openscap-extra-probes-1.2.16-150000.7.12.1 >
A cWp9|u
p$vL[| zOX/fNZ6yHy?Ćf;_Gatu͒*^W2^ Z m̕l[MzKyFȜnWO4z,oNaA$8 ې:rrAc3&" A܆ϥmU[]%99!}`< *%4rtoՕGgBdj.H⢣ )670fa1c6b91a7a5774cfb1029295c0587c7e4b42 4b5e61015da8559dfe15aaa808269112467146958fb9ba7dfd6c13f3440a664a L cWp9|T>g \8߸;j6+Xjo*ﱎzضԢذ^4|!}\ /" au*Q$.fu¯R-|miæzj|ݟ C5FDeB4*4)d@Yg 3D6k"Τ>wOr d+sx-u?% ڤ57+@ݧ+#(QP6H7V jWMG[ˎ
|?^~`Ѓ
Mrf 1 > p > O ? O d - 9 . @ Z ` h p t
x
H P + ( m 8 t 9 : F J G J H J I J X J Y J \ K( ] K0 ^ KI b K\ c L d L e L f L l L u L v L w N( x N0 y N8 z N N N N O C openscap-extra-probes 1.2.16 150000.7.12.1 SCAP probes The openscap-extra-probes package contains additional probes that are not
commonly used and require additional dependencies. cWs390zp31 /xSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Monitoring http://www.open-scap.org/ linux s390x cWcWa36b6a2fb8e49323087e6eb90e9933c346bc77510c237140de0bae44a56247df 59bdb145d906c8cf598d5423edad8d8a90fe160db6047b0a30f402cf96d7928a root root root root openscap-1.2.16-150000.7.12.1.src.rpm openscap-extra-probes openscap-extra-probes(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libgconf-2.so.4()(64bit) libglib-2.0.so.0()(64bit) liblber-2.4.so.2()(64bit) libldap_r-2.4.so.2()(64bit) libopenscap.so.8()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.12)(64bit) libpthread.so.0(GLIBC_2.2)(64bit) libpthread.so.0(GLIBC_2.3.2)(64bit) libpthread.so.0(GLIBC_2.3.3)(64bit) librt.so.1()(64bit) librt.so.1(GLIBC_2.2)(64bit) openscap rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.2.16-150000.7.12.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 cV~@cR[{Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com - add perl-XML-XPath for use by the testsuite. testsuite now runs
without FAIL - 0001-Allow-DS-session-to-continue-without-remote-resource.patch:
build without remote availability of data resources. (bsc#1204579) - 0001-add-a-safety-n-before-the-end-script-comment.patch:
append a \n to fix scripts, our default ruleset does not have them.
(bsc#1102706)
- remove cpe id from sample scap, so it runs everywhere. (bsc#1091040) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch s390zp31 1666705543 1.2.16-150000.7.12.1 1.2.16-150000.7.12.1 probe_gconf probe_ldap57 /usr/lib/openscap/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9ce02a88cae9f3027bff041606632adeaae3de4d, for GNU/Linux 3.2.0, stripped ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=cba3adb5538b7d2aa35af8ff203e2b01dfadfb25, for GNU/Linux 3.2.0, stripped R R
R R R R R R R R R R R
R R R R R R R R R R R
R R R R
R R 4%<;H# utf-8 037f7d584497a0fa41755f621fac637904cccb150a24a32b11d519dac4df7299 ? 7zXZ
! t/1n]
crv9w(FCOռ'.Īg:pGO:L~ +Q,dJ輸^感c!g |IA(T]; AKj\ƼD&:VSkto\1JQ`bv oSOoR{40 d ,Z UN)@7 ,l0JK}ڸI&g:%<`[kk=[ob<0.P^Ӆ`s8Ƨ;6Th~XFVL{N"=F\Yh>Z1zL91N-B&A)-%)t X9>8Nti0~9D zC>8 6SJ_5:[?<ϒMpBi:JvF⻝KL̑f?pp mI
=S^ir
⪅v D^NL1(ٺHN(m @%'eLI=@y
=+j4rv}ڨrY&x/:[zLDHmMd !5Dmsog heV62!:A^/ǠȒb.+/CX3lÛtm~P@L7X R%x$Ihi!ՑUeGh\v%!XTKAVSb\ og1+&>+w M:+O'CUkƶ._ hxgZ[/
#$n-7t=44O]=H)&)&2TCq43`
"~'s qR$QGw[(wՒcň} Jr $HWOKrǺ4: <λ[>[?WVlT
"SyCDуew m3lbw6F,3{,D m9?xX
%hd5>-%g,T)5gL=iX]Cr(AaOd O
o6 ?pg-Cyx Vu6FJ oTg]oro-7)jVi
R,gc0&h;DM 4NK ȭ]lakb6G_8`ODlZdVv.(ٔQo8ӄПG>|h^fTxZrr$n6 160IHVa$R
> 1 1Zk@
v4~F3RHe%˙_ F-5|w\_ C#vUnꕧ)ߔXj>Wu+f&f DSwP5ؙOcMepXkq 0XH
61<%5 iqqӝ#سX,է䆺vKHWMʍ-g&j õjzb ìJ(+8[|
0Н o "4em d,t e
8'S*r\{O$&n]ZzA ܴG!%q/~6;*NpPUtTdiIļ-Z8 صmrX F >pcBߗV ɵŭoI>jN7$ -.ФyTmI z4n%br-Oiqt,`}-(}4lj?e*#A\H|A͇V'ACAXU
.υ3IkSR
xhUED wSLU[ q[tf Uh(ݻnmsnĝlI-4YKnٽǣ-6اI*Uөyc_'H.,(ɐяFl ύztFZ%"wr؊u'BtlҸF{gslMtCvd{6Sdཊo1]{(4#5cϝsPUH:I$ӊ u_$_G^ QE)F7x/2}iY;1 !p}s!!b?Ey>G;}JT6DivJ>C&5)| 9 i{{7]V]pOڥiTT 0K+BJ5) T K RQD8b4r#Jg¤Q&xbdxqtpxn^hsPb8l'/!2o:!~Q
~́w// w]-3<+\0>Zv.B'-Y߬@x
NRݭZ`co= ƄN|oMޓiq$+];,ؑ@ ')tq@4u
tzV>%β#ȽA;/6Dxb>8VT04J3m"w 5i'1Jg'VLzߗEI
a^`nNglM_s(]ڕ-+9Zf.l\06BS,)z- ?o^Д$
E A 2P /]ϟ$E/\n@GyUY~0+)زQѕJsa~l\,:a
4 FR(BmuH.]\28N1Fh ]Kdi'K&lm@(&1"2';aqxF_niKH)j^;f
L4˼ ܲ䶚LI֕ Ûpۛ *!hfᕵĽ4 !0בѮ1?`5
RR$8e!%qyw.4Z0ri(!F<ւTFU|e;VVTBDW] 6KFݭW
,¶J_Fm9XQ[RW٥4C4^*V
5+Fo]pd
4:/ fD1 nY pk! t6~EKā%'j߷(o|r *÷;5P 1B:(c^Ls/qOj +"xߕFl@:mD&Oj>n Ui ,6=wX,&|D Y+Xi2k_?hl
k2]*g1Iü@xԤgQV
rh v'_}V3:욓`QJ: VjT ,H.xˤфykRAKkĚpߔ9ʊV 1L^_1$^ If"n5
}xHG2SoɎX 9d]< fo L,NCoK\gЎ;ƨϬmRS+
a 4]ks %B ?"D3s!qt]*0Ђj{U/1ʍ.*Hl"#"F7j;kUbIE@ocS: 5Q6Q!zA7Zu &ܿx|Ys8簀f̒ pMNrg
QwQ=^/Bw[ Gٍ:b{,r,|m'._a/WKFطv S}*3Sc܁ w\zߛC`~RZ̯ 7ft+3DIJ/灲@D"Ź̬% {Oh< #
\YKKg8eG iI9t4XMgfN2Z]07K< Ӿ l6tՈK=ZD,FPn `bR8<=]?:/t! c]lli[PjմތPS@!/3a䟀K"sbQG ҥB1 ¹R&֏IȹCa
UJ^i Hq+ #,&$Utx
>~e*#eZ2DٱmR*UA UnGJ0=?MdU^-Bk W=uڽ:(P
IWJZKuCz js+{\i@vݙ;CnfRO2t8/n<ķǓJeXU|x0U`'X-zsxlݧTUS?P.C-E2n
.xD{4E C?a \bA4 vKܟ+q!{PQ)&Ɂ֢w w)\`݀h[I;9b{z
˞jBs2埕6YBρo-4.#i:(:w6b5&8'qۺ}{lg!}Cj KoԒ99HQ]D{QJcsy"PmvLZ-D@:m] oҠ4\WfGazOTqvЙM.5
w=.[R͝]b [rz*$' 5)Njs.}4+ kVc*@= twS߅|Ϊ~G0ޅ*wjVOc[aUؓir\1d-USMٓ{# -z&l(t
ڨ ԭ9@iH)ׇ) 5j9)GJذB>ʯ 2CpEkO`nk-*m~)}V`u5qYq =:_j9Bu-J{SsLG#{3%*9Xt(DuzeuqѝQU)WTlC=C|&G-R:$" (Kʠ5m#zm}l+Z vwf\"̹na/#5e1;.qrf:f ^ v]9T/iM~
?9l;*u;͙lyǰ/k ţLjg$9h
0-l&pVo0`P1.kq*yokӔg+LFS 鞮2Tj3mlXHvXCN LFCxؼ*SfDMjQ.7~M ~708 jy{Y `䜺1l }u]1-B+D=OoW22M|~e V¦ej# )^doB/ԇ>˫]lCcm87\
7Q2 8tqAEu /iqVpR>B$P+7[n`ݼ$s
O `" 6m7 8{W&4 [ fL5Vb64VDڃMS|B7]dA.t+<6#[9uw˟XLQ ¶_ҥDy>& &i-V:1:շX8I8YYjqW>eC
^mA3l*hPe*eUx!CHK!r%_-A& +\(?aqcD 2`'ʪlR@S=Q=c;[ײ$E6o?JB%^6V =]ĵ2>m{X_Ɯ1#3lA C"r+9۽][ YY늳2Q5>>? چ =M6u c 4N4-l̉MFFT7j(hf-:v+kQ`VmgA)W@^p(D"_ED'<\)oo0<̓:h&GajԢDu-ޒo:f-fX]On-eVeE$X^~a*늗SYQj pO5@%RZ$A)(rd&c>3T(kW _J+7[56tgoP4;Ŕ)3s7IA&g [ƻdۨ 'g{)#d;goʪ4Bq ~hN \
uĥ%%Bl@#ݥH~*Tm~ Y,EݽXhj%GM|5w=P #WY%4ىp.Z m|i U8c9ZVAf`5T<z/J"1aunJwh(PŹn⡼an ԙ,y? Y@8B T }
YCń18pw p,[Viw3 i<]@P7
k>;a} d"э.7
kwԟ'yv. qf_)O؊few$,Z7η7 Ծ v& wD z!L0ewP,(;T l C<֓ ] 21XL ˫7<`MWle{6 @gK}\Yf$\"s])ߤa@EĀ@iXX!ߋ5tJLu Yhʡ"RZټs`=>-Ra2uv\`q<
⛅ U ɬ Ţ s/S ԌpaNW4ERsװݎ@p>Եb:a{S{}߫%MZPfaٳ<e Fk~/AE$#j1}4UM
eA )k.}Ɇ(IgoE&3
X@Q qwi S]/Ѝ"2֏V]P|@bCBlC~
R9] V} =^rhHQ2KDa]:CcûmxT}
|]%5p1Br䅗J e] O~U= vД!)u3B9=ULCR,2k> n$m& ;TU| #~8 Jt鏣ѻ E/w%2_99I/A
XmНD|:>CrK8ͻ3Xj YV6Mjˤ dUlhIyG= ̧vxen@Q%>_*K\Ii }8\xm0R r"\@#~V jqUF.oQ a_3L@ʙ[&ym9XYnJce[4-{ɭ rfw5MFɧ.Z<1IJsYaqjD[( c^_&FXQ^'UWve5Jvar2!"XZ,M&;ĦI0,õ (Q"s@_7;/.F ' ;qY5
Psw*Z]#ڍH"Yq SKd" z~.[Jt&dԫ
DvLha63 ; /!|1[ݥ DO۫cRzFLPn hHR$ڗA|m#-GG \? 1ӡs {ָ8Z"}/LАq, tksBvƎuـW-%T:rWG:Adzjd>6YWFAhgñeK i|5/A]+OP? .kԜnmshe5DCgY;CDxY7dk], =M-7?˖? )ӯ$̀2 I+!;VXnws%,LvG
X,M3uG5>dBI2+M%@>mgxQ^$(z"ڍP+]}{vL1 $݀lhCHo)<{;s2^3# @[?Eɬwzpm i~aXקN
U _a#q'mDJ`F
7'L`? X "qþiFtHO~@.*毋=l 'g iY$mE9
?>4 :cN4ݣAtlcxeo?g
Ͽt ;b^ XArַ,#Nb+ rաd$o~a?)PYσ2|]Y=7F&fD '83&o-yiD__BAova>H-%M+ 9P@KK?!5 M8.ѲP&+B{'(.\s ] Tx~Һ!*[*H OJUb1s觓y YIGFjGRO(4wp' ƍ렦_Wr;-p2j
N>y=-o`tw\Q^NA0~Ȥ,nYW+I܌1fow|*UˆHlH햡,x悘8l]`v0s+eCqX
0
Fמ>VW ٰ1R
P(;g ΅.9b=\ʉAsK }`-Omc!l`H/
L1x [XJ<{:
)wb559Zr$VDE&!n
ޗJkL/L+
PΑY;R2P ndhw ̈ȐbiǼ0 Pq!@I |ExI=5?,&1¾KxxX)MˢV''k6Tt &*?c:P$00e3- A(;C$} ñ 3Z 3 ?A9(|o U\LSh|`G>|PsA e62(,(ѿ+rƺ[Ox8_t"=ir蹈Ԝ:(?ܻkxMSb؟oSEm{&tu}"^i] @C
B4k)?u3/ *e
✜
W?\x>y0^\2
Z"8вyQ|OsPP*+U B) =s
QBVfŢ8 ̋L8>rYXA e|v#n~
̄tU3lfOb){p-TA2x?FBZb]
wC[!ɿ~UiZs!
̜{F hZ7 > ܚCH[L\v:&gFLi~tN3k찇j[¸C!7eЊ$p$}NY{@;>7߈ |Amz!ڰ04Kv_+, 鿃M;Qd+̷g>l^9S \]%!߹<:YaSK'ː93X3<;)+
f_SXl<,xZ i7ܶ+gL4 npe&;~֖$: 9$MveE+)'gnjDB
*X2m%̲y,ld
ް{ᴎ]x8P[~."_)߲x|6zbH| [N69|<~v9Ǿf1Yd}.當 l(h%'W( l@XdBqkP,nۉ32p$`wd/ۑWqzq djC|X
* |O;PњXsҬܶwUķ
#he
5f`OPX*&5σ®ahcJ NmAe@Wrj !awUw syT͘V`K:ȅt
}iS˄\7V٨dIs67?k㚸¾ V, P\RQ$ Kb"E ":S(BXYn!dv;4|Rj 0FEgJ D{>l
:jC moRhA*M
tlTфޅQ&]olyp]Ȕl0#$IW+r-+-w#Aq :k
lKDžަOmc~n."<9JrhNl~a됃\ole$o^* 8@bfgShK#__i C|tqg+yV`60t,#Jm#N 5"'#$&eŅtUJ` m%T=݄<-8m
_%WdtHcI 7C$Yc7 k
f1=)6N 5*& |(gxgr!
c2o,s䦞\Q֯o2{zݍ Ǩ<`} ګBN<`߂ C|q+(pG<O!k% ?V%[0>״ḠQ|?ܖD碌wUx@%[@12 fu yc&$0c&nU4!t*)\TL+<@{ÿp̧m!M(U?TBy Ea%M"-ʬPi&P[`A4# xs݁} y]#)SJ7ϑ
GtN*Au.Y:C2&<UWKW٤ŹpkgIE>B @Y`ZyHxYS P$\bf^|fPl &@fM3Oiv0~ oM$j*W& tU /\)!
b&v2jX)9 _qngѳr0i!j2vX9X#) !Ct*WndH%|kӼ3 94h$HN`7>jvbJTL@6{Q
s k)(Q @7Ń)VtJA 9 `L[355PCa||ZmB
aY PRXFX|n(8ezdZTXS.JF0^
Զi6s[n++l5>t #P:z[="L
VV|QGsq|K`0Pa3PZA.5>x
Kn*/sF8Y,-X*TS@7C> tHfB.0ʁ;J)K ~?i)9*;T4 ^S=B?dAiu0l0(ڒg~f
>,٢46/
ƻ>b93j!ZJ4} u$7t˺zt0MK }=qjrE n
) dtjia|<Qtj (ˋʄ p:& hC:zg7N
\L0ԯv5 Gs#<6D@9O.qm̏7k7 jwg{9$f
ۄhWl\gFe|ErA& W@ eyCbȑdR6fQ/9aSd0̼|H꿨TX.)AϢ6N= -6Ao YY{j:$mD?m ٘c5M8yHL*l#A,n^C/ '%@ RC~f;-}14=}Jluȸ v %oI>E%蝗YOț*騎5^h C F
ĀKAFJh]<Տ^pSgvO~B鍱fMJ#\-_e:k HEj+-;?s?&K!R{3f6 "A\"Y#2r?hQ翻}( 7lAb !|k5uPyce~3ՖWE8:VUL7jUH$
smjGڦG|W4
+UءrZ↞wIBoC~eyƖ`\I ;k3=ˌN;"O|/&0' !4Zj)iյY>&Y`v6|*}'tZb >D3D%֬xtƽ]r1`+/L790= f&etA/xyr[i>eICbN̟薒.%X'{%ΒoþQݮ i YX)9^>l7.CǶ9V1e[wwgb_ǚ'P !l HKz04
hٟ 50
(Eby`PW)ÝwIЎB\pDDgH<&~R"& a1wU%@G71Yh|82 YB`cGfCJX̞ C6sVWuE7v t[t.4 @l*Õe+ blWkfM̮րBI_a[` 8UI qQmޙ k.]v0%j{F8
hiwTGH&9RsI = UtwTՍ{@P{+O,6\.zV%o32Be_gvvY3 ƶJݥuCMC.߮9 da鑎Ltv
JVE8=^TU @KxA9D C6nK `:ꫤqw>P(
;ŒU(f(z;! K "8
Nz8o
}U X$5.J Gisͬ.'cT/N_kL(][ Ɓz1|esW+ 1XQ/sWvȝUa_brԄ;; ߏ?,WY K>acL l4eL.ߧ+K*!#D + _oNLT>\9T&~62w Dwu .0(%7_)Ǚp* = PZO'yiVb zJ&q q*B, F'j E~h,U'1KH?X"yٔ7z۵[sLDL:R/y!ɕ
" , T(
LaG ^-=8V6_ Jڂ <hyfUTƐ}4wt˲o+E}2G'aL3Z_-u'l&r/`kwnURr
aqU0>׃WYsY+7l}H_ft%̎+6@b5y_ lW43V)BGNK:p ͅ4rwPjfͻuh_#!!T㽳Aw10 ħтpƎ>@:(,R
组x,],tʣ, I[fGJj)Ndڒ~Z&K'D$~ ̣:SeKdAhn"҂Ԫ;A)zt.'d.Ɩq0U.'M):h ˤС3U
d+
"b $ xj%!"D\7*fEGF-k-,LjcMl*WX {"A x-e g_3 hA0I) + _!1˃`H#A_\|PG@Dʲҫ5yBF7Z".oRޖ@[r7(Cl韾bB1b`0G^Ձ-EFU/ĕyq%nY2ueiK$&lxZ:ɏD;!
W9ܦys\F.\uNo!?p
nyh% @-ba'☝P$ 0("\ٶC~x
cj3vB jLfߪzT9R߱Ɠ|PQwe 91?ZW'
=O%.7>5|C]7!5+LP R)EJ2Oz]z)\}n,aB*ˇ-Lz ;qC@ʑ "_A}NFx*1._?l&!8 lP3GI.PܕLpR8 :. L@Y.- iSܼl;] 3&]3] ZTk-@Tq\5]woTcLo) lO[ .H! (WvtXl>^>ǂ/#zIP8⟉:2 ^} ׅQP
V_1-ZuMFC{N] N3FƬY}=T!c
HЅ4:Ι'Xtg_@ďm2NAB(eƮmH~K>mS5;5]VDHxg{)wU/7{ZT?qf~@ӗ%Ԡ53z"@db=\Q ߠc Đk 1c N 2؆z}}
Ic;ṡۀ` ׄ`#158~T`., rdUi R*24g7aS q_
4S R3G
NrxJPwENσ2I
#JSpE F8e.NHmDE}Ϯy)<ߥ_`ylR:la8Q z
[ޓ$aTκ%@g8A fJiAJxI;nwjY':^_OfLHzrgHXѤW^Iۗ奤dj$lgPg~-W%A," PɕQ{r+xUugKV@l)Y#cx=hhl{C|f]!]Ozu~6S2hH 7d%pP{O 3G?#'O!R*n
u9*>#k V3:=;aWJ= }o.4a\ 6\!$`:fneZ|@#hwA]۪BLRQ ϣ ęI\{ Wc^)%IO-u(Uڇz ;YC%rsK KnabB斫!=AmsQ𬄸 '{ݡIJܟ[aP DFP0"@^2۹XJp1W|;]^l]-,%\I cঽxO 8pV0]vq]8[{{?Z/Q[uNN;asw?!E"ۮ Y9yKxjU~
n@iwSTI+[^|
9DH
;i8|?FRE6R|f b kt3iR <vJxjA@oD{%p̷> W}OR
c9\"fkSZe|XQv:Z%j Q4."$tf, N 9]n2 "I L@ή,
RS^5;7y%6!$h+a :S $ fLMh IhVƁ_{K+= %L
Os+zG `3䬡<ɮￗOìtk:M"Xҁ h4.;$x` ckZ.>%X"<
"8@N^'"ZTtE.1.<
VΟ*)[^=uv?HƭG,kxB $]Wˁ`A0JA< K%mJ@x*0+ Ѭe~ba$=Lk38O .7[ŋ&p~wn"~ tp c^>Ad009J'16azn%er\?+[VG
@24doI+PML
b7yuLfnlH;71ߘZ
yF.iӭӕԉ)P2ae6-eb,bCA0F~+x֊ V}X B=IaY$yhSQ=0
X{0½ 0'椏i^#gdٹݓcۍYkϿ[Osg"Y
k̹CfL`,Wuy7eNtMW3 ȻS#aFh؆9 EUWa>}
7[uojğ@pƜ^b`3{pgiON1M^* <.xCZb s@~
7\o"rN,#]ϊ T5!d]BW V/D"-7R>$K^9շJ:scyCtڨ.P{BO[ }
@_'ӕz-_]rb
]`|.Ġ](ufP 0lj'v rƖkR96aMj*d
A:V {cٿFno/г@ɹW[=. N X{ߦB>E&[g{y*LVi}Bn!qL ^ FA\y 9MӸ! !)izpulMxbtف rYGUk؏X}]D!7u#/UD?=S0_+7Zo A 1:Xj:H={ QfS
q)<ܿ ICjO#.Bzt%e][9"!2}q)p9g,S^Ђm x$t$X Ϸ5Dl< /(6ɲJEn;)@6AKsvɀ|#3m[FEyB P,?*1o Psj*pz!K<݉d9d|WyX..`7 O*jV[*@ чa< Trt4r0'\@K$ D {$/FR-?OPhUrK V ++w
`A.ρ1@|4W(eS6t0T/,5SbadK >3lHF)ﷵaV\(y 72=&lR:d(cIz8Xz
! e2Kr՛JE玡ױ+J^S2V ~+G.v5z@d6+|k{Tx29nXԐr fq)lC@C٠.x@^^YºbSuNj<^ p_G )h 0GY6u±9щ{ oqJ o|.YRe w\(/IX/JLTEpyaST!FD·©=-!1^)9'O"!{] z-[;Ia&E d\nKJ 3
n ڵ\TmUɿ0~ 'TpĨ\]wGgxe2W{'UeuΦ2bjq1`\4j\n;\6 S-exb
qG.uxhs$vݯt s.)'{{D¾"ROMdĖKBG $
YZ