openscap-engine-sce-1.2.16-150000.7.12.1 >  A cWp9|4YMU %(-2n6qooofmi8`p,5U~X|zBasRRl+JfQN2 Q`--~-j%B>p>Y<?Y,d + O #=CL  ,   8  T  P   t   )( F8 P9 :FQGQHR,IRXRYR\R]S\^TbU;cUdV_eVdfVglViuV|vVwWxWyXhzXXXXY(Copenscap-engine-sce1.2.16150000.7.12.1Script Checking Engine for OpenSCAPThis package contains the Script Checking Engine (SCE) support for OpenSCAP.cWs390zp311SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://www.open-scap.org/linuxs390xV$.@_W)X|%eI dB/AAA큤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-1.2.16-150000.7.12.1.src.rpmopenscap-engine-sceopenscap-engine-sce(s390-64)@    /bin/bashrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1cV~@cR[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- add perl-XML-XPath for use by the testsuite. testsuite now runs without FAIL- 0001-Allow-DS-session-to-continue-without-remote-resource.patch: build without remote availability of data resources. (bsc#1204579)- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patchs390zp31 1666705543 1.2.16-150000.7.12.11.2.16-150000.7.12.1openscapsectool-sce00_integrity.sh01_bootloader.sh01_disk_usage.sh01_group.sh01_passwd.sh01_shadow.sh02_home_files.sh02_root_dirs.sh03_path.sh04_firewall.sh05_netserv.sh05_openssh.sh05_openvpn.sh05_removed_libs.sh05_xinetd.sh07_log_files.sh08_pam.sh08_permissions.sh09_exec_shield.sh09_selinux.sh09_va_randomization.sh11_aliases.sh12_cron.sh14_nfs.sh15_tcp_wrappers.shsectool-xccdf.xml/usr/share//usr/share/openscap//usr/share/openscap/sectool-sce/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Updatecpioxz5s390x-suse-linuxdirectoryBourne-Again shell script, ASCII text executableBourne-Again shell script, ASCII text executable, with very long linesHTML document, ASCII text RRRRRRRRRRRRRRRRRRRRRRRRR4%<;H#utf-8447c03e0f489646c492bd51d6610e9c6092800651e1bf2bfe51ec1ab4dbf83d7? 7zXZ !t/Bj] crt:bLL OU鴑tT~PH*rimte21cykGUJ0o`woZ{>]$#.wV(- Ou> e,^ы_Gԫݤ Bs@H^n_WCTvE)+""0 38)zDRo y}%eEQ 4^d29.2I üJfs9Pħ46n$H*V7WqRl $nP }O%Eajo5:_niCt/5RT`4ٲ\UJi>a ?ϟXlIX Q8:=42f.M,{{DoƇ LΈ&NeGD݃tje}b%+o-Z)gv7ǽpZqMp= 2w=7N=@T  ޖ}_MnlNMVaFo>ut2@Q] VXs 9"v%]s'> {@~e3`M`'ɩr' e\9C+rYL:bىBhBӂ='\9D"zL2r&6pQfϵR-בO_C9m2`2cdfegv$Dj_Q Ȓ H]C,bmC@{i`B~fAWh\Dla{IҖ%m?h.JK?XS`mȾ~ zjtm?a9S74^ɢԄ']i6fNR24";`N9{-j} ʣHk ^Ld`{+ۡ jS"g'A߈Rdo^ = !Ov" U,ute~ .eZvV`ƕ}z~46`W}|xPNIP4]zց]>]n.ٻQυLwO 5f*r~=.O]>ڵF6cSzF=58mx6z?kb`#<=yܼb4C$Lyg:~,jԡFń:6~GzMIW90"z"/ka0*qbW{SuƂIuR4i{[*:}mhG樂_]`fKHv]Ӹ<@ &/*~>~ooIݚ] OI1OXQm4{70)7{LgR'ܛP ƒ|*CbwKR~[ VZD X573U7_ίK{Ɖ5t!`‰=js4 P̎LvҮ;/ AJU VK}x{a/j)biC=z-@䘶v"}U*7Eq,B14MYU }gt^?p}-2ڮ>un'VmGR{6bg.Ƕ>tqo.baO?k_-OֵV$u%T7 ;Ӟ:^~v6H5hO a=V2Wj3ezwcF]sn) ?'.|RwDT']5NƙKG?ec{d![1]k LӉ_iAFB!}ѓJ>1 (|(yAߞ^VJH];NS\j bc~RI}r`LK`΍m&=ݢyQ_P9@Nyw=FS:*IG 9fV/c6 &8KCv%%/r,UO ٤^6<4Ɲ7-ᗘFMZʬ:rA<8ʮ( os/u 9RV&gf+βӬT{v4 0.O $.lC| + W1SDG 襂 >?A J%V#Hvx?.!As` p-Hp;gPr#6ڡ+pwU*U Ɲ$*NnE3\`Pv3JJ~]̧""gwA`BߖvUcyi*i7Jl{R E'w80+T#cT*bhsa_:J|:.rcDžKeG\#=[y}<2mL\ف7 w>#xm56A{M]Ӎ׸QhzA:N Jwm`MfMcxzVpNG&JbHqOyf~;ɇ9- p6khH㌮DۂfoSkm7.^"cUox5JJ醝fAfYd?{cK-33/ =dnz.[X8q6ezF'ˬPn~ts}E3i4YȺ t@ŌOBC.3x2qmęr/L&=mWK iU"m*tf D3xs of?4F_ȍA_o֭j:uB^N NY0 \,isoH+"k6ZWׂh:C[40 !CL}*ywwh  H2Wmw2a "Ho(ۇ-N IJg}1H`Lg+,![ј^3̫ Umww},㹵R3 ל龾0:Wțb0< 3 ֿ+,9>^|p^mH_٦ZS`v-D ;upZX^MstO$hT0y&e+}(S`WM@γa!6R>Z}>j\|1qu 9JSnj&?VG1MW*&걜Eίyd zm%=YJWnwЩWf N\ŮE2M/pK81CE̾I8-bg|+Zl[uA:H} ,ѷŁfi2^QXjW"&c};f~G6$ urvdKiO"(<ZdN .rKVW&yr5Eo=@PˈHU}_CBQ F9%$UQ/qFq?ڕH 9$nc Ϯ?]AY\(Zz0oD!^Ȧ[@bS^GPr9nϔK6;~RÑK>* v4^򤀑[ACfQEMY{A &mv)%H"J>YD8ʿr}#g0{!PC!tk.w"G媴3ڊ\IJx.HiNr*t3̿fMªɮ!>ѡ_׬eX;rAî.7JdU^~Pbu'g_J`o9B-N B-S3d.ʦ/7L  .#a?ɔWơeJOΆuk9ǹ%2^Q̏übHw,X7F/eQ"K{GV(7B:oY|Ӯb-wt 潕LrK1x(cHϚ{wIA+0޼Kbw߇)ucС/ O;k)?Ίt+Q<̂\pU$>[ǣ/ |ҝ۞ba71mDž:5Ζ=9f3KqbM#!Z K&ѵ^vcMIC$\P2蜩uLvB8JhG#FwXPPo |:/vćp,ge'=t7T6tCחR_lkYC$~]Q `VZ CU"ρ cϼl\&:N0t5BܴfnW >|}@<'睍ܴkиE9U=hcB20'聲l<* &g1m*j3.fHbKS*n*&f}90CN`M(CpGT\MxsOmogMtRGޱV(ٴfev-$սϙH¯Qfֻ{"Z+{rrrD a+=| J7vIDŕrݘḛ[@؆mw%O9G pAQ}A{xJپئ[(;K¢c"TPk!ȭ:,!24aSXb=m&W5,t]d5;U?NKh^ L l9;x[hflKqn\7%ԭXŠq;ɦͺ3t^'V{1r ^qN{a3l|\f}UuVbF*i8`:@VSh!i% (H$Ђ|џYzEgj#S`q큿N'茴ZB̲Dji0(`UٲS 5/~q8_Ԟ&sߤF"Ruj}T[(`вl6DD8eOGBLae'RjDaĸ\FeIϸmru ULFQѸpw1}Q}hgx',,HH|@J|v zpIeٟg{Wzo|@E@NeV  hh̾L`p֘ۤX,o . h"t’{^|}O`71 K27P?]1*yHL K]"DѸ,:xrI@p(6"=Fӂ/>et6F.#_Y7H*YDX=o Ye<=Wn_aƧoJVOg_+lݽ8&RL􄴠=:G`RW,(Q4Hz } /VrףA)&7rlrC4K{[viZ. İ8M|;M 0-,\>@ҹ0kUa|%]>֚}Ӓid ZK^u8 ZzXs _iP-ЕfƉA+j 3oi I6CmwT2GT^`'۾11ہfJCW" !?Hci6OFF|fuoKsl(D ºVWC|5, cz0Cs;Z1 {bn`+fHD90+8eV9Kua+go?~lBwbx&p6grU{pp,]:!*ttU",ZĹi |ʰ#E,7e'v)< _@5l7M]r)VZ?Iule@3ErLH>5r@Խ}Js#a[2G4ia};Gė}seצBzM+qRZS|tkE[p| =e2T~ÒǶ[l 4l7(d@+]mQ lcrxv%<*zJ/͌(4duepYF%9yHçE, ˜[!>wS zK'c]]Pg;G ) N}Is&Il~9 -hWDUW6#rE&w#f>*%/<%nL1 /1&WC;ol٪MP +b%ټ0^HV6e='yJTxXsF)lٹKJ숷G(ݜfOH{r f5|?8.vkŴ_2;@%?Fw=. F fXcXP[Œ직q; !_4b Qٷ:S N>IrB+엙!: LcTm;~с7R2Ig2˟B5q .Wi9?yS|.C~0r|Ϸ i {7a[ޚkKjYJ{V [an`>X^*|ᕠ 6JBQdϗU`1siկqY||t;RWc#ז,gTh_v>%@8a؎_JC&[s-@1tNw 7Nm.-N?y]\8Y> u0P\N;o%\z+N;h i}[`Oy |HHF]<^.]1qje͹6Ud`K7TmQnD&m$qC"c@k0 '*&B#햴/kZ6qV-￙' r14L`ھTjJg鹶xO2ie#9%1 WABۼ|ݳ+Q0fM< } TҐE)>F@MkVƙהz,м s&HV||h;}]#Po*i6uA/!=a *m3{ YhnIۼ%7jAф7z} Kj %0hə } )c~M%G@EPc=UQwG|i. b0W MQ jꌦL(lkߡķD2ObjR0F=WF$:}o0`p-I;⑪p2@-Q/ӾsZ`:@kF ^-4YujWFYx1d/<]0:mK/r16"[~}aGۖtR^q97K=mͰ3QؑͣZqѠ."dA }&9W%X4 LrŻ[(yVQ3U {=Uzw@& t9o t/`O4@ˆ:pCGQElzH&-әYD˴ *72vvBn0>12Dտy2Gؿ_y+6ڔ TϚFlEtBm ]Jmܭ9hQq10ÖF7 0əCg r,a )(WM lILp v)fKe{E*?>EÇSxy)F٢nbGAK" .]?8q]&E}LV1J#g%v)?Ԩ9pwݸֵbmOhX jݿҪz\u^bI s%"('fz:o)څI%d[1y5ow) Uk5wW-F~hQ!ƱT+~4EEi7W'iYQI^)?;*CVmFCvd9~qRG =1V+0 f&L*e//ѬP;42ñZ!c$vXFƭfr5=8oC<o,SL] v?u e)?~z$Z|t'dzLRkt\kbמ>kٳ:{K7U'Rre%Θ G3Z/'' ?r|+p,=E=r5u <2cǦ2} >/K lmx际s҉ػ1I9rI0FgzTJ;83]γN$u=ĺ͟iäUiwܖ9tEӂv@lʃUO0[cgE{6e/QP}ta5˓`z$;\er\y}s!ƿcbOۦ|b%lZ^=ం⮿̂BESPq(F".ucL&q2cN~U@j!fZKqedy4J:`#&ATtXg]uLrBVrXԢPkivH!^8xp_pZrUrq ׿p?+eii8d6"<'sxȡ U)FߑR{J4u%j^7wJB ŕXl舿WGʭ6FXTmUe))˟:+1ԗs cueH UTD9 bs]L,$nukÍs;> B-ϑZN CV3xД-՛z ߮^_I^Y!;;3@\HkXWѝCBufP+64*`Ib~-X%h# L&o>2?jCSmBEl6ֿmD FVxS\+M yA6(?` םedgj uo<DR:PYt ˊZD\vIXaMsʪ^SVeujì-,Tu>R~kTS [^p ̙cGE,tJQGĽ{ E,;p:GUːp ʌ-i qNj'O)b\cD! rv`̫ ϣnw,Vn'*Em8c75« O4Sbv01 H-8˭7T H$`.s}+>})"L:R?N5lD+*I,VWWI|lK%jN=BF&[m!-, u\q,hؼc`{~.1V^3o#{=-\(*[4+x0ʸ'd)e13Np>HZ@\47:}Lќ`89rQWm6 㐮^hGyQlkQRvX4+ۄU,'h\@n<%_qg SiZ?M6sFcd"*VaSe`;I"[3L‹Cӻ<059X$$e͖F$XO'>XLp"dX]A9TMU͒EhUk0W`rInUpdn>Z/"Ex %d_DSB~*Aޣafơ!/ 1amdy B-8,1!N`fKd Gv n. (48ism EA zewN6ˤZmRd4enD4(p JB/@ W4,mJR@ȸKLKRq-HP} g0ТMOm8)t 5󐩐ž1׆m7Zt2oK+J%,ez]Y]-9bd eP ;bN9G/CG9Z_ڠBsSfGq^FoFSH`jZ*^E ߃ `xl_ڄ\. TA[SgAabl/)QuprI.HR >>/# KUq٤m' 75\~*M T(qp*)pnTPl_b15)I[(8 \"B=K:mev؇:<,-T)SSȰP2~t8#Zh E B;b 8: 'c[L[6ٻ]{E+6> /({гD;M-F|dO@U߆iVT1V$79aZZSY)J13 7a >.Aߤ<"f+/2$@~iY;l̤")f -Q.#u^MRX6qd^ :;͚n?Wo[z}%$cvs `i3)ŪtXg|NIQpr^<K[ܔepXO IgjQROH1yZnYVW HtKi:+T9BU?.rZ 4ƀzb42wA,4!\9hPJZ~x\z YP BT! $@Y~FmVS6{:Ijx䤧W3Ww8tLfGҰ<#8R $dNa(R> D5'KA~+[h^?Ij . xWƣ^1 r'%Gٰ>1CvDigƌ3z7ipݞ8[8Sʣxpu-c]ì-˃Qڊ JzPp1LA&eT3.<#t,x.5uE-Z^HtӸ ?mBUґEÔ=W,l&5:ͷ[dfmXW%市o-sG1:R`(lzo44:m߱ˁt,3b.+,'~fgY, vVoHNCܐp~kY z@llSJH΀h35?f]: LVn΀i~,QĴ,m")kܒ k[La/O3fN7`CgH *(@|{972ٹԎ&F ɜk@O/}:Ok$}+' QXm +(biD-}̕0J^De e'w& NƜnH>ֳqJ[2S*j@}6!qz-jH2!3utoqKr  khܢ~L0sc M,w< ůLQC/2uOWʛfХvWr/P9Q#cr|*)'#2?<2/!@a& wIYDdaޕ46f$̰ g萢_|EC!5[hx)W!cn [Maz{Xe$E5 UFE7Ha،f[P; [;CW)/mLZ!л.%`}I+&\,6k-FvhIF­K3"|%"6Ч [΢flx3ȅ;]Ap}$Neݐq4epy2a E)`'X֯P`أ+ueqwЏ۲,pG R]i^X0ਛ-jQYc|<G%㢍]Ɖjz\Q6Ǫ$ S,/=;47jTBt | yF=Q"&t@OEVGrN Oab4݈U+,4):gǑKn}AÁ٦ 4nߜ,3ApZQiՔ/W3V0YVsΠ{"E= aȤ}[Y55욞vt9(z#X01fu2oΫC 5PؿAjŖk}t9_ey=M0cݾ:u>WֱTEtB8S^>=F]KIvlB.u=c"E 0F`J :0J#_N8%yŐܜ:c@#r-;3>}!VW IC(lH[waF>?k1L&`dy=ݕ 2ZҵOb<59;}2e^-lQ"}#g03(j#GU_"r/=r2*PD _M"El$^hnR rw?gT$z!c'M`#ǘd.ͥ*9TBǫӧ4=R7@~NT-X}!-'K-vG̍ߥOD68Բ B̹Z$^hdz.+9ҿD}jODK&}ĝ~x_9(6Xk'Dh[#j;c/8JŰ^PVfyU.oԒ|Kˇ? 9}>KkWT┚6]_+୼O\eUvΪr1j* } !k4[öoT`k/ս<'V咪>sn.or ë-[f8ɛTԀud mӹ_>bČutOы%slߨ7@R[s}ō6U2N$۹I O3%2>ٖꉦaYb^CjyBCb{\u4֡G7ɡ'Wr+\'r^Qp MsѮ"#\~%bTgB˃CYg q /x&= #-kWQy-u?i 9]HwQD|#e\uk_QVx+3Ƽ+)ʙBU@D~i6HBપ1qHhn78/v~49&)=vFh+napv4L qn;ċX]HX];LZ؏re2$gb[e 7#9GZBcxnQnCGIN YStfÏ`8_Q7R?OY&KN AnO{|0Pg$BZVaT~/Y^-<:u［ 73лYrcהgY)7O޺{`Ó`=o?g2r3@K>iO:VU%uS qPʨ/37SK& 6.;ݯjZ/,r/m(D1=z%S~`EӒvazoxf&\Fg|ϷVT瘈I, =W~׼Tr; tޜ=wb Œ0'xF[|Uw]nLN湃X !4d䢳~aUIty28`"k*\2iɨ%B8@)hB>Z7n!kx`Qm6X9ۂ$"/hj%a=tnK`/B򐇭6ux@*H*|8t3Ү 2jFM s_No6f,4|ܥQi"BþfkF);cii,K󒑭cE# ӡ]tn=6e&_ :~]i (nv τ}!ș#paz #]{׮D6+OI^9WϺca1=,*WN.9Gۘ l͆`p$2*՝~|0HB{\e{1,wK&'9J7*'/6mZ@SE@-6R`x|x \ӥj6We:zeMe"gP)8wAהTĂ^KFv )J ^0p([-*G"4^7oǒ-B<'۔)CL K6t ##Mjd#!QXb " ՇQYC|Y3B}$e(r, DL,֑^K!7Zrf߱h8MU1S)z{Q+[A-ls"{T:EUbPM.D-9@N1SNu x蘎lELD.zm\1q༥.krp Iփ Gm'k;?Z: "sa?W3 撺sb!w,5egRpgE!NmUV y {c.3_hwa[9oJT6DO>^VxlיN'ʎtdېwUJU ~WwHvFR i/l$hlQғ1ԃbs?Zq!ko@q~UF=u+&LfmyfS*V}f$ViFc,BG N˛zeńI?8 L|yͲ1 lV*Z*)@T7G] }So5@&^%Z}5֛]GO A E$Ҏ&j}NGSbIgG'gd~K젓Fu$W^lc@Fw׊<+FD[ ֏&qaeu-tRY>_Ku?9F$,Ox_IaۨVW5C 3;u"*jM 2vÐX0Y%MA 翤A/F";O-kE`a1; Dҙ]ʃ%{oBэڐdaFϺ8ʒA yt܁-EHsAӊNKV;K+82b )QЁd쟅(dm~82g$ k-Rs y U7 g/tĐj"30FG7?&=BBl'X(*{Rt{s`2Y)àu;5Fތjҍ:eA/ C>" Z8G:[{Zww#1W׃N,zx}a($i'/d(֣avIArA9~znFGy@c&-P6 RVM٘QT 3 UǨ,v 2U/$^ \˭A]4/ұa+Jcp#S x޿`_"'GXJ3H.⤍yXV23/rM-.G\uY۫ķmɄ}h;2Sa:t x&&&i,t|:>΃RYE7IPs\||MIoNʫ[#Kĺϋcj)!E19r8r )M_/Nm5+@0HMM`,3\PЌ¸gQ?﹟:AWN(qb3#ljSsI~^gok'UD F.6 Vo2>zQV)"6vbT<+}Y?3VD=4? AF=ɖ%;4 bc*Dۂg, ̧^i4CgD-;fDvQHh^Ƅe\'v&Y-iMϊGwb*kb |5I-CIkpn6nnWb{biz"R`"hÐ$LBŮïDKsCᥠcccUm )dlIPOȐQ8EA"~2O ٌe$ مW >ՠ. ._\==3[$-MK沌$yu*z۽7҇Pe)X AaC|m1W!%%T6fLv9 KE\nsH\+$a`|*c>gMG>9e:?6a( \K_8ak KaD#fЂoQ-m^Х%a1~~M.(}M|&!5S^,*pCDO{<_';8'/iM'r43j+c.| {@>Ò &?Unu^9l9b,ṵ6zXP8!z2tڳ^a7Ψh 3atU`J7u4谷͉MvW-2d:5RH?t(hHQ>9}V0 zE$$:r!K†2²V9d 24NgO_NHYh&{CwijkHߑN]+4 }4p7zqdYCmUs+?52 >ýRFg+*H^CcH1 x~[ BTui.ID8rY X>^*]2#VӜ k !ǰ0}_}U(fo(jH`OPQ2jVSfއu=)nKX NN 1FJ"Ȟ̏yZ]M5.Bm \* Z(oF)NU)HŮ!21cc)G&<勊,u u=pgRabP& auz D}`,%C6s~Hl'^uJq-’(=>SL-rԭŤ̮LVDƝecpS|Vd^V2s9yɤ 5rJ8c?j>UPK, bĜyI{M:{l+: p{oY6;'mr7q+tB s|u8{2D M D=ت^LZտGMN*aQ ]V3yn'P7F'A{ HY'k JϽ4}`ɘ ku&"BBь=!L^ww6{3T2e1t#?rjv3p'ue ~.3R>@~N\ּo͢kO30|ȈCH#漞lM@a#c8xCu }f[R1,/иy;(HΏ F'|w> f21Y|cЇg(ZRdl}߆h[r)jh]4#hJ;Hc'H)O,^(T^g$ʭJi_fCV, ݵRL~>U!EB %5p_Ze$hu9thdc{J\F:qZdkw|f+d 0n=+fo!s/|4(wƕs @r?EB]T(OK(WEP ^tBv+PyeE0^.vl*;7=I3%"ǎMЁ8oQSxί6w -慵NDx(rKd10 _KE4nUV/UD^ͨGay\~aFpOʓkGABwR8cF.{HHPt~9$ǟٳTWI_or1QNxD͵(ND< /3^S dk&t/ -GcAjB]=$~СoT.zC#H38u(RޗTf?PzrRA55l'&94?~syfc<`0"WP{4P:z>J[zk9q%9Ǚ"wHP[Qz+`C"B#=J>:wgpn3C!DyԨ^P/v[n<{' ZiZY|kDtOu;~رsv'}:c&K{$N,d-Q*k kc| ٻŽ 7MZC!<Iʹ,A1ڥ0b mtXU+ f} )Dx_ ^.)x\ |E7B2 ;"Te-G8⿉JJH]xYdc$SJl_!9!d dJ;%X,bχ^^4([ܫ) !K(cjW.}E4QHĚ"8:wVsY*'Ik"e~E {R $@jOs>B= q^R?J5 pۨ()y}~TDqdVC˽k>A%ׁ=ŷ*nz֔W:&!os>wVWCbH3p-+e! r$c \8'_JyZ YR6F5}GQA?^|:Ք1Ut绠.OQ9I;aThE2V^}+1Lg.}Tc1{ʚѳ!*Rh@]##+^ JT_hO.1X kȋt WZ0v%_)6wd%G"&9ă揎97vy JmXgGQ Vy5~_FFng35P$+}Ccri;p֎JIy_u!܀ {m.RYpir\}@A?v N%NgE|:NCM/(F[w # {m3xrf`gjGZxnw Bxc<(Fߩ xt],W>7Hɱ_e3ГKi!gJT> cM"opjk鵥8NOT;4[i,h-@{ %.[ƘXfk~_XԎ50ʎprR:dW{H!IS $L!˩ Yf;1v0emUKe -J!9&njOW yЉ p^"Mߙ;k(8~TMX,CX*Re`HE54 WWЄs Ci߬dvK^Z*9x- #TEAPa^ *"_OqC(n9OC",åp N)t Qx󏼃&3tc%p*^%pbXR$IfF8@aƅ"CcGv欅tzY7LN5ư*.7 >0K}ڮairڙ]ELbx*2X+xix[)kMuN-bɔ5fB>fo<USK)983U,7ՙqȳt)#6 RH~b6Q٧g <f鸦&lP3@㿼siy+#{ t,GpZ@SV/76D(7\OWZq~6151.Eb:ZQqFI!E蚠 n $&fvӌQ-Uoʲj"Qs͖@O`jtsʼZʳWLhBKz?07;:f ʅi֣@\bLitd[DA'i?kר">޷Ǚ2|]\,ހ5X )Yf6:PKԲs-{mkIQ; 8ESRo8_QI|U: Qy󔞿~2a: HP YZ