libopenscap_sce8-1.2.16-150000.7.12.1 >
A cWp9|c y5ahuJgNJ9A1Za`].% 5-0$dm | ^ _+W ϳ Q AQ"M݁o#P_5&rDv#&nȬr %]x^pGy@dXbތP,[rL,fٰ< OՙUgh#oa,|ia]w,'_2?IQ}rs Zҿ$KNc T=+Lf5eda1a1560540936e50f6498b07ade6fdfb67b62 e1f1d31e8beb56499045b8187c4c835fc05b9aa1b500c7779cbc8991e0f1efec } cWp9|m
b$ngMQ t*eh-5 698(MH#VxZZrxṪ.rfMb?IfX[[2~0:
|$+$WUlmy1%np`&ޭC蔃ᇁgzQ.3!n[q |[͔Kr RX}9_4ǔ gGxL]-WOڥ=-}4k3TX^)ny&״_lzLgo^=!'ˠ6PQ3 | > p C L ? L d ( T + E K T \ `
d l
d
( 8 9 : > Ij @ Iy F I G I H I I I X I Y I \ I ] I ^ J# b J/ c J d KS e KX f K[ l K] u Kp v Kx w L x L y L z L< LL LP Ld Lh Ll Lr L C libopenscap_sce8 1.2.16 150000.7.12.1 Script Checking Engine Library for OpenSCAP This package contains the Script Checking Engine Library (SCE) for OpenSCAP. cW(ibs-arm-3
SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.open-scap.org/ linux aarch64
cWcW 93de1eefd9ee267240741db24c93d838a29f07461a6035cb5825d4b3d4355902 libopenscap_sce.so.8.14.0 root root root root openscap-1.2.16-150000.7.12.1.src.rpm libopenscap_sce.so.8()(64bit) libopenscap_sce8 libopenscap_sce8(aarch-64) @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libopenscap.so.8()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 cV~@cR[{Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com - add perl-XML-XPath for use by the testsuite. testsuite now runs
without FAIL - 0001-Allow-DS-session-to-continue-without-remote-resource.patch:
build without remote availability of data resources. (bsc#1204579) - 0001-add-a-safety-n-before-the-end-script-comment.patch:
append a \n to fix scripts, our default ruleset does not have them.
(bsc#1102706)
- remove cpe id from sample scap, so it runs everywhere. (bsc#1091040) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch /sbin/ldconfig /sbin/ldconfig ibs-arm-3 1666704936 1.2.16-150000.7.12.1 1.2.16-150000.7.12.1 libopenscap_sce.so.8 libopenscap_sce.so.8.14.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Update cpio xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a5996ad9b2fac2afcae517e24c2c45d96eb76c20, stripped P R R R R R R R 0p-a2~kg openscap-engine-sce utf-8 49a456ca13bf6c669254c5aeb9d165d2f7bde97750aa7c504fb83484921ef56a ? 7zXZ
! t/ {+]
cr$x#GI>im3r28 V ^ s-IE{u|=? 㽹E`P7zBw"ⓢ\L %驂C`i)2;ISQ_O[Qz:]#?n%='zޢu.3ԓ8Q JAUuHRB#ӛ}\RSN,oAbH5̍Em~{e5.MQ`H8vBWcxǜS/6 Q-$*G%%eVֽDS;=Bemh\|, Yu]azD(~ CG8h'#x c5 K1aȇAGuh ?E,#j
ʒ` ~ @ʨc
[Ba7UYkUr+mޤL4e> a
i}y<_#oeC8D۩S&e E> kąAdGbAN/y@ @` V] A}]hPI! Ks_FN^-L,!44u
*6+lP*V7uz(YȰ:JXy\ODEoy
%ePs:Jw\0Vmԥ*-)4Rv^Q:sH;%E֝i]NU_qǣ 8#̮oӭɩf ʽ \L;*C[(!s>b O1h 2%BOA mڏW߄pXO~Ǹ/ry5vp[}3)G$COk +} UVd q֓PO<mq
ò)͟'2)6 =llVNyr ߨO%tJhe=}"@gkom>Op$
-2©&$ .Z KmOl uV|%
0Dz # 1˹AGðn!HLK l)eEmP *QC^=FQk5]yrg̦'"S:]| 1(lNN1Ti~CsA7$ l G)Zr~FE =^A Lg*nƢ`
<4Vio%Qe(!{%`}[ ~7 K_n B1Rϥ <&D.AEj
0C
pG?u~P¶R` !UJRQ͢m9]<߆t"ktS\iޙ |fL S0xm"pquXzO0vɪ-*)'`AI`8PȄ:+ا u_ ;rpU)Y8W5/&$HY2l_n+cF\Xë́s%^ZGpf;@
XOcNJjěx.J&aԑjNݗ;NeycX^mJ>i,l0kꏥ 5&R#=/Xt6VD H_a?K?H骭Yn:Z&7J{5b[Cvu\<ाDm/hay#c{M f'1 ]ksQ?OI[>&EM>3
k&[ Ţ9:7➝Rg c4}wٕ(RI.2P!yJ)A:Yp~^jv
?/=qRϏl-:[Zzx,Ǭjnҡ;^D"
b'hyG812r=1c<8, I ^ܻ4v6#+CB5U5
~gr='80#WoPpu= EҌc*;#,z6 DIN
f@7
Y[Ckx,SQ2&3
)>cE0ݬⷢ "]AQC+ CǭrXJ
4f r_y/a {^iZV)88n! PK `#Iְ(=1}45I3Tf:
&)uX4?*ç ϑߍGlZ㙮/O"h@Bk#a%VMV gvj*M#ౕ֞}6bKΖHWX|Tꢺa+^EכH60j $&I'yò85 W5臆=6ZʦKh a
n[oWB d˲Dd &ɺ l>0v> ' l閏~ @V.D(u[)8A_4,_p.V4|G.NI}G$t>NŅD4|.ӄ}-.v2c}X
D
GdSdmk(u+ ba,g +zۘ<"||ʕ7mg_
?ZRM[CmJ
s}\JK3Y"ӊ "d֘c{{b2Dk9Vt]JW5"l '%e-!B,P V XLP,p Y?dHVJ; ]_MSb͢vVe{+ LG _Bp ceE}HÉu y &ee@RfB%Mg Rß5x; 6B-مeMQЍ qVN"+NKNQMnnOԄ
-<'Ic公+L@1oܵJ5T~x}o_C%ѓgP].绞 Xu[ō;tN:}wԮ(,ƥu<
P"6=W4Ua@W mg~J2 U8]pv.
i/rCblt0 zH=iԆ(U6t) &ndv
5Q'WNPk(ճ i~J@xPQӮL ABveFGc@aC*2 6Ɇ Jσ×zjRC"dkZ
Ȋ/
҉AŠ,
/5y 9L; O_*?xbpبrX(}ة3f>kV=>Q.o`q %qϓ!IQgɈHөXu,Nn G w;n7߹nw|HᣢChJ6 x^*oh8bt1"cܛh#C[ "߀_I@VB"1 )ui~ NtP`w7VtIpҥef|4ΫAqc{#@˂9~cd[ T : ҉Byt CTVfzV^R
gJ T
&K[6'˘o+OAO{Ϩ-3
VELKC~`N̥#74esz1G ר1Б@<`>
y jf{2 l}.[^po 0v=ӅIFMɧUh bs.!#aI*d&Gx}ӑClUqD7fKPC7T;Gh_0e$ L5T*qմ
C9 #cPT³]u ק
e,- ~j^1 Np&hCksG^[F6 b'0B1+s l^QUXv
'>G*͎IDI^r
kL$fMtdljvnz
UWMNp;n
t|
a('VN1AskJ`,z#)|ߖ[wK屻
aQ܈;nѡ>XswԾݷajEzw|d"3a]qé- I;\7_v>
"[ S2fFR|IUj9ncSU@poƇbO5z`9^|]PXs4j.rLZˡw Z+x?b2Pb`+u V!Xp_Bj
Mٙ Wa,q6@ڰݳ]!H x˙%0++, {e!#HKM,$¢VX:"[Lc:uҭ sU2H0'LYV*3u *@s+މHJ\Nh?p3[ .ZLM\ Hd ;+jlql}I?s'6i~}EKmCWJDp8DW+ni#Ӂ_ !NYX;2_T=uP."|Bc!P@Mn:exuv 2$y?݁µ ,!38֯b@b*5pE8AD 6ڮŧdi@|;#پo]]1jG$su @Wbп< ]` ʴ-B4An{dtZSgI+'<{$j9R(:2`z:9ov$ 7@/j|s5q \QʜxM@س:yJ|P:kفE!C +x̣@ݟj
-R\{I#Y
%tO@~w >UM|x'=רFOX "n:>q 7y9a%^+O'
߮tfNJPT{̣g-≯MWEϯCYGY6`=N'C?CPVQrciIS:jPIȎ:^H-+yBFqO#Yi-T7 ι%\c z
Ϭԋ7_4X+!S)x0J[KԾxp? MɆϼV-b` 6_"Ú]w\d Vs o&c R>yOR݉8Y-Kq*"hPKu">&SFQg3 Z~lHM u$fǔmGB[] w/ =Lk=ǨI :ƥ B9ނ3QEpNIa8d1f cν5
;*s&pr sxfpaα
% _A FXzZ x0&!
^;e_&^,!$(/!a7'n% ۬l(~&잭ovVoHĴp-`ʺFL8|
+=*| ^@Y[٫Uƹ=_JQLg w`
^f#u(oc2MՉbm} KrS6p#L3e{$?3-uݻm@ aM Oh{IЫYג[/\%
Μ+te,B 8e0O`6ўŎGg{(<ƅV6/_;: >Iv^& DKrF9[Nj G/.5 d]9=#2.S,n:d{)w*>/ш S3]ym캮 l.G)$Mo
bXQ扪L9 !Z?D.h #
(7ͨU;([lM'Aعj]ՑXH: w0fީ-:q5N|: M{3/_F{T+ǵݘ)3&n]n {DȰ]
a
3(! U RX
{ 7N&˖u^4`|Ufnc4ꊜa Br>[]&Sk *3 E:x'_((DȺ\ʉ 'I"*Dm9T>x" Y",* }q[ɁPݶsU6ZTwZ(:'Lgx(gN#Q{E;1O<[ âM@OVS mHg `ae'L6BY'ɿ' xUn+*"/h|KQ{NU{z8C\8Au75R
E1J _.pJmro^Er*K<)lN-nHsSMPcr$eυUGJc qiItx]H7`YL0 ~7 8Ax t}x&Ƶ="'I 6w\(ɢeqWCpWʐ:?{ %#w Z辦-N`),ZfU (#Y-jɼ#k:י 5$╨:N3dF9%^NDU ` W 9n
YZ