openscap-utils-1.3.4-lp151.2.6.1 4>$  Ap_σ/=„yW\.%2X/MoqN. rp bM`L6b)O}5߉ H5S"GD=A6U?(E!]x!J1-_&Ro Y|'4Ji07 }7Qs+Y^v״uMk!Ʒ4ʟN9aqݓuh5롍0Nk&Șb0r]kOTi>:#8vuGddc2f95577ba80f0a83eef509dd6c5678aabe054d71ea8370a4328569755e17a870d7ebc0a2f7b3551f3905bf7ec3d0c8c0b7528x̉_σ/=„w̫1YU6IX7b+V˩So58P92T|?B;TVJI?Ew #`ʪFT62,|SpX?pt0ݠ MM(fWNJd~h~1} ]`!S/ъ8".pthVdUkr#OzL%gR1X +Gǧ6E?s(Sco "~Ijӎ><όYND>pF?d # 6  ` iL z   [ |K@h(8+9+:o+=>?@FGHPIXY\]L^bXcdefluv w`xyzXhlrCopenscap-utils1.3.4lp151.2.6.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library._Zlamb05ѲopenSUSE Leap 15.1openSUSELGPL-2.1-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.open-scap.org/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$FIRST_ARG" -eq 1 ]; then # disable migration if initial install under systemd for service in oscap-scan.service ; do sysv_service="${service%.*}" touch "/var/lib/systemd/migrated/$sysv_service" || : done else for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service fi if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : fi done fi fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -eq 1 ]; then /usr/bin/systemctl preset oscap-scan.service || : else for service in oscap-scan.service ; do if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm -f /run/systemd/rpm/needs-preset/$service fi sysv_service=${service%.*} if [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fi TP; /^'aJ ˁ큤A큤_v_Β_v_v_v_Α_v_v_v_Α_Β_v_Z_v_Α_v_v_v_v_v_v_v_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-1.3.4-lp151.2.6.1.src.rpmopenscap-utilsopenscap-utils(x86-64)@ @ @@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.25()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.4-lp151.2.6.13.0.4-14.6.0-14.0-15.2-14.14.1__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@Marcus Meissner Marcus Meissner Marcus Meissner Robert Frohl Marcus Meissner Christophe Giboudeaux Marcus Meissner Marcus Meissner Marcus Meissner Robert Frohl Robert Frohl Bjørn Lie Robert Frohl meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comLed - 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shlamb05 1609420634 1.3.4-lp151.2.6.11.3.4-lp151.2.6.1autotailoroscaposcap-chrootoscap-podmanoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-docker.8.gzoscap-podman.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:15448/openSUSE_Leap_15.1_Update/10cb493a1421011526e91d44935a838e-openscap.openSUSE_Leap_15.1_Updatecpioxz5x86_64-suse-linux Python script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=b966016681a3c39beefe04d9adebd422e81e8dd0, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRRR R R RRR RRRRRRRI]חs:M4utf-88c8d5a0fe6be0941458f2467ac0c895734615680fa22974de48b11494dddbafb?7zXZ !t/C<] crv9uh8rRw^=qF}aٵ8xg;8Zh~SK ذk7$VBwVr-d-_󕹌B=dagW,孰̩/cY b(!wZ0;RXo$[Z5q'0gr76qX mSM$ю|&zeLRÜ3 wߚQ)1 κ¿ZZ,Ov(q/ɧGyÿ]= X zw6LmwT!\ܝ[4nq7]Bxo י@b<6!2py+-8&7 p i ؿ^yoH)+r,Ǣt Plr5`5>f%66":zΊJK8 ic[ʺ֑|V0]5Bpw99I†u‹95O?}Bsv{;mxMj^9엝<xg31̨IAE# QsѰ v> ӬF|4+9p]n;p,n$6EͩY? vgm*h*>h(9!!bYkAEg|YIB6WlMzM6$., e ąc뗽w`~ aS|m6&اvvs%pO'd<*]$ '07 2jl}1we[\̖<8J:@r6iWQ+%mxB( 3WX*0>#}s6,wFJ-ԩ$({k.͹|fdյ҂<c$+[jL:6O3LVlP~KYU@qQm  Tyi8$po_e Ia6gr_xtiXY٦aClPrwvQMH|!v 7-^5,D@HnM>A<5@y*GWjy,*ďlZ[|[ʊw\0"YOq" fr7gE64>iOpt+lReQ{֍ީ8g(4 ԨͼÎB0~h ٽtW 8^v(RxH7V}STٚ*}WuOzfcHT6ٷ\@|4mJTz>&;uJR=胕t`3n7UT ?{bUH,E7/ N$08^4=a "M#|aJT)M@e=>.o>sꢚBG>o GK O0UXctl? .yP3hv`̃WHtʫ]o9clJx2۩ )5iG$B%{+KwH֪iF|C&Dqw]LlnKzl28NXPs7[h?*[Rd3SBoPdɬqkbq=~(9o cI F {y\>[dȳ J:pz"/=Pk@:>{+(Qs할1jN$Zң/>=7t(*WGVwq=8{J 4@Xk[_fєR"VGEjzNXQԤJ@xo7Ljy@Vz{U|5ҫZmuO!$-7TN5VLӞw 5 VP?sHyb)C">o{Bj%W4:!WNZ b/4[cul.-f|$ѱ۹&&!<z݁ m j)%V?CQq-U˖ WG5H/[H4dr ɟ6v蕮Ok?c$\ZFwwaA EM({ə3h^RR4jpZn}p'U/'waYMv+" ۣ)3~_xM%˂pM@{ZxjAJHMFB2G .T0ODn!:T>L^:7O*3^>rC+ppaAט\4gzrRfQˡ Z.^j&vda'[X11fb]L+ .^|bR4.4`XAg][~I&\eHs¶$dL35K&I +i@GReS P-8OQA r=Q W⩄ZCq:8t0ywǫ]ykj*W Tq@EaWf\]bX,{Y#<:gWvxК ӏoڞ)P7(Ӏ9[o8x|cAņmA.Ȗ{?wِ09ڻa#zr{^Z'gc>ĝpI =]M-w}6'h]¿w VR&t5ًrNWA0xYw<8̽ C!Z[jS Ln%.yLk_/r>p=6H-inI~j7/UiA@"^h5w{ݲEpVG.(̠YǓ$Uݗ.Njˎ j3Q['2(I$-{eQ1Ӡ$3zï)\ u.GJ?3<)~-~=ӈ$HP,8g2NtSIUIutH/|M6Yl ]Vcr>#_*!-2ϞYWRLP$5К Eہ; >qhWm&c',4[Vꌟr.=@6έ|(ؓf!,uZ;! zAZEѝp- J*5*$RPV_u4X]d j:O u   :kT,!L ,KW鯌ZD| j]|JQ~!Ӊ8-#s&=UQۺ]CX]RnK P9`皑9>;Ue:اN|4uUD9Jkɐike;zx݉t  Y:tؿկٺ s(/@JvћWtNQ)XD1,[$z)I. 4+xѲ/#qk͝=z\- ti l)ZZeӯDYλRNs4651&aȋsuO:[bkƖq9I gIɍs F/[4xAwӮʍMwG?Xu;&+t4ЋO xM0S2r,/F1 |戙kIs> nyq\K g PG֦Xpfm'oׅw̢@))G͋Z4o-$R,8G }P7q/"vw m  eJp?HR7׼KVd.ߋ3FB[r$ 2(-UbjT"OoUbA\1\񨽬uWXa3.G-/ *>at_Xl@حVQwWgݙn\>V hQ? wu6.MDa@J̻?:½o|nzjEsOlx4xn5wV;zHѕ#q$ a1VN~+-~0R4 i9ԅ9S/*ۓV&O qؔ"_Lb3:ևkr߬ ¹yáy )m;eP byECl4Qm:`UH=XC[Z>ee e8jFr#aX2ijC iۡ) vCL~L26h=[:̋޵=/*^]0 1}')F)-@vwo=wkOمI^hb9?ߌa3)ra {lΫW.39vɤ{jE_*dHիJR?/I$ ޠil|q4斑N RSd')F ̵L%䣦ڴUP50o}|BV5NR6tkmo"COIxdy+%;fqs|ur78&f7An;baKx63P$kT:gwh,?jAWbnn2+?d~z$G<_g _>}1CoSc).D6gt n,7lQeUU\#,thuI?|j%L_t ބ⤯ck% 4A%9a[BUNP`2s]JLg]W$YD8"o~0,m@&`dkX*+pGC>* I<νv*kWi(o[g~%K&|DlBc;ϲ؄H̯pPkBe] ?(3!:11Z'Y\9yd+fpFrW yzو l L P=,C * wHXb˛? h)u/ ( ٜx3#Rt{(ȸwza,$Su"8״3d]fsKM#\̴cV4g 1k( -G 5Nr$q,lXLѭOQVLXr~V#1`jolf$VuzUYE"%*Gmˍp4Faq5҃1S,lQ4t[]1M?ّ(:oJF,kb -t]IRxS;R-F>3 glLGufI@s J*,sK}CUʞȌ߸xtxEА"ߙ/ڱ_0sZ8E.zW&oW'՛_\>)cU`fN;pxj3 ҄ƶz% zh ɀg1?SV`8ef3L~{q@3-WI UJ~gr얾S&\pn9*SE ?݂LV&w-^aaD"4qS[-ЅF`> F?ta:3֯pJ;^H}] ޒ?=b&ȹh1ҩ."(ezOݏʆ}HxT:b:)ak%n`3I _C*q V0^: 25SY9!ϣ5I5*/C'T 8jbvrAXڑLm{42|H su<פsQHa` ![lѾ@Ef8sq,i;Ue-33?U@S=>IEAo_о&]Wă yrhxtɬܝ~,1wgAHq'^rs| A]?W%3ǼĐb^Xd58pźűdYhOy]0ͼ"|'[X~DvmŬb["].9\gck-@XA_Suc94Wʼn j$Ê6 X;k  w]C@1'UtcXYƺޟvs6} y=m;lqz^oүiѯǸNG(Rqk_V#u :/*!%ǚ $WARea\OZgcfveX."P[?YU"%/<:i.Ё2}tv_WwfILIHtLlJ|5yҌhvR4$]GmzAXG4NЇdbpds_?8U%#^/yQRL[i6e(w,?E,5U.T4|k=ᤫW;t|=#rvV^޿u?fii^kM%J0;z|hQK3r"Fz 96`o.<;+ǁ`Z`M|gq*!}\S N{suڒ9)blbpf٥t~x*ï y)=<4CG*i_sjmqSyАbD-w ӆ%}G)JSiRX# >وi?gZ:^uTH7/P-^v48f5Lg{܁wPu0mksr _lދ'E>, ֺ O^U#Չ}ƀ`{@<}p7I̚^PЯ$>n ;Bq*Sh7&Q쟒@RrZ*qOrUk̼mQm$]XBO='s S;?cA9Ù7Nf8F uBČ*0֢%KP:) *[A.?Lzk b;*]Db|9VJrWÖc͂F WlMb%U_zf;8uF zwGC=ؖ|FGR65'\w_}% u$F.?FWQ67Cv5.bћDhZfO K RYV$[0RhDc:6ܛTuC;IQNEy3) yx}YB?HbDn>Qdst*A@^|Jh{h akf)2+kltxT̨SwJX!Qӎo}4qd2֬ kL]7.fL:@y ܝh ܣ(@ mنQ̝ϴboV:2[Vu]Roi7 bo"}s%(pRJw-yZK,9/taĂ{Y..C(}^6_]/KC1Kl=Df,hf{rݚxbo#$ܬ86Aط͑bW鸟ˠD%E2+X>L_!ʲNGq7%݂yC %xfnba0|VBQ,E*{JtD6a1 0A͵l)%.uMa6*PlI{a2KOZ(xnE^ 8CJ5NM\2'1YW'0` vG!Q`^N+(D򀯽J賆nXGbjnxE+DܽzfHG ,h0ڰb;W^V%ZN=b7/lwiz۰AqF xYpp%u">-!V޺w6і(+e.j,9rgXlO:jۣdlP/®a^|湪#JB(C^ @<'sj&|zѩ^C AY(Ayad_UbmNk`qupDd_sG*Yopv/OiNy>3Ar}"B{ G%rx[?n"E~d74Ŧ)l[C+JW fI;`#S _ !z` 4+; |iO cW I5E#y‰SQ56V??q6YsΫ ajF k a6-8 &u] ُ]bzH:N_"4{_a]6nOqDF #8PC^Ά tH`H+*z+I޻|΃HbL3`.naD{ LCg9YaJ6iY2q/%NS ;E{=hȢC#&e؞"Q؛+͗\trdހcw120.i'3锴]R6Cxp"Ԃ0Y_*GM~=̲m>4vIS앶}$^G:+d1PNu%^בњ6$%'[-‣$t. @GN_yI5܌0 # 9ob׋#z)3ؽ2Koțhv8/&Gȍ`0BNOŧ%35DchYSgzrlYQޝCrBΩ i']B_O'^U,1 3+aUJo_DY1߼V,XqZRD ̫{V5@`C3eh4A>Mŵ٘z$FAvXJ뚈daBOD:;}w0FlR D16.p<ɬ5T ^/Y'NٱfM<7]57& V.~$|u6'G-W4{oD'(o9[b+pnЇmn@=^ߙzT<.KWh6QW@X*"3ӫl?&]]{jj_*Phxnu '|='Itǧ]-n/._dgut$*My;ġ ,%(Գ,"DW[%lY qi(xB3|)Cl:!?^ F/`7sT+`!qXoկƱ{ukZg*jеkZ 6ñձd1RXwm+wPwՑmHQswjZ3Gso]&iЌY dRHޝ|~,;m[|)٠m*>u[X\JFűTѩvHjG>;%C [d)=a-!>Z_m aKVDJSܻZ.KFu鐊#{sGLq"9? s[+4r9aLG}`P{ImY3 Ki-hwo튪J1`[x[`ʋy/e1nzi"oר ac(wS̀债JM{WJE U}5-џ}6Ijex5L*+{+TYSY \ *z&BI~3?ǚ{+uץ}_o >gk)d:r7*bvp0"+Of2 @TCuxmr{W.|GY2ZD|Z HT8{|(bi,үxeYx}i{e1 qnaZ q:~ [Zi7cɫ 2/ LBξ U:Z8   `_P)nnZqSKNGny 6= H@*\qQYşqp'mV)D-95&iUC^<}xODHx*vKcM0Q 80 $1%Mߕٙ7S:63݌cQ%߿:D [+6h_H,]YDho/M,mЭZc3~ZWtZzpV} 8UYN@&uqº{1d )àf\E26 RQ6gbF0fR{|+['p{ڞ~GӨ%K_D1M>GÓag?̹-lJ]n ǵ-w,bFnCg)N×+O۲I-^=xOBh]o~MduF.*hK]<_J+&XJa$w5EoHy>J䙻%ݏc W>ҪyO`CRg; y>tUNM`z`^~b&$ₖxe ]UI<9KFRaDȰŋ]`+D))SO85ثNx!V^ f0TD5NQ}&^ FI 6?WxE/,F8p]̔܀xl9\@t9e-v 8ð^ H4/ec24쟼C[SEJ {~0勇b<[d)-xz#'FU. m]aK;WG$^)v@hO†eISd#bbJ97=ZZw<4u". ?y\)L]J504@ehxEy{Wq* Vx?3J;3ƳS ~ E:^=y#4سXCls &. N5jAPL yCt}F镁6۠"?xioh< _>@GCDxEt~'&(XvUUb >QvN&ݨ:Mctuo0lஞѷ%Gx&Ȋp:5G 7`jwy-AU>[:T@ʶsa8a ];M.@\ݏ2dY4*g J 9G6H(ŦqsQx*:Wȁ (AT,ho_bb,ϛI#Zs R+79N쑽 gDR&+-@h#!Z 1 d^y;CW̱5TdJwgNZ?:kp'Pyil.(FR~ZBO/+O@:1˖(*@#HH gחO))[ļf= Hj>LȰh9CZw+ /J̎NZC5rx; i݄Wa.' ׷3%$n^"QnKV8N?17DӼCg [ <ɑGwQ/ERS 'b-x&*zN*tdi_|5cgޕ{êH\seypwt.,#et[fenI/VNN#rkAS_5iMP!v`*,, p$_G;jx0E T gٺ 5=: gp ]|($"AvOf9@%xOw⪵v% @-)B.QL_>8'57;1P<@ )bĤTFGm@[>PtD/1r++9Mi u)l^239- b}n%6ͼ9Duˀl*>iJ^kw;>ucE"j-'bK\+r((@홱# Ta3L=a/ 2,0W> W ebŰ5:__l*dE#(ۿ\*aCf'Y>VѸBhϯE.]MTdL"ѳ7ہ\vuNS9Mu t$9bn͔eU9u?GӰ楻,|7]* pz)= fG7V%ux؏P%)rߍtl[`V4lUe]`ljfarO]g]nڿ%,Vx iz,\M!Rcu/V[hNVq /~6(4ŜX.ݡ6֟Ab@,"Ӑ}Os㟸z MH(uY."V{n1;R,N,y %Qy R@?Ec/`G05PK[⢭a:q9 n@ S٬ }s|͙v{ce0Ud[7>JK"(eEpޕg/;W)8\/(LңϊDep(ງp!I0݌kwy<*ɪEèUxE!;wjoj] oI$26;x`}o]=lfOUZY4sd`S*j<_.yRHMn<@l`& m6$ ѣ&=ɗ>>!fdir2?Ꝟ-AfpX3k4!a5͹STw7!i3Yf<ޙ%7%sKt&FS }fCHƾ5q~p+~)8H.`6F4/nebi21Sm7L՞4&D}g;-\$H)8ʠ-/vbd!D%"*ٺYJRャrK'; lxmF 3vءR8GQG&N\vԨM1TuGFIt,0)(l&LhLzf(M>}HΛg.ʫ~6o!Y> )Ԓ=sP2gy=v>$Dj (TΉ~F[lfË]7nyϸ!jRIeܢej7^ H&~;Ra惩gmo;SmZTN'A4|=I3~#%h(>(+sܻrqȳeIXf{E lc Tmj5+>ϻ| s{p=vŃp"2zRy%#v #~7nӁ3k51,K+ H6aF4Peh߂m]*4Jbք"3W?+hb`/=%h5?lMF{k2ȃeZXt?C 9ZANx@)${Bƞi?Zd ZSC`?}d{b*զګ*hrR{- 5~ HF vm>QmD1gHlh& 5^@s:we h;Is}Jz4pv ҪuF%-6n2gt%0P$2rm^w 5p_dsy|8dI9A~5'X%:̗Sc sT;h2 f:"f.ںÂ*;!1,C)ᡑĮhkTp1v|#lOdёEFx{}ZNz DaFEdajd3J9;lmrGHdQ8-ڜGުϛHHG$a3I_mΒjkfǿ{k?u3.ͳl&IfЍf2~`4vk;āe`;^΢%!F>OE CbQf^~yZ6ydN gQ.<0k:>Ӟy*@E#áhm!XxA~io X]w80GQI,%LN`LscWJ$ϐ-}\! 'P wU"I}?>ĘfR0@^7|#\9f02b:̕mԌo*9L'9aΖE.EךTYƘ%I77VB =ֺ{҉n`)#J$zD6ZMJx&3t !LW Dy|bǛSgen捹uWĚDb2ϲ#P+WmQ%*$BD 3)c>7~ٝ{xaHe΂|4ȅYD<</޸cv%>Gr{b6H7OTvꮹΏ|qړ.: l¿/^Ea#a wA;C^g% ?JnXG<~&c9 &eAK¸˥l=l/$&SCDed'2;FY0b+R͛lc=ԓe@Gp z5A;-ݥj4/_9E]Q"O}tw?̻-~1%:N$n%[1RPZHƊKm#p}`}~d>;uetR>96Ep% )LB($,T=r<sw JWRe &s5MUiihU\s)1b3^7~Z'ƜO?ܗrkm hl bZkɓÊQ!^QIOPi %4 -35e\oۤi8a?ĭk9F4&Ŗ(%g9dEji+1@uz$"{&_CfNbDx=NlfjXrw#L2 R,5PO3~uv8^MSJ+#waTN8(rʌWT# f/*)9ڔ А(@Jk@p`|Xh9ll%V"@D|F5Հ rKB`O0 ~B%w)"V/(e]s^`̷6CX9` m)6i/ śxנ`b`2,2{q(r7c>9KSq0\6O q"2ThikRa<@Fi7n㢄6MD4~'#ƣ)}s} QY\n = #ٮ`Y,BA]aIბ@%S̭0o-㭙44X6^OnK 1C,uQ1A굔#A3%9N#]TyȘ8 ѹu;bVfj$]W+tsRf#wͮDي tȴ*Z!U0iXR|~WF<+5` tBIR'^®Xm:r{[(o ePd|B{yNz;4eu˟u#%bH؞:*bIW_1\lYj@n)1)J;@u/gT.M,Z4DE6, ~A G>1g"rkDpx cP + m8OQ.o; ]e܈(]She'w_XO#b@2b^ȩ*Ӆi7&^YMUNU_zK,/|+Gw T/0 S)XiV GrLkޚQeP2̋{U oo/VIr]/4U3vGT~ (e *1G!B^|t2p_YpXuA/1c|ɉB`Z/Z(JeMrN#&2@me&$¡Ꮅ* ߂՛XM7VqiTSlD -SCHjC,4m_l@W0U2 .g^B+)璍wJA/~֧wr؃vpolwVȡ{B`WvlÝ I{`֑mu5"ɢKaŚuyIJ^]Cp+VS1_@lOwGFEY bxmGk\ ~na޾( 6Y٢CA j2Y!ahU:}Edrp~h%X^ r~bP`: bڼ )aJԋuȆeΧlPnpG ,F%@k'w%N}4+]?"둀#,LnD1Dϑ#n=Tj xjC)]!`/J x9a|?YQ!M><>s5 aH)Ԁh%ֳҿTEn_ilſG{?=kXEB\zwi<盄3k(V57jm|:u9vff<ՊE iRL(t|9i5ZGsOS^V/#Z\v!f3_Lt-|/S_Q^xtIgJ$ʗ'ֹk 2r/4G^oIXF-t<9dU@]W|ښu*(Ef: |p89 1_je,y6ejoxa dRN2 L>0`\@aF.ׁ>:#D:h C2+BwZ'=yN+/RT.o ($-t#H˯yܛV0C;> F( \Ӣ\UGWe H+ׅMb[nK^. TA7)w&K]vXSR3-U$oBO%B7)1̺q1پ=;ZQID^6z"w0w$}'V*Gre uQaAQxbD&$L2-6X?/Z^&dp|ӕ-.oemm Dh( ̉bBHw:L֔0hE.N4I쨡٬ΏcPdu]8<qpT:*l&_T*7Tf<=Rl;G4*@Q9]7p`01NHwFg8t.v]Wht+}WQ /X'2j 0ygcmǻk2Ӌj:c]g08]³|r $-ܰ rrY6`SQpI#yJ u5nZܵ +dBZ"ע$7`+Kd!㖁Hp7(u P-f7ɵ_Bպ*R`pdwBtQ _ސ+G-o l]RO8kg=ʼP()E$mJ=Q?(?rl#Xˏ̨䢾zTk[V͎xg 9cU\k6F5zw`Ǻ+ZmT=-p0$>ԛ=" C:Kҙ{sCu9g!V x:lkI0T"Pq=-\A,|'֛pK]Qg, ٕ FCvƐAuIJUp9 W?+Q6Fb`rD /Tj+2,;86]G,֪Sϻ15}$?6B27#beeV7aop)[$H!M^rB=p]sNO6J/^h‡.]@Ad2ǃqd,6YFd>ʥlMjWw4 {cL/9Tjܽ#U!)+˻$xa}t ٷ%ȢYO_Y_/;uI'g-&c1J,K 8ۥ89_o{OX3d^K`L/]ŸUauvl(mfG,E OfzV<9  tAX_SUj5߂s'|iT,WG_ɛya GlGtqɁm&'Z19i䛩,łAuo8:f[ihF0;tdŅr)/ ڇ}󃼭%umϮNo7*#,hYovJ t*e+57¼ %Jp`0GO!Gep҆FIϫY|̊Od*0iH.oTLd%vdME4cW,hߌ~Pydǹg6l(MCFӖ.FOVbymX~3 lSBiqVŢS8ld.wZR&T`R<ơ7- JSwqzAXe@H6ڒaBFpVPx1gTmW Ry[{]jDSMHB1>:!vW|eq43(o*Tr8@u91![u8{Z2 =`|$뎦iv >1Mb98~M]cu_ټ3mW"e$_&Oųh3gHlMxM S}ZRa!B}&MpX\4炽D2ف*'UQVỊ45H|2) ٭Ĭԩ㼧_f?i9 /F4@3yqlY~+SWjG5eEPNTE}NzE&Z #a[X.=X#;i.zoYx;P@5ġlw$ћU%ZC۱9j/ HS$ Um݋ qK;nzndP}5E,pH-Cô S`zdOipGG=6?1 p.Z#['5#A/mstKّeQ\H[o0pՐ^f BPI'ɱDVh'K$ tJko!oO+8BZ$J7K@zoO'd&0?VAZl#'91H5Y\k3QTj= ߖ;UCXkhgvH#ǮD%YL`٣>tO:NG&m"0 .﮼I(7!58Ʌ3]*6^@[BK:E VA=&}-P֯ńxhY_ܚH ` ޫRM.õrBh'T-,ffA}%51{ Snq@)8 x#.^64GYm??6`\8o0UOU-~/oOv%뾇AcSSS>F,S;jۛ,2x:@CE nxl`XS";9Y4> EDL~Na>ÌǾ `V  SIM/S2 ܋ l H:XuJk#HlѤ5蹃Am"j"SRg1$%C;8(7.$K /PXjxfW-^KR@@;zX9oaɅa)O.țks;3#h4S3uE+=qW7D08<+f\C %Gf&8@'PgH/pPfܣܚF^N=6ۘ7oF37oq!C{~%QlȄz@v'\'x1FcSGpIt-Ry.y؆YPA9+{9s1G$GlbqFrk yq8*\f8&/+ wv3pиr/̘ ~;k=s;"P ۲W1a-z03f+e꽆CqƵh C'Cֻ<1NJ蝊P& E4E#歗{>T{УVE!>U$-7/m%c_+#gm]\`ZOq52`7<(fL>:(k:!SC4gY*8$Q8}d9Au",6 رVeJ?ӃiŸ1g pB-дH(-ۂybB&<3TLN{.XT?]{ 6/ z.է**x_ MPm]ؒ*6jjxa~eCI{,bg}#ɰNgQ.QvvC\W';=,gm ۬.cwIx6z5Cp畈<{rr䟘Bt!9$LXlփR45Z|7"4hg T|i#B#IV"zUH€o8DhL$Uc,1VfDW"t9F_XҗfV#:[|{tN m}UvKs"SL]Jx*w^7\~}D+#:q yӨG7%43SŌ&ԸuƢ" yN[K$vnQJB3[_1jHq*͈G!AZ@cDsyI)X^Hq Y&}Pvq_]N-&1tjI87=vg+xsufMՆOmÉ5 "a/jPDvWM`#:*=e1n&NN"B{̗ R:BnU>0$t|E|W!ÀWؐ箁$-=7_a}?=h{Y̟?"h 8yu9YkDj,FvZ* ŞVݜkwC P0^YTKZ L}SM+N&{ bsf$ɽWctէto?''ObzPZfocw^ոl5R!Ḱa[)i+Vq|R]GS:kq_ȍBL#Z-Twt3nJ7%FҧF2%hpNڧX%eCyw6; @&0ra&u%tJҢŠG5f02yJ H#O `E?b]Bz!FY+4Biӝ00IE8 9M!IW2a v$l!!ZY1/y 1)љ4qw &X.`O a, BʺWT@%jxauvpfu0.R/(U6jZ_a-L ?[D 06Xǵub܃`h; kr,ޫsv\hݭV)s_4J`:|>xQ#.;E2.]nZOR2JhQE9ӇrM&[F7 cs7:-xIOqun@[QVyloT֣6 RT ),6l*~%AZњ\'tZeHTjNG*MRi0:^^V5$/I/$C&0kT/# ;5c@j^reɴ1N,w#}]hWߨo; =Z!s42y59NF[9|@ŚK@D𖎢\'EQ[zc ,O(^`_wz=uFEK!ٓEm#þ!!wnf=+p߷8"(Py hZ*76t. 3\4<-cNjWSy~Ƣ?Ptju{K3{l*I*]d>y>(w윗)y6Lk&RIj}[n޾6!5 v LռOϑRMyz7%C8*8'$Ə"礤^|.?^=,B2U%3WTzE_ lӎ^1Pt=E%Ӯ0( &~٘ ЂH׉I-K3IA¿D}මRwJ9VAgE= 1v&٢h`ek]jҵ}h=Aj(Y1I&`ܟ%"p~y%X^7JY=vZS|Dž{[!ARGpkXpնj5B5X\C'Aj(r?Og1pĿPnpH'M;o?uܤb,~s7M}=D51Ź2՞FsWB5ʟpbΞ9'Egk Vٴ-bu փ~bon[t}=Ař@D@|OkI䝞GϥU!ec 1?K'~'M#WSIwm:Cz)JXfIjAL?嚳HAX-B'2W4VY=qj ۷_FsOՎV<_&/LY(3!At1p%(>nf "&7+6F6bt?#y$x*2ڲcvyD_zVCve_Shp0\Va6;iK`;DuIbu].! BKb43cYVq] ޴D/A 5(XjH;$ 3COr]Қ:ٯ;jz(ԌQIZ42ړmI~*ͣ}FnwP *%K.sDGL\VLQ*WVz@ʨ;] C_4lҩ@u[DJzH}p\;awior#M/@d͹@!0[gh'zleŋ&>?^Fّ&#`8 c׵.w PŎ2t8O 6?Mf' ]?+Ko2/drŕ7B uH5U8A t8>-Ư\91F3ķ/nj[8k5+ !jq<[9(,v::S ]5PhӃ O#ZFHfB& OD,kj*%H~-MuE蹛\ :q vxs-k<Št),g)[ Q!Oh3JQz@<ׇ!;X`}PԶB}"4[ֽnFett;_ ipo @H-0[.uyDFi !MUnXH4Q`Vn VPOүjdO 'Q(ʂZ {50WiNVNO-˸qb0rf6rHc(Ve1fҋ A X+X02wآ2#s<6ҭ1xTSPkl?Rt}a~=pA\:_Hy7͕=*RtKq~`Np I~qT$b#FqHNud+ I%~}x;8*|g^>̖8Qeo*AÇW3.E1W؈%h͔tF`B H ;0:IٟB]9ct%,KG95k7O*҉Ol{,VN"8<@6?kªc"Ϋ8a" ρ:VyŒWL쳘+0,p=^>a<қ{0~qiNq mLUVB h-ykoz?˫ N `G).'} nGSN9ð(e(vc;p^ q_h>n:?e#6FA6%Q\}"PjΪ v[tT̽Y<4xZR0gz'~>lВ8NQ;9BM\a>)s)t P`"CZ˙~I j޵0 ׺z.-I,csr$qPtlm"XƢ4PSVfFS_o]R gAGonlzPzu962˹KiYo*,@:kuk3Q]96Maw M %.M9[z#&ab? qCd Dz-cܣ.IdO|&zJ]r&=A.Afǯεy?lP<YŔ`L6T^X{-AJY g4XeK#l߰AGN/8*zKky I;eRM # dRko6wՈX,>ݨjj2A2{ x"|=cب%;Qkmhi;)qhkQ颲RyaH1^$s;diĕqn31SEiĖB^:hDب,GӻU6bDKX@bN{!e.*ͭd^Il_BՈٸ=f W!b(װpd>iirxt#@0>K=UrK':_aP2o(WdW+ gv0ʖF43#QLYEkWlmT q_28UJ[7W L "*93GAF!oL5#\*B0x9b}Ŧ  #fFϧHĤNP<9ǭʴ)nH GfU3#)LKrp\􊐸{7sMP@Фf1~]Sɕ"S|rmDJUyWFj ؝H1a:y&8b%D#M&q!4&pptAeS`ZT+uQ޵'O̢XDNvRͱ 3]CY }-‚Z?`b?L?J~cr*1zrΧFNkTTZd&FPDڨfr/wzӢLkwq!XNe*2M=]LkGpo1ERpȡ)v-f2r\BJ[oXNr.SSc<GgVe޿"r=7D]W~^[&ETћqC  !O뭡CY`ȂdLYL8fa;VHKr쨭 U峐E[m@١q# 9Y>|\ y6~T2fXy6~dp`sx|gyԓ TQp~_^j=`F_ !zo'IrK'W^itӈ6]hbtږyDBek#?z^4 hF}ㄯCˑO%LJ/GA*U{Sϰ'J?j6lƮԮlUźQY {^J`J#' }~L*LPJ$h=a(>yw't-> Gv2;n&Oܽe#ٶ: di-B`ٹ,v!; @b-K}cGC= ݂VSgеqdxS&\ݪH9mOZ̝GgȔ`rGV`fOQM8鳲ÙqY/&{&'Bo "9:f}){p[J.5Tk{/UUY#šIJfLBWDOTL#pl%\4mnœDn2}*(O3Z]{ŵF o*5.  F͵ &:sv H.۽4A TtbQyτ #`k",+;t^ujLiM3g ߻Mc; ^nsc,q&1^etEp2DFH8[c3n? * ya>Տ;!p93|Ikh*i~/9GǪ{^|$ L^ʙQ;m}*z@#OW+kLuxįUыq&ԕC -kпzPPMNb-X-B uO+,w͠`n>͉ݗJOl*cio }܅:rZ]/H)tDgp4o*ZYy  Ѭ p=fǞ67ǻHhazĊp,0"X[Up!j88_:&`([Ws:1l vjXI;wBe&hɚр6T8:Kb{DWu+>MaÇτ8DԴ$&CUrqWկ*dk[ cBWZS !e !nful~ZqL3#}6_o]/ )Wucn60x~hky^*?va?IzSw!SD<%j xRII l2""fd,Nh H p+4"6q╂ƨ+YK%A饍qՈ$w˛h.[ N[[i81,bH?>g [ / r=p~$EO^F7)wM"lͥI{?i w&ZtVfDIGtٰ`ϪsFvbV&<溿BUtA6 u8t= U,I=L%eF#:8wo1ŗX+.hk''2ץ=DqLї e\ܘs_`E:5$˭|g [՝bzٕR<yq5aD_BC)'W\/)d܏3tXc}-K rϧViF"AwC QU|r$4ݍlZND'~^W} F'na-εjaaB!Ӂ&5AG# ;pqx#]=z냿V}:ņ{ xGoHhPױs6c<KOڽJɢ\@ڒ_vnEUQFoz%|[M6Z_=z/ Yu2=ޗwz̒`ЖNU޴у~b\l͐ 7jf|>.Jo\),drUݘ;W=]26Gӓ1DZ <,Ip9w1 Q7XZC$[}k[L.毳{7 w.A~M*yK%eɂ!rhxyj;& )r Su  .`Zj-ŇsM4ݞ7ZL ?\ id&R놠Ss d2')Vl "fhL@ap VڟXը&YDK G|~k/` @e'W_bOUR¥tWY&şvn̐ml5<A[ .I3%\gRl0:e@q/EeIjk$AL!L{O 潔 +rw\2+y7lug-h`+>pG2/f^ vy }!/:IB (a(<,7ns+ֈj';v ;M|fޅ$ksQ.'D;Dpdۚiwv{ _K-e/S2JzΧڜH*ۭ6Iv g|!w[pcAQGC;jZ/pncZMh55S۬NVJKƕKJ&Z|U'> 5sURN4r5}+Q( <,v-ͷn+1JF(8E(oE]E\M|Œݤ΍e2:qMUfkp^HNpc\Lܫ[}ɑb [J .[Tx^f0mؗ(VPt '?CȃQ[,L ?W#R-&fYF>-IcJeIb7H P.OIg۹ȵ9cC%,ЎmGD#| t8 ="elO" .#7¦1p# QF`ᢳ7 '4@k:dѹ1FQQJ<Kgf "{k /b&QjTYp/I DIV?%F6 ޖ5MY0ʆLRW(kEejkF^J7 >5R]R80'>H_ɥD.F\Ǽe^Dvg$(0]` VԉW _kпM_^ `vRweETU ֤ܧ*'d6g~Mag(|ۙXPx?[Sͅcof D ]6аmf!H.wϘƥx]W}/,:v\t%0Ǣ ܓb)̶쌈` +6L }ăP-˶DC`3AfuVd,˴tfC+Y79K{erXĭOKQ:59 u`.obhu$y@&LkE>ȶnc^?Yps!#(4Y~V6a1So!3㋥Dilu:Or!+E]:?",MPwڣGVP""wmK>dN=0@,zlXFS% V 2Eԋ;8Y gh~J#J K;素ܲjs{e ID;Va (n'*=rjq'EwZ,6Fi~@~(k?V~͌ bT/ю81S+nwh%.T; .y$.NŸ0yi"&#Vt\ JIeud)GK1" 3m$XUcF^OJGˡRc _ږC]*e 4cވ {th 8 D*ϚR f|y#{TSZ{$_OQw 8lD+sT$v_,"1&rb fN"|d|Q.<E +v-j|`3s,}mstIAuBF* U>h ܌N #n4s)]qk)H|bxskr;]VWXΖ4PbM3F?)ˢO @K(վ`X#ZMF\ Jj3qޙ,X:DBm}:{֔J ,'MJ7،UN\ͪ6MwPɞ&ΡT5jy ]Mt(dt'&%}*Ot ےљG)o$Z;ٖSy0%e PQ4!}:F`~HjKS -`㔃ij4F(?pG DAg ܩ^O$]iܪUEu1)1IH/H#f ʑGj*wP!Piw qXe7>4깻ei{T%b˭[V xCa^t`s,'ʙV*T-)ydw\ko@Cnm!.i+֊ |zGQ" Z_3 S `x5 #\_C\`3hJa%VpuG$ٙH 7Z] 䡷Sã*狦rC0oJ ˕hxX| A;\P^5+~+3,۸4ѣX/c~R6 ,fa]77E~B4AC!di1'yĬ]%i 4am4*[IP6 ˴, rwNsS RBj15\;k.VB[lX!t/;lEY hfؑGnT#EQ* [J~!/ПYJGڋ_v~l*%zʈ`nZe%4=n*r%?qi}4{WbRXo1p.{5BWl~ߋ6/O̾:hXs@:cDeMO0_z=cRi*LGK+6CHtUE@,DƊ#C# lx"M…w$ {uXhiX Ts> spY~u[Jh>~~Mjly1pM1QIvm_3Գ`ZwF o&naw_ĸF Q͵+ %vΒ. |F5\N0|^ͷہ{nv2ǧEU6b4o\ЁJeώR<"U;q/&t!yYKd+8Yj(_e{Guu3adȽ*ġÂdͫ-c9.Ȅy_oE( ~-65*O>T[(tno7k>ˈw5 OzYvLumwT>Dna]tW+U?kW@۞J" ه+NOmaw;6D+r۔uIrLF̸fQ5JuNȁ8!2'F3rp qUP 6&>!rv;c2R}*ܨUP#cW!-ky_8_=T=DLO ۠PK.VŔ9 t:I $f쇵-lB-snĩ7mYB5ΧXU֙]YSi`$ބ ZJތ/*+:6 ځح #ټ^O/OS,)'zEDA.e*=cln\D,[i'TQ76rZv#d))(jsL*ΠȽ.Ewf%ᷫ L&ܦ1s(i5 Q*o="zb,269h]Nݛ.@hkS[%1.&)ySQh*%g^؋fu%gΕ~kl̛ RW9-\ӹ8`6xcڷ<b\tnN_].ӿgpgfOt?4R*!k^yʁTE;nٻyA̓Zɯ $zp\K+P~3a,XD,AXKHOO֝nP@iKU[Ywnr2s`S2k=E DO<c _ hJ-*OЯ  $5<2srA8`4$fʣN,E'5|ЙOv²vݍ}wF¼KmV#Yžsa#Eج bb9*=PD:8:tᠠMp *8b.>kc>9h({(bwW$rP?G}7MGCe9(F4g=j*0[}!&R S !6c[^O+,D\IP7 ol! h#ڴi e MCkc\@  [`Ev +յ YZrP@RkI6XXf O=3` I$ر>o#ܴsql쟀7~!J ·2u/=L:8É$GsيmB%YaBD}oDՅ7;1#$۪ V;Q" _!ف!L8n!MGc~Ӑ;R>VEWP 渱+ĵN:p{ID)5CkmKDXT^*kn'}TNNxD++sZ}e2nxFϫtzd1g,rblul{Ͻq=2w$ΠfMu>8 q3!>V^EUK^7ӲQmޗA'<-XgY|CzWY ܉ao#盛WBHLz{e lG5wg馌0r`t06Mȑ%wW7m~oCHG7l5?Ck\#bdOq5JB;3V# yLCTjDL<Ɇn#șnE@.@L^}*W i@$ tskZe5$7G4XNxBLS$->M +] WfK07Sە@#ؖ(Ɔ2= r@|~fFS^#e~iz%)#@N$JG z*(o˹sY%K,{߲RfPCZ{Šyp1+KҹAxc7>}9,J ٢zвMG֥y}@>JX2R˜WЦ_uҋi%[ܨY `X\MGo"-n?M0-׊iJſP1 "l1K,(]L7=GH3)}Xf hGďm7Bj*xvfJppt2͗ qV$eS{[վr*Poc~rk%YP%lrMA\=KUrglC;@jp0z)joRQ068) oܩK\DM ;6$t}h}@ӕdq4D K!Jb˹.>PSK1h#;(u8t> KH/ ҽO֒Zv:X ;VAȢqRkTJ;ލ1}%=aPz^v-7'K},|-H*r8<|zMuwbHIȜ 'EMгgHeL$cUw/m`g됣JfÑE*' 3ŭ&6k%IvyC\sm\!Ik|k!3yw˽j,~RsER|tM=PvZ=!-!{#\LVqȓ&7,{_1BxI~b Ieoܿ5;x&mz"uI!E/i,N*甴|JUq[=L GWUv?Z=uFtCQrbLG/~ЄشdWHowp4x֝ʕyXf -U5u1|6Lb^4.g<T_B 00?P 4!jl,^{,ṇCTFyX>Hk"x"{efy`%0#ouJ# >>bg\Q,a!?FUf "@?˥@o׫ʀM4OZn ̓p>n@ȩA[}h+S*٩^pJN۬|DªHJO;}K0,j DAit˖OzCfw7 Gsk#`@s̀?~ SvG;VLwQ93(WO_U%q濆@ø ^ZBFxĒKKʄ\JM 2yOKH cv4kk,ҜKǀHl!|"p5 5̝G-3Qlc1m<%uʯgSSS-s1J(gجJmDDžC\aՖy טدLtBz}r#єNji7rWBصZExU v"Դ{2xϼSw(6]FDQ0ZN'/uz߂ʀq pі=zEWZ!^7§W.GI%su>$Q/ ~C܇ 6F%4l8D`׽]rCqto5rLӧ>EfP5q8,z,9 _]w];>Raa)`e gf! ^J'X8 EkǴ"yÐǢCS/OE@ji˭r~[uį^9SeWS呦RX>#OcFjә/Ɩ]!Tkudj򚇫;1%9Ƙ!2 2j?u8ʧ[Zj1{TpIezndNnv̫(A 8c0~cZt4ʘ*`2kJgzF}7d2 ~>IB3A;W0 kNyU]cDtM#dA^RŹln;Uٖs?nm]:ӴۙʹfuWhsgTx֎`!v62TO`rl z[ٌfS#$?sXykNy;Ee'pr^G}-|H^+2\3>5@A)ox=zꟵ~G"=٣%ȑ{S'$ Jb,Ykya ~kҔy"E:L ~;gwʖ-baV|"hnXKK2zG*7nvxoIhWa /+$)-sٺ:MWufI^k`u2Cv=". gzLvA_b3*(*w=E{t3Ց=P3eMHzP OD )[c'B1.؁-JXVlIV7dÖ0>@XN(?f{d L}SĴj7 BGd;te˔+hk3_L}qD4!4M?164&G2)lnav;9[FJH"a#} |:MŜI]7NIwVp 72Jbj)yn pEj7 Kդ 3S mG!p{-@ ͹]\BC˺Pӣ⅞"d.ϤتΉm&б3NG֖KaU~4rW t4PJXz9:':WuVZ ,N֏o–᧢/jbAnъFrj(|x4&8=Z͸M=%{la[{Z}!~,!%+b(z.:2xO97v`vW!y ST!?E%.n̸ adp"<]΍!a4gKay}C.oP0 ӄ-VZ;Th}Y+Z_^[Cf1PxSyF{z'{ "_*۳9]J-'*yiƢ~< ‚9b?$!MN]eѹ_ m͞89JT;}>- @KH"s/:{zt\B93Dw?/K{Z{lo!*%ظ=7dx؜0m32.6'ᴏ,c;\5d,&$_H}39Z[}F"9ձ=̍= x]F|M6$E(/5+2]"0T6LXZ <+L u\N<1koVi >K/ "䟌S{MG\w[fHފ롬˴B/i[)awx/TWx#AtgQ_NY zQkV#~7o|8@9{Q +m@x;6NDc*m$ʩ'^/abfS:A?Dc{3F!H 7 i<⥶€ vCM}MF(l'(OM jַlCxpgտW$f"О-o媮)}8}b`}Th_^9Fuv&@Z߶SAxh'^& ݬwi$|?@ҿly3Ho#c*Ť1F.*P,V]ys>m9Za|q͟G  -Dd;b;OWZێ2eoGZ,Z5h`1xV @bÔ{j ~N8l~& Mzx-G敾%[ p%\e,":&X}`:u+ozѬn- 4: .:zr 3oJrK:׏Nvm.<5$:} ׂV D1ijcځ%Z1`d"7-RTݶt tn 0:?B4sVAǹ gf&/j})D-Mt-\{.EA ?R e)N5y)f'al'eQx.@deȎ2 Nƽ9;c0T*G@c Y\oi^) ,YQ#l4T óOѡt8)Jo71 :|q\':"z/VOA>wƇPkĭ\Ad%ӇQ=W+$r L>Ѵ'Go~xB4XC輲'A$Z|T@QG @|7zpz[,fvx+Y7Z+%v>bbFGr+V5~Z]P7ѹNf30e|cs&_Ez(1 yqIDz$`v| 9&,Lco7s퍱^v#2brYQ{g0Zùk7s.&)spw'çZc?د!Q_ b⹳6Jq`aY5l!v I@Asui{A'Y߮!!e ]wtvBREv|pV$ٿ`MT) +xG^7pkjr,f9?sLV=׳}pEqJMBiѫӂl%VΑۧ!ۻAbϝb,5cMB%<}`+ptq\Et-/ҕ' nՎV[Ԝkfw|^zP,ʥ|>2=Pt7+Z aDN{);Jq=E+iv$ZgwU3sw'i0w &kbtuk1VC&a? )Xy IѬ,г%O*3&֯W /d ^VGN xa[xZG9!׻7O2Uqh˓^pqmdOֺe<1:mwk06Nib.`|qT,OgA1 ۀ!` )3Jb9{p*Xke@a-_- cL/B;Vw:!%q(Mp{ZGbXonS ƑkSe x1:o^Up6" θrÉ V {/Or,V+94C_(U[tv,tx;[qTC6ct/"eK~aNHT?T[AN7ݜ&z]`<)A69h'gZ/N X%rv'擑2b uo.~9UM94+([~!N=8?rqt7,s0O6G{*.sr;{Ľr}{πWpN, YR=Iǔ }F&np}m3Y;{ֆ"x7f @VUYV{ wꃷ7̼%$D4@.EyO遨QSGXKȝTkL_X%-_ $J%Z{&?I1l؈O n#q2&!/KQul T7Gxzh{:-Uɻ}ҖÎ؆em/_pCR%\bB%Cy9hce3o u}r4XJ7pT\[/t*߯xiΕ{Ȗj] IkL{A L=x_3ȃnk?i%쥾]}Yxi_S쿝DMkC& k({ hgl#⺿'|Z'AA<\m! 7LD"dEM.u L6ͬϱ gf?5sa-IN!)S#reCvf40чJgLTR-%zDF[znJG#(o|V^!-k;_ޜ2Aox㜝1 Soc"H=?9b*C;Ap vlXHwWӛ w7wBLJ.X A<WD eYB0|D$=aҹPLCM;'|}0Lhf9Ubԓ8[yI-bqLVFCA€͡b/gk؞zVż+b<"<4;}. 0Ycukg` kN%o/-\No.wPoF B'f[cupIbUHl Ahs<@"QJ6֎8Ϻ*jh> d۲&З%T99QJľ Qy6 YZ