4>$  Ap[ /=„[(Ah$ٗ`wbQMi]ƚ8 Q/ glDns{M4UOi2cw6"ܤjz:ui,=y>xf;vQ,U0>a5Īv=Ew= t 2jn8^=?zY1~vnW4aȤ4ۂ4Йϕnݡ>FoyѼvmt3Nf8ecdfb5121e40dd4e9e32cd3266c180d288d530d532a9a7a9e0ba528071c8471312931a1589b782089ddb2b76a3d9f64e169be7j[ /=„7uxN3=ߞT/c|f{շjCB5.9/ @7Ƣbӕ"!J0Xk3pF?d $ 7  e  8 X  h xX|h4(8C9C:!OC=>?@FGHI@XPY\\]^bac defluv wxyX zCopenscap-utils1.2.16lp150.6.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library.[lamb19j\openSUSE Leap 15.0openSUSELGPL-2.1-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttp://www.open-scap.org/linuxx86_64 test -n "$FIRST_ARG" || FIRST_ARG="$1" # disable migration if initial install under systemd [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then for service in oscap-scan.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in oscap-scan.service ; do # The tag file might have been left by a preceding # update (see 1059627) rm -f "/run/rpm-openscap-update-$service-new-in-upgrade" if [ ! -e "/usr/lib/systemd/system/$service" ]; then touch "/run/rpm-openscap-update-$service-new-in-upgrade" fi done for service in oscap-scan.service ; do sysv_service="${service%.*}" if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --save $sysv_service || : done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" -a -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl preset oscap-scan.service || : fi elif [ "$FIRST_ARG" -gt 1 ]; then for service in oscap-scan.service ; do if [ ! -e "/run/rpm-openscap-update-$service-new-in-upgrade" ]; then continue fi rm -f "/run/rpm-openscap-update-$service-new-in-upgrade" if [ ! -x /usr/bin/systemctl ]; then continue fi /usr/bin/systemctl preset "$service" || : done for service in oscap-scan.service ; do sysv_service=${service%.*} if [ -e /var/lib/systemd/migrated/$sysv_service ]; then continue fi if [ ! -x /usr/sbin/systemd-sysv-convert ]; then continue fi /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : done fi PNAME=oscap-scan SUBPNAME= SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi else # package uninstall for service in oscap-scan.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi fiP # &N ˁ큤A큤[[[[[[[[Z [[[[[[[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-1.2.16-lp150.6.3.1.src.rpmconfig(openscap-utils)openscap-utilsopenscap-utils(x86-64)@  @@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/shconfig(openscap-utils)coreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.8()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.2.16-lp150.6.3.11.2.16-lp150.6.3.13.0.4-14.6.0-14.0-15.2-14.14.1[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@TS@SS5d@S,)S)S&R@R&RRv@R0@RRRW@Q@Q@Q@Q~`QyQIQ-@P @P@P)Pe@P>@P!@P@P@P@P@Ou@Om@OgON@OLM@L1@K3@meissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comLed meissner@suse.commeissner@suse.comcrrodriguez@opensuse.orgmeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commc@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comdmacvicar@suse.demeissner@suse.comdmacvicar@suse.deaj@suse.demeissner@suse.demc@suse.comcfarrell@suse.commeissner@suse.demc@suse.demeissner@suse.debitshuffler #suse@irc.freenode.orgmeissner@suse.de- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch- openscap-1.1.0 update - HTML report and guide redesign - dropped support for docbook - Introduced new probes (that are to be part of OVAL 5.11) - probe_systemdunitproperty - probe_systemdunitdependency - introduced raw bindings for python3 - dozens of small bug fixes- openscap-1.0.9 update - xccdf_session_export_arf must not return 0 if the export failed - expose xccdf_policy_get_value_of_item as public API - skip "Signature" when parsing sds_index without spewing out an error - return non-zero when cannot resolve XCCDF - consider the last set-value as the effective set-value and export only one - test suite fixes - do not destroy SVG data in XCCDFs when generating guide or report- Remove unused build require on libnl-1_1 according to the changelog, it stopped beign used in 2010 - libattr is also unused.- openscap-1.0.8 update: - fixes related to Asset Reporting Format - Inject arf:report/@id into nested rule-result/check/check-content-ref/@href - Add hostname for each fqdn when generating ARF asset identification data - Add all MAC addresses from target-facts to ARF as asset identification data- openscap-1.0.7 update: - fix namespaces for attributes in ARF relationship element - Avoid ".00" as the score in HTML report when score is 0.- openscap-1.0.6 update: - fix process58 loginuid integer handling on 32bit- openscap-1.0.5 update: - XCCDF titles and description support xccdf:sub resolution - HTML Report lists only applicable cpe platforms - TestResult element contains applicable cpe platforms - Introduced XCCDF 1.2 schematron validation - XCCDF bug fixes - tailoring profiles shall regards inherited refine-values (trac#373) - rule-result now always includes at least one check - Other bug fixes: - Dpkginfo probe collects epoch in evr - Updated examplary openscap-content based on the latest facts from Red Hat Enterprise Linux 6 - Minor changes- openscap-1.0.4 update: - Introduced xccdf_tailoring_remove_profile to API - OVAL bug fixes- openscap-1.0.3 update: - bug fixes - a few coverity issues - a few memory leak plugs - broken comparison of huge integet in OVAL - fix-return.patch: removed, has upstream fix- openscap-1.0.2 update: - XCCDF generate fix now supports tailoring file - XCCDF bug fixes - Generate guide points to RHSA pages (rhbz#1018291) - Generate report ommits remediation when assesment passed (rhbz#1029879) - $PATH variable is available for SCE checks (rhbz#1026833) - Tailoring of top-level Group elements via API fixed - Fix-filtering should not drop fixes (affected SSG) - Generated fix file is created with sane permissions (trac#362) - Inherit parent's namespace when exporting oscap_text with HTML trait - OVAL bug fixes: - Handful of xinetd probe fixes - Handful of process and process58 fixes - Obsoleted textfilecontent now supports text ent comparisons - rpm*_item/epoch is reported as '(none)' when needed - Fixed dozen of flaws in ipv4 and ipv6_address comparison (CIDR handling) - Made integer and floating type number parsing much stricter - Fixed floating point numbers comparisons (trac#366) - Fixed case-insensitive comparisons - Item filtering fixes in probes - Consolidated some of comparisons in results model and probes (trac#367) - Other bug fixes: - Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248) - Fixed static build (--disable-shared) - Format assertions (-Werror=format-security) turned on by default - SCE scripts are notified when parent (oscap) is killed - oscap info now recognizes all the document types (adeded: tailoring & CVE) - Documentation improvements - Handful of other minor fixes - fix-return.patch: Fixed a void return- move the gconf probe to openscap-extra-probes to reduce dependencies of the core probe set.- openscap-1.0.1 update: - versioned interface is used to handle internal SCE plug-in - build-in gnulib package was updated to current version - bug fixes: - selinux_domain_label and posix_capability properties were reintroduced to OVAL system characteristics model - selinux_domain_label now collects the domain/type (not the context) - oscap oval collect reports progress on stdout (not on the stderr) - typo in the manual page (rhbz#1032537), and another small clarification- openscap-1.0.0 / 19-11-2013 - Improved heuristic to distinguish 'local' and 'remote' file systems - Improved comparison of EntityStateEVRStringType (trac#355) - Link against librpm (if available) to include rpmvercmp (on other platforms we fall back to the build-in rpmvercmp) - Bug fixes - openscap-0.9.13 / 08-11-2013 - Moved SCE to separate shared library (libopenscap_sce.so) - Introduction of scap-as-rpm tool - Improvements of sql and sql57 probes - Improvements of SELinux policy - Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf) - Minor improvements in state_entity processing - Introduction of CPE name for Fedora 21 to the internal dictionary - Added support for ind-def:pid/@xsi:nil (rhbz#1013011) - Improved error reporting - Bug fixes - Changed CPE name regex to be more permissive - avoided reports from the library to the stdout and stderr - plugged several memory leaks - improved xccdf:check-content-refs processing - misspelling in syslog message (rhbz#1021695) - fixed OVAL's element processing - fixes based on static analysers - test suite is locale independent - new library major version 8- Updated to 0.9.12 - tailoring improvements (@id, version, and benchmark ref attributes) - XCCDF 1.1 tailoring extension - improved robustness of CPE dictionary parser and exporter - and added misc CPE 2.3 elements - added Fedora 20 to internal CPE dictionary - updated OVAL's results_to_html stylesheet from Mitre Corporation. - profiles with duplicate selects (same @idref) now export correctly - test improvements - bug fixes - fixed IPv6 export in TestResult/target-address - consistently inject target-id-ref into TestResult in ARFs - improved rpmdb manipulation (rhbz#999903) - solaris build fixes - spelling of name of default language fixed (oscap_text related) - fixed CPE names matching (generalization vs. specialization)- Updated to 0.9.11 - bugfixes - Updated to 0.9.10 - bugfixes - Updated to 0.9.9 - --oval-results also exports CPE OVAL results - added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to - OVAL variable_instance processing (or so called value multiset) and the processing of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and Collected Objects. - improved test coverage of OVAL variable processing - introduced new internal data type: oval_smc - added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm database offline mode - bug fixes and dead code removal- updated to 0.9.8 - added experimental support for offline mode scanning to the OVAL check engine (i.e. scanning of virtual host disk images) - improved OVAL variables processing - bug fixes and dead code removal- fix build on SLE11 - possible 64Bit issue - fix-missing-include.dif- updated to 0.9.7 - bugfixes- updated to 0.9.6 - new command-line module added as preview: "oscap ds sds-add" - improved xccdf:fix processing (support of DataStreams and CPE) - internal selinux policy preview - added Fedora 19 to default CPE dictionary - bug fixes- updated to 0.9.5 - oscap xccdf remediate (new oscap module which introduces offline remediation; the remediation based on existing xccdf:testresult file) - added support for sce into datastream (sce scripts can now be embedded into the datastream file similarly as oval can) - improved bash completion and documentation - bug fixes - bumped SOVERSION from 2 to 3.- updated to 0.9.4 - high Level API - improved Text Substitution Processing - technical Preview of Online Remediation Execution (the oscap xccdf eval --remediate) - improved Library Internal Error Reporting. - the oscap xccd export-oval-variables now support DataStreams. - improved documentation - improved schema files. - tailoring file support - profile shadowing support - bug Fixes - DOWNGRADED SOVERSION from 3 to 2.- updated to 0.9.3 - Embedded CPE dictionary (allows users to ommit --cpe argument) - improvements of DataStream and CPE processing on RHEL5 - changed API of various functions in cpe_dict, benchmark and xccdf_policy to use string timestamp instead of time_t [1] - fixed several issues found by Coverity and cppcheck static code analysis - bug fixes - bumped SOVERSION from 2 to 3.- updated to 0.9.2: - rewritten the heuristic for pattern matching on path and filepath - CPE 2.3 language applicability testing - new ds_sds_index API providing a datastream overview - CPEs in source datastreams are automatically registered and used for XCCDF evaluation - --cpe option autodetects CPE dictionary and language - CVE support (validate feed, print CVEs) - introduced info module - made "$oscap xccdf generate custom" work again -> man page update - bug fixes- updated to 0.9.1: - the http in the check-content-ref/@hrefhref support - the cpedict support - obsoleted the oscap_reporter - send start and finish messages to the syslog - the XCCDF multi-check evaluation support - "oscap oval validate-xml" autodetect a document type - bug fixes- updated to 0.9.0: * few public headers were renamed to follow common schema * cve and cce modules are not build by default -> these modules are not utilized by oscap tool and thus untested. * --enable-bindings configure option was split into --enable-python and support of SCAP datastream support was improved * plus fixes in OVAL and XCCDF modules. oscap tool reports support of XCCDF 1.2 and OVAL 5.10.1 - libopenscap.so major version changed from 1 to 2.- updated to 0.8.5: - added rpmverifypackage probe - added initial support for source and result datastreams - added xccdf 1.2 dc-status support - several probes were updated to conform to OVAL 5.10.1 - bug fixes This release is able to evaluate the DISA STIG content.- updated to 0.8.4 - added OVAL schemas 5.9, 5.10.1 - alloc.h is no more public api - bug fixes- Fix schema_version of scap-rhel6-oval.xml (to 5.8)- Updated to 0.8.3 - added XCCDF 1.2 schemas - changed XCCDF report format - updated schemas for OVAL 5.10 - added additional OVAL schemas - 5.3, 5.4, 5.5, 5.6, 5.7 - multi version support for XCCDF and OVAL - a schema version of an imported and exported content is same - added rpmverifyfile probe - results are validated only if an OSCAP_FULL_VALIDATION variable is set - bug fixes- add OVAL/XCCDF content based on yast2-security checks and set them as the default content (using symlinks)- Fix build with missing gets declaration (glibc 2.16)- Updated to 0.8.2 - XCCDF check-import support - XSLT transformation for XCCDF 1.1 to 1.2 migration - SCE reports now optionally use the new check-import functionality and don't need separate SCE result files - bug fixes- require libnl-devel on older SUSE version- license update: LGPL-2.1+ There is no GPL-3.0+ in this package. Also, the Fedora spec file states LGPL-2.1+. This appears to be the correct license- some cleanups to make it factory acceptable- Update to 0.8.1 - introduce Script Check Engine - Added an OVAL Directives schema to allow for a tool to supply a set of directives to more easily specify desired results content. - Enhanced OVAL Results directives to allow for more flexibility in allowed results content - added new OVAL objects(all OVAL 5.8 objects are covered now) - update dpkgprobe - all issues reported by coverity are fixed - add capability to export OVAL Variables from XCCDF - added cvss score calculator from vector- Updated to 0.7.2 - OVAL 5.7 is supported - content for Red Hat Enterprise Linux 6.1 - draft - oscap tool enable user to skip content validation before evaluation - bugfixes- Update to 0.5.12 - Proper subpackages added- initial 0.5.5 import - open SCAP protocol implementation/bin/sh/bin/sh/bin/sh/bin/shlamb19 1538561524 1.2.16-lp150.6.3.11.2.16-lp150.6.3.11.2.16-lp150.6.3.1oscaposcaposcap-chrootoscap-scanoscap-sshoscap-vmoscap-scan.serviceopenscap-utilsoscap-scan.cronsysconfig.oscap-scanoscap-chroot.8.gzoscap-docker.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/etc/bash_completion.d//usr/bin//usr/lib/systemd/system//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8856/openSUSE_Leap_15.0_Update/efe6a37601ee5e015fb27322b069c6fc-openscap.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=58b30120898620a47327a7010440925ec7120fe0, strippedBourne-Again shell script, ASCII text executabledirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRR R R RRR RRRRKTsW)T7oݜJhb,6o6?x(o*hw) #UxEP9|¼d},ojTr@DY.#LGU7+JlO7lgQ"V]T sҍ[ywR]}LKG$2t7z 8k?qH؉@-)Imn% Z I,?ӂ2ldzP\7Z$MVŜG=& ?.m ]ԏ)cr/.I@)dLO_yFiW^_`TAڽ#{p?vW۠49r#`v:XҪK3XnϒH:dr>"Ž%U3*O,[m:`V$r/%!(ދ:u]Fj"7Iz'.wU<(*b!lBԜƃZZPG%_*ODũ7(SJRS׸,O =mIE'eQY?cP2>h_vfтlSˮ˄$ú0o9羌pף' Ap qr6lzKoUn1ЙB?T^Oݕ-K%w䦓N{m/ _CchN 9*D ӆVkBكvvB;ry],ÒӇ w_D .CR]Jn֞ŒqWk=QhRkdxnQ[AL\a =pA`u$ :{,ۖ/R;{#۸(Q+K$ e 0Bô 4?ß#Ǹ_W^(]e\Qu8Q]YAόߖ~+@Y$&O) 'zJ?j'DpRIёuΛM0AP_ڳ{=(<KB:?Y5BO$^ 2 E`lj!8_lge.R3$}t2:.X-.6Q Ia`õ" kzZx 6ӔMG*}L.9 s- 9@^w2 <͠$5xR9\Ȁd-eU,gY=P4;MC-f.rkZfsova5~0MO=[h0yڸM`˺*WrH*<$e#*g1zRw ( >>'דojCY&J{3eViڭ={5^^AϛepuvEzX=*wJ$;5/*tP?"` [͊O iJF+Dv|Z>מ1[G]C6_$gNwA<,oJ%ύSK~CA仟WLqiX) }0',>,3@#Pd@.FzGNr&/qap>)5rvNIB5rQQl{ijߍ^?'mq$h %H Ízؠ|hi!l?oj7;ou$胡d1x\q]bQz^6ؾ.:bA8t|TP%! _kʐ$a^5!t[~\xv8}Nͻ/K[DC]/Ȟ3xb':3VxyOQE4x*f(%н@Kb{8{f ׸s 5>pHC.4f~4ApFopsIR 136NdC+@ SiPKnh {oO=3ދr5)c<_P'^56^/-8`3 G!ZN~P.`@Kx|=??5`9W 3A 牖In2tBdyt~@eSLJ\`T>xQ. -) sA\hta3]7"O̖0Z4` d%]W@Īe~DkC14X%8> {v\mo鲵[r?($NX5GJ+lߣHp RὮv2G})7B=4X޻dL4!q%J -[YΤ^(YDcm TXwaSx~NzoMVl,H3*]UV٠Lɛ W;G ?.['|7mEP-dUmJ'ڃAǟHwOKhkrXjMgP9*^ڒpSB\^ޮvALB|8~ܤ ~B!u+@IL9/s磪 5U]~,r} oY<#]Xl.ҖP]/%b8i1ePI)$#𢸌;3~֩_-l4Y3~ٵ־GUS7j@l ĝ-~K4xuIԤ::lh &BC#V| Oh'D;Ԑs'sK()OrX-D34C/yًJLW?BKJ;VOrICrfpg!ˣSVOyB-}¶JLEn@ՂdKOn UwTY.^i(b3F ɵXJz+ ê<>xؔ?BU.{7CVҩb"Փ4X5 hQUY8zhyQxo&GI _fePGx^\JlbK>pA1&inr ͌ j=%=5Hx5H{QQiR[iEGek꫉&[C9o5R}anMqa.L Y2FX#{[=IT4!X!M dt|p_S|ؙ'8V|KT$k ^B )6L[ǚ(ٚ8}FЕ(Oqr\3&2NC,e=;=T5),umQ6] ca9an^bn髹B0;i4Ag WN=.~N&VmpV`tfpBu'+ZRk7Šfj󮳅VnjtF(S)M&*zJm)m87wkB{;Mղ!RC~@kea'oh[;ܻ+#C6!t´{Vy-88Jg+3{cہfF,9g -a:}m!q49v.bnv ӱ%=Bcl5w8\OQJ<"T.51o?*/79LZ@ k,-o(9w5&hSiHU҆pmmq 0@Lj⭃EZjr^#CV$8, N3>KeC3Už`W@(Ҷ[jf-IaaS#~eoRHus85 '!G7u({̉7Bl儮0˥lf43?mcoA%ynrqzv}vGNU ` B[J= u(w5_kD1(Si Ӫ˨zØ\Nxb=i)7 n@=2DBE$L7=ku{Q\T U+M( ڵ-nFT؟%|:@Y9Jm!$ãLڗ%P 1& "P7`bns>DnO-#D%x[B@1:qaiI)x_S.ľaQiOcp9vT6 1N%4YpPn#uvD[F.pT%\omU n}8t@V>}~WH a^u˼x&jj=s?AT2jQQ /ehEB[mk]G6mug$adz[5 єHv[Zg.U |cKQ O\3k9pF[^k:U73}%,G9'׋:fX˻n~] )8wr-^$vS{pTiޏT[ʵK7h$u#C4 Q(0y=zQY_q5":-XLAʅb=,.:֎)q/ }l}hZM[-Ix(oL2唚 M}FWh3{ZJ|Z>0 ;lqh*3;}A7Q!76#/_2Qm3,H_:VSok iTSC7kmGFxdLF94l2؆'dM!r~fP5y^J\0>%tTf> |7dbmp؜e2A Mejq}{ur+ VqAlCt yv f"nJ=QXу(|QSE(%O5Tbmɲ3@Q%E&O26USMzUL)>I+ \)hDmڃuJUߡ[xߡ/eYy8KҪicr@nb~vWح}0Lkn `{C_IsMMe~M7zW~8H`d6#G^$ӭlN>RiZ3\.>z,$Y)bGˊ"Y'C8q{1;42 6䯿$F>NQums f{$d'I<%i'?9 ?DȞM*.a;VPs0tO-forD՞ ~HB|)@"GE>a<ͨPp#ʖźI,B$wAmh=X8!w{کD7kLgHD8I͙ԽR<=%ăWInyJR&i~,܏Ԗ5Z x_sjRm{˂+zA'oWBÙhYT:iW 0HBkШPCx(4L@1CGYilKhkĞ=a0,u8m\=rb=tGU6rS}! Pf,s]C87Ҙt-|pH}{kIfN ӗ:*ipUF`t8d_ {)3[K 8=ϻŊ^b)D ҿLCvdg F/_Ee&¯О*Xvu--z(:!Њ`K}7HJ&iFEŏ|vy~=9 T_M {xZc!q]og2ܳ_*\DxDߞ~^T[B :%P1g%r h~˒'Z' /|ݪ {旜"*:Dcik~]`8(xLfw~yˑw?^WtQACbҥAsGznj1@}*ؙn7FWi)ROMi(fx[L=¶̣٭(J;fM:"Mf5%Ju=Bw_r8P\rI;T?esF%+#I#@ԊmMr&Fs窞Gvd. o_;1\.P:fHs _Jf8|iQ<1Xs+šOyZi u2c\(zVMN۝8L1ӪE {[OF\ĽJFk ]>l`IɮkSH()OT4aﯝ.) p&1OތI5iR֛E<`t偤glw?MmJj$,i:j$#h?a k_s0>JB;WĨ)_F R Nf7C뾷F}Ą ёLXhA{:sv̷3>c)Ŝ.o*<|1z7Er]Kx`S`G#\Oc6orid>ntF-D#%G/ϳ9B~73`=,KsԣY8#ta/=hW3N7hnf\QFo+Zқc=Z-n:1 %OmGlt6]A&HoXO,Fu7,JltiϦ$.罈=R DTQۗ5B Ls"GʃD n".z#euҼ,rj80(9q|n!*v٘݇Nkܒq|3-'?JDiǟlVݷ?L߼Z˔ӑe36YRÐ |DAj+m >eV-^^⪓hWscE*Ze~ZOHD^H4UĞF 뭭[h$S|f6q3głP㈲YQ<`mNpJ]i>ݣvל 8@.b3g# 4ۉi«'b1߱ZvCp~V;7H]MM LhI0ǵWjc,}jm~, Sؑ17.NKz`s'f8jJ0oַ[$ tqHQ+dɗ~kc6 !ۈ(czp~ȵVs\;2Q4Y;[NYFg9g_g8>ta!KQt./"&V,s!$񔽽'-{CaeHכrnNaBKcv+< &vL%֑8sF5_,R{s[O;^׫[AgƓ= t ,ש$Y"Bufwˠٍ5""fP: e7qDd/DgrY(69OV= :LLT2 M$KRpz)D/[QB^vӋ0Ocmٸc*b7AN*PAxR~d?E/F@Uў4("54 ~hLsKCqW$m1U =?:?C:ifp%+j(C$&DOJ6? \[˯o!>|_Ɠ:G.S x7X`IHw~&TS#% n*,7RJ=3@۴. S:M%`./ܵݰȖdVCbb՛4"/?X{ou/zFv9I+.b?GKezZg>Ac/POå._^bSAȴ}[Kh:PaP2&.%MaQѳWxxr&?gL]y2 ڝ5dCuB;ZcZ7~_̢X0rh5Sukp"&xBNLz6z(Ij9J;&m!dp*Y]Qd*n1's¬$WdC<𜐏W~C7΅5)rm54>8lxrx)d[-6,"-?t+ik+N)\lkxA'؟< mQAXÍ> =cW!Z(v=i9s"'xKv/]#"`xmYZù(ϻ꫒^,aLD+j0{J(p?]p6>-`]& ?W}.>F-U925^ktnku %$ OmbIjRq;YR=?A8x]s+!2ב/;B^(/=a Z5 -cU(du e+rQ+1,Y;6 ~%xjJα2$Mڜ{M(xq*5tcŻyxgx9 +:e8.9'@^,kSC!-@]j5 SbY YN/1uvWYD>2OE\RL1 !,߱v*{;2<cl*Y)5/I˯t#Y#Ff Fl~~JKP8ke=񍗊Cj ]'PeCw/iP_Nqt(.,lraJQos86AUAO Iӣº~C\I%;JOhA;yOﲿ`F_Jl[l \ӷ `Iu75s=N?)źvm%- TbQ;/o^5kJU ,dI+}ZguoS[vɐsIsDp~TOi<{:y;%Zd;Rrn75("yW@$%we'{>(wdJuC 7bTGasaHV}krƶ$ sjtFbV¸B`DZ- ]P*c%4b:r8ђﶍ7i,k;- {B #<6d/B9N1|9ۤ@G%[_Vmbgm79ǂlYdQܝơCeBA & 6ߡ}"~rlVwr)gMQv< gjڏ؀+'Kw7q6'E9y,"l_.Kx ac8^$Fvm4feg9H #eu"@;_c~jnAR3֏6|σ|SvA|>K'YlKݾ%{h ~yiAja/ү年c욞%4WV_ai&DYob9?ď ϐ'@b<Q,n7ɐ"<I]cG[Y;vs~ iY90I 7FѦ`QcpO8ɿ$l^xuM '=%eQM 1]Fyȑ}ۺ\xEsfg]@^ kWJ>W0@3Dr'^) ZSK^(cM!Sb:Yз/,(XpΕ^ mPAOJvV6[*A| n&BF>Zrc!hcVy߈iNT)Y+9T7! Ŋі| mOqT?7LSK )뎈V64Jt+;G×ݕM[`~y[E%sh*{][K*p5m`nu'ļT:Hq=c¾ȅcq3qH`.'Pk6`uJݸuWy+M.& <(HV cƠ[3B:jb}KXj"^x/:l[ v&A{XVwU%hz[_\m^ .HZW!,9C:)롯l"@Atf@%6o@  +^'30wss͘KvѴU6rsA0,#c؇.k&]u;%:Dxh<ˊ\=k̄7^E:k:B;M.I+62,èҁAŌd>|};ڜA|_a䝭?n<@:b_-?4JL! z{ MJ]Xjz5kuz ?+*> Uv!lT%fq$n|=;Do(#jU^{ uغ.4u oa(^ hE25P;!j}BaNHҼLvIA 7y:oHF=T_v,ZY{ȊR1G5joM-ׅ4ʼ:qqC/,,}{T+#n*l5b9O's)fIAOt MRZ4@w|AldRVl LqKsRû캡4ݰv˖fHе// qﱲύ ZTpgCU1N U~xxpL-㵇 jdsA{վZRS˙c¸Um8f?uz o4nhtgY?ZAZ#.k NN7m* e?k)K/K^w=8&H|≼` IE{qaƄFG ok|ֈ =)Kzç6֏&8{/uhQx `H w$5#IvpB@d+!ʪ gw1 <ń,$+Z^P@dWpUѕ9 ֎7tyPNVf!Lnk8986^N3 ;EoNd帧 L :z (KG]-{&n z]Oaj+\z'`/I,'CZ #sOgkmS^4W9._2Vma`M'TEqK2Q細 a[|!`v )#j~mKT+vkک3/o4-U_zSZ ]Wh쫡_:YPHCpqu(@ƠەP'ݩ'jkDZJMLDpHܐ#$kt]uɮ.H섭гly ցq}q=#{ q%ZzsWL%ť-@,dop{Pz?-]O2i<񝅪SNX2` o~,>fpEi*wI19{AHݎmTшM3etZn̡8ٸ^,.@!C 2ꩲUˇ:,f+ґgxBs9ӄ6!uƌTF=Vk0/~\@di 뙮&I^vCf߅`b|[c݋ctJD|q^ad1_ 1:[6vZ3 -l++J-N| 6>vגy h( ?' )sn` zJ"zάJ3 U@gs݆$sZl xw޾ڮI:;a! (0޴$jik0;7 HJH'ꍺ0~)lds1:N@~{6UYvIrHy{;Yel̴1}AဘUwn]6lz`+ܠ]w[*t;SSvJ-vћbZA/.QFv&=tPP80@裊EC]]ө\ rhڊdÄbc  mn#kqģb TaiY&ѷ V˛4XEwU3=˹.V {Nm`m] ΂z=4gܣDAJZhq2ĵ.exJi7&{HS02׿iY1_ 8GwD;Ѵx!L͠5>'YClT/]1a$^*1q?]4[&wAUgp|O5LVOsI& -Y9\xtd>[*!%q_0 Ţx9عe9o2 Q/ij-$Uľٶ gm1/k{;6UJ,v}5{3)ݨ .Y9CWFI$x NAO J=.T+ۙRt\IP/7^w˓cĽr edO˛JQ)$3V&gc$OLێT0*^: /QhFE^s%y'C7+ Q-gA.c "aǃUdu"֩N 3%H*=  -:er^g^PD8{1R"X*$K [0 {2)mj2rF˹_,%,PHI@10cH{:<:`WTjrK#Cnek!7R8]Ie&NESA[~ 0&TlR#.-X)vN <Ă4 *u/ox:E 3H\ųǂNRFf3h/C 8=/OЮ!7Ғ﯀j?*J +/b"oT/W 8zg\nB~~-AtblR)iݸ ns3ZQ}Pq P:*|$.)ņ$rG&pLHͨWaWI3S rȻ*᎖ĝPgjT]Y>C!'0<^6M^dYqʂA15uZ 8esOZEFhy^朷u)d?T$K2y:WXN1NkW= B zuL;#m%|3f}6ǟDhPvfʿ1(,GRT 7*$?HyRTERpĥjrN7 7BO$nDdftK)="},=PZ/[XtFpcDzxFYXrss_qF<& aaZ ޝ|2o 1E<љvi6#%>(]Yc&00܍t-#!CurY!!A\Y૷GA!6sОyH7D<-ʬk!qlK ]/ڝ\C0MA͊)G$E˳Ȧ+Aud.X Q)^ Az0-:WȾF`B=w?)ɃsmAdKZ;–P)%Zd{c]G+ʮM᛭mlП}z]۸m Z! q<@?i% 礟EbS>^58O}'.~D>r[-D)ky?2.|٘enVIn|L'd!LG0}pix HIlBMzt鈩\ӥ&ȻiTgcvs3pɽ^TZ~͓ӴNۿQqb. zunYIJD&kj`Cwץ/=`Ϳ(ž!:IR-=Bsday5f^YTɖ;|%c]l>1q?-2!KL#ePrޣt 1c(9L˨K5fΊFɖU7 |ef:%9KHgTwgXҍ8Q>_v*X#S8O'/]|ڍBxt&mX"~{.DV{)[P"8H.¶KV_?(wP2 6:5ߗV]{}KLjRQD9*L*@igph`tG̍jKJ+Htҵ0ϧ\Nj+tdWN{0a FS|1j>WF1"7܁h3:i)[G9u;>t.~\] [n0ŀgt|j 6]DzQ؍A[&[TV ՟$|7৯r!kl(2J*ax21.ʘc 5߳< X Hc4IB ~+I;(I_+gcieQ ћn&J :R`DZ;ͭ\{BaS<\ͩؑl H1iL/)'6Ҋsk]tIꎚ`w;)Nʼn {}w7P_P~4#<7Iq70Ѹ 樾Cި 0O]Jo4g@q K 1 %F!0 Uv[(_$sY@+TP_d]لUk4w5}4lҿ C63TPU:-o>\bdk-w&ω{+LxuEuL7}p#2=|PR>Y<*q'x> >>.4lŴf/_ 'Cҟp@7#|磞a;aR?3T UvcQgm1_i"{tFg*yK֐o O`d6ж0lg0A!+ lgN(Ӣw:FF#B9oK?)1xlhsDiԱlU # y :BÅD/4ϣ=:Ub͍wص@wlY -[G4M _wNN4 /M+*!Cm%`N ŬuVj)<|O{L\(M6:uc@ɞEi|TqySe??teNv?yPZ_#UWU~ڻDg/H^@!߅9<ӣ2_$dÈVy:bY. C:Rt~?M<Q<G8_Kbפ/RCżiW)5UrNh2U<!G`CgupZ;94=]?*ddILfe !?F)XI1ƃPVc/5N!QBt-Q:ѹ"xr "f~BokYLWhߧ/~DTUc2<^'8AȮaaf4۱Ӛ  B]6jPtᇸJ1kQ*Yj}/3Ǧ ȫ"N-aĔ?`a tH{A|0>e轇ɫVJcX 1Zmdc*ZJ ﰠ>FQOAY[k>`A8<y'T[~>JCλ1nƮlZvڐ)oHkr5[3pGW<)k {fR!R;yKjone:,) i$Kg%2}@v,:.7{|Gěm@yu ^$(.,D<pU2Wb#<_z3UyD\ͰE}(ٵek|AwQ8 -k<>E;Uiџ>Cudx=ern,kV[QO`iw7)tz{ ,ϼUCGl eWqy̖*n2&}AՂ(h4G8SyOKQ)u!*\0BAb+R΁o>uZHB~Zq$.c]aKqn#!h.4H[s00$&}t x_Jb0'(ᐣ9Rk$[w*%"~51 Z?&'!+Jĩ(:7rg#dā/Udt W#rB4'ҭv| !"i›8zI-lj,7:01/oϲx) LNdš_'+v|kf{]$XȶW~pdѐsT{XhE=TP[ΔFN-6)SQGnEdg/vr,(io`BT8Xs;8mR"Wfb+G־3W1_,zzpKu;uŎQMրD ̎UK4W bk0wDR5CF~땺 \VJSm99~6'5}mu|I$Hcoi`"?~b1Ш-DR[.đ錄egӊ1".>9 h yhf'b2/hESs!vZn(;N9bԡC!01֬8kC@7P э]I؎pk f_DڂD$jW< ^]3YDmlqdh{wm`˝ y%oRʗCqxRS(Yqv !>B!gvL+ˍ`߁0bݓm0Ks; 7koC]h0'M75p3$ ?OQІn=Z,3֋)Gtqieu?DD!m\5-? xy5 6- J7YYC[{̹CxdYY$\XJf nW=(c%8Q\/:A£nÎG h8c3 ~x©ą%-KDl–QqhO]Qnٿ(SL)Oρc"i]H/ Q0HO&ok~Hqm~a/)*5KKb4ǎÚevJ0-s&ïa$:Ra7gOs u~e:TUZ5MspꆠDhpi# ~4;r?\(G>մÌ i&M@{`XR|Z_wO?KmOC\-erqcN>ej_=׿IAKP*+p'V\*됴oJk"kX]b@Iuh-JC!23V,#h ۟/|٥*Gs?"WXt&ĭJ50H5;lr1|_54ɃJ 7c>``ɔ&"ux¸Z5-{3a%1b.7(!P@(:p^'4"# `@cC$1؟t0v,SːZ4hl(HnRN"v@}),lFQ[(q"S)fwH (IeySƞޞ,ތ`?dQHy6dK2r[܃| я_] Q pfR͜Ragg1̝coAPm"ߍZRAtcY,2wI7zpm8ܟ]^{agUj)' \Φs11D#mQ8[F,N#B\?S6ptV6menؘڜi!l;*YuxbLQZAFVAh,5Oj\]&BCyv*[ D*Fq"/m=yLQ$nyDDx2~z ؋Sڙx|f[M%GqH8ȼa7g:FrQ `QQnwhisrNf7ZHZ/#{Pl(.ߵ-zv(-ϗAxFnm+ppa#Hhm%} U7̿ $c7*sUe8 4 0wZi F~8 UPRWd|]t]zc.*"(ϥPB]!”h)U۸ߛ'i,8&O.4&AHߦ'mܙV!kTi@*H|UY#߉R;I` O**Urv* \9oG6;;:z$y'"!Y5*;Wxvc󒍇 _ GpR=>?L[7Dϵ;ӕStf!Ѩ&3UFQz:n4).;/*|\K?sYۋ6ܤQKv}OwS{~;s+M'Qi&L`,*Z`JяYIp,Z8.~pKd]l/9; 13pm }R TɷعxRKuSQUIf1p3Wb8EQ*. {bis Qn+Tڎw(oɬVelSxiF`N9ct9Μ]W<"<4o$ e~!G2X%gZITzjZ-:҄ӪرI6vx=:m"5F {iOڛj*S=}F!UC 쵘y0zE9la850yjc7x̜1xۦ:qmSӏ4xQ҆]fW)&ߊ]sqY!ǁ( Yyh΋DÌ "u5%&o]!X?oO:uP^tiQݲMjdH^p Gs8&m7 ,+nq՘ph;BM{?lft2NZjuEH k _8li-c~BCTٟ:T(?2jS9Qa;WN#_ | 7pu\";_w3u~xo?R{=.Vv0 8ڴRL sum~|KQ?̟'%D;g(~1ph<`LEә@yfIwv FN @WQ-8fћ39΢a2%3d~6`&k96B`oﮉsM`M!VmO̶]]fFKq_ %(De™ouCrr,x[~)zۤ$``91'8.D2ֽk\t;o]~d⋥fяf`) g]y(@ p~@FY~ &c x賽1kA"=Ͱ?b&4"o&.^EB;;abM>¦]kx‘藢 XLMz:e\o>'е)@L`)ݳsN>@ Ə`IsfQ|K6A3G洘l=]֬YPCwٌTp.v-7+x2O dN QlKtO'0q#Ж}` w}f^rmﲯfQEZZaLd3cux!^,PLr.ZIBDkC]dףݟ0ckI4Y{(܅j@)U(d% xb/܁l*?%zic'\p\H*d<3ȿ0ܪ3ڔcM?{E*B_Uz)i1Ƕ ;~_c:PJkQYeV|-4h>C% ZoA:Y8/Vl%8u,6` {bI<|'ĂANsI؂AK|!CbUֳ#Fw;TgO1ӟ IQ5wxr#\ĥj {Jp"@ϥNjbPN<=c{dWv1a$EF,_DjDyޡ@Σ^h?d~IKE |?T{re`fjll'J8(ok"Z"'%Zw|Kst6 "+%$g(]&"?q) xOMFt jUZۘXaE9JЪz߮'I[dѷx}zGaxh}Gt21iqMTݻsxަ,']6egBW?O퓘PO"'خD8vj~:)xk xxߧ`I 6l>}D}^6ě'RibE(WxA+,Y^%zA֐j(Պq<~ūH/䗩f`e_hgSC lN/\*R ^R]0#pSS]7`+0J]Mri *kJ?퀁wqFN>WѺ0Sݰ]؎Y /R*d Zx!@Cuf៉:Jn v dN0xJ AkmcdY : qE]12=AU={w3ԫWKB@ףqQD,:2xJ']rn>r݈q"uJ2YN*U+b~Qzmƽ%Lif}\($:,gW}J=v2T x\Zۥp tΦ'DHtM\~6l%MoN?`ףy?$ F"Wml5D&[;иk gOU9`78Lz-kiN"8̀7ϫuL94.~_=jpP)+X5g/'4_cY_lXsY=œaH݄eqf`fdH)يX +BsX%i?e˖1=Tc2FVJhCs_r{pbx5U[BǨ\#'`osZӬgJ0T w f^\=;bkM6,!TnnoCP}5~eyl~yCƋ[3o!3$.+xr"S\,‹5`VmJZ)*w͂sgU)ʳ@gR{7Gɥ”򫄄߬?—|e [~(:]ia#lfq[7SCR V^_Vm7']`W ߲#PE丢fu3DFJ.-\,xc=vb$8ed`T+!e쩬cɓҌjDB6lstLqyvsi_Ыqwl9we˫oMbz"jŔbqv{3;z!MT2XU㷑}Iȡڟ e"!||$ñu[3"'fh㧎$VFi ٖ:<ֵY(zOll5^rIx#찫k43d2J0uƳ2-FH3ojֆ۠j;[8$!DH[ ug{.AGnUqOiau9{R>UNx?f:3D+et&[hyӂ-|1|jA*k}^-iతzKbIG]X(/m7s-(D^w:0R)^R߾>0-q_i5%0as{o]d̡_tF ZhԱߎ:ƙ)uJO^l(b2K'&e{p!n|+&YRjaUo W4/IAVP]/~$ٲ9]?t!Z7A`]6/'52GSlyW+8`t lAGVt\2b)8:"oqUQG٦#ĖumESV\]܆~P0[͒k4"GZ Tr#K+MBǐp{C`ednsDG:q_+"U 5 aIKyp%csC&MYƭHݍ#qc#[l0lK Sm)${?*zN 1.kd:1C\2,kjw*_N1ᶫZ[Q=@sQ٤ jB OS32 7THYFMDr NMݲ΄].=w#TJkQj[PY!Gک}""& ٧R_16CNSn)b~B5ÜIrKp‰1M܈׿bK{.V#lNC%i6VӡЍOnQʦ_ibk m:+W-gL{#۽ YXCM~Dpa!>Hq<82ċ%JB5Y/{q5LIISXp5TT ;.9Ao MAAYQnxc xR.Lm1q V1ޛnˈH}$%f3lrpUiJ Fl5 SƊ]B ȁrj(ԉަg.~f*k ]ӶYj `fhau,YZk}%ݻ98:?6hk# \15+R LGo|C>_UG댔K! CvMӿ|NGʹz[kҼ+{Is<'/uc_X/ ^7g$'$nS]\kVvbh`BQ/G=/k? 6WXU:E wò@Ug)mew9fԒ\(gH iQsd~K+ ԑZ,k;ʐUe ҩ@P T/K:so{2[Y7J߱1% 9+ߝ vPK#[qBrc0qߗ$Y=߿ O~os{^_&x%M jHRjԬnb>tfeT|ߘ(L΍Q2b'VD\&L)c;bNc U(94謒5lRmɅi/GN/vȩ.Uٙ%.{2hI:Ie!zKbkV#j>o) [}mabPcMh+H Ub_|zrJл 8֜#[@WT2ѹ׌6qMO *ƴnIv(MBA6Lk̽8ZLO)>*L*o\& StJ|I~m؛$-#C. A.Ahq\H2!Hr?PU0yC#p\ܥհ˭|ZXUG7}k ^;t"PR-mӰ vxQvK@ ǐOЌH{#{;/a1Q+C,{oպKGZl UxڮKhy$V޽V9}ӿ+al1B~vB=TdiP02ӐC5hQ鋞.!YFWx9q7.ȔRD_)aOo=p `GPd w_ށB er %EI? ΈXx D ;q=p4[w3%Q|3PӍu_5 ?fb ݖI TxvqŸGη/G|vݛyKa =K0fUL`䐜VqAo`4"pv;d)gyk.reo⪻)h<;1,(c:(ՙ53XBۆW 0v*;GI'bԧ`V2ed-PM}0CG!Һss\a75u󖳅a|B+4:>ȫp 93asq=Q\ubqēAA59 AB;_-CZהN=-W9"]&QU50GSf q }NeB _|Ѷ,@Rre/}ůM! =L'²ANXXⲤ*9H]np|WJEL.T=r`)1#n{7BZzzɑZm^ w:̛+P^varTtjj.NDOˎx1Çhls~iQ`$y@ 1՜\3S#p=Px##Wޅ\Ŋc 8ټX{NLθ\WAweKsU| &k^N՛)A3̾{]vpLyӑtoE*(W-y[PV)?KV]\=-)R?=L(m; 2L$vlPSA5q2AM[Ry2$_ItOnAO/q2h*!RZ}Q`ym,3ܹ k/$\aTj5nLotF+^kI"-ta/ m1,ő1N%9C)ߤ*_\93mA xD, 5bO +iW8n&BQqOmGQH IÈ)dH|*"qYn+?iL+'&#/5Z"~l7ucmZ"*yI˃Cy QgT]ZҒb=<0~•_S?]>"Mҍ'tPkb @LS>-IMWck>QipaEf #uv uRϞ8+nuQCî6&:剖9?U7-gSJI+e@CDJc/(CBAQg)* C cx҅?p(Ve d5~zE3~·rb7C# ^iFU9ީX 9`#Nw{3wgVD'дBcr+B+Qh۲F?%eR,ޛ>\W0\彵/h o͐.XQ.\wp {[[4,a:g`\gtO #>J<.+c7`HvP;Y0|f9`C_q0PX2ZK - 4LuLBawtO'iV|u:%@C+7"=`LuTr͞_YbnOidd= `RT2Bչ-bKgkBSG%ѡCLf~N@6jKͥD{n[nP5t8܀es@\:;dc@T%{o\jF AIm-8+Q1m8Rf ;xm6,| cL =D=*nn R8O3\970 dZVUG6/pk%V?L*@6oz`솮]ie+,vXSR$`+gTg* qD&CÞ} M2ks+آ-' wV6KHk߇;w̓]PO#mŖ`^.#a\#n΅~$e|UHAu'~`f#9wc6D5 YL29۬.Z*7_Yd%|GFNzݏIF}n0ho\bB&S,y(FLGJ/oĄ\NeDPsh+KD؄W`87"1*B2cKoV A$41T[uI㷌U l) iV\|Q;S๜ Ԫ:lGJFb3(GUx] owśx46y/Z뚤\MpM1_ ÎPSygCR}|aenZSTWKTl +í/ܷ"g++MZ P ki|a!*_T;w͛-L?ʀfY isyD K}D}d)с3L@Uf#oMS-N':R'/nv@ PŢ+kvQ/\)WHؠC}@qF)6IlcL*>r9,%]odýYKp%:>l3cD6#9C}U6b U%I*]ȼR=@|;kkl472kO%ˎ}8l2e\M1=m\^(u5~H`V$i)JA~D@#3Ӱir䌭Β|=zRw6 my0x~Á;'=2$`{O%١@F2\-rrqG+ B빜O&9kQ7H+O,7|Jf[hiD#G(s<GvS,yQY2CWڋZw|ۤɚSMJ3*PNF?;TQxDw-x]?@Ȍ1q zn(Cxq䪐5b6#` P7?zSMMBVvHU>Wv8Z[[̜+k`H=,>tVT:Q!yGWQsVcX*MVl]<_@, Jb"񣃜잕xWy *ֶ4f%pX4*nl.|OA+j ˃S= Q/RSm9J@3$D>."xwa䆂:,2s9K_N!ovT * ej. ໲ls6Jp])tm-`/ J݇37Gexɫ{gBRdBՖ]{W!kA[.3y֢$=4X;!\N9}t'\Qt=cfLy6=,$ȉzpYV/G.Jbv;ˉ~405==D<HY? )_ "5CybH'ϰq,.,$WlGF^=eYw\P0_ K6fk7wIckc3zC0t*=Fݦ$3;C:0y;F!# e ;:(A䈚T7F<Ƌ+ qv2 d+ʙA{`JtO}rN8uDPV.O [^+ aCLɎ8%?=J7쁸a!l}K[~O^ 4/:M/0_j_Y>sYVnj6Q e@y~կW%a d M?A|eC{.5#cy3([p'j_/ Zw3|]x`]MSbkJ/[!hs?UK .گIc(+5Iv7K̙71AJ\Mj&Mz=bԃ1thT\?#"ƸDž+þ$hO8)aLO%E)nmUlx%P:rY$ɰ>Cu \! cI񥘬Lzh(nVG̪m4bEQ[@"_DdxMHܮIՆ8辖XFȳ9L@="@eg--0jԺXUzt_"d~m̾!^)T¿ 0Ͱ)2]̯6G2wWP7zSNJTA .3f()`)? 1=p|WGQ߆avzͣp-o!NKT46,zGE=ÂYKό-re\Ԥcuף9 @0Dɞ`3V,1olTY*H#U|z[X7Ru&j&%ErrTWHڈ̅r1zv#%I,\Co `i-QaeB}jgL͟nWcwܘ]KG`c`O)cTpP!5&Wk{3賴Ysgp Fݔ IQ{5R+G"(6W&u. A̸̧‹{fy! xg4lU/$hHgLRyz'aiJ4wvAW( bl1@;S{XAő׍?{ Mx [x4-:Wn+Z_-'gYD-ބܶ],ۘ(:?SX(f&fiL#IH%KԻ\8OcN* JȟR bj6/TzCfCgNf뛸N")._Nƫk"3K)C,fk ,fYXkwާjӯH?с0Hq-{]"vTŽC%):cCV m6bYI{БapN ]l_vpm@LJ7YZ{\%K)?s6jv<_I40s4XM|􆤝0(8 B~\Zqw TN8)$dtW/rP7m+y  Jn#;0a!3-R&%j}-O?:j-̗{p܀ {iG[oD3Ң|K#^Ki(ꘉ/Fھz| W#vP|>)L_k7[*Ȧ. P".}tԦ"\feg#F @8.d۪Y? 9i@^& TvD$D-a|kŽ"ruKmص bfR?`_=PnMu~nW\y^H˝iS~Pn>"[p[āh٠ʠ^Q|p]?Vsu2sG>a4EbF[+M {Ua&sL8+4qV]\ jAgNBȯOAlN#gcHK`ìё %"5fZ5sZ{'ͥ:F<8#͗/KF !I=\qɳv1U7xr{ T͆S( >dإ6+cLk EHep Jw53>1  Gh`E- $3[~5͓w~kգ2W㹴5_cK?W>/|t4䏥h(y>, t|{$kJϢv63 "#{f!&8ʩ7MDfb]Ɏ]ToK}x"~qa V8=aDӯN/}ړm/j(˾1WT>u3!>"_E$YV; \N$颃' n8q)utsY_H%fMmK k3Q7LJA*?Z\rN.*la,9%aF|擶4a.Ԫo v@I\ϻMl&ŴbABUe󓽢sYѨ8ym)A~s 8eAS#8 p~CPX~ xꄟsG|l7 ~Lؐ&l ^ {ݻS ғQG?vs5N;cő.ƚKY xfHu{bIYE3),ٗ†4KrnbkZ G.ppDo/iA=ҜRcg_^0G/`p뭙Wu _M()yu0q9ޜ11PDz6r,B#a!]-œl0ð<dg6/y b+bOࡊj8\KQH$rJ V"Te7$F-+q.-bn cz\ 6gmZ -v gO>vnLa%jZphIߎ43u G4 ==J=pQZ'ąt: }er,Få̍UT} -JXeDoG&nNaH9}sC NcJoSiS.kmW'*!2J lI_(j{=)\v|oG0nVqu`bkiGJ(+Ө%L ve9 1204a^n; >ZP ,OY$ߐ^w4Z9Q:8mSޏ#O%tr:~(T v*:o_mF Q>B&t|A)RpO5bVmQ{sᦕI-c+Jv`r6%RQK4+P4ƕ"˕.3QZoz[F2-E_:5q¨p+bZv}hy)֓_p6FGBg HI'>@w/oP&:MF폋JK~EIIC[`\mO8ZSk m1 v4ALG+R#61tz%d.xbD"kHHr;{PzM+솣W+cT)jEQkƵ̍%Zia>qs]ԃQ;e\x7Gt$>yUOgFL އڬQy&kky\(Li`g4-DBļ,aԁm /+؆lvvʿ6hYblC^jbs-&#10ڧ'w.kYe$:kvϚg-`l{Š> _.w_鮶H3+zW3? _im$9XviRPNrM㙲}͚ypi 7'PEmǫ!f06L=fû.lA¾G") |nE:I6ZEt !ak(#7L Л*Ko NFqM?^b|up1(bwtOZkL[5S<"դY1_J

$.bφ_ $.Hy=Jŕ j(6V? ۏkWŨW> KNNTs[Wr-d<Ļ\%)Y8K:$%x̮? ƐNuh<hTwז❭EI)7  _0+ןuߩ+ݙaM&L c#5 ^sC9u=hپ%3f$S:]*.v;޾Z\ݵExrդWuȉo s[lCˋ˩OYotML>FܟvV:g-j(@#iyt>m.2e a /˕.CateZ|Mhy^/ث7mU vk \.ݭU{EƢĤ|cO:P36}3ohnѩcgHg W(7zD$Jp{PZ,JDjJ [܈W q1wBz . U\ c N8eō # 8 Z!-|1Cc#fHi|-$" (X2cEDSt~_U\ʎ)?au)_7S+O0dD0okWntۿPPV"BTHM\I¢ﴡ?|{t+!!y('8Pwۧ bYن (Uwe̔@Ӯ{ aʏys)7kSav'J6Xl~R'0z^)Y2N>.pZ2(du G YZ