openscap-utils-1.3.5-3.10.1 >
A ap9|8M_? ogD|⇆zh|mY4îbBbq=1.;O/BEnq-:N^?#Ȁ@zRy "QͨLi6 +T뼁XC壱xCi[@鴍U(-Mad _B/um]i wȭuЖX! j{ape턪z+[\
a ;&ղ
H2b.,8q֍;) u =?jӫad72c1d2363190b682494d9abafff1071b13b8e1 2026f9e294016ed13f4fa5b0ba2511aa98c253efa66b0db32ff8bcf9f205f4a8 |@ ap9|+ P 13Ɯ;0n$Z`fmR_Dy
A(Kˑ"z.S| BVTID`Q+\~c9).n.Nr 2.Nn#fyzv-~`>JrÈ9鄎n%ϭ!'p`@e5/Ip3KXV3w[ R1~-f/r'[wZrjwSBbZ0EF>ZJ`?cKCK ( > p F , ? d 1 # ) 0 T
H
v
W
x G 4 \ ( 8 1 9 1 : 1 = < > D ? L @ T F \ G p H I ( X @ Y H \ d ] ^ b c u d e f l u v p
w x y | z C openscap-utils 1.3.5 3.10.1 Openscap utilities The openscap-utils package contains various utilities based on openscap library. a$sheep65 ՚SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Monitoring https://www.open-scap.org/ linux x86_64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in oscap-scan.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in oscap-scan.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable oscap-scan.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop oscap-scan.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in oscap-scan.service ; do
sysv_service="${service%.*}"
rm "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart oscap-scan.service
) || :
fi
fi P ; / ' R ˁ큤A큤 `aA```a=```a=aA`a#`a=````````2a38a20b37795feb3d83ca971791742e3fdc3fa6a13cd9ee3b67d3f4561c2017 ba8309af9be5f5f5607a30df6ed116f7b54b52f62991795bfe7d318bc74a10f3 ed54695a9b70f513c554f01999f4a6a55ae2986154b9d26c4e05823c64ef80c0 0809e29fa1c7c33e35c57379962e96e4dc38813c253bb54fbb333d6276656666 73385d11262550a7b1c665991419b53cdb491208bc03b25e1b914f834c55a48c 0b328389d2ffc3b2b8e782216a31d589d14c3d966b5d76e0079a5ffa87752d88 2431ef7ba3264c0c0ced4d2ce779544a3f34f7fa2192dd6404da922ccd6b444c bebdeeec653a40c114909265d5386a29f1e4afa71bcaa632bbaba01b21ff90db 24c7db43e1a984f84bd67c986c9c28ec99963be13f3a6fbe2bc58291ef8377dc 92372ceaa10c867c308439081dca611a93e2069078cf81aae562a6a5238dadd2 8b6080b26f7430a8688f761af93e373185f02c801452a6e2fac919d9fbc593ef e8135d3ba56802f925980aa66cbffd7841bd10e92888a927bc058ae1bfea23d0 de3ebe1fd0cd236487ebd6e476311cc700b53f2fabb20cd4da634bd94e9521c8 f1090cfaa6dc15d52ce84af9ca759af21e153034213d4ca817ddf353c2b77c8d fbea23214a33fe3561603ea2db357b39b56904e61441f9d18af1e24450ca47dd 4d806c77c65560e602bc236887cd94db8e29717ee158cb3c22c9e0e554dfbd33 63836dbe1c88996d343786749b5e116c07c6af6c5d8950523c4b2a4ef0ad98cd a55f5d40f06414dca02e2c1c70e750d9b1cffa18e9b038a27874813b6e70df61 0523e68e60c4b1d6986f3c8f2a2e1c9d07e383cab7b2a780147901e464751667 ac8cff9f2bdfe3ede51307587361c2d9fc7c0f691b77e395a2e343b9bcf24ec5 d01d832962fb3e4051d51724d9213cffe08c8884aefaa31d700cee7d9cee3fe2 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root openscap-1.3.5-3.10.1.src.rpm openscap-utils openscap-utils(x86-64) @ @
@ @ @ @ @ @ @ @
/bin/bash /bin/sh /bin/sh /bin/sh /bin/sh /usr/bin/env coreutils diffutils fillup grep libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libopenscap.so.25()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) openscap rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) systemd systemd systemd systemd 1.3.5-3.10.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 aLaZa G``r`__/@_Q_w@^^{G^ @^^]:\@\[@[[ @[
@Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@meissner@suse.com meissner@suse.com steven.kowalik@suse.com rfrohl@suse.com rfrohl@suse.com rfrohl@suse.com meissner@suse.com meissner@suse.com meissner@suse.com rfrohl@suse.com meissner@suse.com christophe@krop.fr meissner@suse.com meissner@suse.com meissner@suse.com rfrohl@suse.com rfrohl@suse.com bjorn.lie@gmail.com rfrohl@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com - openscap-docker-add-suse.patch: add SLES support oscap-docker
(bsc#1179314) - ship python3 docker module always - Since upstream has moved to Python 3, switch the BuildRequires from
python-devel to python3-devel. - Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735) - add old patches - slightly renamed; cpe are needed (boo#1186735)
* openscap-opensuse-cpe.patch
* openscap-suse-cpe.patch - openscap 1.3.5
* New features
- Made schematron-based validation enabled by default for validate command of oval and xccdf modules
- Added SCAP 1.3 source data stream Schematron
- Added XML Signature Validation
- Added --enforce-signature option for eval, guide, and fix modules
- Added entity support (OVAL/yamlfilecontent)
- Allowed to clamp mtime to SOURCE_DATE_EPOCH
- Added severity and role attributes
- Added support for requires/conflicts elements of the Rule and Group (XCCDF)
- Added Kubernetes remediation to HTML report
* Maintenance, bug fix
- Fixed CMake warnings
- Made 'gpfs', 'proc' and 'sysfs' filesystems non-local
- Fixed handling of '--arg=val'-styled common options
- Documented used environment variables
- Updated man page and help texts
- Added --skip-validation option synonym for --skip-valid
- Fixed behavior of StateType operator
- Fixed some of the coverity warnings
- Ignoring namespace in XPath expressions
- Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning)
- Described SWID tags detection
- Improved documentation about --stig-viewer option
- File probe behaviour fixed (symlink traversal now behaves as defined by OVAL)
- Fixed multiple segfaults and broken test in --stig-viewer feature
- Added dpkg version comparison algorithm
- Pluged some memory leaks
- Fixed TestResult/benchmark/@href attribute
- Fixed memory allocation
- Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent)
- Changing hard coded libperl path in favor of FindPerlLibs method
- Check local filesystems when using 'filepath' element
- dropped, because not needed anymore:
* 0001-Fix-memory-allocation.patch
* openscap-new-suse.patch
* openscap-leap-cpe-15.12.patch - 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval - openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE
Leap 15.1 and 15.2 - add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301) - openscap 1.3.4
* New features
- Add support for FreeBSD
- Make use of HTTP header content-encoding: gzip if available
- Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps
* Maintenance, bug fixes
- A lot of memory leaks have been plugged
- Refactored rpmverifyfile probe and fixed memory leak
- Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions
- Fixed DOM representation of the profile platform
- Test suit: better portability, more granularity in results, inclusion of memory-related tests
- Compatibility with uClibc
- Local and remote file system detection method was improved
- Make the report a valid HTML5 document - openscap 1.3.3. Notable improvements in this release:
- a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč);
- timezone for XCCDF TestResult start and end time (thank you, Jan Černý);
- new yamlfilecontent independent probe (draft implementation),
see the proposal https://github.com/OVAL-Community/OVAL/issues/91
for additional information.
There are other changes as well, here is the list:
- Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF;
- Added ability to generate `machineconfig` fix;
- Detect ambiguous scan target (utils/oscap-podman);
- Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory;
- The data system_info probe return for offline and online modes is consistent and actual;
- Prevent crashes when complicated regexes are executed in textfilecontent58 probe;
- Fixed #1512: Severity refinement lost in generated guide;
- Fixed #1453: Pointer lost in Swig API;
- Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities;
from system_info probe;
- Fixed filepath pattern matching in offline mode in textfilecontent58 probe;
- Fixed infinite recursion in systemdunitdependency probe;
- Fixed the case when CMake couldn't find libacl or xattr.h.
- dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream - Add upstream patch to fix the scap-workbench build:
* 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch - switch back to official release
- openscap 1.3.2
- the test suite and build scripts were improved to support Debian 10
- offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes;
- the oscap-docker wrapper is no longer dependent on Atomic
- Python binding are now more robust
- HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents
- Support of multi-check rules has been improved across the whole workflow
There are other changes as well, here is the list:
* New features
- Offline mode support for environmentvariable58 probe
- The oscap-docker wrapper is available without Atomic
+ Maintenance, bug fixes
- Improved support of multi-check rules (report, remediations, console output)
- Improved HTML report look and feel, including printed version
- Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
- Probe rpmverifyfile uses and returns canonical paths
- Improved a11y of HTML reports and guides
- Fixes and improvements for SWIG Python bindings
- #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
- Fixed URL link mechanism for Red Hat Errata
- New STIG Viewer URI: public.cyber.mil
- Probe selinuxsecuritycontext would not check if SELinux is enabled
- Scanner would provide information about unsupported OVAL objects
- Added more tests for offline mode (probes, remediation)
- #528 fixed: Eval SCE script when /tmp is in mode noexec
- #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage - temporary openscap 1.3.1 git snapshot
- make it build with new RPM (bsc#1160720) - use distribution-release instead of dummy-release - openscap 1.3.1
- New features
- Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation)
- Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers
- Tailoring files are included in ARF result files
- OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line
- HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition`
- OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide
- Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2
- Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool
- Maintenance and bug fixes
for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1
- removed patches accepted upstream:
rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch
test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch - obsolete removed packages: openscap-engine-sce and openscap-extra-probes - Drop gconf2-devel BuildRequires: It is not mandatory, so lets
build without this obsolete package.
- Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires:
They are also optional, but not obsolete, and previously pulled
in via gconf2-devel dependency, so lets build support for them. - openscap-1.3.0
- New features
- Introduced a virtual '(all)' profile selecting all rules
- Verbose mode is a global option in all modules
- Added Microsoft Windows CPEs
- oscap-ssh can supply SSH options into an environment variable
- Maintenance
- Removed SEXP parser
- Added Fedora 30 CPE
- Fixed many Coverity defects (memory leaks etc.)
- SCE builds are enabled by default
- Moved many low-level functions out of public API
- Removed unused and dead code
- Updated manual pages
- Numerous small fixes
- xinetd_probe.patch: fix trailing whitespace in config
- test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test
- sysctl_unittest.patch: fix sysctl unit test
- rpmverifyfile_unittest.patch: fix rpmverifyfile unit test
- rpmverify_unittest.patch: fix rpmverify unit test
- openscap-xattr.patch: removed, included by upstream - openscap-xattr.patch: build against new libattr - scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible
to match both opensuse and sles or official suse_linux_enterprise_server
names at once. (bsc#1091040) - openscap-1.2.17
- New features
- HTML Guide user experience improvements
- New options in HTML report "Group By" menu
- oscap-ssh supports --oval-results (issue #863)
- Maintenance
- Support comparing state record elements with item
- Updated Bash completion
- Make Bash role headers consistent with --help output
- Fixed problems reported by Coverity (issue #909)
- Fixed CVE schema to support 4 to 7 digits CVEs
- Fix output of generated bash role missing fix message
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
- Fix Ansible remediations generation
- Add a newline between ids in xccdf info (issue #968)
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
- Outsourced the pthreads feature check and setup
- Speed up in debug mode
- Refactored the Python handling in build scripts
- Prevent reading from host in offline mode (issue #1001)
- Many probes use OWN offline mode
- Improve offline mode logic in OVAL probes
- Do not use chroot in system_info probe
- Prevent a segfault in oscap_seterr on Solaris
- Out of tree build is possible
- Use chroot for RPM probes in offline mode
- PEP8 accepts lines up to 99 characters
- New configure parameter --with-oscap-temp-dir (issue #1016)
- Fixed OVAL record elements namespace and SEXP conversion
- Removed '\r' characters from help output (issue #1023)
- Full Python 3 compatibility
- Removed basic Python implementation of oval_probes.c
- Added support for Travis CI and Sonar Cloud
- Minor fixes inspired by Sonar Cloud
- Added Fedora 29 CPE
- New tests in upstream test suite (offline mode, Ansible, etc.) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch /bin/sh /bin/sh /bin/sh /bin/sh sheep65 1639487012
1.3.5-3.10.1 1.3.5-3.10.1 autotailor oscap oscap-chroot oscap-podman oscap-run-sce-script oscap-scan oscap-ssh oscap-vm scap-as-rpm oscap-scan.service rcoscap-scan oscap openscap-utils oscap-scan.cron sysconfig.oscap-scan autotailor.8.gz oscap-chroot.8.gz oscap-docker.8.gz oscap-podman.8.gz oscap-ssh.8.gz oscap-vm.8.gz oscap.8.gz scap-as-rpm.8.gz /usr/bin/ /usr/lib/systemd/system/ /usr/sbin/ /usr/share/bash-completion/completions/ /usr/share/doc/packages/ /usr/share/doc/packages/openscap-utils/ /usr/share/fillup-templates/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:22092/SUSE_SLE-15-SP2_Update/8eb6c8da01aa63e373241225bda90817-openscap.SUSE_SLE-15-SP2_Update cpio xz 5 x86_64-suse-linux
Python script, UTF-8 Unicode text executable ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=6e99f6e9e03ddba3eef40f6f3a2161e826c675fb, for GNU/Linux 3.2.0, stripped Bourne-Again shell script, ASCII text executable Python script, ASCII text executable ASCII text ASCII text, with very long lines directory POSIX shell script, ASCII text executable troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)
R R R R
R R R R R
R R R R R R R BWrC{ D* utf-8 3cca722de778e609bda8813e02c67e50f24858701056d54ea5a8f230dbcea245 ? 7zXZ
! t/'L]
crv9xn{(
Og`s-!r g|C/ }!`Nt g- CI`z #s\[#FpC!FͼʰUE̼t5:g +-k,//HMa DjqG3yOR9Qq(+`q[
^aFi#K|1_c>oaD?KY]WNC"Nr(=Db)osp@}ͯx7Í { eNăUi9}M_I
qhR/c5
Ok) ɘ1s1~iBZ4wWe
(+zIJcI7r wh̆ OU)Z%c _͋4M
SX bWJC5A9 -î=c7l~7p-8e/mީ1.)m Ɍ7BB 'Ʀv%Jpb{Ym!fOi'|/Z\ >/͘)P`g+^ҧ\p`eqV"`! -I)f㝀y#2G, 8>Y-vvr=YyƇ5FgF|4 'j:9¬m3 WŰFH _!
dUoK y.,r dT 'y[ު 8 `l:iف/@ca4= T A,PyP"TL@¢ {VpM4mhhNR!MYmr&c6 R*,[h=GЖ
͝!fGCsoH߳h{ aYBH惓D=XXv i荭љw:XR\(B M{dD [M#Yg]*Z ,acy.啹 kmx`-p# q6E 꽪ãXC2'ӼBK1KoTHiN-i6ejǸ*
QDhSB9|Q=b:]5yp7zi}=_E v)|[_˭'yYnZgh|l N3T 1O˹Dž%VDS{'w߯ yԊ*̓!sDiX&`eGoc7}S0&/G9qvvS$k þ#ͨZ V]G |ƿ|y
l衤]lf℞ `=w]icf4&%B0ߣuēzT>~ᔫ2Ԅs8#tX6\ g$ W~$8뜀Z 8DvgC|$ Q&U8
'FQJ.N~ Q+V0 T^0eȌ¶v_lpoƽmRIyhv$ ,ݓr?+#m '.L_f,P5z4wT_kBf@ xtf2(4|gtarcЖ@cXOe| J˄:Gp%eywX+j_5y$gm}M뗺(PwYԃ& Fm^
ILݱcG7^sIR)d)NǒjJHvdOB~ӞW~}72MEy~erf&,HKć[;}.?B 7DJz6eJ ux ;.mgmpm'9d36%gtL+k]9/.{WM\Ex(XeNNHY<V"8hklwg1j֖=5nNiNWD7Ba,"AC"Mõ\)j\n42mCȾ'8*_y\_=,<vtm_pfջeəph*Kq;Qnuh@ vHQz9fn#`#xK^Py/NY?]z Y1MgA@Ka/桵Q4$ݢlp%V [W+H'5TdND ;~_uyEa7(óv3Mu#ݍ
E4<ۡ-tNT iv7uSJ N6zlDO<,Җl!yk( L=vF 6B P
^*iw: 3 `q:6=_v
?vX}c~/cg8x %.0/ZWS-ui֭!{U?ro ꂩ߲^wc6MaH+_,CQe\\, 9LX [0#< w/ID1Fީ hj'9T`@U;7 &
U^KHUO8 )fq 1.8Nþ7 tQ+q` 9rEcf[# Cxٰ?Oǩb)SIM8kJfm gJ 74/[g<Նѧ687(
/4z@
M 5?5tJP+,xT8OI2վS.V'L觰O6L>ϧT&fduL2G*ߠ<0
ڄj +IB;\ Fpq Nͥ9zttR@ +?ZPKX">oΤE' v=lAR%5Z\_U
X@5s=pf,_Js;A^Wxsa bIy7Ir9HV\}C*7u;&3o{&5"Y!~ dzR`5DVFTjZM2- B r"t RNiwOh<.<6LYKs Р
X `InF+x A4ZW(\vi4D; :XSVcԄJV}ǪGt\{.yѬ64#v} =2܃VE)Y#wvM ;el\x WoA\ Nc=5Z7
bƤ$X :"Vц
j+!r"wlj5@WK!b!/WNqTDܓFD0bT-L
6WCYCޞ`pKUU 4`ۢ l:-(d}uy<;O|Tz_tx0L5|ݸGT®S/6z hZ6]Zn6U!:pƱ}qVI{$4g~Kn* qHJx:-!sPY|2tD sUo; ZSw i3w_*-ܼ@yAETI\YJͶ]ѯNCL<6t!
v"+ %+,u/痪vX 4-Xe F$d7<2
ax^#b/n4ke5%乙#-x5'yMdMe`=AU^PBr%ߑ6<7Zq"EE+1 PHn9qK1Ao#CbTL턷yJ]!ksh6esc( ƆP;pe rv;=n
&ƛn`ȣ^Ĺѷ pE47`"{ pP&-x _e/yA! @^|Lp3D M= A=*,[˭ =v}]N D $uִՁȷ:ɔIƍ~M>Z =BF(3U_#)'-)o`eF$\gZ[fiYe+Y;C֛\q)
Do&\H~?bX.E=,Oug ZGv؊@ kg;RɑױPCB4Dg`q n.cj-VS pga̪©5yʩ(QIb<'\Sd^3!Nhإ:|guDl n
y~obV'kD|%W%Te,*d C.v`jKAB`)} shܨxp[,jcA+#B5Ma;r}u{d~,0Vѩl:/`[Y\kZWK3ٍR<#٫[)Eޚ, `Ve渠0P{ks>Zm$.c1%
|^#La,Fƙ^MRj[cEL~* y \Mg'e.꿋Es
x9~ !q8i-w[am YB[N:$
}%*M]%~ gݭ IџS̰̱el_Áؤ,Y!u ;X5թ=CDZ*'QUL 5
hՋA\GYAN10DlJS,N (M~& S</K^07od3Zg !o SZۋ
+( )tcVUD.뽂M9 z$/h:,W My37Bu
ҷ}Jm2>UשbN{ɑXjȪLy :o.T됵90-j8Z"ΖH6櫽4x'V
v%^TITܨ@0oųL$VwI'j{s9@0F2b{P ?{lݗO+*Wo7qͩW'jt8z&70᫅P;wMlR* eLE %|Q=
MKߩ?\7z_x6yEf`ZG9 /Eft6iW`zfp K/ =ڮxItNވqf7^>s ZJ+LRx+ {$,Vծ !tU9c {Qopwz-d~#ǰ{WMlcz=j Πک G:֢>8f~X\J)Ŏi<%Kq/͏}Vhǘ66? }T5Bx,;Iza y]9ft!wAL+:ԯ u~V観o;{ %#"!S ~> Hh R*PVc)9}vʯ
\< $@
Ҥ!j<
kp %ohl @cZ2)C#` w
Ք
L I@U Mr "5G-R kٓxf*%@;bGoF뤥
&w dUOaז fb<>̱yB[މP!j
=kjVjsԦr W#e:U |6zh@j;9PD/J aCTZ[y ٞAS06KۃʲtHTҤ'}r5ti9Bge$fjپ(4`j0 T{5k?4NJ*'.o .b
)+24<کOR6S-dvoh*n ;k~):>2 D8Rq4HLu=!NnjV|Ox GxK]:0$ H-c
ߒQ@D :qJ"}T#Bq:;X7 +{%+n
%:K]g4Ttf=P`ęeaU /ڽ3QjPEULG jE7.:/ΖyY%IXtBuTS aɚ<ߋbKx)b7C1P؉k+]Pts<{oh!B_v' viD+h<)zQ[,Wի9@(Y=Chd)TYqPiL|-nva,q}V}u=Z'UJ|;䰿|^B6 P6 -O ?SnMJ2t7V{@Zxic(y ǫMj*@b} ^"X=HS7J6 ;XmJ |ʏhڈFZ% . uCPa}MyfW0PgY<A/ ,ϊ
I1d/|`(mc8Pv-d@ }@W;y>e>@'^w,`t-c>WT{9
j ,ti;!Ձ`
/.hr)إ˂_"rTH4C%ѺD(gG]8]U?h $G ;\f.c\1bYCpA%SMص||~;&(" ͬC'adLV 0r#keBM%D4'?A-=t݇U G >? Щ~/7"a[;2zl1Ϟ̞c'Y g X]o|.AdT]j/EӸWj>-RTם؍HV?Cpu[=HjK^"QV}8Y =Ҹ" &S.Ey?LzAZl\Y^ >g,$/*_}εRn̼U~ 'ɡK%iJ*%fAp^[ʎB ItX -;-G%.! 6F.Oz(M&nT(䬐 yS[ +ww}aP$gp.M+C6bRAbI2F:xkVq݊+_}CNtel-s8Sn]IK?hUoUyM8
is^~;X0R/3n҆ \OS(9jPՎ0K s/$O3yXif rqMqf2)+_VaTc{R=N WY^izz_J
aȴѬ4wb!:ОNwB.vo.^嚓'ہoο&w@؛]NU0 cqT`T Zm2&"D@HA*kLkȱŸ/R7)݊] !;ؿ np Sn5Hj: w B=cT A,";bMj/Uڋ Ǒ(q}ksvs쓚D[ZAJw1N*=,^6-H_W0VXXҏv=oooLjT*,bu~b h
FZoqz
*,]Y)\G
9ǓfE'8~j ̢sjM%aStZ_"+ 1G!
!ꙀQ/L;8,dfx࣮!lnv=-[ 4 ߎ?AݻZ+NҿzA)^1`+ F}ӭp
)$
#eZH@c}B$[^p=\g G}%fILrIx~}ãryqI6 ʮE Ɉ&Q%)b~v=# [O]Y 9 ud ˤ(H̕~.Qސ2M 5]94o;B/yBYPl9 X[>>/j-b;ܟרhw#Hi+G?ZsER$H =ቯ ;
(RQBLL4
A1AaKVe:^.P3J3`d;)>(7lK#e:ѪS@g#){=nMʡ]u lLx.曼:c A[3(ctеLdet¡%WďJn?fbKVZ 7CvPH~n WR}u䵢1%qbYS+6dڵeϳKV`f.Hɇevch 0|HgD}TwԮ8J$.&}D t!|)aW\_G_>kwr 3~굪F4r\\xVV;)h`"Lo ~bXHcj?K;(cq8%RH3ӨBwb1 (T[%{83)<<1&%WHsov YXTgQaro ؋gd1?M &\-
V;#j`GZO, |rX:]m4̓yDUpؿ$ڞby f5"P@eƌ]0 0boI$1kݞVUuKJiAu%?J0P8UXH^y(lZЪTJn \?(|oI_ǁ
FW*ʸ6E ^ }YH^ ^qӾd,(,p8u~
/xR^r/E &jmA
BlO)5 G(H~:a\HSGуʼ( z.3^",?8+"$~t}OGLWT`( YuX4 / "8Szݦzm'2^P#v"&qAnfUY-~.gWGúRrGx`w?E@ XQ
w v}[xi@;wjV_H 48 ( F"͠FP {ޠef#|LVx.=wuXWҕj$t⢟( gΌ4m$E%j[
]I+GDWWetB joa7!}#jK@QAN(uBYThuf
kbwo -흢|VeVλD}lc&pm᮴M\EB '8}~8wX;
ߏ@[#33{~v\XoIo"'DXl
ԍVV=*T! ƌ7Sߩ_q0~Lhfw@z-MlUS'}V! n4r2$bu&C|1Tbsi&ѡ". ((Cg-ʦQ7tоͬ=baINvS6rzzR|m0F@<>io\
we)T`xf%At}/JJ3o4: 'CnkxɪCh+0[z)?$'lQnV
r#4#1 칫nh4(Ɇa<Yw%0^e y^f%Gg Ck5w:Q_ЩxRx}wZՍGÁhe !$ik)#|9oU$l\0H($##0pD ά6Hp,1 8Έn$bOէ\}K 5C/| ,Wڪʥ [v%q Kz IS].KWqTga~hW),QzHڽ*ΝBWgrз8iA
y*G\,=|$7X֏nky4 YҲ6+9Xp;J&Am!ԗb4{Qsr&d:4{J./wZΒތ[ ׇ=PArKޗ``%#CzwMֱb>ʑ
8?-2ASn$uJW]X̿78UL h M(k5zמ}dj[BL??0ڽcQgU貢>[&6z!7%Cj1 '[qƆj5Tɼ>sOkq?{'=Pf*6oB
DX唌.t4=4ċy>:1Q
>mC^?Nŕ6b^:d\!ɧ+k#RU|ۄM7 -|n"3JRcO:XJ$Z NirOm; Da!#f:0+ϒ(p9rM^}im&f}4H$hWJ&Vą
#[3/:[ U&/2]1OCo8hiQbuVbqh Ęq2Nɻʹ
Ⱥ|N"rF Ɲ ae OluAnT kLSE|5VIf[2AP
LRsO[D]}H h`mCI7WYSo,&wL/7w-׀y4?
-*ʆ:1
,C+;s
pr=NzXh c7_Gl_bK7xG4kip|ƻ@㔰c|' Iru"YB']BBWN ^A|2+ e5- *,\.(K
2l̖ߣ"ՖEM&IW-S_FOh*-lud7s1YUSBNhC 7'&E!/LkpsǘzSA\VMo-4 ED.\@nbh4p F éZk{ؓرsM/dfuAm
7P
r.7N 7` 5Zo qcbfjp0}h:2NJܱʈqtYRaig;#%ጒe x@=+ag3e? 2a*Rm`/F` w!c1NGU0p(Wh]
=qWG B'YP$ 4;Zvc P JnW
^C64qL-̰VCeWtLE/FG-aE
p%TXӶ< l5E m7{NH5<\ f?H)XE)GM
V1ν9SH `<_?|R$xy fhiީheW YM;$t2 6FmMY32%~kWs--,:&K=H~l HJ/9J~Z{t7AL昵c \idg.ܨr5O# PՓG~HрYDaS/ǶŋJ9;y,8tiWXOtd,ljŕ⣝H8tb,g~DVXE6cQ0gV;z _L-j:81VXEE S^7#+M>;? & wa<.TX V@`'QÚ3 dm OxQKGתW6%X};G ۭ
*2훃ִ1+n[16 ^kzzK+o T`yq&]u U :FTOQ!|§5L´Q Iڅv`!+ữIdJX-?{mKPŰ@&\=ؔ{32cw
ch{}wRş v'/Y3oԮ\nQ鱷a%ykA-bPJjڇLx@a&ΐOxZԿ1
N^/`z:voN"Dog ! j:3{2x,Rp2aR\+焅bB5HшtYU>g1KFK[L+uKh%4ԡ^Z|gE6Zd1"Դ+k(JМ_-F~Naٳ=}7GNijӻ;Gk :Ğ@N&E0 M1&`/ڸx,ߑ-n[Z'-2mV~ iDZGπ8nj ͮ[L5 28#=QXKEMe$ [FM5o~<+{Pjs5Uw5> gN,+
[fKL)f{ȫz2)wD;jq L']O+mE낲 k g4/cݵZ##` RC2 _~+]^ 9H%{
H; 1-
r0 Lӂ%dgIXJ|.Z. hxx1A 70呎9!'C&wxpSG)XX%Կ*"С3cA+<~mw)QMi6n'e8#~Q <616 ,q~ pW2+'_V%婵8X.$Y_f
Ne"_IB6nyؘӡ$,6NNįL(QA۰#g{nmO,ֶj{װ Z&; <'y3r
"t;Ei(ܲDRdgrɔ
3 >kjQE.Õ@V >Jw hٿt9m+UBЈ`iNBfEK| G|m]Rhx;/խv$5 kG[PgMoM,;Z_~ښsvAρB6n
+Dybw\%} ?l.j_V)ku-Ffi { wU=+ U>.c/S \!q 'ȱE@ν/llW @RP2RKj),9m
ƷVcQL Kv>FoEP*AJ7
[g?{K ɭC6w[Dpw!46XZ"__fw~t t,14db:TBIw+Cz-B|X |dkrq怟] h5ϵP:{'X[ ؎#~E.AG͓ݕ-wP >
`VO
* Ǻwqfv*1?, Y>@C;̦j\qJ\5?nڔk g}㌳K[dċAT( Q<̈1/-5߳7)*Tw>3xXۖQ<+-i'ze-^[bCk wƈ?xq n+q{/kk*H y(cqfL7옳o RLA7"uiUy\ tKLND|gt=~Zoo4 0lkҌaa
vXIRa%sg܍Jn |++Pp˩}\|!V [YE=1i`m`9QjPU$|mpIh@66tt sӃ:&iaa5+ !mtay|$6E ur
JLGC0_ lMi] @*-Oȃd)~A(8ڐLRwvJtѮ`
!M)dqZyw飻)Y.1*!4pE:1D|Q;yOTƷ>3"5G#郷an0vͯ()kbCF~AC<;t23A BXNl4*k x}K C"~'SZ,
Nc}d% ٶ-ϫE .)
w;*ڬw =,%8rIش zd8" 1<+L_.nZ8_wA&=^%br G[%Z9M N,3>9A/NkfCHx
RݞtPvzNFL߽ˉ( PQSbY-Cɢ$`kl[buxzm I*8 G5] p1!5bB8UsڵiyI"++.n_.s;Ɯ, _QX8aOVJTty]y~|Q\:85C!2<|L紵ZBt# lfô C
x 1׆j#&v/ͤ8T{
],Y" H")mcg'Cyciʻ=Kh\QD[B$rK| Mk:Qx'owGĂtac]ԓ? ¤8 $_>h50~xr~
6V4N%g/qR֫q if%
H~4 D!죓H5ahE62*1Fa NQ$, :g>.#l@i֟D \g4 g=#i!ɻ }6k*uLa7!cG@Sޫb= [ayOWtŦ~RFR^omk5=DlC
ipϕO7q "ݽZ=rLE'7fv-wbZ6G\RE O+=UqFR/FRw/bGslDy/~Z ZE#[aZې-( z%ƤUuPu
gB4t JFǀĉ]v.:{2zX#,\(Սg{\CKx/bW&E3
%a]b : ٥:f?.xc5w0eXOBS;nщ B Sʥ6{ 0yQYvZ|^ކ\$k -җ1s*{
mRnGR *[pZN'l:Q7ѣ @pM{Rt_.`
4ʋ5FYm5xx [V .j+NF7o(
[ |k퐶5
KX@Q
J@?k7;:º#U
f݂E*s M Js)r ݓuxIO[.; jIiZslCCm#js7˝wk-bd{ x=s-H>Y4 ë[DO
}*@M#Q'Qşti \tWލ.m $RLȝnƥSxTϣU sά'+([o tESK+YE, ?Qү3m TT)1awہnl9EInC:fS^;,bR|"; A!IpD[.Qd{Ήא(覂NjQ-!|lVH jVr)Wۺw ײ։\<ձ9uB}sP|xHag!3 ʚDSMnХ| 3
G|jEFR5 wa鷾>5Ai{SEʐɡ#%W 5RCk#c5RY}87 2X9^g* id
Iޢȣ
8ӱEk0Ən̐Oɭ%~dvs|ޢs $~6RhIO"lW=ΊʲR{{{m${c,'kNDFB\vՕvy y3PVTO'
8 SG\3_H|D,08k9!6HcW2K@MmiW66̯ʝ𩴂JMuc
+$# r*7?_wM>
3 \q Au SU1՚ x;k`eτk'7Qm4ْ>vf&
CJQIb? l $ OUņIܫ"/"tI@)> F 35zeo耔tt7 3?c\` 3c . Í:'PȾDz?=;16gLeGfZ1%q2Z& >1ݕRu9r09Kild'ǒ ;q 2ѲMwL> 0] V mxT:N_?g7+i&j`10n u Rmx蜒h/1Ӝ~4(730% O 2HHBu g t/ŇnnE?a.IjߺΌoAxdv A{[ 7oW*GrlMP
#η*23&0bTt띳4=FT݈`
.}':?TAbty0 /F 1*PeE^&l0j,dc%ʕP9f*"D}gY,5E !
qd35ŗQ0T
eLl1>G堹Oƅ xޫֲ0Vu2!*[QW nB6ܼqPcɨ`wդ2R) ǟGCTʿoB
| ,I?zYH_uv[^Iteӥ]Qh0ҎG"z y)u{~ ̢O+h~Z
)gp6,Crh֙qR%D9D"y@3LU/3
6
C[w 5in8Ȍ%tgO9'&7B%65#*ރR
y6qIf :lL.F
Z0*7/ qJ_` Y͝@f&=
/&$U&o KV(=55Y(U `IO5y; c JVl&/~55bղ3n5?UwL:E<^"Kn% 3ϧ+*\P-ĶIc?䢔i<|aGzwAv ɦCYdarf,$ϋeP [KB6 O؝ " W(X2c 0ͽ)~r!@ S-qct`3!x'sj ` _1g-=KZPqi
`Mbh/,*8eꖙQ" 9QZ<
2ir@:\ƌ%{I' Lɕj\ivr
+'0W(;X}fwV[O$Rd=@jxV
^z5!rjaX3/n= s=5](>T ұݖL-)s QN/IV{9.~*xTO5!RE{( %눬' < ΙVt6S(<ߘ3jD-c -2#r'm" ?ii7 'I؈ZaLQTc"M!N
VBa.3űgW# 4ذMLsgʬ;U8xݎrR4ki돗pHiyS4 !=g_ǐu_6ϼ(h?. R} yGǩ +_5X^ܵIz+gt\0*$l j
ECuۗ:6D5, F+ ~b~sqbfAE(Nz@B>>j%]"@m KϨXVN:Ct+SY|_2`bY<*!ߓ-0g12 V [ lŔkc9h*("5PAյkTH96@ %}NBgx&=3! ?L9ɥ3x>7p'.cSпo[h iܫj]
;Z~B) ];W$uwJt [ýM~
@<d%4%ՇGl2f¯$4W4JN1|V&r
\]mmߥ :9^#-fl}Yx(wi4UЛ@ɡ%f)(MBGo濇t9:OER4{-o MSDa/k0V ?|/FA$l BGM8KD9a2-e ap'CCHhB漬6 mNf9$^.=J%
!(fq13{Oi[(AV %gpRNA)]}j P"oE2HH4)Gxw{M x4h Ts{ťM:rLY:dAe:FU_鬥
E<ap6(%Km.zG, f#FMܲZfJׅHӣ O'Kۛu`=M9֡t3Nw x|+XCR6UX9
p?wEC0 Īё9O<d]3Wx1\2l;>ag;F'49s0/ (GV|0A.zX zd}7CG eQrOZIኄ:-9R2!PJf y-g%Ό?jX7cUSq?Gx z?U ;Elr+'Ot!I"Cə1j*'Ռ~hqqA/L=ƻ}W4[ Ra/^!!{-5mSL*Avx";u0 X",G N%n-u)E2i`.m( f%Te]ҴNh8kEE8| g%
r NNE-~?CQ
(-1s떠$w%
{9zT0ĽNİ ķ%;Vb 8/*hCabĝQ]R6} LeU}CSwGRð[Ttm!TT'GFp~aJÕs^?i"ҬD+ l3K}
Pf۪Uzw-;,Jf7Ӟt +ꊮ8N%ɂ䘞P
܉'xI}0[U]~j]Ƥ:MY؆z
3t|cʞW}wr_Xi U\EUϟvUul8x_Cڝ!/!4w/مݠr1^= @G,])Mbue 3_ˍ~;A`
1M飆s6mI
bk`4 >9T[H@mƞ;1?z@9ÒdK4 ǿg$|xb֚;$$9< kAqrmR(I@sQaÖÍh8+VNh@5 0-?,`Mp ZBeGJ84O 0R6kFtvk:DMn J{#闣{%, N"Džaΐo z M2X~5U;1wrT fK5Ybh) iZDN,1K{JR_^xy):it KtR4B|ӭAUr XQ`{MfS2u` 9Pr 2{yV ݰ D+!OJ
ӳXx> 9Қ t^>& DRοM-%![N
gRt:d eb-@E6աbF3# ם mʻaZyo'?c) ŪU%dx3 :Uu
B9r=iN>iwԖ@G8_@V/M)'jv{
]nس Q'(&)ijU>[@쭌:
Y6aY<Ė!/Kr*tVP,wY`hnk p]LJ%gfL T$K'Id,m}@B7'xHBo2gU@ *NyXj|vz%ذµh
eS|^K:^7x1'(㎝yWjUwL9t?)Gb~%ECeMؘ̽ݜ> (BzJ 7
:e+ &~l".1¸-6SW%Rm?qUwu- /W\JPi m&4{M&ܥ\HEC );@3le9;UZL
[ X-Xo4Wo?7i}r!z8 |tktgT/Ufp6ķjV 68'w 3Hpa8O|f"RMpM/5>lRI$ڽ"6Y:SW^^۞S4i-p$XS6
mTp !ٓsE !dk5?@Y2w A6?)D#>Y; юBZ Yd/2?`gGh#aP:|t0om&Q&jkC#8"h|)5GZ ҁZpM/%O!6j2U%`s 軾V[27ʺ`~[2f{q S#9ډ.xpzFآ4 'J>X[
`V
&[q<[s!g,6A>$U8i}ӹCv^X;
{e鈡KQՀs Y&3.p0aqBYB5 3۞D^ڙo؟
;^A[}6"`F2E*}2r- WWi~
6OBkD<9h^K1gD뿔#˴F,N x)nUtqJYPXR >xH彯#zrItb%:iV(0smf"L AÒ'n[)ߌG6,n.۩HD1w{i1"nP
*v].R+ILpU=I^> }!SɄȾ4(E\#d4 Z:cȵԘM6gޒm#AnngDy%ƁTuֹ>Q5pTFm Ļ'ͦm挊5\yVb^\zNLr NkJgS rU, %^p&L-|wcnQǶyA$lGNR%>]z« :[I.J]͍*m =&I9٨h"|qIKPXzԚNgH nfO]k3 #ijܲa$ NCg1)';
U =/ތczTJ"tQ#?;60[6tQʌnNR!g/ 0l0]8."c~2f&/ޣ}0tb.D
-dj;: [ .EzPhˤoL
s* cw|2@W}U5C5$%9' 8,-|N0'jBo%t5Eie LN`8 Psn#ot*̩u7XT-p_
Oѿ
ApD }G8lxF@h <ï턚ChNW3Z p~, QJ Hޛg~U(ma5ʨp0k؉_L ޔ>Z|;lPAU_kᄫVH-Læ$nbۅBBQ78qJ!5fuRħ' $}'馥]8zHɐw_TCQN"GAG*dFA=I0/ͤN' FM51d "ܮ ]&d9?j 8059`bRt&aEf,ӏ1rthzQHT) v\D 0A*i,]9˹? icXVST|w]V߅6Wx`F˱SnrziJYSAD^8)P{4"*jLW|c˃2|b~}ֵ vLy|^7uԕ5 L칻0~X G:v'ue(i< Esa ޚѢum.t> Ĥ/FbA7ѡ)pϡ4cۋ]+3Q(
|5 4({X2e,5%V=oD7=< =u҇N0c)\"ވ#5q, s?ygL$`CAn@mؾ>WQQqߩl4dAY;:8Gg6waSG0jH͆^%㑛n&b\ (~;PeOU#6*5?IQz2SSw=.ƏRKģF!f\N_d~>/}YZ!4Ђ[}&r Qt7Ho1LDƙs0}nJ ^CwwpvcbA03ht_2H %i'2hEȿVQg.Lg+qtS-"
-,ShS3}Y|Ի7{m,3gX
pCXʪ ڔnVK n^ jJS:":}X,jEÉhc&6;C K7-pa8P]n1-xXOI8.eF )W4Dw;6_iEYKeI:2S?f%}z~ lEdQLo'j>(| RuhnbMŀ?;L
I9
jXvxE!S5x={11&sĤʊry`њqfx&v J~bөVσ̳ԡq p 莵 *z֚yP%!`WS5 pq#+Ϻb)V5?ҏo-i_-QDc8
.
sp;#| *l#_>᫂cGT@AN)=uO`UR2R qbt4jY
&!ZT5Vt^̐Mw3hB2v`C+ o(Ou7IРX[K P,Ԅ|^.ޙUz -,] ܾ%1ofOŃZIRtC-
OQ7j5S[$d3EM11
BVld[Ɓk
V!y9(_X $Ԍ衝"hPcaki2/}8-~Z@b?1$` @ iT CImT M*ўV RJm
m12w0B0o@s堇 P[O5c\T7uv?B[ԁև$')`g
9vá@+yxyCxu-HZM0 %gR淹iN㯴҈7gJ/V MSGޤe"jG5gvq@켶T Ǽu8jk˯=JӍ %yDpB l jv, Mʛ
7 Ї _u e;_v2\zO l'|BeOINZ[}^fuř\4מۘ%O*2ѣӐ<})W7y?` @GSU,4 [kGp,ڧ9\K;Xlx ~M:tNn>ۧu%-Pbf֛44O} ^Y{32X_g$
a_x 9܌WZ< :vkv5_~e1@ѱO-wG(,)ʲX2|?9{J5 SU`9##ٜy5y\H:|r*FmTDX?;-yPB@)# 7`,o3υ SF{qŠ"4Dt}'!emfAikeW
f R|*ZHϪywM/!bhͶ^3XW[ P_`|QWOtj§ l؞}A ||I }va</<Áueo c~BK }/bC#Seb/8d*ځ~J\ @) +M*SJm3Pj g|y]$Tjߋ21lJߡX+[RK!ov Hp'$x[vB0_CpK,xwԬ HGIi)UԼƿ1#I`8\߽&kkX7Xܱ! mQ*x
ܣ5vhniW#%U9 Nlk:GlL9^{OHlVeidPmfZ/6&+ݢgs%Tj?~ (pA1XY=FUB7f̅h kp=w-/%W^aѵo}ޣ*A?qwB L9y
uD*%5"bв,KN őԟ+|zt.-*).9?b EF ̹bewCT
uS5&&0
Y$0䬥M!m2_%,bpX,|e=}*a!l D
gɢ
O
TGMl/B@CW_ܧug
͂-s* Q&S:'6ɨE3NyԎ:kPlcqO > x Z+F}!YRxE4&Ǹhp`D3 ub-Ѝ:p8/t |#4lvuuy:C|ùw bZ"Nt8`"r؎.Qg x{,
'2NfOSĎU8[|mm[Goy騟TkjZ'Lh^XZo$)hz{K |p X&k{s*
0us6KE{V_|JVK(* !@
qRSVp
̾{ `BQsk1]mcEq{}TޛFWW̯8 DE0Лj!1Տ_tㅾ~[bHO`4Fb hin'm4'p#~De.SKqnb[~~/o?
lKY
AeќIp
~/aP2Ǎ$Af4LQgB3ᛎy
7HR_akf -nKX sڢ<ǎ NI0ibD:,Db#(}t[|K M$8dB%2Hs,lۇ\qWZ7
kUjM'X/ e[1Jq
Xػ@X= Xftrza- G qF1_Hg/S4 DG_$G).i:S9=ls-01^>i\[M&-ge/rtPD% v$
=.\YŦcS67hFUX5t8$# gm䞁V-|Ȉ\SWP0g-&_Kt%YTg58Q;! 0>㼄Kٯ2J#dJӳG{)
݄& ؞e:h+in^D8ݺ=ol#O6 9;̋foP,[y|O 䜕M% O ??~Cx*- nE ֍}T+9oE_~AwYȻQ_ Q`s(bFY(H˴c
sퟴO\P ύ:_*s ckJKe$<ߢBnOo
uWAh8>lk#: jqO
# ⩏Mx4ZK>W^" D0Pt;>9 M+/ R]K=z`uTBMٜKxY/R]!|& R8+7_x@\+4 ?g65q,7ɏ7-b;~1FK2l$,yi ȠCϘ~(sߧ)!#;4YEϭ by`WW{SZx9lMM+}ZMh=ymOAfM:c
~$o)*f-;]Z19 ŮN?ڳ{njH `. 6Ms 3aRe@Ӗ+z
lAphfK&Z@L9%^}CD%V}mGN d]#CbaWO >Y503,d0v1Xz.Vbe>cοNcN.uը&gR')!za+r+PUVͯO꣎J _0{4V0-^?x~ZC
'sW?6.yvxem:z<7F^m2|煄"v:eY'V 1xWc " bˣYb!2YkQ!:Sjԕ}tm)-xY_ru0$697/ 71rg"k4I$ 4Xw7/x
!NHݩ 'IM N/$Ӽ
/C/'kv[ļdIAx udX(/ ،NBԳ6BűHmu;5
@3p+;BF%!(9p\֔ϐ2l#YJ3f R$!< ba`C딡! $J}6HQHڰEr =688K1E׀!&o< \kEX\Ƃ?zBKbI1 QЁ"&5i^?Y . Vp(3Y 1\RJC-Q8#7֧ٚbꙋ-~.f+/FuI Oow 3r~tbПP,)x> Hq VB!AњYw.ZiMߺ^|7̖ӰbTYXxcXCm+cUͬr`vq *Xē7sD-F_) !&@wwt¢Q!6fɑ`vR;}5lu/ǎ̭N 7g{
4/uFɼ_
Rrh̜U75BZ4!S=F`O.d5N7
#
L4댙ڽHLsp,ŭ/*LݡӃZ[4SD=eeE.S3)71<4YߦJ"NaPzF c-Wj * upltrQ= )+ҿ0]ydjǗ@Y¯%ù LyRGۜAW;w@b˔ƍ@\p";bĉFmyd'۵-K ]Qor^@BҀmh# Ig
,ŊJN2 Hw<_vࢮ7]۵Gg'PډE =G϶C}ʴvۭ+J3.|W]u=#HÍ<\ n iƦ"hɅ b*0e7HwQˇE\ia-2gk$9I( <ؗHXumV_ |Q >91j;1p'> F|LC0OWu61?YZ
L94N bqJ=_Z}ґ[=F^ En(n&J:gl2 5dX. 5U2<re :|bW]LrS5"Fl~>nH7;?6C9"bܤ:4%Fңn )w on;lӄ3 vo CNKv.!(u y֩ on2B)ex" \Jiw5Ukwh֦_IOjDp$h$N8I9d6 ({dF5$VSYp (Y0YW0h 뿜Z
Đ!7j;l&~ _ 4Af-ՁqJ2q |
ҙKs ŶXҔ,%xF YzIJ)O='Tr>RCaQ3Q+c.a50g%IBz>7eo: s`s_b=t^Q'31^Un*xrqJ
aL :ر%"H` J!$GU~B0|xGg4vLN?`HxzU~}cSQ&`v~S&?x -R&I> ۷~N]'ό<1}Ҡ}`8ˢ>EoKn4l'bё JW8Yr1.-dzMre
&<}=ɟO|[ؔùhsbgF(7GrŏQ[jnx<:j^ Iض\ZQd& x\z|WE4_[WVMu=* } ;T @V6ݘ]Ri :aDn 6Tf_Q,`}_ӣ<w [7 ae;âQ6G-Ďۡi!ĶDV6vie'$Fmn9"n yƏN0ri09 5jņ]D>`| tJmtJBNۡyB'
c`x=`_(F
]n#R٨ @ =}< ]5ΓErFa nޟJ^sF(YLgr JȾ}Y4:ៜ{f,;+䞺 c{!k ]o:bvSWOQ;3Ty.:65ؗw (BYS|++)
8z-.)/<δgv5WMO]g^ k
07=v6L-j}:{
Hۑ u.ޱ^˸1M{S[nj֒@* C%Dng '%XND6S
*R$2Xӏ %ŶpIQٙ9b 64.`̩ cat4VAG!Fsd 5;_֍X 3aE=2o_A+ZG}A U2[w«v!,SdAL(>nmN 8
G9bDƅJ Qy ϛk_~5A!P"&S\[V+K2n4ۀ'/h&] 0 ښ3{pK~/ҋ2sHȳ jQKhBƅ!f#ԙ ztܜp6>`&mԀ4qM:qE;U3 NaPbHH }<t = j8ttw30}Jʟf:>EP
dAPS&R'KGZɋL0Nf=y7oōgԖ Vfȑ LV@7'OL˗5&*Dbu[4Y>9(5_U
.ZQl_^Ʊ:cY>ѭD S f=OFSΊ>/``D?\9MRmQ xW!y
6m_T~tr x 4)Wen H",myX;3 @Q`@Yt-ago ybDv<_&kzʢSmX. [J n|wun,/Lާ3 Lj;utp1+ocQ虎,rǢcfJS፳IH1ê^>GL̰]DΏH/})~W#ƈEL+[P&qd-.Hof^
% ŵ<'k2 -2T
QE 0qoW E8b_%D3
*^7{'g͍״ҵ3G6Ќ+4>==lJ.>ᗠXuz)K
q,kq'BĊDolO19 R/Ň}"Gp6HԂ;GSFz*wQڝ/^ QAAo,s*DwӾR_.j4{s^
JNj00?-#t?"ى+E'u '; p.\/W$Cju˾d"QSL#Yѭ8?nH I -ŮEP9{
z5ԺNɗ {C&X 5ޠ [w#}# j鮓{J[}xb;e~8/F6 ;*F}>ZDụC# I9ЮYlDō<뿄Gց:J*"X d>ww*Jb48ՌI aO) ?v8eۯlQ: sJ;>؞Q(3 1!.PG5 ]NF
sI{YaUtB[!DV`/qHCkL?A,P< zԎU \Nm Ab>ۡͲ#%D}͖2絘/k} bYǙN/IYA`ȖmߧR!fWLqbGն ly*1E=m..2sØZ}Sgz8h03cP.UA
14;)hًF\o=Sl~6*߮7 /^EM6r:NQfS]6
z;J0zL>qp2R1Y
uY.}3Pظ MܔeMxELJIpZ7*{b8~c:VHѧl_ʥ4sFi.)-İ o _bfPc )ϳÁhrp*_M ODQn7ҧJ
8#{pyf7҈ٲe֛sHG_oC %ѩ&t\zl)Jöv)Zk;!U ~6xcj5Pم=E.v_Xe6ں|}wWi|bioJe _0e VczxJ2IuV-aa_P^gjmz/]SE33ds <2bpX9:P$oVr;;X-爉21s#rЀ8RzR@sid+O̾/+Ifiqaڑ^@gɶ
|u$Ag
gl+L5P.rٴzn'6X?R?3b3dsbGv\B112k!]N4KwHR ԩHf{mo|u,~bf?-ҏL(
c_Nnm n߀ ,dKЖku.n w 1I[?Ɗ 5wQ~Osp1NPvMSIUU3C;RI9U2o9C`5 w0EOvFjo-%aͯs_ǜ #d%2r201yc(=bt4oH #Xf)pqgB!x<" qOhh :ebP $&+HH
@db`;qッ .YϏނ=uoׄ JN3«n6 tے U2#V% _^~nvD{S,E˝mÀtg홬%ҁrIYN˥qJFnpn7UQ:SCh 1#CBYV&Bي +3rT[P:4ed (5c8yW/kfA~BkȮ3Dْz;g;UYj109_nz @5p]w '}(Ƃ9 v(p.E0Pb,),8LGߗ݊&;G2- \>BynPdkaΩ; 9a;ICֈÛ$\`ᤑ,^{l)p[I^N?+IYTe#;g~3})>|M !F:(N ˨". 8bTѽ.j;S
" eK~VjeY3F HJg j"u JlT* rtZlbv@>K.sifXk<җYsD{@ArU 8L';qꄊ'u vnXkYϜ;b mӒ'(u:) %߮Mp|h5mXRQY;ňP, +]'b) LA4 Y]r/[\&+Hw'b";9{,̂9\+RD?,&꘍ .n @WldZ/jS*mcE?? #j_Sr2 8fdKj0]QsZK9j2N˛̒ `z$& Vti
|rжT'E[ݹt 2lH>"QWX*&.=8bKs9A4ƯȸZ2e o|:vb H)rBx? L, u[u(DR1Ϧwx橏?03 ҵoX:HPTbo\Sş{S+ - 0$OC ip[hVSX~%M$rΘ schN+d?͔jf?bY ؆k~}{ܰ~
%5Ϩ6-;]DBm{,]y̏bF@ 0vԲR5b'Ld1*Fڤ!T"҈ZlIjLwiY}Xس܉6iȆqU/ EU\J Nޟ$Q":]Ío+~I_pMY !9xף_sQ/_ܾJ% Y02 9L҅% [\N'x* SRCcJ{FKl(
1T) ^{( VUo_t?n/?&TwxSpBz6 U1m53
7НskGt<|GRQ56V ՛{.6٦# W:ؽ*VpFo*8$k4N4a.#u ?$n7,rIsR;$[]* 0 ԢHmaf EmC%"Y
i<ܽpeV(
%&aX o}j.$3Mn?MxhIk
f~kը}ۓ2JN~cvw2OW'i'?Yi*^` tVWOiM$[4s6 rSޔq\>אO*N(H1?Xz"75
)A>oP>3e]*P* h+`INԧ*k;eܶP3K@࣍>˙P6ڍלTMuW>"-(#k+yAфJ?):_]
=Ug]&U2P ʹ 'юcq)wcI ,n9]V0E.Fs9PmĈ8(EԭEcO1Ec1p;@ M1jUbN 0^hʂ\8u QXtg䁞LN/3N6x|sf
15݅CIJ =@|l ] z*HtT<9GP a!Š_Mi h
Kq#
M5x}.$jj՞$
I]WXij=Ö[ _`n6kP3{ DJS[1^.}j I* ɲEA1ll
qnI\KujZ Pl OH7J M[65KsΟl& z?,ڢ7/,҅Nh%|KLBATo? 1FQ
%A 'Y\]{ߑCҷ[{A IfoƳ;eE啡xq. );TTm\C *`^ɼA*" 8xj "نPk1X ںVv 3Xɉ`
̡δ,O 0L6= Zk5Q6XA ap˿iv?:wS/ص)wM>+Ke
JAėz #P #H1./*thf&gۧ[>{ q=Bt81%Grj/Iy 51ua?&wQ]C4𨒦-+DOu!.JߍѸ[} ?HGހ} Fp
`(:1ss!H/Fd5hY
Z UW&"vRfPJyGw` M'ADͪsTLA^-8.l3% \0WtØYPMui .FRvפ䊖v폵A6ӒuiG':9qDÔD -bi9lMh _#3yk!4jQso,T$Idޅ
?2RW O._@ Zj?J2$ZTK߉ DG{JIt2guFA$AR\'חStB.UJHّь& db
%ˬ+'imJm_l,7ؗsvpdrh%"n= "ʳ e 0W> HE& }UcjD9c߰LpGQ
v_Tfʳ6OSOChxA"ϛpX$D ͋0E9p8AeT{h`6
{ kuAy-zQv݈躺=D8}Ȋ7ZG9P2 %ơTOa@=fc/J|}ʒ֫VP0GX% r] .;3v[;"ǩ+o@YI fm D(mSc+`_eIS<:=ήzmT P)[1| }2/5
;#gg~
ٽ$1CQJv ܣza:F)kd#6Ǔ,%aZDkݡM/fDus] ֏:hW\5/O\'?q ;F\B
[ݑ}FdRwYsۚ}%bwf,֊kb* n!qaL%9}b$$E^?Dv~Lp]A3T]meŅ k E|/)4ZBom 3Y qgI
wC 9hNJ`^1AxQs0_P;$i26y$1iu, ryְcw&5؞ dsoK@;iJ Zf$`By WFajtk hCsikёAmje2p+O -Zg3_øfh{99S_dݐĬt. ѫ&w"r|
i`n:! B v\Y+u@9PB@ꡙ5Ol꘨]E`K\{8-e˼u}rIIWPaP5UK^ K-h;B8\6OyF)]LU(G{h4 ݓ.+quzEz!g Fp矩 .*L>1 NVe{ Fٔ+*]GӉSlH<1^3a5=?TP) ~;& eS2Tn
^vMm
5.tmWQi7
Ys1XiJfdz NٍV{Sn&C/,1^L UkmKv;,*.D[Xi3 Z>? -hǃt ) f[WJG=3ِP
UXzEјUD W L' ě #AS?%{ _wn\@XfCTCqA{ 7F)5\ш" ~~p/omYFOn*s%D: g4 ~Ɖ C 0~8=ua芵po۸={.Ⱳk6t~r
ˉZ2X@q>a(\n8Y
sHSu4^NsSk3gQ4 F(^{`ϖ)`V=>Q3XF(; 8^26^6*/ lf"YT \uJՁ,{z"/hk2 &0v
or҆v/W[2,c"iD:T 8 y4 = \FDwe\˂҄fqK-cWG:v&k+ŨƸ#-A t_*>FvN
V, anp(&UQFWn-6F_
7THu: a.{}]/f̶qa5q<'#L7_igeM)ׅ=uZMKJZX8(1iYQ@L
j N˔e@q+;fށz,LVρ8_UC\e[ AP[X (ʗC`|qӹ:(I%9%5X (6ȯD2h/f[K +6pj7CIMևU'VJ>xA5
GC/֣җ>B~5{WrTݨȑ . mm-9bBjyR
^AMTbۧeF JFtNqw⊌/]
AK;}NԖ|Z >2N(ԧ"v`رS4<_*Ȋb 4 =3 'm?[U-cg1K.7T"l sW$zW C,0+] eִr xˠ>qkF/(/gQg8")Vn@3XƜU(ٞQM Õܼ~CFN[խ ]9粀)2I;>Bo? ?&L]9(EP*ff /xب5@H,Zn5YY8'k'4VK> 'E$+kW?" կǠ}#8FJԔkٹtؠ6{!'JxˑKnL1M >wNh yS|jPsFGiTJK7u|-A9GiR#Va!6yxU
. H
&ɏEO N`tB|5ۣ#p $B590U2LƸ?1r rO/"
a"Or/ `I
1/r@ Rȁۑ1ͪԠW8f8(Т\ΐ
mKb6*G\q"v _`G@'qr A[ W-LCknDsJ* %gk`6b):0B{@~;Ђ.۔̛ݣi DB дa"5lqum̮-P/HU5\ŤKnj)qR 5OD{k)E ʨt@4B Z$Zj҇Es0?XJf{p]%-w4D?qax,5,7R.ݹ(NU!
#@3A+ゕj;YlR_Xi{>Lx06hHujUHK# 2HA+!`ϓ"ߛc5zC@C~H8S RH*Em'oB%Z[m_n0JN= A :gЇтe"rG{t(\u~|<""UnPn>@<%Bel:LjN PO~ˋ.J L df~tP[?FRc_7\LU հ|mՋ@v\;.$
Aqs , 6(g.xŎy+j{lن60k%ܿ@JÏ:1ݦ020{(d"eZk X ?DMjn7 6?5+nP"7̶@K |(QG̩Q XYYD aHI5yفktV}z p@`Ck5,bdZM6Z! ~n~B,<_nE{qf5DeѧA+Y:tms,ţ\!2^+Iۭ(+Rq4i2o>t@6H I QpHuƁ(um0l y\
YZ