openscap-engine-sce-1.2.16-150000.7.12.1 >  A cWp9| Q׻c4'Pz8S=@#掛x~BmU1y, ăGU [R`HCߐ :՝,Z%h .R|iGc `, fN "Bx%fsRgvѪ <-LE#pꬰVv 3cai݂l6ܠI`Es@rSB&J/JѸ< y03744d96edf6ea5d0f14a109f62c9b6acb3982a44c0d71655b6a8a171e455287dba63bca752b5fad1e22a50ecc48b9c7239aba2acWp9|׹;t? O( >tK3-@ϔ"w@@)rL%jYp"5}v3|ZIK\kUN ӐtHㆎd":\C1P\h4'efC%Dy/ܤ|[!{Z΋ϤɊ7Mɾ|]5N|Qڶ۞<[׎ׄԆSGC }RIcz# {*y[eA0k2m_VeLIkTù%B>p>Y@?Y0d + O 'AGP  0   <  X  T   x   )( F8 P9 :FQGQHR0IRXRYR\R]S`^TbU?cUdVceVhfVklVmuVvVwWxWyXlzXXXXY,Copenscap-engine-sce1.2.16150000.7.12.1Script Checking Engine for OpenSCAPThis package contains the Script Checking Engine (SCE) support for OpenSCAP.cWzibs-power9-121SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://www.open-scap.org/linuxppc64leV$.@_W)X|%eI dB/AAA큤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-1.2.16-150000.7.12.1.src.rpmopenscap-engine-sceopenscap-engine-sce(ppc-64)@    /bin/bashrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1cV~@cR[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- add perl-XML-XPath for use by the testsuite. testsuite now runs without FAIL- 0001-Allow-DS-session-to-continue-without-remote-resource.patch: build without remote availability of data resources. (bsc#1204579)- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patchibs-power9-12 1666705018 1.2.16-150000.7.12.11.2.16-150000.7.12.1openscapsectool-sce00_integrity.sh01_bootloader.sh01_disk_usage.sh01_group.sh01_passwd.sh01_shadow.sh02_home_files.sh02_root_dirs.sh03_path.sh04_firewall.sh05_netserv.sh05_openssh.sh05_openvpn.sh05_removed_libs.sh05_xinetd.sh07_log_files.sh08_pam.sh08_permissions.sh09_exec_shield.sh09_selinux.sh09_va_randomization.sh11_aliases.sh12_cron.sh14_nfs.sh15_tcp_wrappers.shsectool-xccdf.xml/usr/share//usr/share/openscap//usr/share/openscap/sectool-sce/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Updatecpioxz5ppc64le-suse-linuxdirectoryBourne-Again shell script, ASCII text executableBourne-Again shell script, ASCII text executable, with very long linesHTML document, ASCII text RRRRRRRRRRRRRRRRRRRRRRRRRWv(]-߂8utf-8cc64a99c300742192b6ee82768c6be17cad3d48e93927631df1eb5ffaa5c073d? 7zXZ !t/Bj] crt:bLL N&o,A µVrt$|܊̚(zfpLg2fkr뽷B efH޴5_yu66[@?CFHt.QGnRhƋ̹N)ce$Wd2 8dinR,4sPC,~kٿzapX5U? 1QnM\h\,VDdK2bQ#4P.:[FY4/:jL l\V<NJ ~ b$R=,r 芵=av~YYl;Uw[id d6Wy3SDӓu۴&8w|5% oϟ˕M:XLБqpe s}*2} ̳/U>RѪ5T@{Z*"4o#5D\6BRMo彇4|؈ӻ1'2 ~ydH}]s^<$~*Q6;Y5RZoɕ$杇١"nu ~Lu9Ta5?4\Ă -0JFI%Dr<<+JWAJٿ>RXN %Ľ1mNךn54ִ}BGKwKIZ4z#s{;R!;Hsߢ j" ド սŷ!<}F+.on\Ulg na$B@ՠؠ9JeSi>w!=jj];cO(pѮ.,T ?Ő,.&9~6U7jw"3~F&K8k) OPCokBl2Q9eg[E16>!Ɗ*2pi Æ)5@c I5BY)O6n՛vm79v_y>oX W>n)ŒcQm۵iAs] ,Wv.صz{'|tBb` f@)6~S=!c )$TY!{R{yAQ8u%B&ܧ[W1P4>-rpxD@$.EͼO㈠(oU l ] W'TJuEew vV;&]Y/YhۥB*0? d0RB@* 1sv /NTc8yF3m)G^$'˿T;e%+s .bu۾k}nP>ƅT2x2R6pce {)k킓.G"Y|뗼y7 ub~{u>!^b!jrAWR-X8hx>MUX>tM'P3ןm`_m`2+̈́f3WS 2{qۀ|ս+́պs`C4#FXh->E#IYd "U< ^QS` @IB](Y[La›#@%NE0e!)r#"i&e2jAb+ ׾2a4Ê2v'Nl\)"p/\{Ƣ/7er/|h9ڀXkߓ:_ fثkZ¶903/z`|6CwzH,{KQ %vvh,pW<Ib C  RKz06MzTQK993o;\kn'7c䠍-h/}Q)rp9bS<ЁH(d|fRo<g@?ڼۤFV뫹f^KwB2ޮGMؓwU>`!5z nv_tiz)5be.`6bf{-,=PU%OD8v3i=m~=F%~"ƍۣ%>SncO?Et rlMѴ5`IᷡCwv]Ft3aT†p: d)X>;]$:ΤOfq[9#Sg%ut}6 F'.\;n3}^'ݔT@4!mG˪ !.mS!lY$ΟCɄr # j L6\cc 5û[4 &h)czh&~`{!2$]N^vbJ;Eq} ,~4*0jvĩD}IUpV;:cӹ)&I>?RfT־>-OwPWt5nϥ=˳u &&7-Cz17ݚ+)%_!|{f~(5h7G-3 F^Fݴ0u"C'蟌ft26s];$aSYvB[<((g^Epq-ɵs6ef]`c?$*c-9=#g9ML -&zВArl I)o%ĺlItkH/@'S2IMUL]Kۀ8t|Ћ*qŚ^l2]5ޤ)AbK+,!aNF$DBQ'X015bPN!R hzNUsu_t(Ri"h;F@t$,g+lLv2ʟ,AB 8yKGQ= -J ѮLDzaC+f"s$[r6l!Fֲ>6h^6. GC?~P",X~].V=Q+nq ԥ3Efft6! N—d cՎD^B D4FByʾj_ ^Z#&zR{r$,zV+!DG4S띑gs&+Dҏ̔**Hj|UְJ^l|07Jh}U*[ldD߀ƺ헣㥷\Xɑ@\rLkNhfc`g?ZH]C -+zFI T_E*%?WB;J5-DG_Df@r0E39 M 𥍊=N_IiU^fW~/pbĖMҲMm5^`X]򜍆"˟9X^t朧4:+ýYL:a/*2A^0K xWv0i[e$yTRvr#ޏk@25_tmEɢܧ4~r+~7O5xaF3 <<`D] F_iks#0Gb> *e򽸞aYR}ڤwG}><)z>f TE<_97,mY o@ùb6d{o܋i: gQm烫KOUa[uen}x0֘ RL|ɺ6rFGYUwgT.ߐE$|R5r'˘jz&7k{zTCEB547Daxf~-L܄g/ȃm/)q'ӊ~V`#aCK{/O}N=4. )6hw 8jT{Ko HA܏ݛ-0S^kKt8PW?!ƚ(:ֆA;:C.rBA Faݥ77yF=/&uhɉ ɓJ57' hjk9asЮJ<4K@j&6!2O:'=Kz"瑩o҄ /ȽH1$gCEnmBa)mzp"w$Y=a>2>1 ɪWP>{`" pdQnf@cK*-77kE6d8Y=.f4,5{@BڗvLo 򲾕Hp#0 $N] vddj3R-u!F,gQl`紞R<> |auȥmײԢڂL\dED{\ec(Cg 9T~]Ue ɗ$śMhf%3D⹦A !5sy 6xK~n/|&&B^Ƞ!: npL#4Ԡ!60XxivBM :{]I$۩"%dk 4 Ѕ:pM4 OB?(/ >N#u%exN# ȝNatneyhލ2ے`w4tI ^ff APȬý&MKRE[^輩SEav;qz})4X{-gƘ"CWyOӂ*I@GcA.[2aHl.<[C!dM/R,OyĬRM=:<]QVn֔]H c@ A{fv";k3׿1fRg!O893߀UQtLP#mIYj%^|t&Il\FRH8KGAʨh+-ƚ]wIkV8*kWUvZa>S_LYP #$E2_]ѯyh8ncxu휸D!jB/^3~ IiW_:R7y>_z` ]=} .A-{fiqll*T\[޽ϩJ0q3]H:xf0! dyNP]%sR#> ;ۺ40g] BcOp?YdY)H&4f^fEy$"_F%8r]UUl݆V|Ԭ1B0!3+Oװ;64hO*wcF=~ h>w5d^}o3ڻ?( oVk%Y%t/VuOPIT;8%럓g03 owRWmsדDF w8hxӇѤlk  BUc^JLk3'Q,ع3M?^[Bmo_5 J*ֽIĨquvazu~jm6 fÏK<5e|4ofFN˂\#UQyΗs`1hIMLE(WL$ތN7$xF9EI8ͬZہk*|K_FBM P/~(>!Zh;"ϗ+@Zμ\i"yoڮ al"X" 2%7_衑9˩wX%t8efv8j(2q"y-`LfT4o{-^AƬQ%DH~zT%sr"OBIi]3N2f v'#s1#. 91\>i]Փܠ6Mm1%`3UP~dJଇ L2nxru/ށAbzQ5vI nǃ$Łweh;l &NsjlIO7ȅEx&Y#+N8&R} rNà+':%(ޒ/շo dݬ't6lSq ViݦOFAQG )8`WbVBZDdt+6 ~ΣMK˭7: }俧4#fݰ*bPaPҪXƦ̑i$7DH a,E<ȍD$em.\g/ѳx-|Lw6"jM9(eҨ6#Y庩E^9eSN1n&8]J8Iyoc^)Վ[b(ϔ6 oa{=Q۝\(,* Q=Dm,"s'GTDj]ZBD358lx9YjQ]FbrrZ8][-l4۞)lxn 6M7PkW y''sGtcU^8p5CMƷWND=ڂgW1?ů[eQ 3 0Z Z|0h}/Q[G"HB JU! b1A{ o[:DaF7B=kNf5 hy:hP4$t*_#|\xS{,EiAР!P>{: b j%7 (t0a~a]kz84iƪv&)J wn‡w|;Yntsvd}&҉ӃOeWYM@Df\t"l@pVbLT`IͭVYv#sW`_ ,j#g2Î'Sh۟vsUM -6'\4Kf5.Qm02P^HT.pȽ.CR_τE$`V`?4vsI=Q,Wҙ]9^vuyYCN:%`-)UmIb$o.{XȨ=⁔#_}P0!]lޚPчfd<:e6ΰ  FEjA"J.Id\/UAN0-Zc sLfH:t( !*T-e( ='f8s@H}2G;>kN\ꀄ[\تcahƕ8@eNv|E {PW6|FPn7ll:ǎp1u޻&.V,vÄgyԪ|U"5D nGGC>JZr3L oI6pHTC)w< VN]tp&f@E?>K_DʭßAZdc2" No>D=_Mncj-T ۷;Q۸3{u&`y XPYT4!]ޭLrBF }ȭj$?q/Bp+G V[ZH侜Au>0xyI&֍KES99M xȒ#|(f⑆8C qf3/gN\f'MM@VCdBRI<hjc(!Y>bgPV O\yWN9+uL/R|9#I毟Xd^.gSTMBH=wVy|k}3n=@qW'|^ BI)a#c9K>2K-FgM:j}́E!BN2 N#ߑ&T $DɋC0N l^D-- Jrn%f6IamMĢMemD=FM 2QbITQBSSC'Qoi2cZkJ ,ɸ1tj3n7MˬdYÆ6JⓉzëS32ugdN@9)*,Rб IhUmVd^3P]S7^1's{j֝gPitp1ɤF}aK4f@}z\͗\XH%xfᢱv)nα\ C=,5}1jf!Fm{7C"?a޿WOQ"y-9h=xD~64qi[LJn馡cEH2Lʵój::$8G* 32+;OJF9~ddp˵v!x 5 eJ+n+Af((c3BmL3:Z΋z)GV 6֯>}6NH`[#ˆۑ"QAjwH,ƵF>wvjӵU1|t+8 t@X3OBfPb$;mŰ@D3_o%W!I鷙QbVR6]<ŧV%bD=oV,Gؙ+'۱ c]kChl$+̟(WQ؀H\O® lֳ5OmE|z՝n]Nr-nDZW `G3hL53/gi_17kE>3 r8x(Q"gB@ R[ixhޑ?(1IrCV-Ek̙s>ʳ:" \sDP/dg5LEKٵS^ | Ph'djPBzCtG}ͥJXuթfRC*#/t6zg d5~VU׷X'p:6Gzݹk3G=(Iú):c_M4Sq/k2iՕtISk !F01ݵpbIG67#gC\K4fGex$}sFM [<+>jzhQ?0ev[% ! ~OrJĽ ^cS 59B>XTƩ/PdMyM~>r ĩf4|s.6VQa1wCMKu#xOūS| d$=w_.jZT$pD($.Ń#ϜKw 0X>zj.fv=kiz^ ,ǔbJlʒtm.`?e1DH>$,|ZٰEa?F{9Rolv8:ރ"bd TČ4rmF/[gI6PPQ]PyͰ/-!6:lJU[Jص w0yA|EK^#5YalBCuz/ BK *=98+*A[z{^2:F,ὑ+.U4A8#g]*(p{?Xޫl$ώ*NZֳ0^*q%n(l7cLEvvahf㳩O :j SVـ*Q})*ZA1 qHÙɩnO!'BvT[Kc΃۞a> >uN ⴈJNfq{QIJ}4_c|A>y =zX ֵe8[Nn AKy{ay Ng":fſn4 ڲ8U 3J ڪ/ ^L ڳ`M㞣3 Fro?lnW2HFx:p {ǢmIFJ+iQFz/O荆 k%+*EM|@,."kR  8>`\!rP\ U.͚*F3 >8т'$c\lEYM]5UDFS-UÐ<& M:2nRɶ3Qz%r-{ǶI.=%s sHP;W"/qaek &",yA)}o|rHuQõWPg+0q?C 빙p OpH^L"q*RO~e0%d6xm@80 $9W([ RFEs#Pm4VVcm x0' Ps2Kd$;Ƥ8 mL` LTXQq6?hVE0f Ib&4b ?ốb^e&w/»ZGwFL^{JeIq 87lK^AK 1 v9( @:`;Skbޱ˻8˝r}?2W-m'S>!M&JIȟRG'T3e8Gl =7Wt݆'<̢ <kVK6ҋ>-_,BT.Іt+:)nD(2` RP덍? SFÖr %VIj:C tRɣțd ܣPsYG@魰h`[ rlfz~@wn;Q(61mxBbfzB<勧ri*?lsbV`NP=*`7*=J/S  o.ؔ?t΅'3^%:y0)%%ybpE1E{k/3KϻGHђBj0?"eV;1ZG8dXN|v<F#YSd0-4hFc8 NCg݋7ꞰAȫDW΍*/8XśͲNPOK Vstᛯm2j_2HX2v cmqGwQ~7?Ocr71j2:0" Azf0I-0z;5%v]ٓkpI;F: $>?h|NT<$րMzZl/r^FC_ #8A)+6X}žpE)f̣DYۧ)xz;F{eA2<\~?qLL[LN?g3M`e>>]z&5 3NO> wsC~!.|N NDr fK#;`9tHc\51س<&čN~ pj"%5"xQoZfmÀJRX f5A%#Iqdχ׮/ya_րܚQ86a4> H +ԊU=V#s(¹j(. <z5dp݃R@֠ 0 Ώ=F =lNJ{|1oEM+ѵgh'>a̯(]-ȏÊ-.Ng2/V,Sqa<$SmM44+O3sHTEoAӛ3P3|#t~m bMs,)@}IJ~)JצYTL(c N74xI{78xu#d}Ux>Spx|:oY1(qfElt^1:wY͐RY5A%j_@?83CfUFOcr=a{ dsTWS X?8 ܉&]5(4G>.@AɁD鉜9c>9'oF6c@ZpMOՖ+]̠eQSFmRWz_VDžPk_JUtFGƘ(9qMtJzF?H׷'LsifZWV;2:0SI ٤h5ޔDa *Y$W!Db!֍ <͂5`4o`7^ llj̣ $1L2!a~utUoLbGX}0NdmF]U"P'un8x3РwA`3U8y_}Szo*3͍,jG==Vٷdy(&V68Q  x\"OE&]Jdp"hrM?#]gD4!w{q^%\b{lޚ_?\IeXY҂P]B>DuL ;\l+ݛ]r9}A3!k`AûgRgnÔ,ժljL̗Lx=462:(7%!w[04<"9b6 rk f,"IҔ !@~RjK_J 1醃7*%8=e`o{R;Q+AIvH3ZtL$_.]$w~c!Ԯ~+1zRg4T}Gۙr,YME/2W?ZΦL{cۯ7H4̳޼n"QazʨN,s<0`Zvq!Ǻ1?5 |kƎMYJ72$^ʫm}p ccT~zHYJF- :r$!17΅n+'u>!ccJ?Dvsgg}#c6ꈎ[d"Β긑Y}XbSFjNb \3$*ܵxXUE:i-#Fi̢KݢLuӕz2Vq^ |#(;MqQac5IAȨ HVo6rSIck#q4E[gڝ=5e|N 4TJ!ZmNhBM[%җv`V F"}xM/e}} Zr@7]HSP' <9㺁§1 !eUOeA ю@_d[;%'UA *8;f uT\[H V6ވ Ӽ~:n~cl zh&A)uj!J(${.pȝWdM͡pR eØ}ӧv'w!07H\{?H+ܠC }hɬſ('͹;G܈&I< JHPaɲ+ /(≜VSh Tg[ &`6KF8 AIOW`ߚl &9=- Z1 =޷0ڈ3؅)t {b4"\`!>;vunW\mxץ;P2X\qj+%|F׎:IL^V~>3? y:s!7o #kxZ#= X~f>ZT.B zRBSr>s4!z`A|=9g2mΗDYPua2MMKmkJ}b#\;YޔNoJ"vy]e_e5#/Aj$uWдHn]K I :^4Һ$0rU0R V% +ĉ{IpV1C *k~?(*9`T/Qr@I`v!(|r餐HU-%iLmB2[phKhޏQdS^Dr81+ߊH/5Jqžty"c+p* Y0GIQh6|NZ&oXZi*OyG6vX~08i;y\qvWZt>=w>z"Z ڍQ ^bN;Jj%9kW'D`%(2ѷ$&HzN"v4dAƅsvRWF K$d_x'gb1Z=ݽm=2Ӛ~r 0O;U Tʤ8#GDAV 2 XzQg>z~VG^$SyUQ6FP`:+V4 Z8orHdeD WgarI547餤Ysc ѱusu9D~Y %ot K MO>v-I*-&dlf]1tp6ECm8t{ ˧Ŧ$5x:|XW^ @NK-\:f殖ׁBp!+-9\ܧ8{Ӳs+)ĠρrA8z΅$̝E93@_3Sƍ[֍̚q0DSG;:akAppI"h[ok6ӁO {.VkTf}qe 8A'ܐu,K`#Oj~`|\S ~7Vzǽ3?njH#%ӝtm2,父hQW@i®i%VK/8HSF3{N\#u@?g`p/ZER甪J=x?r_jO Fb.euo ωОkLÅaYׁ&:g~N.`wNF1+&\fRg3ec~XCKCJs!~Cź"n  dgj%8.sŴhhh>09bOr(-,RNLE6RؚdM\mƺ tpRJvU;LjԷh+R3I4Ʋ؈XXo!p H9V(31N_{Ymb͝ Xs0*O0=ƿT:VV$'1M,ʛgO 8:űZ'u*|QρQ.LL*dEӰNLSz\Rhes۪`w0uIn̠H=y8L?i*;իQ 2>"c}?fΦ)OAY)cݑȺ>ۂË6D)"JGDC|#'(IczO&nedSD/kP_Uzswi- U؞?MU:l[稚δ^JUeפt4)8q(uY`Tqg`GQҎԡ$<B[Vӆ=]&Š3g:{OQG"+dg/\w2't[?S1ogF\&|>xYRIc,OU{q, w> e*Wo1J Q=YS5L;EsF=X}v##L8. U 5qR~FGe7q;,k ,ɯnJ[ al~V oS2n]~33d~[=]V97OXya(9PEZ}^;}lr8% _pVܪ3=F C.P ~X 4ж1&&WH!nH8Ȗm!0tG!Bqš߲ivc=<>v K#܎=?ewl_%>`>Su;VU!Bk#TlA$Z %LASTOԍ`C\{@ 0D̘B-#ݤ[l`]Z8'%ܷ2X;n 5?˜UΝIYGZ<^~baXgD{MX 1. dŒl Fn<kMEL̈TjQ=|͙5#(.f0BPQ0輪z)W$|)XlF 2{:S|a "_\ ǝi9-jk\hJ6N2 ld+7-.QʬAY\ʃO_d6;g@,7Phͦ|AX 4'< ڹKcp*RľW f[~gW!l׉aq*( -HX2}\ʋ,i t>:ҋ!.h=xdc(Zf+N:"1{is-E+EZq)\n*\DɅ0(Ї),Ey(M𪫕\ ->Qb_ {@okc\O kCy=OvFcE3K}a,vv/[$ okQ~|˓>2:"BYDot5'!~a)WsRm0=Y M"ԑX"nx&%0ՙQ[U?1r=)lifdL$n'yq䕧 Hrjf1'1s&1)yž%w4T͞ϩgKp{ߐ JkF?4Cm&M @8h]7j̨\~ jgf9ޝQm,phCz-a$4S&m+ڥ<"a!*i(kBvCw1A׈ΪfeZYII_M΄I~2<?xbHA?lDքhz#A8BO<4f= HpEk( m 4ϡzuwnf"{\+1XZEՕ-fpHA`<zr3| AW\iK{IXO||5 VmI3`g_8^ ')] cpWiOY 湑W;;FQ ŕaQƘҴu ]kj:X?=Ɨ xl:w"΃@^hXov̙JVy%`'axBuVլ{ '3{ۡ,'Tc eODhJ&.$qsd3=I ]Df__?GrZr`1?A0Ō~!-^ؔ[$e[)^MM<x YH\)l;9I#587?Ykk㧴|RʖEp͂.*g;\zϫ.l\y@BZ3zi9GTv}"]L ~ñ 7{[~NV =5u#ӢnM!TGuBVC nb/n!l.,2##9k5hDWP 4b|K?%8qN*31S?%ìM8 'i5(WeG8JY@tq.&=߅jR{n.G^=!feY{B=ALBkBTMuB87n49z)D > Ly^ FLSB =V2GZ;yFy4$q?+fa/.9}>^&-c']Z H=sG:iY$p5jټѣyAx}I lNMYg8N9V]5OpZ_CYՓUL-k:G$CӔHN/># ֪C0|J^M7JCn'" 03-; ˮ-YqNrc7#ip½R vc.h{Ve}권UD&+|ZdAg1K2cy9d\c/]_]-9WPU2JZEa*>l^ƒ܅QLy`dRڞ1@rȪ1Z71RV6C1ۘ9dqn2b%*9vy.\s(媒5c 2W׉zzh`V=ꤍTPHBRԏb48*4Z*Ɣ3:j_5o7 E薺 4@7|Rw#"˓չZȮi\hPWûG鐐4¤2ԅѬy޳_w~=Zn7O? A׸VxN̨n&~rr87/B]%Aȿ3*d6WcKs!s$!58ҪA}uPdoogi˖oXUg)Ni&|n\؎}ƀ"O1WS#P0;Sxeò<4–0QgHڀFM:T*`- 2l ÒdD `(nз "juY,~7%!>AoTX 7RҀgx =_qSX^H 12 T=ҒbBBZH$K<Cˠ$8]gF֔wa:Eb_DηghSH.-՚tVt x䔱>D 1Q#PNI,jUXGfC"}SOXkL|[G$տT;JH395Rk(l@*c?uB͠Bۨ$ V -RƟ ٹBAaR2,p}H!Zu/ Vq͘^ä%