openscap-extra-probes-1.2.16-150000.7.12.1 >  A cWp9|"qY>91m)֜X̗Y;;ၸּD\^CG=u`pRhh-\:6*of ۊKC ۰#ecFn^40Uqc],mɨ(?~Fg xq!}'E7gr c7|AE碖"&f f2>;b! C~ WmP`F 92e98ca754a078c3a23650e78909f403b24e403a8c796f102641897fc8e5a25d8f7d6baf284c28883ff31b9d8008c0f34b641a37¨cWp9|et_gEL a_xXRsK eǴu[VQ2ݮ$ #O Ō`&l0,M)\yDP\0p>NL?N<d - 9 .@Z`hp t x     HPk(89(:=FJGJHJ$IJ,XJ0YJ8\Jd]Jl^JbJcKAdKeKfKlKuKvKwMxMyMzMMMMN8Copenscap-extra-probes1.2.16150000.7.12.1SCAP probesThe openscap-extra-probes package contains additional probes that are not commonly used and require additional dependencies.cW(ibs-arm-3SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttp://www.open-scap.org/linuxaarch64cWcW3c6824bb14e5815edc2a7bbcac752935ef4a9172858063046963698bb771b39914a65f659e422bcf3d7376db1f94eefd3c679770f8bc7bf1699b8fefad9e02d9rootrootrootrootopenscap-1.2.16-150000.7.12.1.src.rpmopenscap-extra-probesopenscap-extra-probes(aarch-64)@@@@@@@@@@@    ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libgconf-2.so.4()(64bit)libglib-2.0.so.0()(64bit)liblber-2.4.so.2()(64bit)libldap_r-2.4.so.2()(64bit)libopenscap.so.8()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.17)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.2.16-150000.7.12.13.0.4-14.6.0-14.0-15.2-14.14.1cV~@cR[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- add perl-XML-XPath for use by the testsuite. testsuite now runs without FAIL- 0001-Allow-DS-session-to-continue-without-remote-resource.patch: build without remote availability of data resources. (bsc#1204579)- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patchibs-arm-3 16667049361.2.16-150000.7.12.11.2.16-150000.7.12.1probe_gconfprobe_ldap57/usr/lib/openscap/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Updatecpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=15fc6a08c01fa2416b575498b02e03031f6a3e21, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=d73093a657c1cd5ce29e66ce2dc82a6fb99707c5, for GNU/Linux 3.7.0, stripped RR RRRRR RRRR RRRRR RR0p-a2~kgutf-827a2a81d7ffc3073e33224cfec67eab6416a25c7f7169954a71f97a5e140259f? 7zXZ !t/![p] crv9w(dQƤҿIGiy1 HF3J MW FDLaLkq75bx7yQ,Mg55_b|nϗ`v`Ϭ:|*?mguXuFk;oveZP6R FQ=̋J7UCK9W?]ɑ~ot3h8tfњc_iȯY{D5">nd **Y̫T:L55E.y9|t[ᳯ#*%Z*]KO4EV)艙S%"W80:A#׃9PΩX8m;؊L 7evsPwIu)ه祿8󭬰d:s{l,RjvZP g a 9wvqc*8k鶳MFYӽtՒ]6qT[DJC 2s)3nqxֲ{,Lr,;95É5OuH'C0]Qb7/Kmw 9}0h.XbkhqX_LC iU ̣=Z>--m1tXDqc2:vxE({cnFܚmz|=({kQj,SCXBt]!"&8Q0ӭ2SIFV8_!3jp&L3!2+ ֦Mf@;}"~\!clAPJh-a{]V:2bGX1dBL#$fo* iJRQUE6ZW9l"$1C~OS_wt@U܋LMLh*ISy #=w˝`@3MWGqT2ϸ37,mz8rs]8{QFˈ" iݣDyrtl-5}Bh㡋&cuDBBqq[OB9{ET{ThzKby3l$C.GUY[nP=W\-WrlKwh_?> ieMۤ7õ&yM/ʂ{Qm34{sy7;?_WNnƵjQA6O;hMԑǤztǀM,qGmoOۯy"f8=73 vj/_Z+Jy>zO'J E{C~p)y;*^u0ldGOUxh/ "&7vR^샿 J,s͹*HϺZj?yJϛ!?cH' ǀkNim$ld&w}(FU\&NS6kGmR/cށly D9>WcD"r{}ʻC 8Y&/|Afq'S2ߐVs kmCeq"6ʎ,܄7g~"'ՖcǽNbHae ZWKZ7Y|X7X}+^2,_T[U$ ZM/hG=(o&]a^`τԸr*eᛨS9eEB`,fo\.&w3}(0j{ C'R6ZpW5JԌiNtJ}5aƉ#-_7ۉ{Ǧ\6\U!I%Л~@^AEa* V g2Enj;X/E3.F*dIi(܅*hi`yaGqu NL O`ŜIБӚN֧u=x񩾉q ٨И&k*8A*Bq~=yLv ~IazN[nfJfeeBu3ڋ:^ݏ#rkX><'(w{$wu;YT0u&040PYIe-G%}(Go_Z<ĵuzU/{(LCzdRנ(u~SuX(51$8Nxu]z.͘'3 [Xoy/STs[/Yr#_ >-wLP.'Mb̒ĴZ!d65Qn4]4"eY $&.iH zAC"R{c!h'Rg&)L{$ÿ8qʓ坨ϻG>:SUJ "?(|rMwIS:vHlX1br }rYvrxB'T笵";hr -G3q]{SsQT 37ڑOML"J6D5n5e^֠\L{h<51Ƴv9%zp]ǩգqiE$QcnWalta0./[aqG="E!.49' C\R*Uh5)8{Ņ$ͽ%iʦR"Nlȁ՚LY:(dh4m(ZI5$⑀KA󪤉D 7~!c]! Щnf6chXU2bc|kTIg`܇(gl)'3CinQu^_j><:$ǬȠT x *knfs^Uá?ױ& \n jujVrWt-0PFY0z/b'$ 3'{Ћw:5Ryd$6x" U=9F v݅@`+0^; p)55=3),̴&9+ȳL*ER3`9p(P;hz^.(h>-3ޅ̒6Iv'A'D2t: AV<` >FGnc<"ô,$0RX*)WFo 5=VR e2R5N˩R Y{vIԹvk!\= pwE)xDؒ%Sw"RX|##.;\~q .:CIB_kɹ9o;HesU3&.xq]|zPدq6>u JŤEDŽŦO߼c31C[%B ,䓪c^BI, lZB$s^Z$n㣠S?Z M`%<]2j$ݰm$0;Lc)0zDCh?>Za:({M0{z2X1B=q1fg j0G_ hM8E=fO됅4rA>8f^>=; {1ǥ 1֣-PU{ˆV`Pð 8]f/'Lpuޮ۩vӅXwк+O_'ܢSW 5RM*~R'{kGde;d9KC? 1$_eG7.3rȌ73/f& u-jf]$X-恂Ƶ<4UWUq8^G"oJ]I.Y' Pیkx}P"1<;Pۢ `t,ߍD ڢHmpO(8 DaBA=PՁ{51p F$ ع|[gnTh%|9NjAF#r|%sv^T{9r:A7 6'ީbPՊO]؊EtY-0N-yNS< ^ aS\!f=+ŝ©fL\/ǞRPq={TM|J [p |dK}sJR<4J3V<6TٔIQ 2\JEKY0RFыj,!u][Ob3a}L; \΋*tfnwBvq9YL  UŠmH^K{nۡ+{|0q8_O'N5l\y.r&(^l-jq L'i씈)$Hl]SU HٲoiDm7nYpf!E+lhU83Ki"?+l% '.vĩ̄ZlulYzjgDuP[l W-9:  )B({pb^ i$#] ;8J$N2p@ tSߵ!4e"ˣ5X2jZ@WJg?F:\0O]aLn;HeV.! Ľ`<3+9K?F|Ȉ'a_6_(nU6jʯNBT/-?VnͯBB4cew{#B61*kC)v`xd*uq1y‘[YR4 1} h^DB?k$g9guByA]YZ]c3ޓGa%0D/28ɯAWDM&n=4?/ zCԃ/;m^8VhaGsI^*Xϰvd:qvfVٛ8p|EmE/FxQ9٥^QgE'i$"/Zfeo mZ&Q+8FSq Eudӝ;ʅGd^ 9yiϮw k ]av ޯb4(Ռ[wt eHIR湤Jexؗ;C8+/|FDPE;lQ9ED"e'Xp7Iv`7%w<mXÓWCv: sӦZ] @<ō?׈\ONMly/t(iC^TH@)YEƺHoP"։?YtMRo9)@Hz:UM`pgowmtd͖!wq%,M H^2_j%HoF{cKrq(:C▔^#"wc˷IMb\>K_e5BƸ0G۲fНNګJC-տ:|5DlRNS}o6difZ5ND'0œg^FT[| űnmMy J.goW3Ki!h [xG<ă)b}@*?NߤQC܂DFTdf×5q V+ĊWUwU+ ΁\opJskL'PDžK;W1T@g;eg(30W͓*ULTRB!9n^`}to)TBJ,G!'?2%4zR^0h aX!,aLJLY}}eAŇ~ %cs3f/JPM|Ga:\#'Swh6KJ O^oF ^ؽ[ab3L >l? %z-a w0y謻-R<)]AWΛ[9>M1ID"m#gIy̌Uo@3yh_aVl:|N /+G5GB98W4x^kPn{x3eM:tL<)w&9LMeeLΐeAדAYJG̾Tt.B<< ӱp%`{9]̌4s^:lofXdu?O蕂t/eGY.P"\1l5=H&| n_N\[ke6)0цwH1HBA0H} ]mjR㻌ƣ)2\̇@Ӕ2'Yy̢сeUvn53]\i8(p[K՘WBy\>9n#Չ20%T.-v'en֓[.;f@nj>6Z>D/< &u4*gsR=jk|ep"-r%LĖu|HxȠݽLetOA˼4C-:ɺZ<Dx ɀfDɺ; ӲwvIa t*3cFF7ܚ̱fY,4`.KNń0/GJT}/r_KW)NWτ l%!d/UDEXEYJ8H_?V\Vt27<6Է#8:( C-hĖ*U Nަ>$69~&Lt$XhX3>Zd7 cdCwJlc| G%Sq 0U&'iW-ǏG?Q\hY]ǡWe|7.H\Òɉ@G\qƓ\\4t <4jȢbJ*H)4 h+ۉ{S#>pJ,9. .7-N"<ݑ'^m)QB=$%Á*-- >`rVU]q,yK%;t114PQ)в,P6@?X΍kƮC"_KOsJɪ'POyF:Q oD7An^aǀI%pksrI_)~U)RH]\Ӡ;BeTP'`Q[ )MpۚgZj}/XZ ig$&ٸ,%bdo\3K&7kR\'j[+ dK%KI)u+E ~09 岈T*hl['!~iqI9r};ӪݧgU܊mXCfPgYY6:bYxq(=MpP" °H|YډHsJՄo%$&َh+ `CZ*H|HFVM< QFiáwX,2TB^:&SM6"fى(jǸ Jn9#߬1x9;hةK @xϔkggH^wP|ԕ艒`&If~Ů$ޝ^ 9w}H7Q8Y=B"2+_2 Z<ߡ|D:B~!=%{}^6=i9 Ho7_s!JDY<w?c/#an0^tJ:Dl7%<o28xƬ$8Cɠ,"RsP`Lg~;3̋ (8wMLd=rhj0\΁#tǽHO\)^Z& FiY+kQ}-ؗ,Tf7)=C™R>;w3+9{2>}h,2zbB_F J3 ffqY_=hcmP9ai,(EIr>IQ 5K,_i_&mcEWEv:rM*;0)4 /Ezs\EScȑl哩Ͼ HD"ZVU?xp ./\gAr^âDehxr,@K#E7}f/v]\n%U%n!5*ľ望Qs'$Pn`tRi`v#O|} pKe44iԟ@xW 'i}so!ҵF&VQw:jK)sRs%h0{:wT#cl\(1~U ObeJ8&S}lrc!},*a[qږ9{'=_QkIU C5}ZZ.<(qvc5SQX(ҷwG1>\ T!q_Au&M t# b"W Ƒsz]H_/tA$ү HmV`!JSkĒ.=6/#ӽmy\]A5R] VvR-MR~Dꦴ!TqYƟ}Z $ysIF:S q(U#3dpW+J(=JvD Mo3,j^yb}$/pBF|HkFSwoFMy+4rja7E4u]"CfXNhe5nflEIt+W Y8>8qoE4[񓗘*3ᔄ聂va?Ɏ .@W;:p&@ZZYUxw ,R?(X@4A"d@q=~85PW]6tҞ֌S m 7P]P?nĽ5;Zع̅hasaSסkh#_e7٬V$sijh,?Gu/) 7uU `ޛ+\RfL1ֿ}Z'e z,j>ם`{󨏋IkaR4>Ġgέ'^Bq_Y?ʔ0V嵑YiNٹ=}ZphsrZe*d4tD|fQIj.G\$o9q䨓'>7y2FkK#iFI0]{r娮Qܯ٩@l KtrYq?ӳ ƽkOD|Tfפ;wg{ꌃ2ur?ܟwk8rw{i\JPm :8e {rx\DV$jTRs\iیZ4p…>p\c:5hlض;+iݏιUrr6$F܏}M@ ;bAȃW5?G~#;mIz|_KK鞧KFtBmB&!A(؆XY=lH~%,|VWk`+:YcD깪#pL87a-:>>|"MLO(/:w, b]:G,𔣯K1r]H?A@b)Jª=hPt-@tFwDVy g1VmtjVq1{\]ۅ&ywXXM.4Z?ߡ!2s&DHpN`yZ߱\?kp ky|m1?+:Ἐe ݚmS* e}e$}Dڻ$zD(@Czn T{x 3ڳK#^-Bl髛aˍ5 {p6hAGyЄaj b &^(blYQX@_*Y?S<\i͘4>G,\ 6bkަQ22qIsdx"ژ ta;mN{A!CrI+X<A Ga%Tj׋M*uKbؾy| r2J|˄/Y4&~~w]>QS6G !`ௗ^&\2\UzlD;]ΈIfeC& 5h#Hyh@/: P/Tc@U&F[*Kwp΢~=~ȝuC$ى9Zf͗wv1!X''Ðlj/5uO.{/ yWlWfRt'[\[2^CAr 0|T"i@{~A+cͤΦrSxSF|%qűHw``d[P%3,."J" I(䵏*!6 Lk ptivZ@yKt2 K6V76Ϗ?wʩ1K鲟9{kVr {6T57 ^|u>ޮl +JVǿ!VD$}ǺVw݀*RVfN4m냙VfydYrX7{r@nȳuB4O->LZ@͌N6tek=:; tn`WZgTf3O_ B {jݵLY ÎT1&V9ȱ[tR3.wZyZ6ժL@*x @Kݼu_ѷJ[>&X~:mJ9VƵ 0~o!,3D{! _jR1Ux @*;<ϮJQt^yCr%a4W.l=aS9Q̜ O9W%s i?^2z wfwБUܗgmP~}S:Qx팂Gr%2 :$)k󲏟Crx9;f7NP[8&Sr3:L3+0JXwlmMܯgQ#vd=o $[FMvH岄^T]|I2:r%HҠݽ.~CRq750_pa+AwZ=:7F 8XR[ͧo&g͆ W-D!O>ft E&MzK7QܦaLM+g"  'oe }QWlWX9~AWs|R0iclN~d 5 _g/ʔGĘ=PEBe1y>*t8s՚ Ai^z_3Bk႑%QRy=C ϏyEHadQ6墁,Z^ fӉ<\**>N\z4Cmٱ[.z("QʂLl&c:{Wjs,6I(f/z6,}婘i]S&k,VEOV*U6 k0 ߰zm+'^(Ijj\AգQFz ju*yc+k{߰M jki^ !xWAZi-* $ * ЈuѡCd%\^|M|`ף.Ñ~|Tʭ Ln}>`b4~2mnIәG+`X[sF!V?u.,ҕ,\.(UK)u)~7n^C4a\``MȜv9*izѹtl T}c&8٭ OEsŜ7E{Ph>)]1i^={l nI01^u~ ;(5׻Hs1BJqɢ/@KDiZxjmP,$D;({+=}9i,>1:=8FXcJ}R?IK"RG/q`J7\2 HK߃dKjRޛz),rv<5 L\ :$S'v6TA%^^:bFBE_s*Yv&c>1?!zr/g|_Ou F0 s(1Gbft4hL>uӰ=mIכVۧFVNzxOw1*FuLZ&Hc1''Ó .)XƲ00c6@. BHG-5xPX=,}΁-Ѧ4>\;*,(=l ł舷"'.W*i\O z.. ݣg8$hN;? .Թ&^ ew첓vG$kdH?(S q)8`=2)6gF|WbU x 77t?8FVyYßM5;D+*ޮ>#?njʞ;vTQvUɺDd^ QS;edas9LMO8 JP$rnv"y[cr)@ºIR)(WqӶ;Sa~C4ЊGMLv]jǦ}"N & "6cmgEM8R)J~-1ʜ&q"Q|bu!&>ÏO u2A/K/C9T..̨Rn"^{߄~k[a _EZEdYI"E@giZ/Ts罧ZC :e 㻛%9ح}*Nsa]RdwRW1PG0?o̵g* PG?}N=VzVyh\s^SZcCKl7 N֨ 0$u]I|/z"}bdXȋs ֒9[?Į5#&\k-#>6/%HeN?$~̗BJ5AvhpuK4KZ̟ ;;ZlF躳 (KI f&JdICw81F뵽 r 4eMk=[bZU]G 9! E,X$)=J|exJUi^;7bёk܄a팥"T\JĒTLsJԡ*SQ2\EgiZIR[ ,kT:j m1W?)e y"d5 ULFQ31F+ط-.n8.{ÿCȆju1.+4FnIUDzoB]FK#k٢Bqw'}r7asdbFXUDR@];}a(vȒWv3i *L. M1#c{gGpt{ONڠ}SS9˫nH<(*&ÔN8 EA hJ?,Ăp:"aǢA ssfEX'-3 ̀pLwޢsJB^DiT*Br@_wq;.;5RhK&/W*z؀ [gEB'!d] Ι)vٍA:ciSf%V HS{l5Y L hJ>PeoKgXJ&V%?K?le'5@hPb仵cj,ry.Y ab4K=xMYN2"cn($Qv代lr\}1ccY#!x}O Odɢ d/@xK'ʰ m*.%׃[[1z@*9eųF4JR"4g nA__e JDЦ1sLJjvj2HdFOBuT{D!| j4_t'liZ!zQp0K\jC21h]ߴGD89Kd';e-0N./VJ5yc^iQ$8'X^f|('i(oݷ;[PE̛JbUjq,`-z%Dhw ;KFrU%"g0ˤ !e[huB`:@A*ӹ)]WLz0 cZ#TÉ5Oఠ.f,p$,$ E@'i8ix6fSdWIֺ2uVkW%Lw&# rv0tCrbUFp謲5Et!*nVQڂ&Ld.&] <8F%Yen7hTzZdF)8'_KE1P¦Q3&qdVN .*z ,K$R]aa$kb2+uM'AS?=ջ58g8|Nf?1/6Q)䈼pJ\w=YMWzPj8=Cc;:Nl)|10|' j!-ʾ O-C[_ˆU@i?Ot0)e؎Ћ `2\X0 RRĄ!g)-#Yi€y0 ܝ{MPiztگFC[ރ)/~)B]!k{K'[ˎv#x$k9<4;Kt NG0kuOTAXtM1|P- 2T98laEmjJU̓^#L5.υuZݢ,sSG̛`D`|Lu=bQ!̚zu(R( pIRGρX\_mP ]#\6m/" Kr5];7RutX-g:Nld@xt6J|3=v00򆱚UZ;jIu[St0lVmÃ9v`[#cG${O%BT_Y̊Y]ӲFc) x F>g@ȹPG F:)&]R.ZCzۀ7ee_BCYO+d6F{ְk4W id"heU $Hˡi2 hw{2< ~4v[Jsp!8!ULm.RebM/*̌zwРndf]%6 [;HfChr2=d6lgApؖ#َQ `޻ȜӒ5$-ȸft֠* 6Cd7 ]}5\j!/rx-Y]wNŋ[~Qſ7:;2ym|.憒]"ܴDyZGB-HcZ)$콱wyt8F\U~ ipV6TMY?2Ӛ5+& -l^<)#;6G-`@A!VИQ}:x'Oy!UWOhEN3#7/]r[>c $mE4V.Mzڲ6F.{yB2 Ϡx[Ճ]5 aKjXj1۵:88KEA5:#^;;%5INx}o>;} 4 }w!hHk{fLhG6c+`{~Yo %]O ȾsgI`)kK~kF5fGSNO?dXdvCl8߂νcג)$UFCy`9H2TZpo EJP^Sцe\{qpݸ١vgqUG/ýwpXIQ U4%S,0` ]Xic-`lv 1ⶸݗޔ4b! v`Ӈci))1dq՘EL$wq;DaRvh9'! _qOr!y'Ky IEvK[\[3D3)P/J4`6Òvߪ/ .04E)A@ǩJL2̠%C-c"/đ$D&~@]|դcOzBNOZi1|蕯E6D4>F]VE&ZʵUD U.%Y\Twz/n(|;LAh8Y}'1 2m/~VbMٻ+ެq#=qs"7N玸fhp5˙L<£ Ks 32BQu^ wll#W:IW]T`;#U`.\NF;<6RZ #(aR`,B\`biS"J#\PjZȎe^~I'[K{🦚;s )kV=f(}vj@q@$ U5 ؗ)}LV-1n*C_h=OBc{]eO-Eң8hwY$Ք~!Tyw iw"PZdFD%I0rT=4Cuy՘Vq{THJ[ntHϓkJS9{>3s~58ץnjR ̨cC 0V |ATA8CevS iF$Hځ "À$F2]VÔ}l< [Z;O3#_J/N+*|=L4X-a?$ūnq4i-UhJ*<>w+jڞ5Ȓ#bZ{kJ°,uF~ơg,ISB3~kO`q/H3z)@3w2wEֹ]~Rve+ g0@jA@{ꋲ]ehAQ#ufj  @O5 p{YP:.Vf yBlMgPmI݉N^+L;v`o'ׯ5 '. .6X\>|jL!omש5wXǬ)A"ӹ!-J4Eד?/7a¤N!lk% I+CC,tls,嶳n~ > 6='{a xO譾a^' ,G[`RatSu`3׽crv>j #Ԋ ݋Lº@Hҭߋ%<[ (6y⺊oW=)6xHR"xNswI b G f랍 QLE6بwlt|W\~W3퀨uI~l< B24<*#y$6FJ(Vڱ#ʆ;e"xzal׆=}<∀U- ,\wp<+b^:9F OͰgUF-Q){)<1]duiJDl@1ӆbbkʅe{O-o8\a^PT^Bkinb]r0c~A31r){8}QJrT8NxHʤQSK{Df.,bK866Lƫv=G^Y++{T]jBDl4chBDNdӥ! O; bMoꡛBik jK)[‡t% KB|mSG2;Dni`M|9ve䜉p4X]KX'J.}iуvq; mk~O?KyYֵ<,'Rjҗ;%k&~IAx<eWh7Q-jZ'Uڇ\/s=Į*IrKoaȽuB *w L%mHBYU7i}/x.R@h,j-q ZD"/ K }3 6LԩOƺɀiw*q骩=]0 ~JB'Bq7 )׹aluoh^{W[fQB{8\3>Jؕ~|ős'{g'ˈ/7T&eŴ:: j~XZ>7Ҧkb=sdXee":ɀ ( pw**[!ޗICP3<}U#*Dn=qP`F;N"z 0~>:{Tپr" Lnnꃰ˅TG<N%Ɗy*eͦr0cdp{ 9Οʋ;%jŝ?IYY2"\ I!}mL ٸ͐ 8U_bcXW"Z22ΔC7Mνۑ ~&v;'cp!}Q)@Z^t]j(n]IXDres=G*A>Cl[SrCm֜꟦d 'ō6WjtfJk;jĜ%*T/҉ټ52٨5GXʔ`Kkg.Kv(/olcuwhgߩp~%+d3$!^G)u4{zO2,l0J-lqOgٔz"g2 MK 5%F;YH<];"= -.7|=3 *Ujf!~ J#$|{6W!xhaL/K;?T-gâ\\Yj SXHp,XzoTU ;. qmJrvhtВ%pa(NmX G1xO)aô |z ?k<8cFqhJdx5fRMvvj w[mw-dx YZ