libopenscap_sce8-1.2.16-150000.7.12.1 >
A cWp9|*_ (ypu?ZQY c[s]Ŧo7Ots6)
sb0F*ϖlY9 D"2d(14=: KY ? ﯾޢ UꫂCPtE.Kv+" fxOn1~ʃwA6*c{^։RU<1C
Pu"pqLx}4U.iA)/SFdGS)?qmz߃Yqâ1fb17af20aceddde2cec1203ab462a3cc849b934 26d88a095721901dca5d0759c821ee6406a52a9d4e608d9fae87745915c9132a }t cWp9|ZVoY]C֪Շ6^+^elB oE9o]<\/*fHo+DKjl
du0UαP1>!+` y}^eWMKhO)F́fݮ,+#Yi0mP4 :|qOI6 li71 (:"4'
:\T _"ݥC $]'ﱥ:)r\Ba(ޤ;3/ F{#"zx`6*ti_ cOlY [y d > p C L ? L| d ( T + E K T \ `
d l
d ( 8 9 X : m > I6 @ IE F IT G Ih H Ip I Ix X I| Y I \ I ] I ^ I b I c J d K e K f K# l K% u K8 v K@ w K x K y K z L L L L( L, L0 L6 Lx C libopenscap_sce8 1.2.16 150000.7.12.1 Script Checking Engine Library for OpenSCAP This package contains the Script Checking Engine Library (SCE) for OpenSCAP. cWs390zp31 SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries http://www.open-scap.org/ linux s390x cWcW 9e1fa15fd50c18443a21ac85b52bfc2aace55f3bfb55b35df425a7fea9ff9d3e libopenscap_sce.so.8.14.0 root root root root openscap-1.2.16-150000.7.12.1.src.rpm libopenscap_sce.so.8()(64bit) libopenscap_sce8 libopenscap_sce8(s390-64) @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libopenscap.so.8()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 cV~@cR[{Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com - add perl-XML-XPath for use by the testsuite. testsuite now runs
without FAIL - 0001-Allow-DS-session-to-continue-without-remote-resource.patch:
build without remote availability of data resources. (bsc#1204579) - 0001-add-a-safety-n-before-the-end-script-comment.patch:
append a \n to fix scripts, our default ruleset does not have them.
(bsc#1102706)
- remove cpe id from sample scap, so it runs everywhere. (bsc#1091040) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch /sbin/ldconfig /sbin/ldconfig s390zp31 1666705543 1.2.16-150000.7.12.1 1.2.16-150000.7.12.1 libopenscap_sce.so.8 libopenscap_sce.so.8.14.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0d96aae8df6c7e2e2a0ca842592f5e335c3c10e4, stripped P R R R R R R 4%<;H# openscap-engine-sce utf-8 9878bde482af8f277b2fb6e9b705016675be13a376224d5e3c77f34c5e0bd783 ? 7zXZ
! t/c,N]
cr$x#GI64ې8a̠_TTY gDZ*mwn[uF3^H (͏ccwzD=e7pjB%T$ z
Uj.(`B5Hحr]3}$!b87I3D##si$ X`C$&V6
S =˕K..6fZ*'@ eG
<}}r9`0Zͦ [3駢 ]"yEm F{CŴl fs"_ _ok*>/9,9'Gv c,%e9-NWA\94 7 vNt*rŰ 儐54lZ3l˜㗈9$J8 3>껇=
'iD78 ,J 7EfʸUtVĔgVGNN U0 ފ!7q#P?
97ώbbm`kMwO1T
AwjPG6 =DȘpJ) 8# Б@/[HJmVٱ?[M 4Wn.Q=B=}r]8h U\REƹ/ݳGX٠ jut2IQ<#)}Z'8l=lĀ$h7KU2m㐠1"xj ]6Xjm}j̹㍚)H2'b9a3{YDLRfzxH*CN| 4D
!f2oIT+j3nP
.Fid Dƽ ]L
gZ3*+i8#a;<c{"%!F/
|VpL?:澗,QLtr;:GO˘ld
R-_=]:Qw6/FV@sE #M%?u9)kRB.
.U|Q_ T<`
*a5S{맸a\W$p7EWH?|qI~.#]]w={L=R=#tfKVաSw3AdT0uO.cD\% ;^>S1?EG%xcRrǥbվ ru %#eLv'_.Rf% ۸%}VYVjk\3
&)#0R՟:%܁
fYwn9GL?wOX2"V\|g:k`})-\D9ܪe]l*>% /b9˖7v inFPU0B1O CK IqT.TɌs_*fs
Fz?vJH)Mg EEk8a<ٞzp g! %Xp\.,J+22x|е!}BZ.WAql2o?ظ'Si(X]F|Z4;MP}хe/*}*'̼JNQF>֝{r"XXw![%R : !
% 0w(ȇܦ u½`?Զ D`?D-[Of; 4x{h2?#>hƃ
o,l Ά*dҔRg暿B1Q5>saL яI*2$oPBUs>dd+}Kr /mSSįkY+JFayRG͑Lrړ&>%(D 3s'}M%>J{4mt&hbUD~TO>Dr` x%I R0zM0<7=5pQHz&rUeT
,G[Xj4T R~f{ rCpci[fa89>Al)|rR\;,掳A:)aCۓ>pt:1U2['[2 L|k~z/>K Ԫ>>
F {M{f>
e`Z`ͺ0^kgE e
TmKOZ!* 9VeWѲ\-%t%SJuMqlN[?
LPG ܟ 1":iO |jb 7 (Zb:T5[waJIypx CQػ4 U $`D'Yc}{{8 ; F({KL;ͫ:qXľH?M/RJP֗ ])h,< oUZ0cgNDbpN|ޏw`-78Xe rz k .{ c$KH,,~o8J]R:!4D )oW-5ڊi؇
'&ᒾHu٬~icrvn
i#:inBvsn샭stdz;K
*'cd qj,wI✴yohL
m \i+M{(%+lt% utwvia.E^F9;^E C'4L0HjT
t7 y \j#[gڡ]IH#4_ۘJti$4Pθm`* J,䁼*Pf%
Fgb;/m k'+ݛkJH7GIak߬TS&2$*IO@%˯gyNhM*Hä>g^` _$kssMʚ~94f_~UJvEfLA}!̑93|ڏ"j$u͈WwQut3Mb .eݡL-ʞFf>KXzMD jlN O< P$icwj6Ĺuߒ)bMwʘU[7o k5c{F]Xi pMN°ۧњ8P#\T{+j~ԗ~RwOs_H8ƛ>g=sZثOo
F۔z 1UxB\ aڌd%- ڈ|_Ddp /3l<\SOTHWR7.?l
ӮsӖBE?Gx
!Mr*PoQw}O
7?fŬ<8(m]n/E?t?mzϰrX~ӿ`*Yn!ǻW
(ްImt-,T4c鼟c2OBUC3yy)n 7n"qk>'HP*,})BRЌ l$7'IS 8
'#0s3 ggUݺ8]QKܧ xzsS~6W%N_Q{>ΊTջߩ$ eh14 ר7sݖ}9p 5 X W1{&ĸq]| 7L#x ]\UM.iآs܋5EsX)&댾SZkO#16+H7ܼAn\F~wn_~KiSO pђ"1H}Zu
jus' #z D5? Ů YM =k
-/tYa=c ťami.I9ooI2Āo \uD$RיF5DŽO/U
zȟY:n wggY AeeyD3_uǐʡoͪ+\FG>Rȉ7i&Cn T F4^{KBRE)?rW5E+-_aҮ.]Ýc}wQbd_)W[!)% h06*kx Nh _ը@D\AgLSLhUNj3PatHCm 6U1'}\K%6U[xvY+;`_('cv%s/A2W 7\yANPtopuoaBd> > Su^,+M Ik8 Z\ c0I 2(nD-kdN*?l:]>t-U069V'gnT@n >W5uy+0]`%#c\.!oIֱA=$n:X@Ek~%mGfnx|;{Ʒ ST[)2-8Hs!Pj9"7p'
mr> & ~gV{$#yЧ=YA F |KDp h.MACwˮuX[ݚQK"[q a) 4n'f\RtPP-lcy5%uߛ dAZ j&4`} cZA`>È)Zj
ȶWb_ )*Z {=@11d
uM}Jg6'
, 'y6Ot@
,BVBsI(P91h[]Y FeԽ?tSi pi% z)
1>a;ʠdoA-H V Dy:~yʼyxx輁!nІUGx)_$k
2JK>Sj t#q )j4Jq+y^Oф4XDr= L2/_yXw sxIy+kXXF|d`Z,B+h Y^e]^WYc\RfLėa?hmݒ2zM͂#_Ak 2.6ίVe˪$%@:3Jd@u
2}bTAÏ?Ctc _nj{IsfTpU/!ޙ[\]v:R:pltr7Bb7cI-CɨK/Y:ȿi x#vJ0 1ߔK6TߩqH_v),
]17`U/ilSHPl5ǃ R=ЌaջK[Cv
|W@[S>6Q-)sΪs8|StytTA/ -USDW8@U:VvTi0vyHoL1Ʈ*[1}JV k ~G?-)>z
֪^òVGA l1%m=b[E@dANk xLf/DNI_rCAH&f#ct孺vc5ӋvIt`@O$$[WWƇJCL}7KFgƺwƝ]s n3īkr9 ,6ŅP [Wy.5
PCT/t`%r~kIT1g5~եiV
nΡ: eGH ' )s|no}o'.Ҩ_t E "ѻ(`%-P(k}y12
QGYtJmVb&w8 }T gϔ- I܄O}bphb
S(] &oES'Va+*H=o; Mx|aL4 ѵT@Y;C =Xf̻<-Py?]JRVmYN8&P'Kt~=BhynrkPwb Y$Y <8'PY]gъt[):,%rT i .]0mpN BMlk8\u9JĜOE`N&nXSU+o2(@[W$oZ~|;}[iќe'Zo6wha-NP<љRvxncQvޥ8SBg( N < %yAERmEianG0ݠ͚6T H;t~e8ׇj N&eY˂oMc;tFBˑv Y˭$yUy?p A?zw| ]_wwSA^C뽣a7GLD>.t ͧ! ~UڑwH] .#| C/>XC?NqFXZm *ԠQ+O\p侥J~v|N 4\N~kS=%TY}N6*몶<$IEVm aW.o˩07D> 590 v:z(L\ϏNbZo%R
<.ҝ A
ְq) tF]+"˷qQE:0n\N7
qXǓ9օ-qagG_cas[ضݧKs]cV~%cHjeTS!4=/b% D q{M>1_wX?!@v L 76JlH;$33 q+U55ԡlrhdόTw)1L2)` xOcNI# sJunAm Х> e@1A~uFL#MaG\K?&072VF/ 9wzp\FEs߂e%'[jGh,A:7ZF~mT;+4S/Ȃ+Q8u# l*?x~~RxU3`X&#DT9n> g7m)ٝ bHA}q ecSivEX#pg2'pM 7uB >ˎ;
!: f
:orHF`q{B4tä,7p3>%TR ܵK;,0sԞWF2N:u"2,$3.+#-*s.DN˼XqA!TKy p^]7!+*:K`=:T_lSjzOL@h'TRj҄yPq-iK"\l.5C0^Y%f/(Rn!oDwW
8+u3?SŃ.f`Bat$
5$S0 Mc mO\%>Rl%[㱁x1 PXLXxE<YHJe 3{گ:6:w^a0TrK`0:0 %$? / ;rÀ筆տl~jiBQ7-6 >l+eO \ytA[UztJ- 7253IV =vn(7@
14DآNg430>Lv'X_%G-N`]5چ<*e濮LkSצ{%cc0lq0 ݱ(GMY Jا!JiG9-mdD VEKD>xYG4(&;mV X;$gTǪU6ӛ;\=F,A#&l;t܆ \5 0EӬd\4{lmե;uDzE9$6jgʳsybלGp ^j1 3]d[ =U^l=8̏'2F
uQt:)t,! 2Ĵz B`lbn\H"KKHqӞpUFe[d-:2Ln@[W P'ꯍ7'4bz͡(w|9E8͂FYIG^WrUQrkP.21-7ي3ڨhQ f),Zƾ5+Ӡr31n %jM@`nm]2 "D,tUXoN9 4aB :pg5+!5g"BͰY[I$`U|o 8_54bj
xJj5N^i *x|b@J ONA7ei\"`/a4 ?x5%2tC_^o/qk{G~ r5XS %f"b9I|H H2PxȨIPqVuw)DoVV"?ƽr(s͗lcK
*j cjSAN0@6 IcZ=T6I-k lB
cP-d2* "؞0U ;ޭ)4/kkmD_~lNCvp71,rd6}mEg-lx*l)Kp5q4nΰ1qrNpǴ̙2$y?Qۦ9MکDe\= á)*CE
O83hezig+70u ']⪎tiά⨆
,ѤGbDw3R ~ YP/2 ][[8PQB?XŰ^F
$Odt } %}M]~wxpDŽ\ D 7}yeUe nqx v+V` }^ʓ oF[xߌNπ9ܐocѼi~{u *e-+Rޏo1mPO ca܇Ͽ<]'7F|m tS62aVn.ȺV]5 L`Qv|6ھ[>i<$ #xRM6Wm1ӹ9{: %}XȂ3A> :F9y"ahMlLFV)ՔnaFC hI ڥI!@Fc"ׄ+Eݘb5*>v(+V ;mPЄ?v\,
x?I r33^(YYPԣ|Qa2yM|u #= c2r~K>~P̈́Dh /pm1mY?ʘb L⛉
=#3佖uXv @r>sP{q%1'lO^2_Q}C .0Ɔ^
=iF oTt"=bFBJ-uk>}gSs{Lz~x[ \4Y|αv\Ӌ3\S:cBTl lع٘iU±٥8 ՂY8ncfF҄eLKwL6/+& i'wڻѧZkU `ϯ< }ߩ(
+ 2RH }DEfd& }~% 2ZA'p~ThЪB # Y H
YZ