openscap-utils-1.3.5-3.6.1 >  A agp9|"c_ |AF*~Jzaz"[< h/#&.[!ynލ~wLZN\uQ?6fHXv7[b(ڜ;՟DwCn#1n!{[z0a!b~~#6O)X\X;,7v]E|QK` ˜/~(H3`opF?td  0 #)0T   H  v    W xG4\(8/9/:/=>?@FGH(IXY\]^[b$cdPeUfXlZulv wxxyz$(.pCopenscap-utils1.3.53.6.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library.agsheep89՚SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in oscap-scan.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fi P; /'Rˁ큤A큤`ag?```ag>```ag>ag?`ag`ag>````````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-1.3.5-3.6.1.src.rpmopenscap-utilsopenscap-utils(x86-64)@ @ @@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.25()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.5-3.6.13.0.4-14.6.0-14.0-15.2-14.14.1aG``r`__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@steven.kowalik@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- Since upstream has moved to Python 3, switch the BuildRequires from python-devel to python3-devel.- Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735)- add old patches - slightly renamed; cpe are needed (boo#1186735) * openscap-opensuse-cpe.patch * openscap-suse-cpe.patch- openscap 1.3.5 * New features - Made schematron-based validation enabled by default for validate command of oval and xccdf modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added --enforce-signature option for eval, guide, and fix modules - Added entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report * Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added --skip-validation option synonym for --skip-valid - Fixed behavior of StateType operator - Fixed some of the coverity warnings - Ignoring namespace in XPath expressions - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about --stig-viewer option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in --stig-viewer feature - Added dpkg version comparison algorithm - Pluged some memory leaks - Fixed TestResult/benchmark/@href attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element - dropped, because not needed anymore: * 0001-Fix-memory-allocation.patch * openscap-new-suse.patch * openscap-leap-cpe-15.12.patch- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shsheep89 1634197696 1.3.5-3.6.11.3.5-3.6.1autotailoroscaposcap-chrootoscap-podmanoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-docker.8.gzoscap-podman.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:21511/SUSE_SLE-15-SP2_Update/dc793089a2ff7282f351943a10d83594-openscap.SUSE_SLE-15-SP2_Updatecpioxz5x86_64-suse-linux Python script, UTF-8 Unicode text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=271cd07a8e1d659ffe24c57bd68cc57b28c6629a, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRRR R R RRR RRRRRRR1YUutf-815b86e5ab729918f0494373fe412d3f730e7e51b60be3d31a85f907de1eb3513?7zXZ !t/'] crv9xn{( Og`s-!rg|C/}!`Nt g- CI`z#s\[#FpC!FͼʰUE̼t5:g+-k,//HMaDjqG3yOR9Qq(+`q[ ^aFi#K|1_c>oaD?KY]WNC"Nr(=Db)osp@}ͯx7Í {eNăUi9}M_I qhR/c5 Ok)ɘ1s1~iBZ4wWe (+zIJcI7r wh̆ OU)Z%c _͋4M SX͹bWJC5A9 -î=c7l~7p-8e/mީ1.)m Ɍ7BB 'Ʀv%Jpb{Ym!fOi'|/Z\>/͘)P`g+^ҧ\p`eqV"`!-I)f㝀y#2G,8>Y-vvr=YyƇ5FgF|4 'j:9¬m3WŰFH _! dUoK y.,rdT'y[ު 8 `l:iف/@ca4=T A,PyP"TL@¢ {VpM4mhhNR!MYmr&c6 R*,[h=GЖ ͝!fGCsoH߳h{aYBH惓D=XXvi荭љw:XR\(BM{dD[M#Yg]*Z,acy.啹kmx`-p# q6E 꽪ãXC2'ӼBK1KoTHiN-i6ejǸ* QDhSB9|Q=b:]5yp7zi}=_E v)|[_˭'yYnZgh|lN3T1O˹Dž%VDS{'w߯ yԊ*̓!sDiX&`eGoc7}S0&/G9qvvS$kþ#ͨZV]G |ƿ|y l衤]lf℞`=w]icf4&%B0ߣuēzT>~ᔫ2Ԅs8#tX6\ g$ W~$8뜀Z8DvgC|$ Q&U8 'FQJ.N~Q+V0T_A_-OЌ_<]\iwUGEĤh\.7FD>B;0N"kET H.xy (ta0iK@gdRF#q)Əsw0Gzukvx aRtZk_"hU!X/v@K[1'c(S/'$ FZ R23f!Ky!vӑ}1*L'%9Ic0OhFyIKj;2QCmF{tmv ij$ڝWj̭||'5,BFpC2pϑVBQ ulgo 0 cR:n֕Di֨;ETõfRcTF )I(b2'Z!|7!n_G:6}'T3q|CI;E -s n8l谁Kc"Р謇U?|0Ns#ڨp}W*ё90 \Vf*%׮S m)N{Zac p HbygmA][CwǃK1t7u6&`NuNMa Z2PP'eh 'W[ . G<4C;bQIy͏S|dC&MiȥzU)wAo+0Y4maPrby8xd=,d#>SZM׭ἯD֓14TkgO/jVѾtb:`ؽK:(?nF2&W6yRA8¶.Q4)<MgzL)֦zz( |[}+bKïx(9rQdߟ߸ks]Yx4Rh 8#+s ES2y!9 {R8T!ixj)Ӛ3hIN۸c_*xcGr/*;>)*ny'ߡDf .M_3L)"FW]AVIUXJMn)U 3cDS1cW m/InKYbm1|ßKIR! u1X˚]AaiFڨZ~n]vbUG0hƘxC;T# .U~"ZhMB4&-qc^>l8ƓR+t%h4bkYgJPUXZRa |E؂o!&ØnN1;d,@LI0\0SH2Ũ&%%ŧ4 /5@Sb/\ps9qomBГ5?³ve>”Fr/2!Ծ'Doښ rjU#L߆K}렓hK.wq˕&$+b"?8h,1#)@8|j\xJPG8H* (`zm,kiQŚ鎜=347CIz~FZ$Pm:#* rHK3 \QygG0NT ވ:34Q{`Ԧqq(:frhNz8$ETND$8'r8( QxJC˷k,Ƈ ]`˞ͤt% 镺TdNާ(pY=l7#' @ $$$UHO{gb|Mwam-$a<~OVíu80?ɉ<'QU!_9-?+Ӆ %hq-:_q<ө¤wXo8Tmu#Eú;]nk;**MRfa"BEoGM3}G|V_ʙο{Ӏ4o{ `V(ړmw;& 40)FYQM_\/;y=ÖB7T;btTW:A17Yk}) J,2FsH4JEL'vNH-z}UqL{ wN;iu8s~m(!働æ^ӳ]n$qX>-(ի.]^ĒA,U7Ȋ]kQ1;r䔪m1zr9 gL+NICoBQ dޢ|)䊖أa[!k qZL@!B[sO`G }>55Ǿ"~v ߤSe;MǏ{~(bٖn^/Kqڜe! 6ތO>O)(9vсk=@_;b٪?m! m1Ӫ;rE5jn"zGЂ-U[rɷkWu4ւ 6f4ŇrG$/å Gxef4JO!( A:yH< WO8+ЀJGL`~Q{ԇʺƓ00 byizn٘G4ҁcOHԙA0ߊQRK.Y\#D^ՓUT P$ B;X!fwF.&(lfd1-^6X:<ŀ%u i1᧺>ﮣݧ`y{x鲌n'jMi )DPOS s. ϲsUxq?R3BR.arQxLQܐ. !0^y݃1 d>dGsv~ꔅ~NL0 wGUaWOMx&2+'#`f1[#>mŅ|:.3cVYb/+mьJ۟\`8]tq9)D(G=%yj'5hw6A`rSJؙ#56ip тa\ }b!  ]t mҍ<1@gm"0ӊN_yBaffT]._3},!=)e0$\k`Is(n3Bk7o7b%环w$b.ַe]!\IpJp .L1H8 -^DSo4AxUmA5΢,#܌2o*o@=ϸ}H M߷Lؤoh /0jpU?ElZQC+&̗س>$qj&"kq=` 6 {;G.O_3YAȅ[pAKF301>X+|qw# ѳ[d$'2^V׋v(6{AĴaL lX3Y#X:t/wWb+sPAYQ[\Cy^~O,qCoQ=Z6#5˃'VOMtwi微K-XqvĊ2 V4spFF#}+Ew) MBZISWZeT1lT o_:)K\M'Jc6EmGO#5{pq&YCHP}sx{ϐn^+v٢hwx83j~׭@?Z+ȋ$ -m[H&Lg2~pD\H-FDPV+ r8ynF12Q t_|/tE3yB"x C]̯ ^Mb%kAj)ݙncNS$2J7>G;]aGv`쉣"k3b[/P?MĖWR%f؏q@a5!"3?iGg] QxcE@~֭i5 8)GFLCB} rқ"Ew?JbcbPR]nT&eυ٠.~|42l{ƒ5NSQ~ ٧]oq#5k"՛ϕ Q++ Nq6i?Xw,wclu$h*(@۪+XKvKq3@m_Xng)}:I&=(4Ҙ\(wfRx[}Va&7@/Z$wKnw)R۵:a"!bȲ[+qS7]<~(OJA'CE9F~W[Oদ"RiOn __h;z̊pgZ+kLxpq'Hn2i a91@fr oG*gPm>8a sx^w߸XypQpne"<./ Y i( RaTO }: |[ ]57 +~v-wS5m^Dl~(]u{$qE\d`^cSY f-i_~XvnPpF5R6zXII¨9^ɝtFrpg9:P@` !t:aeQWv36G^US=xfGA tUQm*۫)<+׬]t=$4rn$pk0ơ&" 4&&SaWIvwU:`3լތп 7;*#aY *$1ˬ*U ݕ.1>k#=&= b5{!'~PȬ#MmeW}3ӗי^@;3Jl!sO0``Jb|j<<_E9hF`d?U8\MLnpLwx&,%a6&Wnٜ:1ZeQPj\.hTUMe!$&5bY fĆ1&zm"JJbe'T~ĺP {f=ӊ@p hY>V`±u9%e:)qܓQf΅|h*/¿ R`MŔԨcps#qk1@L\z)>Z]?}y4𮖲>Gd0ɡ#`.Jdi`sr?L|0bC<1Z &tHPcGԪݎz Yӳ[F [HKYCI㹧2(塻Y#MWiC䰸6 1 'IRxAUF-~ ;f\ĻZ*] gud1W 圣ƣ!6JVoIszj+lfC-BEIAKAav"pԙFϗ5 hA8K`JGD^9ɌWmao!Iu'18 C[B]b -2gZ@_mB <M1'SR((d\Y/n#1F ʟX VcJ :hd^93n+O4> 2-X5\41yϑ.[J/EFݑqgx*K;bWaE.|_] Wnj }%-s:0E"y?Ȧ LԭX)v Kt3h12>y|Mqo(\{|8M)sQ|*辐K}t*YC6q;l=y˾7.}l‹:csi%5>b~Po>{T"yuPXNB@S(pDu*h󭷔YVccփS{ߡ΅?Y*Rx{EH`xFYðy>""ּ߳3mE'n2) Nb;mM5q#Z;*Dф-.C9f zZ=́H)[@n➳"=6hˁSכ/HeՅ Z69\[D=U1u×sǪ$bjrHwX2WqEC1 K4_i ea{` 3??FFܫgp4+"`J jTN(k~= 1NEpLwϫ!d-pWS k;7s<}^-e[ew=i-d1uȮEA{C_>|8rn&ma[=>F~x>q+gPƳ'CL=@uuO+)'*QTE~PrH0qrd׈czPrΘMh94pm94nEflӋ)%M¬*6,HP/۠WBdwC^5Ch m3\8Y:c)t5G b0ˠ7ot.J -4|rF1X[sz'KQ>o$'A0P0ǟھ`dy%(b#W!3E[r7yA㹐729pw!gڀlӎ 77^R_+6"O~! wwWL+[LtGJV>ĐѦxRu@[3@$VV_ UL8Բp=>t3:t#1bءCV?ܼվ ) فWe7_@дM@FT2+5Nų_2 D z aT<#4ٔxz  .1QOmЭ KaLJ8h(izh*pʿvϡ3x${mO@Xw~qu8f2Ҭ^GLՌ}e"'Yd0f1?}oh?+P>Hz .UG{1A\Uj58@QBR>}eBƞ݌`N2"J WHhh>>`hK5O>Mqހmˤ@Xۿ}cF)4]rh;&hE#Q"Wl}eŌ2)ۣ)E6~ALwϧ޺7YD| ƍx".qg~I lі ~ a*gNjCd aJAp‘}TU筵R5ofiqB/ıU$Tأ +(}EX Em?%I$, X7wGgeлrV#Fr?s0U3tgNO|̻N 'Svmh>vSY0쁧&MqQHʚ'k!ҞYuN!i]B_PNBD^|iT%@_]Y&\9Ȇ :!>ٕ%kTڃQW lẛ ̖B9׬t0XG0j`LH[um) pw nQ{d&wq;*^ZC*3yA3e8]s(-9!}AijƮQLWo3/u;Ä% ՃV2=Ff&f)/DTk jaGTxu*w~iTc)֜? i'- `"Gn&O2Upcr)6t؅E8DL7âND.3N%=|^qIG ``GBxݿV~ĥ)].)ak@Df$D I$3:|c]8KxO(mВEZS~-Y< %i>*GPMm/W(0wS)q 1 ;[QFҼ/@NP\-no_WFg>6TJ΃R#lC#"C EZ^s]bB Q^OT+S*p<ټJg $8v^ '{! 3WH*܄cB~3ّXwxsl RIȞW]'']fRfAp*:# wݛK4l} ϏcXdls{cYOD`;ؙiW ?z{wq I%P(v<KpP 9p-$ 3CaV*QEkD&HYDsmLƒ$$3ag$o]Rq{pcraV5?dVf7Z A=뵽 АԪJCgh_mHr1Gx@],hnDNQ3N-+*t( AB+:&An)4־cIr\CЯ,!/ WeJ[S-nNaF1YzZRTgL7/D^˰ޙ vQU?͆?{B̍=n;J>v$Gwu H/]%ms|86IuCn^\"f)ClSV1(y > 2cIEJCfdHS2VW!otNou!” Z#p=.)_ `3<2J+2 ;}#6:?H0kW? b0 p r!pYBV״h3+pDIxWRU(%Ѕǽ5꾮`ka;_rƞD^S_J~T1tc~AIq|DD sgR];"}~K21};鐁ɢmDSxdxPe'[\k!TũZ*N2X A. vj²p]"L >֭s6 kC>dMٜ;DmmMD\gP]}b)kLR(ޑsOmYi g"+Y/D;Oѝ>l?- ;' !o#ǐ6jת Ӭ#Lm. -FTR`t4rmwFp$k6d5Ȏa69\^.yiC ` 8|{۲%#́hNgQ6Q`4O r^5$B-}mUQCm^{ڤIƠ>ӭXd9yQV2:, |P6u X9AϺUkiXpWǂbTqF2cew&W>Fv:54 ldR/GLw JNӏd; ?qnWXj7lJ)W¼-,ːܶX7&Ota_ӶV]<3lNKY;:c^y2J<817~Jk[*zbT!("kgND˘b%]ivr œOLDBM`,:mK5 :arUkթIvv,<.y\$~g@ T8c*ut(kFTf5YT9f 2 k8=<4F=De-@ g1GBѢx)o[j{r^]BY#E*z9ܹCWZ> F2b0gVglىOΕ/gFIpr͇1~}L`"A/RU蕏al V6Cbt#3iq4gY7]k4c~wE+GEK=Z_ ۦRI}B)ҥR9p (E@ivW_zf}Ja2vieh SMS#f/)Q~[65m,}Yr Kid&(Q 4ǚu٭M'"*1±,+=e!s,\[r7b}U_rLzG`ZθKw_$I{=Ho K /f+$|X[l g=TԼO/>ί> jmPz9g9e89Mr9&i*j۹SRn kA3hF<߸N.f M* N{ed>h:PQ,I_䤱-{jV|ك`>0gGF"9T{pHE%7ˆ\5?f!Ii5!O- w]=."PP"{hCi5F-dE>YЪgdRLb|Vf/D/[ql.xॡ9['lx%l I.DwƤ%VbJkĶ *ZLoGAx[h6.]Z>uɣ@yq;=:Z&g {ȍJqQߩB+I$KDǵ_O0R8P2N 6\Ҋ }.+7B}pStiށ UARP=<Xה4|r#M^|+OQWc@I$\ 9-!ycɡeɾ)޼`ɇgq@+'&|ǬC԰ Q zJQp!%6>GM[ C*4 gV x-P ܠXp؊O. $ Kbl*PJgė7Aț|Jy&hlXބ@>Fڸ;tC=IQ|X} +;D JPiIY j$Z+8:f7}ieTtQV*S3-N /dZ 3J!Is\c}Xy0 J,:-Bo{!Œ0Jq6td7| "tJVv4̊ɶ(y4}Q-2W`NnOǏwX\4_5WE?ܴK(7tu[\r}X2jovjv[ ЋT!mqN35S.i ʜX<'tQ:iud(\SAᦘzʖ4꽪By$=cy}ԶGcHi{e#k۱%|)d?UTP';ΩmBK:VD^4Mj!1RT^M͂z HW8~=Ǟ?ȺtCi:fO=MLd8lU.j)+P⮡4 K[&oL(g$Ҧ`L_ vEe:LI ֗'ffD݄•"}E 0HS{.fi䅳TX߅V5G[j,KL:]ZT o:^THn1*BNd=s ([ژHv!d?8LUC @=`Bһ"?ֻʢZBǛn2Q:a_ӻ[e~\j̴sd),UJyVg[CjL%ȗik&cR~a︢nsK~Ӑ2/EVw9n26jli % P4;ZBXDpayѡtth)$?%` P?piH3VYWA9 `l5'1wC/\ Y9y"G! >K哽t SkCnبR~CWЛ=zJ*0fl9ic‹$ %?_ <ʽuhZZo\Vr2nzqRJ^fla{«mRUh=d@J0, -_ېoY2j!ۚ=ct豔'_''(S?ΨjbőT4HJðhۀ  .=84`"ÖEb{>KL|f?v@Jշfퟦ08Ep-`_TY-N5" Gjq{Tuj*c1dőSYr N[[z_ȹ.*MSX6?Gva0&iE\FSa8to܃+~vi[W?L}YU=ftbp3=X*/e^\]Zo hщMI{?0 >wOrC SICֲ=!46iBӮ]j|Tgw31qoS cΘlTeu7@ rDxEiaC" WƘgl(^D)xY\sE j%{XbcdsD%&@2`< ]a=U|?f>s%[:-@(P=ĭB?>N޴4G$ U˗PJ 7ępnz]ՑÔY"TȡOcZR Bm|b5vR[SBEZM.DPg/FY(D)7<̯f=^˲W)'5yl&Uv.k!h8lrƣ>J&Yn} Liޫod>Ef1SZ*:4=B:[xm| ۡ>*1,O9X+ҐaU'׷#9_)LM(8ԺΤqNGEoDnAB 0hsa72%(s&9t^(fR9&JJSy&b4q(ug͹O u59Bmbq; *_:2 moI}o]74xA-%Aأ|ن[$d w2\cD70;>U[#֏\qʥiD C4C5 wܧK-ڑ3}ZR%^IucX0$>;do9$ކ!V^vQo Z%72LA1l+x3sJG YS »RU4"'U6 &7niT5ؗA?Ń%;yji5c1+8Ɩp׶sxPWWy1 VG_o`bf2آ{K eAUƣѱRx 1H.qpҘ00IEUɤ$?d-\FVsvoY-8ˬl~ `]ӑhLc9ʓpd/b )FT/(Wō}KvPNJøZ#&}yLX6/Ҹ>҉hpP׎Nm=~,_+H8LFL#q#k8?L`WeJ]28.`_,.k?ǒzq;6E,xy<~$5=i_ڎpSV{F Z~0q+:}2'%qOdjPDϰ(8wE/-:춹\D @x[ப!crngp8+\o%`Te d;p$/VUt . ھbWe)5U&(w dcBw[ca% RgwZ$jiYyu YlMRBHM 0Oxm@q XBU.ΦCr"'}bRwO礶(,3D/(( TWb[ZZqWm;# b[ 8>Θ[3Fx}\ZgPk]j}6iºZ w`4Yhb^py_J9,\r+^᎚?J[}=x &6s(ˇp>!!&@ }^ :Ju%x%'9Q:.__ `Sxޗvr&YFYd1aB1"YOzs:.hw@M5rL&U1O?L2CF3{@@H `p=΀+Ǭtcc;;K^Z@n29v-urJ6dݱtEC`|(܂Ǚ^'L$Ѧ&wOM8 A5E[łC[~xbkN013`ދZ6@`0AqqfG7wOقe˨|z FLfY>Eӣ =+Ed:[2wCq.kfG[bv19•f,jɿ\sie!_c0u9\`ste$gk+$AϞ^BY͡fVi催(^"D8$^0 UdA8&~mE1 8* Y⚵B (Ô> V.6'x] "yvV;+-#r>d[AǢ9 u`7:9QfY~B16Їs5`V✐Մݖ'a83ѤT[&LLZKbO\{0 Eh kUh%5N3FQ+iPX \G~N9~K52Z(]23UMI r`xq8K ΰ{ynv.1`e4RD=ԥU3:^XjeOl]K"yhf+EX5v;E._fin1z9 ΆVځik%ZԾ&C=ժ1 I{JX&-U&8nrzfk<&<&7Ptjpi\tSKYTROq._=zoٳi,gl)լS1I!l: sh^n<EW4_(i*q?[XTGVmYgֶX׋A>00U) x}1jHLgD$)]=}9bDjN?v&w v=O0⻔!H:󋼳r"g|^].ӬzN[GG,swԹ.954Eʦ4vG$%B<8@;odŸ]C4J((SJ䷃?IAeB,wz"C$tWnol2.51ɦSzg/dtRNC9ҨpB#Va bA-iuں0ٿDw58D7eD <ĵRU绳Qs .בMv i 4(Ln+,pS(wX_$M75`PrcKaӸXbmcf INJeJ0%o:(pY'8yч`&0l ײ<UKQ'3oy^w]N̥GDIJ3\Q.TyV5\u !2(޳G 4h&jXFo.c|Wn׼[sS@!S簹sG.86R'> [n22 Tǂ\Q9OUM?*tw6FCk_(KFHZ@*9Yˆ֋ٿ=t %Ǖ] #p d+n O-qvs8U "h-Jc!s9̂K};,p¶Wi`ܲ‹]D{·kotO܌t0vkTt('+i/) R *{]ѱIBKDZ E~k6gMfLxjqfd~?Q4!w9~ovQX(X71aDbC" 6 Gl% _L}T+LYv7J՘ڳ WqTbc&OMBj􍑲ݸwr|6sc&s 4 RP JAJ0F& Hn쀖*9/r|6ilNG)H:Z6.'QeNhJZ@R!0tllE W[]|8y_o֐@#pTso iq7jܽ6x#< " BJ֠([QicKiud@.l%=(T/SH;KS;q RN5?;u*ʪg~Ae^y@f6r&GΌU~|Д!{}Go/Ϣ6?UVչ b굒ڱGxvP1'}lFRZY7@{^ dY+%<7 Mt/懢)d$ JTV7Tv/*+*DKJmQg9p?ѷG%{֋?, [|̷_R\i-_/ЅEJ[2xb$f@~kU7c_S~֗%qz% :nP.@nSB~[`2Z4۫[7A\s!bJe0_< $c02 }u:#wz)qr^ Ukq1>(|,2¬Ǭ~? 5tmwW9V*)|Cxu+L Ǡ:Ʃ+t5PJ%S+R:nsPO*Pt}7h-hG}#G*Wǎ+*hH6D?ܿkUUőAŭT_r ' sOez8k<]vtB3M< o/r8*ga]+%PBTңB!e7/e2ʰNeOX% Q uP_d6 ` 7c,C8 i\ p2hȺ?EZ("sȎ"b4R@D"L.IUQ42%JWxr,LCJb R%nKoRsl>=ჟ h43+GUmplzc(9Y +EAlq;l; f'-^ݼC/{?q~<z;\ v-#yrQC,rL="x%0.ń"_! יx2b0GPSO|P1n{*QM`AXnI[4KȾxl@X)8i0ۘ}B|߅eW(AZxzrm~?SNQ(;e 1! p5Dah&z.Xdi%k|#mPpEP{tߏku&tN\W#,(K=JH9׊zMP$>ZWBQy[bWv^Pyvy.ϣc؄KbyT3,"tL<JF,n5׭sN=jب L]B6BvwA"݉(^#<{ޯ3dG]9=.'9Y})w5&,y;ޟ4 u['V̶6djHq7D0 5_#FѤ\>o!RK͈U4hiz&6~݂`d[ |BP&Yfhy$6[2qA|&d"#CcTR{Gfi*`7sc*T{~ VPJH7s.l|>P[4eDy_ &O2,U-uB쀟9_6`W1}`@qEE<Qq0oQ - O&H& XQF_!Lj#]; '܍ptNxjEC.v D;WLpQ'VEE:h:1">iJ޼-5YIaPG @5vzس-)ZsJV7-#hn` 0֋!*$kUSU!>ggNni%mHXq&KXڍ"nO46wtήVQ5;w1&{WAYH?$x;B͂$VOڕhg.fAmnDM/Gq~nh5=/nxн=N瘌tf~n*1r v7-vɻn)E<6vY%5@c]+& W)X-NP$QG'9p5ƾW Eˋt=h);JpgWԏWrJO 4Y*q]Ka~XoMon13"ݱӤ"ɛƾdP%K\tb%TXI 1D0IMo~E yV~ax7<߆} YX5^yÙu#dYu *JӘ A6$s%yT}>uHDfu-Zd1/_.H”oq1OϙS'{|~kPPҾm;! U:o'%/]UbwA^aEO 4N%?Η/0g/ݓ1ڕGI3g4 )P?MAWuי7L:>#xӐ"W}a+-5\-k%cp5ߌ=@[h16i(+솚qD)P" 㱎.;'=^4 Qc4>""MvG<>&h[!+zU1>-đ>9anөj$msS@qT@rNkע3F$qLwOg$L' QFf"<%1j(t+zC{Jx>>OUP-&H\S@ \v-nݝAgG3]PFDcIj7) gtŮt]D>TAw^ۆƕzFZ=:T%-Tה*"$LdZ;ʖ@B 39_Y a%t"G+B:08$b{}"u7!6h%`oKƠMfydɽy Լ,$d3'-D2:黦6Oj' 6IK63 k>\`Nw?bX,³Cmi&v8L6EJ, E[@f7y!8;_]ZF)OuJ0_\vZm}~%7 \OYa $kx()*#1XEy˳.e51V,6) -]kƢQs#bO“ACd_,(D ˲_Ů +kK5@}ҍ7 ,X&RK t+kɺ&l(c%6>CZf ] 3V{FCX3c_W i ukʁGgBXqͮ&J&vnj.Ԩ&f^-m(ћ)% v#_u .lͬ_Z4ܨPE tQ|7E@-lޫD^3oAiQ 'Sik#[ v0/12SH|!σsT_%n]( '<8i`R'8F'w9/Ƀ^SWǐbsFVhГ <IeU%iN ꐆ8h8 >z2{  VQ_gy\BP%C仺#j⠥ěTgBpg5Z"Q.Ն#LcVtk =M,j UA9J^SV1,r٤%8ȩVN-N?d/ Un$iiC5ғ#tXRIn3Uq S D!_hM_IB&^s,lŢ7i O+nY$x6ՆF7: "]iNu$knsGF3֜ԱWc'|SV),V0?ߪ#?im>g KHlg6FDE+>eYR]n\g+؂K?@LvMJӇ,^o| 3hɧfn[*B14f1Se?&7afXזv4b$__w||n^fFlS 3ZH$raSF&]M[_XM .nA@p9[$J >}/sW?&-<񬊛b60_g݅1%k6z"?zEBkf1`3 f-s%N >#&> q08-~b]u3"">~fm"ms `tL"Eg+xeri !׈: h+{o?8dV3w;kM*lUj nvݢAFH &G2'4?>ͰY@0f, ddCîӡPq޻-I?9Ef}Qyv ,D RMEXM$Y!3RHVl%/J-f}W!-RKyrXo9; !`"iTA/ 2H&vQ Xt {L--G K ` bqQ!LWȱ->o>n?Œ2?ESJ3TE2y Te*6jHA\ :J{\F+eIy. |2tFjNP H6#uc_u ץD?3!%p[ȅ06};&`ʧ۪Wy=Ŧm✑,n%a<*Ӌ%iB~8`MoCu$(|O9{XJa N#m.hvg( ʥEVeƑ"@ny*eq!Yő&qg-qjB保#U!~|]8Nu3/[#!TO%G:w$W&!W][<[qI |!<~%Q"uџj[e3׷c4"Vl:GEQj )%à\@# ې6CH5hok* 8C ͨ RXM0:;%+$J˘9' w=T厱{[$fFZ %Ԣ# 9nяM>^nK: ^}n@Fp0eS!Шtf&: nD eѾBj>P`&<%"7~IM^)'sѰk/m +XmEv8s Y 7}>EKO [zk3n(_~V]E 01o.U*mo`̑U#LK}{LEߜax @9gi]׋ Ȋ#0/&_ -#9.Z7gt윥J4|omǫ>e?f6#td+G8}+T֍CSD>gZfG[9(C/J24;e󤝖 A}auPVޕb$δ.CV2$k`8{=}nѲ,{ؠ^n`~c} 47Y,mC062Snl6*b̈yI胎׵m n&SX,\44a^}?cEB/Ǥ)cM;^j,BIɑ|PI0ӧ\8.J԰x۲ m:o:zE)HE4t G %|ڗ4MTYd'Dn微BH ?A1 a[ԳaZKYic>Ce #@`| M-DngLo%5\"ŞCrM[ܑlkx<(\Bg]`KѩZ@7}ʍbsi7NXt~/&"~*ṇb7C;u&sKCDFFWJЏ ݑ VugeihLwjt#:J ]n*G{aνЈ NΪߪ |8H齪Jz<{Zșز exe4)YG; P*: Ԏy:k߭tBYv =',V\m>c\퍆BsehLO_ƒ(V=2$/||m<IVHlhػ_d{ݗ._oW\6{%VYRA!E>;{<>wJx{ Z.=:QA4̄ ;P}@RU58RE'1F@vz]S֦vtncH: RJYbg.yݼLNi"ɞ8 l1v‚\Fu MwFw]Ywedp 8jд\ 4̓g Ȍ-'99eN؝8-) a%f2n}lryra{u!R?Wлke)o:?i;5L첋j">u^K?MuQqP gMw"Py%-\ =Sv{SCAj-X?*.as92"+C~HX\[䆒+PIj'5 P^vC*쨠ꌂ qScvs oI~ E0?XqMLA&Ҟ_qbٰ: hXbYO[{]/2T;Sdў#Yʥۡ]:`4J] 8/"6PIPD}X[7>! =]t/Y&3,9z]/GelRxSEEIsb(lyп 9'7<ŎHE7w 0`)|nN 6x8&aԯ7p Ta/F"3?=}+GQzzjINH"Fr2py-qZJ3Bׅ-mP_w($daX$>R)P8|O@~cs:ΧOtj#ψ)h@0Vt{7R>{Q(/sr$R<π tĩ1]rX9v_wS=߈tk\Ｗ@i@(KR3iR(;VCR@Bv|xRO6R VT1w-D;9@CHFܓj)jcZՊ)Aa(#GđJm / lPGK"B|xQohF:w9/@2:UZ 8_96dJgN>iT,1 !C~UoͶMl|waܲA. a b5b(5?9STo9.а8ׇ[6[ :WMtZ|6wZ lY>Ssi]PRn|d2_^ITc !6MzZpާA V+V6ڒhU5Q>f졈t|FVukD0 = ȧƽGϰ}" 3q;Rs'A+E08kGmj2KpAZlT%wK*MX֋(ǹ\rv:s {gsX UԦo&%fj̝V|%H]6_zמRj''G=ȏ/(cY=qMz2ʼyC͗+3GDK[PjW'y"$'RQhi7%mh<0Q2cH]ǝeQD{@al]aĐņij@I`鲫pU?ANSӀetȁ8#~D1dM?8*$xF?| IN hP› 1k%.E "J+OIc\&_+v ckG^a+mp$ҒE!EaXb;4X d$!l 'G{h ˏCv~~l. Rul֓B߈wdf K618!=c$Xzq!rb7?c|WqiJ7Z%Y@|FPx5jB< nk }tvpЌ hs0lczjյ@%CSpq):ب8(N66υә gʓr pv&JhUԧ׋x}9J#_͗Bզ?F=Ub$k0ouݓ?H:Yt e V޼ 4l!"Rp԰mQp`ap6M32q mfZg25nޛ %d(ڴUC5.Au.q/GgI?QvDĬ]fS>G'x܀Ct1OE68pGv9j~i}>;<ʀoE[N7WAaJe[z?hB%[M 2%V`J#A +G\P mxV`:߫/mS2 %Et&"^-bîOu!oHVc_ł &vDV˂baT:3}M_ȸF6M-q\4Wb3\bZkc /-d  歪 pVrC7.LwR?B_LtPOCfW$l:f8ō#u/QEԴ$J%u,,)^Źa]3S042c>o28{F-1~Wkʖ(YkO`4/Wu SvVTW)v&'.{P [5c>q2SJE{ "]`w~:!s q~(HMA}K=+~~GDI0WQu(+M"p̙LT9E59(!yhHӖϞ*n+ =hjB gqȇa:+#pfpW#ؚ0cnX+ő`܄tzsxPr S6%$mAd ]ذ@7Q){D WfjC$᷎>ت<9Ӟ)b|33d{{L )' K!aVǑ4 <1qLR:SM@./O̜ɌZ3K;?n\P" 'ȭ7˃q!TTpfS(McZ|fܾMYV{PX^+Gy>I1ieO\6 _oe~Ƽ*ؒ\2,Jy)cLiТt _>& J "_fW`ͅC:G;n&K:VE'"#Z}0w|DmB<٩0IXpa~w씟 TuV9*`qHH6O  я$"hn o;07\+JOo=2@"@+7R lOχw)㿞DGS9)P5}'{[泥aon/6 z|Ld>6U$vmevP3~bzMOfge~]a i^.Be@ :։{/ٍ8iJ)[˫dYWNi#0)a(37c젷RFt[0dwXogapXـۦː[CR;U)AxveЋq0gX5H娺_cm1b(Os0i[pR41#2~lW= 9Օ( Э^[oFFkϥ9)s!3qqܔVR+\+l1RDN5y"?B ˏdNɭb`*`iz^r5TtpA g鄗煢ҿ9uDx|:m-z`omS%89Cz! ^s[Sh Hf[\Sڶ<Ч E-*W<-(h2geKA) w䧙FDl?vi` =?*hEeY@u8l|ƶ\;ǣJ m3fm2涫F&goWQrNўw/m)VNf`[ yڮl/,.&HxVW0'QZAbk5RXf m9#1g}]$Wm*Oϫmq  ) ֟F-E1@,G 1fOWZ{3VHWEZǿ#ރPx وq9VUayk*Ck;őI1dl3}I&9CEQ>_Qx~o-@| .D;e'#N'Gd-F^=BA\Po cp-4BXg~)tm[OQ ǩrO&ʰ'&!wmI8f\҇ІF $kΩG'-O_&"FUYڿQ#hJ_"vTPTGTL1fOpsQJdw|m ύ&`PP#H3:REtJALbq;o55g h%%+7;,=yHp>< 'sNJ,hM7"[Z=.u/_HUW*[d 8yY{\rT~X%&w@zdZo2d,I{`2M԰Ė"|Epm1͠<,Ŷ2.m3EnƜ+Q2J&;TwF1Enȝ;-ptwe6*ASgU f2/a[xQ}c[wlv&wgl: .,kpwc8҄u> n#Zi\KU6՘{dzK^hyBM`(2{K*4&uvɤ. =uG|.oRT\%8M[!Rmn|O}=Ȉk\R[I5{h]oϦ6s@@(fPfwP< 뤎4;g}'\$5pZuCb4YzӪ  4㎌]_hۻCK&{>П>0ʱ2~os璔,oG+TgÒ=lF:=p >#խdx!LKCyd X{Y47nX93 LPk/Utg^&=]9'͢Wǘ1C7?П{^x _;/{%CT!p̠iw&)H"%bk 6T~| Tmt! j=JE"vv@9ynN)YM~Avőn7]vנ+?z\gslbSѝ)%_29i&YFj@VT7!,LYKkD"OKcz۱)$ FT1iHɯTFlit*VQ QOS.jA |XcQnV$1kdWXnv4ꑘ.F1lKfH!j]% y$i/Xi\l?ܸ6OoR# ?"_Pa5V~ݞ '>7 pd-?WնNvw1f { ^$YhC4Δ ђW4ƾm)xHOk1j6e)&&U0ٸzsAX3A1 -07+鄕U3kV}v)j U/Q[(iwRu ɣxS}ʫ ArIķ47w'hCzr~W< #w $)\@/M4{ݠlL#^5߆O}WHN5}x&9|q8fD;9ML% 4zy$<@L,V)`YۓHN?rG>5YT"Pms6xۤ{?bĜBaKI.VC=s;ɁN'Gw8 GB; u-s4Ns)ӿ&xNcKlӈlk[>v!mWK;v|4yZ6:)M(1+ Cyr$" S SIV>--#rxj7g?7mڍs!ȃ$)z? BY;DK8 ѪPDK tlIl5|W>#r~?1E>Y?NE-38WWL7(UIDq`TXeYr')|&p'N%U"Ax^ })(8#GWE98# JJz}' $F+B\3f0A gUvE|/1M+0/OaH9cu5}D\k|fÍ;u, eEqk ),+(LnN,T7v3~RZ@. jGVy;!/#"ur.D fJ<{M #40/d%># F\3V\rY[#Si"?K}gl'gANI$\ng aU_5-^].=B S;nb ȗwP'Nn}6_axRVVs9(tպ0fY1v`#8Eo[>'߰ hѷJǮ= !ql+I%]-Ioң a.5,.+{~DR)YUމsa="V۪8-ƼtԮJMN@k3Jͩ-KzL;?~[ WJQGRclKTK0еԎÎb]yc4 {:87abґ9>b2ڑ`'w#E3z5igGi$ Fit}]F0GpxF+A) eAG#vߨl_x@9T(K/\͢@}0ἱ<+l /5 b;(k|u/YGEm,YA]%z~Q+ כh(n,A.I=c9c9CZJz?-k7ʗShc1hp k&#D2K*45@<_nm_QWZ()7v L;i! ֹd `8kL>Bls = b*4/.ƿwgFaUT<_h;֨X y{FfX0hM[+5% DLtsP!Kg م.WF٪gew}v/!w(HMݱ9 ǟ AA4Ů̷Q r,㨽l(Og~مffU&ľ!mKMJ}#ig>֪U>!\/FF a|~ofܣia!L62s)T #꘹YȘ|(%54>dF߯ݪ2oiŮf#Zºcp.!j[Sey$HE06B! flsLEqFglZT|Ù JuTb^\d@g d"26ϟfO:;ܰJrof2 `cċ-++.Yv_>XE>`6+b~TAJ`0"YETaJb!\L~Jӊ[Z4> !Js"KvWcoŒZ d]P^&זk'a2)0dy$nI|U7pM75\i-ab%NJ/MN0Xҫ:u΂М_%G zvc%g/OWc=M3 s@+[W[YY.~fynYY} y%]Ү <]@U+B."osH <0sh Vad>$P}81s%M/Qӑ{ZiZ퀈cMÿ!C=s$wYl$uaf|<UK F˸;WSNٮK> qOlTVFSyJ}6Ѕ,ljmxV/ /-8:>d^0}_9%ψiC߈s/AGn8+Md9s|cl(RD9 sW rp4b}pLjOex'rd店џ)U'g~GV0UfY~R5NbARŸ[_[]oph4~ONjEłBtv(W1 bDcd%Uì۠vey?GU 5hyK#?/e[FM$'k ?P$.(`5\Fnpj0ԕ4MC0"66PC%8P<mNv(ۙaH2:BsT3FIŹ8*P2k5;AS K;`?ݽ 6sLn:u_߰ WH_4CqB;ib^AEE"~TBRj D(aW7^\qF &LA<<4 j kXGF!ߚT)I+Zk¤\9 hL-i{&΅[8ˋޗ2 A SW}(J\Tґ-%.ǝOiIqОoGҶ76<-Șd%٭'lͳU垻9u s3 UvZG&~5PkTq_dfc3 ׵ vS Bb9*GPE;H)ݣf*ԱHg5YVP+YSP)[$ @sfMISxwT7@3z盖#=(Uhzvz@\3] |ʄ@ *{8(k?yWFwF%=t֬ Z1~0z;6p~bc$97dSR/?J}kLδ[7 7bw詳E[!`tWhWG,D2pNI MsI[Lss$r.˓3Z|6Út n~gG]۟{δ!}M@L] a^cx8w@Iwhx]~j$7Yא,.60~<lZ@GhOK])ݱd )дǤa#T =^Hs=L$U X?8fC/der jiDU ſyK1nU4T֜OّH\!fk]ioޯ[>ֲU9.w"iB]f52I"qIlKx47z O-" EfÂk ,CÛrxkY9N.[ 8fLxù\/*+űuR/$IJM !,՟6(3nj㜕|MF-υO]ڏ)GKARZ^re!ś8ObA4D|:^L=OfUK}k܋1@(I( ZtV˞X7ZΜ(Z6iy}䍚IPdsT'ǀ!~0ЬTA}}d-ꖙY~w3uoF{;e C\Tꓤ]\YfHPUWJyA\o:33⋳J<{;Sj%[P' G}[McaSZ߃oAQLBGa{A}xYfej?vxv`vP.5$j ΕYy1|jSqJ(֬^%zwD ;# Is:tfDf2=JragQAA)!2CjA)jow7t{PLJQ*۞ʪٚӼ,dg| E*P/},{cT6͇Hr,HЌ~Q'CR`5S)k>\m~DIo͔& ޿Eu#nMoG48ۮNNdɶʘ*f20Jl\"L`kBUap-"5'?rO+#GHЇR$\Zd#/9Opŀ4yK%LWv6Xb| l_TƳA"xi>Fi0<=Pw@"ZaCWJw ;t,<>zSܙgbhxwa tdt)ͼRSDfyԾ=Ja_dU Xɬ%鍨\}:k( .QIH8_ҮzT VOWhfLh4,r_{KJ ~֚;Q9#[~RdDC>j5\O1{Cϵ+gyN |?[x7xSb/,UHe$x秷n{t,1-UgNZ1.1z?ފžhV5#$gcܗA^;{QWI`]0m+D2Ƌ- *KeJSfe%TV:?PzPX0dLwv"RStP9Қ*LzGٞnoK{ $~Hs㈦\.I @;-rt1]05%;U>Vh#$tX3Q>wcІl&\p00%Lڇo>w> Óo)RY!Paq"hHig6a"mV؅Etm?vuL*P{?[cmDAWl;|UBφE|W$0jmL:!jR 2S(Vg0mÍQBJwlǐgF?`QF )Qxzm"el&H8-XT^pDJY\I*DxpPa~G^GD9>yyiAqH 7ꃬNHxè)wZ4'I8Klg>+n6dLɋs+Ы,y^)jF٨/p!2wy$.\{f|ڻ)GK:m+V]*ýIlthq;k879$&:B`Ca Ѯd&Hq4-.Zi9O1p_1Tro] ܒ3:אAr}hYo +43v,lX)jxfG3QQ4; g-uJ\u} 437-챥njw訪ͭx֋]PLi̖* u3\01X.ټ[*)sl`6-qXH,vڼiֻʀ UGoًHփ8~bW $9#` M7?Va$?:dI (سuPz[=ȶj:9POܠdZ&;LC7STѶ7a2yp8W6 !sau0`:*eۑY˴GwN0\#EHM6* 0Wm&q& j@'BE.;pj`>W)F$RA'{3fsW$W<;Lcdq` -]ewL-؏UKWK4to vPwq:ώ3OXezFXz-ΕkN<*M;̠p*]kKM[{Z=)G;? jViOce)F>Ò ׏/cepzMGO8HUWqt&^k槇E ^=;;əC{2zV7flD1}|{8hەc Ӏk+%*ηMԏ qI~&vcي6VjC؋@إEŢM A+Wϣ) 0G,]'l5|&OtdUAJK@!-Cc*nj,J0nΕ:Mщ#oQ[RM WfZ᫲%c(,RL]RvyhJNѝ bhК"32@ǀ9M|b zYVFM\ I.:I\(Wr-aK2dcsl7cTSztxb_wTiX'^N:M-R2 ? `߭͋_p.ꔵs^ D!H~f9qDqqEf8 L`ʨWNc9ao]fs8knVXj U>G] cI$.,m{ﴈ`{-5&qѻq6GQbY޻$(} 9HUa y@yjҼMxK7 [< AŜ1Fnm{ ݖL% _ SB'23VqK~Lm 5b=ϢXCR '?|' h<ԧ:ʡ= Rw(%5:/8]uL?ӀŕLJ3ʚV]"¹)rzPߟ."7 G dLJׇ頢*qL=O_oU_-yt|ahcoK|rT"?aҞK=*`T}!PaNhL=py_8ޠoŜJג2mRMzk=|w^tq߹Θ:5^OZd;c=ʼ o\-0k!$gt,6s<"sXѧ_Ҝ*bW풛A[klId/=hlS oLJ觠+&TXS\`zooO0@=;>qkr8wc2]+GudT _›ZZۥܜȰUyCeNjB2 IayOhϻ홮kbg+v6$!2w-Vs*aòN6!t@$pAϥ\0Cr8WmMK8[+`Gu 7l2KeQw,?.b0⺒sEƀeiU^񸋭DTT1~R w5|(v4?|xCz(O5-.p0ecV;ZYoc]R Dx92[̍w@9Uh4JwCZ C ;Z,҂x"m6m,'$գrm1oM~9^6-(  iYP0;ԓRJ6Q:Ŝ{ 0_WLt>+ڢ*M3R*{ِk4jŌtHwp,d `M`*a|~M aznLOA/;Ef~d9gB&]g"Brk͖vbBEcǹZfeY̹&nQ)f6h hg1 ws!:>2D(Y6t%v= KAzsbNn S8Z 9x*{[%, 9%8$c\O_fm#bRku$7RQ1H2g|VЙRofcxpbꪵV? I+H"_[ }NH ðp+(D+8T}x8$YՂ]LhBw<)ĉ?/zޕ#{dZ;qj-!xNa? 4(D%Mb"³ґ.%BTBOgBէJ*+,n6؇zsiFBPRגtFObSQnݡvT.Ӫ  } U:%,ɚ إß`@I5ɞBf28af!L[R[uDl b\p*-N%0Lɾ8uXuw'Gu fE[1"9,.~! PD)Z0\ԍ3eO#LDaߴyQi a)БQ˷7LVW̴*m:q{[Whod#|–A=jT!5fi,IԬQ:D +|A}nƯMѱܬ$s_.s]ѰGT THw!bPاfrZYG]GdLb *7-wbA>O.D ,4$'N;±3 J \veҽN (]yF>2/K3u'{S9x'U%1'\/匀]"~2mB..3Ƣ50*utʶ}H3 + YZ