openscap-utils-1.3.6-150400.11.3.1 >  A cnTp9|Y#ru@13~%;nиo=n@91s֣:mz5!!LiCiiH.+dOcxene\\r+u/*dQCxQlJb,EEL+ D~n?NUhUQ:#g9P:QRu:J|!;ce-2ey:%*i[ :߱ 9i!*٣~5T׆}d9K45c3dff83929e82d4ff9cf951e66f40af0cb024a4558b8113eb42433d23cd094d70bfe3d2a7d13c588c3ee976f33f8798e2be4ba7~ĉcnTp9|"gyi}CWn^reЍ,) ,QUhuYNUyKA,kYQƍ+l@(;xw{Ԟ(Ò$Ry~D73{j`; ŲNS} &SG~?Rбm6ns K3l:T;B a 9 k2oU- M+TuuzTrS[yiG~$4>pF?d % 8 /5;_   X       0 H8("8,595:5=>?@FGH(IXY\]0^bhcdefluvwxyPzCopenscap-utils1.3.6150400.11.3.1Openscap utilitiesThe openscap-utils package contains various utilities based on openscap library.cms390zl33SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Monitoringhttps://www.open-scap.org/linuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in oscap-scan.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in oscap-scan.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable oscap-scan.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop oscap-scan.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in oscap-scan.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart oscap-scan.service ) || : fi fi P & ; 36'Zˁ큤A큤a#cla#a#a#a#cla#a#a#cljclcla#cma#cla#a#a#a#a#a#a#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-1.3.6-150400.11.3.1.src.rpmopenscap-utilsopenscap-utils(s390-64)@ @@@@@ @@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/sh/usr/bin/envcoreutilsdiffutilsfillupgreplibc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.25()(64bit)libopenscap25libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)openscaprpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd1.3.6-150400.11.3.11.3.6-150400.11.3.13.0.4-14.6.0-14.0-15.2-14.14.3c*c#aNaaLaZaG``r`__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@dmueller@suse.commeissner@suse.comrfrohl@suse.comdcermak@suse.commeissner@suse.commeissner@suse.comsteven.kowalik@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- require shared library in the same version or newer- added Leap 15.4 and 15.5 dictionary entries. (bsc#1203408)- openscap 1.3.6 * New features - Select and exclude groups of rules on the command line - The boot-time remediation service for systemd's Offline Update mode - Memory limit control using OSCAP_PROBE_MEMORY_USAGE_RATIO environment variable - Allow disablement of SHA-1 and MD5 - Allow providing pre-downloaded components - Introduce OSBuild Blueprint fix type * Maintenance, bug fix - Fix coverity issues - Patch the `segfault` in dpkginfo_fini() - Add an alternative source of hostname - Fail download on HTTP errors - Compile "environmentvariable_probe" on Windows - FreeBSD build and test fixes - Add offline mode for password probe - Initialize crypto API only once - Fix UBI 9 scan - oval/yamlfilecontent: Add 'null' values handling - Do not set Rpath - Do not split `XCCDF:requires` with multiple `idrefs` - Allow empty /proc in offline mode - oscap-remediate is shipped via /usr/bin Added oscap-remediate.service.in.patch- Rename oscap-docker to oscap-containers and provide oscap-podman as well (Relates to jsc#SLE-12852)- openscap-docker-add-suse.patch: add SLES support oscap-docker (bsc#1179314)- ship python3 docker module always- Since upstream has moved to Python 3, switch the BuildRequires from python-devel to python3-devel.- Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735)- add old patches - slightly renamed; cpe are needed (boo#1186735) * openscap-opensuse-cpe.patch * openscap-suse-cpe.patch- openscap 1.3.5 * New features - Made schematron-based validation enabled by default for validate command of oval and xccdf modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added --enforce-signature option for eval, guide, and fix modules - Added entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report * Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added --skip-validation option synonym for --skip-valid - Fixed behavior of StateType operator - Fixed some of the coverity warnings - Ignoring namespace in XPath expressions - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about --stig-viewer option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in --stig-viewer feature - Added dpkg version comparison algorithm - Pluged some memory leaks - Fixed TestResult/benchmark/@href attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element - dropped, because not needed anymore: * 0001-Fix-memory-allocation.patch * openscap-new-suse.patch * openscap-leap-cpe-15.12.patch- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/bin/sh/bin/sh/bin/sh/bin/shs390zl33 1670344151 1.3.6-150400.11.3.11.3.6-150400.11.3.1autotailoroscaposcap-chrootoscap-remediateoscap-remediate-offlineoscap-run-sce-scriptoscap-scanoscap-sshoscap-vmscap-as-rpmoscap-remediate.serviceoscap-scan.servicercoscap-scanoscapopenscap-utilsoscap-scan.cronsysconfig.oscap-scanautotailor.8.gzoscap-chroot.8.gzoscap-remediate-offline.8.gzoscap-ssh.8.gzoscap-vm.8.gzoscap.8.gzscap-as-rpm.8.gz/usr/bin//usr/lib/systemd/system//usr/sbin//usr/share/bash-completion/completions//usr/share/doc/packages//usr/share/doc/packages/openscap-utils//usr/share/fillup-templates//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:27062/SUSE_SLE-15-SP4_Update/ea7f11b22176aec6b877f0cdf87d53ed-openscap.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linux  Python script, UTF-8 Unicode text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=7b67d71edb7cce06c88233a7b9dc4417ff998970, for GNU/Linux 3.2.0, strippedBourne-Again shell script, ASCII text executableBourne-Again shell script, UTF-8 Unicode text executablePython script, ASCII text executableASCII textASCII text, with very long linesdirectoryPOSIX shell script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)HTML document, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix) RRR R R RR RRRRRRRRJ ' zwvm[šutf-85bd3790f729579928961e4aad53b24156ca43ef6cf6034175fdddac1358d1b10?7zXZ !t/$3] crv9xsr{Z}^k y%W4h9h\zxpRF!p^?K]6>TUbq"@k3"ႜ 8ܑC6v|/0Z#Fcee7 R roѸ$ܹځ ˔98-)]p/ D+cZ.;0p 1ˎ46 no*ݡʖϒrߝ3»w4OY0^P2/3 b5Pz5xҡ{Y*D_ظ=|ӵ5/ԕ`\!:On1]Saj7vnNQ~QAJq~w#D ,SQ\bPBgc0YțE$ '8psaіmY:W҆ƨg012VG/MHnuP /sE)UK~R(ԌKe-szuioJ\7BynCjIZ U:P+.נa0YeWǤ@ZURONtBlBP;F'm;ݡf[iPj̀c%a5,B`+9VtHf1HU^h_̉_Ȼ@Cy׈Z?,Xpw:S\gl. Ȣ D]U}HŬiV| +@A%b|iL5өi 1dmo34l"hnۺ y'*jI*60#__oSF*=]`2N@N( V&q #& j^S$dg}Mեd7I?/lwnע. b͒@"4@MzH[Jh+NΗ9XXLvx*?IDNT,x';?%IWva_)aƄY=I8]׻u ] n &P@qü[1ggjHuPŒԁu*!诸]joD{dK!vcwu"թ= m$UL`a?Ѷ4hGZZχ;;(#CYM\GWB3crDf-6x5 n0._9 bM,T/爣8 c.H֋`*|%>Ck"0]wǾ@fz|kMCq/vzJNl3<;L=w1:xw\pnp~Ƴl6)gS]ɎFɇ թ0#v}'4vmXʍ aD;A8#v{7ѽZM+iPP(LP6:Jj4,/sz;u$DI絃|B߆GWאIhR 8Cn?K/>9ѣ)v-Xtn_=C~Uh/=F|SN4/zPV0& $QZ kBLp=Q1x4' 3h3}NC-;1gJ+p٩z,R]4|li0}O_y Ыl[IE~ ym]nז4$vCՅāoсV$qRg%Gٶ@/*7Xp09-_N Vc0z&ӈ|gXT1R.3k_w,֛uw^s򢖝(p?Ai=@Bͅ."BJ GnYx]e7Jw?}Gb9ڇ|c!NTJ셬byU]sZz#9_*QT; \ PVe=ʀp~{I̕i( ^L-@xovvNϪtdYA:Z~mKтzzW7ĊͿKyZ8i18k=~U(#- phY_u$p62Jg@yŹ7+8eޕ'+&8B7>e\)&-@@"*-  JT0K@pU Esx*Ju8kmٮ1 {_dkvFX"ǨA;od`--C I"saWxXf/ݙx Yh*1IȺ~Cu%﷯9Cp$?c^̍z(S0*7:jH #C}oavB߹᭭Y g]E%ɫ^0}1+<^VTd]tүEX0ΘC=OsHQ \z8G ,!b%j=f g)*^K:n\"mL@'fV1>FЁ6$s93T$pӯ#o]@f)_ mC;T+4!S|H$9UX{j_GMGpǪ{DþZ;U!C ײA`̅깳X#N5:`E<Xӯml"¼yw}GbפhXk)y ZLr4Mpi};$V|N(OOC}O~y@'c1MckTёE#g\{JKZ'ym?]HBBoP[ rf<2fIE.OuSԻJ݁~g<5XPg̀n ǚvB\ 2DzWHpT>TIMF`/ꖈUE1 5eErJ &ow:y--v)8짶8; :M^h#bKq&b# Y7]65Ƈ<|0rfA`!O&M4Ԟ݃^ M-jCNnSh3@!Ĕ'S跀|īfT:5:<9>l)A:Ks[ؐ,Y`e]vyaMTϩTFz#[: rH]0=J ] =urrt̨F*sWA"jQϧLz#׾㏵2䯍@~U[( <|^BX4'[nٳ&?2F;FYq4*MNiK}H1e H-z0>Ljax#`mvdF 4u4.#F.̺,{LpBƍOq)$Dq$ヘB@Yޔ-8 `@\.A5y LR#@/# ^>RpSKEM{VitYJo]r J3O2D"k7fjI{# GhRJkE(nyy_~#ZPx$+嫦/YjDdf|>HFQKd~1YL ʖm!T-)>ر{KQ#n.4sóLD 4acӉ7J j(+tX\$*ho4\T/c2E=3m1=+er΅;BƑ1au!f`\d-Zr ȥ{R:wW'fЮm.K6 >%2uDQߡSU2qߋ ί)̰0}WZv%Ib3P7L-YpiC(D&Gx2c}U]pYi#ك :YwtK-li5h(`k<{8L[)[ ojsn;^}(#ˍ0zEI4ܣNGw8{RhJ?xv;U1p!ixu5 *vALf?g \Vi;M ?oYM7#Sޞ5a1 (5YI >23q4@Єv^?sMmИv]CIV*%h}Ƶ'f,e[6社RҹQ*Irg_hTw?ץvO<^T2к~Ԫ1 5"з 灞k5B0m]Glqrk4Mw2E"$QwÆtJrs75Eg/!W:%,[C[.1 >raO<`urMϛÝH4{8 c}C{;4qQ7P̐4tѹ͂̐Oj#-ڜdtb5΃YB>{./I=Hu6GEː`!HXpaK˫FXv;0⿴4WS+b=lCBع r c*b[lH%*Uw8a /!?ͤ%\ꂫcx6$[ǁMXYJߵͶmI E2-N;}4+QoGz(i( lO24f#omM2%uC[/?`hʼn.ݖ/; ^~+/i =7x0V(/6P18%V!:]x3hU$/Xgujl-󌑧2|pV:N ~_FNW̯ _g냼SJWe:ln-LEA a>FE(0'K%gMS[3X#cM>W&Tp5"]N5?#09βa۰=P +?4?akLb&v?h8 ;~[j"|~xJ 摌bX^m]0ۘ#+TfDRj"=qG11O"r,[gOȍ, ѷ8 }n'=$i xi^)Dzs ?RKP |J] a"j4Xw)[UuFNXS3is,-zsb03FKg sjg_8?mDor!AcXU W C"܃~8L4v q6+ri.SjtM2K%zŸ8pWܓoU^|4yvYx.; 6A&6ܶ%Žڞa WGxkP5%>w̑z9&q;(I#/Zf S9Ď W )D\O 7H5ʒ1_/OG7VD 2(OHڶz䡽=-]2a4 eh:gd**l;Z|0FW98=L‚>$M{^4ܵUģ`5~se}W? }<5A5fp]>f( : w<=a>&3$AV |H|mBZXJ(}`H`4ے ?m6 9'@{49!7Ė!.YvoF2 =aؓ|Ƣı4'^ ^}}{;Lie2={ل9[ HB  ScZ@E4D1'z(*͟Jp!r5 g]BUS!^`$Vq^lpmI{9KTG_%0`&bK1 ϣlkJlȣ0cG7d./v8eH4؛3bŎwE4W{ZP]&ȝcUSA5_S@C.n{YH50ڌ.*22 q)͵37#C(Uu˛]ivN@[_PR7yi|HY;zR^CJD@. ޯX;LI&<E~Ҭqi=81x~ J=~Yuv}NSu^H~ ~E+i#DXۄQ=+W_|@j\jE[&׷xMDv^!q' R-aҏ&2A | +Y52G&ab 7͜G2K!]!vhjP;/~,gr9$kݥzb;)ixw)E)'i;y\fe`m⭾ǞXXOd% X܊jD[S?h@Ž^e%l+EhoT<{~H \Y%K6{$֋qkk>sz9 ^SVu^ic5)GX?J7sD I >9Wʊ>IUBZ^#`8błb]ʘ>I"Μtl@?Y岖N" qAf>ߞD`7$h# a4 ee2elk?8Y;DܶM/7+]Z_f&_|$^96+hzvj-*W\%3dn?)"(,2'bxm >d,b 5%]jLE31Ѽ8gZ4QLW vkt*`; x9E Y;fq8Ȩ~ӼmA .T \m9?'$Dk"&`o$TN`m ^*͈hhRj` xcJ;\+/2+5N؏,^eɢ by»JvoSy8 B,^RgnM+r1i4h=rwu{D{"Zp(Uu 1,3xgclj3JnG *F罕<<O W=QT@Ki_5 JX*x>mRǷ7ݤaWHT!#|PcƍU:9<$#؏4i,d]"]p:k]""#[0d:h֠!jލS`kG#%Wج)^:^߿ *!tiJXKVJ9}357 z\-~fPS=a` }0Kv%OzCfOu+W1MCw*g.iE{fي8 f8u O(j0UomhQ݆ JAMβ}A7W G0!zYb K :qKMAbMߌ;mU&9EZHX OMb8j.u|sJY6dq Ѭ-O L:!]Uٟđ}1|f ó%PЂyTA'JNRAqyXD |A}o}cOL1|: HB_iE1p>:4ZuDo-ߧ|$#G `b3L@qekicxˬLY!; < h&ugF~|)-#$w*+~z`񈟦[7$;ٜ|dSfcӦ/'> QO̟lkj,z8;̸ź &n{2_۳- &~o#.gj}yuWץ2?!ޖx|cUe4>ĉ>%]KVrNȿ:^glcmOl3v6ّBqтQī,x ӥ翾ˆYu%/$Ԑ}⢹bV;|D"zv{]-ζ#E;y{ e)> EPÏ LqDYt a}V7y^@>KqAF`]޸ut?'t^näe BQ a0MfA}i 'EOs՚7zg.CNo(^ hf!OL|'Gq[U\&Ra|ύG.+'ri$@EΠ:~k'@ֹ;Bui8I^ִ0HW 42۫$ 17~E;I P .VV5XYcȮ 3y<1 ]Xgv5߄GbHrt7[-:1t;Z!bDNAR 曨rIy7[ݡJ)ՒSOԫd˰ HNr6 6r g'=p[K'P\VEۦYouѐc[4} VYޛ> 53I?I`pw3@G;# LgQ!I;&+` @ȇ/^+Q0BgIR'>EOBF [O]Px4:^`/xC03}TH,B( p9Ư+CaaLiţJeI!^D;]mB[Ł Ko)t(\^:R:`6's;3=c);|dQZUֱRL\+ņw% 7!yO9[[24;c@Tw&;a 4}I Ԕ0;P{¬$"V*@*26~MOfY6!⃎,e`GA7%h;{qU$+: GD} Ex,о3`CuL׻{W,dU<25u@Bj7MRrPTV%CO{U(v>[C g/yP*Zx[uůRI 6  - Fr@Ե|c_ЏSbUtRXqR&cPg Y\V7r_蕔g|e›];ig QI俒K{,Gd 5s(G"P _i7ɽL ~IأaZ;p! 6vHGX¯TSҙ &Ťh!>_㍽5u~ K3e5i7mJ3d/wmwj/*`TvP^V|K􈪮8򇼔f`S?Q3bpg.37e}OTsTj")[ nn@jL,\Ľ ?L>^-鰀]C)#cz؈(b umidk{w=}3-554qJ8&N?lbrÀcu&FN*uZ%,1hV`jEǬml}2 g%>P Ϟo R⛑DRb?ksIS,Dw%sC̯eIΆ$ߩ>VWZ/Cu8gm5NX'_mBe\\91 !\RQvϖfPsft餖V\~?\~9Ƙ7 ^'Lq yz0y <?U UuWݧr'6Py|V }VJv -;D+N9,/i ifi, 5G φAO{%&$cKw27բdD{Zlu#$kHt]L/!Fd%YUE\mرf"`d t^Foуt?(@u,)kC1: 7uvm]5/cX句h1ٵ,MqtLuG}*q+CH9^@KyX_VJb/:}Mb5nAdST%5kn]y-z.H5$\Â+`W#ѪԌYRd `v"PCR;~vvVPywWc3L5 9v{x{2^M57d2d}ry);Y;@:mXȸn2 ^61(Z ucǻU-FxGd@3XjL2r< O󸂞O2";uQ-+<KN/K/2!t˓dw8lRi\%csY`!UPqPـyf_rEC<Hr_&/Ra»c|L rnz.k^G-*Vk: ox`&N]"[ K2q\3U~U-Aծ׶u#.>R#)<*s%يhovz P@Ϩ&3) 9,w\y32G8ſe)#6^]>]t܄e"v*q q"}Ž Bdbeo-[eŘ6u`%#V;9P[F cxaL9'%-L4 -vH00O]gU߬e3 M,ƘIyo ?N2ѤީI/W1}-nV}{hUlsDM nf"1t?>)ϨkW:b(M={[&8w 0)qa7ʹZEfTjyI>%шlnW5`|Kl=_X 40ɨ nVT坟YݬԷvqf9SOYz{`b̐NAÜ~?H /[BA" ^{\H\/FH}@-romlm M)s>"RV0J4;42.yZ]IR[DoovڗSs\ Pkr2(W;˝@7ѩ6;}Ֆ+l)/i4ׂe]]$@j\AM*;u6XNp{mSXAŖ3m`)-? (dف0)ǁ.\I4SM7e4~=gܫ:;B%ޞcHgXe2n& x|x:o"{En1R?`o.rGKI2 TP-<8>8ԯ.5!89q4%O)=d)sk R {:eseN Qd`(=m|%2.ʬ)4\R2v옜gf[¸ ``*!(`wLAU3p 9Ti{1_W>/-T k)ECвpKVHr-Z | o*GFq҆[.Q)8>G|exwv0KǢ!Jj!`42/fD~2m]LNEdHdKz6BhZ + 05.r?B}D;vn:D5jن^3~- \i;0@p@ 1yBA.\X.0BM &j["޹;?`J/eEuԄ O͛G`쟦OY_Wb?Ș+,YDꙦm }P"'1Eo +j,.^ChLiYKNOYN=WEe8tHAA*-և3|[GE.#Ff9K755P ~<Κo(AwV3γh%WQ<;JE&bb['#r?!'uVc [c&w̎3)i4lkK Tvgɹ ,H׏cږL|Z!jΙ9R^UsvpD9wżLdpTPL?~x't@1b }C( e]Aɳp )'C[ew hlL[`Q$(M-gl:ʢ2ˋ)wOåblPM(DDdY}TYq$^=g8MWPQN{8!hJMhL=%MߔcB{vZX4MBZUx/s7"sc;9 "=rP\ rM у^VvͱcZ@~{ŊH_>qN8ڏ;z 1=|Q9|5߸f+\;!+ȸ q _bl DV0a0GI(Se%fp̼y<Dq Ttq<~5kcUMK+0wmU̝f96mS+#2Uܻd+C;5X΃+'* .Ƹgt[ x/R QC  p$lIHEl"k4tt0HIwx,I\ +#G`PАK*!6Ya.UOd<'&7ލT@؝X*F u!T,v][t؂tձMձI[M,7`95E,TL)vx ULrPʐ]@vvYUSǦBxh݄!?g䟠}-;s0dιun]7QKa3IiJH8qzZ[ AkY~'m`~^k(HdoO&6W`o%,!0-Ӵo!ҰEkOlO XGrƻ>9QriQ-w`>/VtIou 0] /UY=G.XTh݋&u59FX؀32k L٭YbM?rrR0?=4:h}`@! ߃EϵrE`fH/VQz4-w*`9|bo鱓_^s$FZ0o3'vH Cָla᠜ ]$yE)._rLNV!stS3<#!6ulPn>Α}ّ% wI]v恢-;xGcz֊0@v?O4n%IDU V^-"5iB<,󨻏3.OY<{B]'f —`NHU8? rF4l@~N*oRq "xE&|"xa,a:ZD1tD4miQo&X%c'^*[8W2uі %UUJ V5YEu 9w1}fmXHG͌nǐD +m1PTʧJCM0=nQ',E0raAhC0˰D$V`N Xqk(־='^3^~+KF"8+ AzdbE2=*/.HHM/Ki;7:ZF!2**fч\9g\QB's-4𔷍^x DX2bK]fKMel,>ݔf=iD?œm'0YI[K65:YMopv NxX !̐!l0RoAnB!W<#(GT$Xi"!6E" ct<y"Ym>p}1 Cf7N扏+PdSU-F"L"JEi[yJPFj~7QfC"bOXc3]GkƖU)N0?lASkby+-o…ۥE׼in`3|xiq=q `k;6b{[)sg@G(K@_HK3’o?߂l7.>WZ{{vu,qOIB0Ѝ/&]QG(:wWA7|&x[K.$`zEQ4/LA(o`[˽(/̣rhCM/ . l;"ė([tj~8= F-S6lC-"H e 9>׹*(GUii6X/ 4? Ezl+ FcsI9):S (#QfQo 9.DzϭV ca(%\G[Qi譭X}WrKːff=nӌxxa+^ҝ|u~ X)s+:÷ 3 `~lfbzŋk馘t1p!i7 WFF LXD^rJ3^n|Z߽L!ͻ"1!DPzLF{R1^0Y1EEɍI51k:_ñUNcXϡ?%IsRDG WE8g} JIeW/L5w{{^Фpp@XnCnvHͷAoFڂ(sh3 %zz%ojS֍qQZ ֜5yGw;gdu<ř`hT{wt֚"fmALAi:Pǫ.Gv/!ɖ)σKߘYuZ߇Kȿb|g&HXxhܔ3?HKmr`@њ,JY-OO%F1c?:t 4}&dE$G zky-Maׂh6wwjQI1.mi/c%Y:x jᰒ@LoaFq0<Ո/$ǥsS$}ҩjv3-h]pJwu"K$E%W",ϔ6iuUff7:-ס6% ʌxNޭ%7[L肣Zs>˖)N)#kF-FH1'n, _3ORyj08NjGϠ7YB>N#"\/XDjbN*(2#}e+, Z@w9c)[i'VͿJlbhN~8;[$9v4dorKH귭 бl/_iCU\f-S8f"}HLyAaqma7Z~ %O ll)9[ ]MRpBxWoX4:q&Y?}ܡ`nV^[gRk!JUKxqT k=ZgѿG>཈=NǶ7ah29bC*idn ߛIJC6=MM' ^9%G8khIU+6lS4Vӯdzeغd=fkz~I08UGJq-v/H(/֫;6/pG."!WPهЬ>ȜF"etE>cby~/増F5dr'/oé֚XS׿ٍ);+s8e8-ѷfntK?ņz9n.ڭ}>aX"c*~XBxjxBYC2|`3ÂyipW!'TdOE-a_1hCW$Be Qn|KaxE-!HY"X 7 Ǡ=0Ԏ,W;U[NE)4{<CzGv̬)u1B/o!JxXud><71OpYFb/E>I! C~ǰ[FTSCjFyezNڧ rϨ)9}z®: j f,@ܴ[HD KP{SYA\0aɞww?ΜG6=v#-731s9{0~n%ebK6a:5DikKImg4@6%Ը;>c:chӱN# >p]o1<~#\SN 6@9*M3a%Q{R/8Kk&oz.gbC|?>PWQ`}-aM*/U9&Rzbc#_+< akչ j%+Va`{V79194LL{E$m;:n8,z3@+=QFRUV\s;!A9eF1f jM7@XÞ+HnRDB{ @=.~rkKmVcB;Jtih|"MNDjw :YΐVs?aKX@5@ָG'K\N;3 8uU+x ]_̵61MSy_k.PAY8c~dۉbb;2>B^|`6li23yoJЛ7굔B2u6\*X9D(vFh9Q42D|Q &(An"9k D#%Di,󨊟 c!'3:n(:D&ٌ(( ǎ JurYPTu[|.  N& 9jV 7{@<KNjr#j=L2eD4ho TQ9=b^x }6'U&aqD } _b-rW+/Wb=*Z~ E^S9i6?WtF tg.\$he-^]FK.\'nDڑ8g=O%4JMc(Q?^ URL./d~bG߯ HCC {N{)~,clJo)r4vRS2:斧f,-FVHUKybc mQX3 .mul<˛m<a #DKihg>-ܦY}obBb’g;aB11>b0BrW0L$jLFrČUi7r| w5 򔔹}.i?-g=䢏5ZfsKXԏiAp5F]}7{C=yhKz@B^Ne [f@OCle_oɥ|(:[^Ώ|]iIQ2:s<ЈXUJI`sjB fIg8)qٗ} >AaPֲ,jCt1 iGcC'i<"maqU3ANmS)?} z+d?:DB6wjk]/H֟rD *:,kGm.vIH>sccY+? ]{ϋ5G0/Z*ڍ#Cz*|(#MiLW8P=mnT"~s%;%#`$Gb`Kq)?PeF;f>Siph:Wj0݇[nr2I3 /fd'N5t#|>ECт8F<zPy7I:BD:mUe^6l :U 5O֪* Uzj'Q5Cfu/jmm!P< (Q]}+AKGKQ~?!psw0!`H!kg:]Enש-+kk9xO.bu:~_Xn%PuP=!`WӨ!n@/(1]jQ5L kf1)laa7=K8:]0XݛU{*]`- 7Xh3O}Q#["WS3Ni>{.h*pxx?DӘY v_m-`דu2jSr~)]3/e&tⒶDޞf0Kvś %@FX{)|iм.ɛ"I&dQ3Y4 0>yU ڌˁ1wWx3W D7Mrb[>c?LYowFXF(Dat.\3CI¯,Qlr+#F` 78Lz، K'ʊG羆 18:ǦOB>a31 HXM߹].'r)79Xyˎ̙nwMʶyPvP}Xџ1 hLXN2 Db+\?uK.{A%Á:.E~, E"*G /)+^rM!y=fl3^ P})uDZi`چK`xȎDB{QOq,D*XLG{R`Jh jj#&W+))XCLgƼ$sW(cT|pyw|.mh|Qg0ybn o li q4Uy%sAKfp'3?Pj>J}߫-D ;_Bkͤ$˺u 1B}7/KWs'k5 BuLE=HD<`_)"b%Z.o(Ah<٣& f 2S>8$/xVs-,s0'dlHMҟxً$@ 6qi-I_yr)Id&DFR8O`(˨%`qNv#a7'X`kr#R•}ЃoڡD[ RA Lʚq/D+K2/CӚCcJq_I;v,K-*zVpj˔Vm9 ɩ!K d3p"^Yݽhueaޟ<&ܟ͂'͌:E 펂*d3k57Ljm"gdY';j@4!|ԞMA;mI/^1[cą/{y[ʭ;tl3+rcu=071'm B8oq d"GG$ lq䬇 iX"0L"sb)w#*M^PQBNƧZ1)GDE~,9EYjҔZHgſïx)7ajrc:Xt"$bJr7TíGL*Z #eee7+4K >c8<Jnn>n'W S*6~w}62b L%!HԔRE%Ѫc鬚lˇZ\Tg?*U懶Kḋ/kϖL8]B;7B/9;c<{܍6ij4bIl^T@tTMu`Mc:ջV-h'ű8{4//&0JnU-dP (w`[A[[p.zIm,H gP ޤ9 @!_y}By3vr%C_\ݜy4#>.+%>`<75͠Lzg:}ː&^aeo 5ѨN rhhIv.t쫃f٬헝$AG#푞"D|aU:eK͂B2&xX;<~NU#Dx1]0u{!h& og8Ǡ<z%1AU2z|T\j54KY̘kMJ0 l}y#zQR3ǎG+,&⃎N7.'qfI(uI5-&2{ߨ *s/ ۢv ZuPi#z2-FOc bfieʈ23I,!& Gz@z2-0Й}^_W]2gjVìiW4\sM"˂}Y"٣z#* T@+;. pA axgif\ 2Mc,gi6I vPߛ᰻@zQPgPŻtVjhUKsT}ROZ-/bV7q糑|a\$fl1p&> ;m.oHW3-g P]6{9,w@g\~3FR琽&vMpFs'D %u(Tb|(N*Sn6ZϹj7s@{o։%W6E>],A\WzA,ס>8m^s/gYvoB.=RjgI{aXoѧ 3"`&cϣ'w5Tlcgu$p:Si`)cipI= ZakM5~P'zr'ICs~"U"ǫ-%%Ncѡ?`3dNu!Fpy=5)оBߖזa_"bˀ5Fndž‡udIF<fM4w%x3 (QԢGт 1<]5J}9+"[W =p}&=wUL\My#c;z'8 +'DvXbJ15֚{atL)*bkvs6 `zKVI2?>qtVvPNsTiz Soo1?9'[c?)hk,""6=0GA1AerW݃P[N=Wݚv^)gi}>i9%my9".)>Q/1 vq\qc"" 1b93m9bA@M) WzGPlC905DCMJ,=Z۸_z͌}8`j *R\J(1ǝ9jQ4 ʯGH<}:XS5;51!lJk6_k,P{ cFao,&!Jxj??v,j1Zue!QO1\ \*J*]B_pDŤF>Sp\@r^ҬV75t5%RoiVyzI|X J*׽O 놟((ip+b·4QJM P7ӑ3S3Ґr+՚sGP_۝#d:{9̅lk]ڠF|߿~ϸ_pAȰL6*#tFtwWۤ %ȬEFiߢ£P\30|%u&Z- KnU=MTq)M[8'i^N]j[mp/BX6#lj`8hnuW6y|NV\\Rsa)` '(#}4s:<т?,DPdmyĕUcԙT˩!:rFU@ᤔ KT !CFQ>U͡kg_@k?-߂;<4K ׇ? G`[cb?/_KR/nP_Cg |l' M$4bz;{z$5Z ᔇ}hI92a9ܠcawƺ"Rؤ!F94o: ãкf&'\Tɫ@4v6C\yPVsSt}r?gNKu QɄKDi3sџ1mnhEk\ | ɴ 5sD> 5%]<+Ĭ4!I!C(+./y秬Q-yFkSdĠNF)GWtbj6 ʳ&C|'+_($L$;yЊ *1Tf yKPc:3X~?#7lTR_o,8*84?cGRy}0ItEp?kĥͬ>yȱX 8N3 # %:X*wVVAݟRJjFHJ;m€դ zdmI UrB |\V`L*d'd#0ViJ\A?TX2etBܢ*ycqSbAoq[J+9M'IcDu]La>0AA4Q+p2N=?7D@MB /UT{OViP ᝍޠ`@T헾D\Y#U3jny|Zyup U8G=qާGhWUTGEF)u[Ca5{Yڟ./4l񆥤bvE;3kV:VL:LM]&]X~"3T  4KuG[_u#-q­ dW!C8w 3 ȱ o[ Taxk <Q_z'mB)mXq,*-<}JW`"s.|pf!k7VMۈD/N۬SGْ nP4Dv+nQTnWdG*(^~'تȇ6}GWwƲ }M'Y=7g̞trm6x~HWCX:B'Kv T3vt "3iI%x2 e .!0ݣTuZdQi19rosCb!.-5 PSf' RC<$;KBY `6dDYFVJo{/Iѫ=s )swHJ_|xG+o{bm^.!'dUH5;1b^ٔy3kޞ֑s۾ޠ)q;t9'mѬ)2=MsI^#:?kf[{ю)_Xl뵪u{9vhKe JiCKrV}rL۷Q-P5"b8n.DyE?-:J :`URya .klH'S[3v̀C&bdwvWaC9V6~*)ۢ1Qᶆ0MX+-7j=[jzPl*H{nۗ.Ą;M߿+r{ =T`iҋj8ܹhm󯋮VY83qs)?9Dv-kFL%{VSHG .0)?B`4>:@J #]3pfD_mM߇^~_)&Ā(;ԥ3Wd?ϰ"{Z]V.C[vُ\\SʷnےЄ֮!?x8Y>ip.jvL_aܔNRHQsHaيDOEi*r;"rǞx(bbjن'$NUCƽ^4jU]t.Vqu bP@ܬA$EtLl)ʘ -&cC4)N`uKr]>!̦B}!.zHrFX dMSO We)ɖ6ydʣ)A_K#h P"$o\[>0ܲ {WN; h أ9*J[Qp Uǵ<2_Q^`X\^X59 v4vh׳]N;a}Cܗ+cc:\%x(ԧef`Tz7Ww6/u/M1hV0~OȦfa'  a O${(Hp+v> ڳ'tګ#`úoU#S#TJ1Mftff-%%U6n_lvNy9?@;w$ٵ_&pn7Y=nm9(PKr.5h+(ݡ~0CIrܱ[TbOɊm\t +Kjc:aV@6p d|F"E[e\W%6|`Y'pvTmL8j뻡.=U7Hs蝭4*\e6Ǡo11Tfr|Z0G6_ ^wfA(4 y!I.ʿa5uQ}\'>0CaLrJѥlZĘh Jc쬓e]vY/oYy*Ϸ 42D4-z9K;MR! S8%V|C'|gqAyܙ) KQ/ ~QW)6: 6 LAN?d]?[GRn4uԶLrK K2cnOs&sVϩΘhԐ=9A8A9a jNFcZƅ9uIEK~CH[ #YԑéZSS29XT'g5dy)VY׼ &H* %w]&, `ѢrG 6U; ($~ؤ%鵀A".c J'-QPH̑qsHMu0\Y[E= ]??(9?n\H<`a5~/ƀN 1PmJXrbc-&&S>xl 5LL5LϿt%3a{̦ۗuȒqr'=Rl\U Xz\*` W傖HuC&J"W5}-Yz;Er;U2E7&2I{v #s<v iŰi !0@:5R,Yx?d$,|T3 θmCBK/7u"o#v8 aR}R>%dk1| *f3Ά5.ntoڣnۥ[6bSa+87s(4ʄ+".lIFs J7R9Q7(Gԁ{e\Exsud➪Íaf))!̈́) $8^!yZlMVro__wN%[teW1-M&m?9S<gb2ԒH5о vMɎ7Y붦$INJ>5q]nN |,(S-O Iنؑ'̈́>l>@2 1?K?^uRxuC<9ƽdsQCp^mĜ#u}>7 y0h3?jX_!jW ߤvVbRGw;!+x ]_{p؟M,+SՁ f|l;zT $~A<,_9\`5(y@cTAxهOѳJݮ.g#"Nn';2cdމuu9]Ô_ ѮKL˭jZʠ?սeHyz.S=fE1oT}Y$H{%m~eE͉x4Vg3 TRygknP  \ƎxS7H4S&aÓs|JwXq[kW1P*rDNP) beқLg4)ѷ5wDj{O`m%>>C!3Gͦt6L0_caj h. xP?p?h m} ؽM &2*e0A38!M'$e_&Ei$F}d1q]GZu1-WSba}>dUoh%CLvAl!w+MDG Og0EG~;z>>9~2C: >g[mcߞ].0yʣrÄWø`wK<Ir~jgD! %#yO1VR v0*#XbKT[,Y_jij)~-n9[]_6O,IO"J>;%iZOj{di S10zJB.sՖNzKS<׮/hpdb|{P`AuyyNt!+`݊`$U\.6>y?j <M!xwﭵ鐞Ḣ< s/8+1nϿ)MZd,[Rv[(}Nl [  vI k_+bE.ik@f{ՈIe쭃cR$XlMB&z=)b 09?'~dD2 AvE I: 䨤}1h76i/q9Ƥƛ<7 Tk4#g Fy2ɅGK&pHj |X(qج qUTqwX3'*5ߟwXۊR-Bq*B`yƑ^27q'.t!="u5庴Z@4$r,Lo0K N#ScwdEr#ydG·{ҍΈ}S [)_Yx_^ q?YVNlYҽ讕CE]v($s v\uqu^i6QfFY\e5D.C-" Ⴏ0>1PXc^F)//Vii+wϏZc^gbaG?)4mPrwbI;Cwg KE9JDȔZi=]ެ-Z2rOrˋ`UJW*b8Ʉa@)&;}N8ܻlXtk35тd0萪_+9ު_( QqOkIU$/?Q Σ&xVY21̂ԺyI,jFblβ配p[,] &27D̟TZcH ǖzj^|#_<*Wb2o,S;Vak3]7km%8 lCȴ9}qQwU)[){MgZHӼ}H$fvSw@g,2%0z^puh$vK_)&΃ XDkxRQ:iD1E'1<Ϻ ri8*p1EVƛ> ?h!3 *A!?BoS>Wyf8?x~1k{1[۔>MwߞhSS3lisd0ԧ;zf?WzI>zb߮n_OM< 򊁵e @7ǹaLqNE uimMYJwoش VNjQ"MyN?S7I.8?[ܗ~+&Ủejm1R%7,uG"[4meO9*(_?*4.bXz1tp@*q wvKa;c7kwĊaa.U=e\($Ck?u8AOTaq?#?FC{Z3ȻV~cVč*u'*hW\Б%f,H3 &PNTA_b? 8e#o]ӳ6՛[y_^@Q̛}(sqBEOO/Jw:s܇K& <69!xIwf&*.p P׏ѵi*E\aqG)řVA!O:s|OG?,5b=>KI_qTͻN Vo}WOHQ {ηL[dm~6^v;8r"-9'p߻vXa~PsD~B %qoM3U M;f8WeYq_ 9,=}.:k!h)~"P,5dКG(D9D>0 KM^O dPZ6X3nw?xD(D'QhUP|%UR)"Em& a:qBt")WdѨ6jE92e(z p3{y\RCyՈ lX3[!y!&'B=-ӓErN*E51]_r8քw(I 1zok(o3ƵXoII1xZQ ЂEN&@ᜄH҇ U+5ٔ>OɏA{= W iܓ$j5lwy_0]3gi?k9GPޝf)cs &тsɴt1B E>RAMh5!94M@W @y >508=Bx?ݡFNQAb} l3xҹo)5$RLF ?R) ԭ\J4;(~M!}*[,3U$1VW ~28?;Ijl$) fRt9^o~DZ |;ٞw'+'Bf1*Mf L[SMC ]탒!z\2u3|}mAgIQU!KPrq5ғ _Pvj{˧'GHckiHXn V `B΢`OwqG 2s+LVRjNiٗ;8дYG!m%O0i/挪@ qoY?n"^]-konzCBXP6;6HZ{:1F2j{vs_=,?I41`,RFN?|zviFUfi!R(Cv&R³Ã,!@vS LN 5HcbOX$E`cJ·x 9qO 2$mwqݿcQ F(HfG`"Pf^G$|r;:H yJalUVX>β9=c9mO-tp\}\i5JvGertbG Fغ?k@RF[nK&SMOcS",/գ?۽^ Qj5}P1D|H2TG焉_{}:ܱ|c?|{6UYAnD3}w׫;&3ns#H,NݳoB]qe =Lݍ%LL<3_mk ]?{jOv]$?杬$ڦ]Pz4C4"X㮌3ߟ݀`!>9dxhm#3jt*nSi=fyխӔ0~7[dw99~@c_DN } u~dw`910N evG$<:Ǚ\_GNLGP־\@-GO3K#R_PJ>5E5aa¾Ƞ̤MLPC4>ɨV)Wj%4RBW]Ŕ63egj! SǮx~yT;Lߎ:>k OX®Y{7C H@ ~_v!oCX3AsuCY>O/g5d AbAq:(suB_2kA[.q:uE9ʸ6T&s7gama E1b^1j'gF"'txӀʇK^>J4Go22uV1jQaS$#܄Bi1q M̯;R(@>6{Lݵj)P˩\GqWO*a@c$Fޠ2| Ԁ\/|.iQ?o$=Z5}@e7кcs"TqLy؇>ojvlvJ`4߈sF= ,@ z qr H:4|~_h<m-lJb\9\ Grn2t:̽ Qؑ4')dP"h#;yeg*e7fw@~:ssEgS% Jgp.7[OG:*N^v+w~032Pe77$?75px뛛2y0|"aGe.ςuWn`Wt*E >B#(Bs-hkF䂯& \첐.HھM\*+m>[eb6)\1EX$+`GۡCƄ #[P 񰟎rKOtԓq#zO*Q0|+ *ݹb ~ylO[8]Ii(#!u1gC&A9h٘]igz[ `2ec^Bwt4{)p):>Q$kLWJɲmyѿ\H0? (e+VE5"%X6̀ PgcMh0ĈP$4!6c@|l,9Ƃ$] K܍ILB!rk7k^~{w~S_jx :ң~R?ëį~kESޜfO5)((-UKJL9ũL*a'ψJfV d@}s}u.p6& 6w/VB𹗵jIdŕGi(`銧,q&.&fx\Ւ^m+6QsA X;=|QϞvzp'l c$#,@0SI굁֒݁9\ vpa Zr?<.RrěǗ9oC|v^e Yߠ, Q4@ʲ^UD4"Eo`W=8?ڜ KE蛟 !V#Y%CaH eSl7fOvRT0阻Oc]^ay's>lJIaB2בA#h,dƫxzZO3uRPҴ}!*Xo;aXNTe Q7aT={d3ⷰ ںgȦ-tKfmI>pSjA..K\6eHzX?* .y.Oн0K4Uq~n3\(6j̢Gi`-SwPw)e7-n䙄 ւBEA"5&g(o%@QcS$9bQXK|z $0iT~~5_eƶ9.%d"n24o  i YڪQpuAF0~[k&lϾ&KفE~=q+BӶ.4@9uYWH#`4;Ĭ'2nl`$ddp%Ow״$3åctnHWl],[ ӧpwbY 7qA0e= }_ Tkh00I zT}{2\ȮZ{di(玁lPVK㓆syza381|)][áԴuK$FHd ^[s k+_1PRrI o$>*ȷ%Ǒ!o Oaƚ)m=]׀ۇK5&M@Nw7\-^=; ^Lgcz09=DC1aWďsgʗ~g؞8Oر$pDAek,9.q e GGDХ5]7Y̦-_! u~0{nHb f8 /nArf-FuAKft^].+5\d͏A9Ju'zWż3qE1{BTP nfo?-!Va2-Q"PBf:[ %]G[#1$d7RF@.ɒ@Mm7jEni=H>^p4'0U;Ԟ>K~j6od֛ܺv{dBm=kۍn{8@%qCM®>5{DE-q_+zΊAHRƙvD#MF@EN6rU6 <*uwmB>4Q V5$֋vjp |tR0D}OC ( YRJD {5Ȏ@ F7{CE*hιvxQ ג'PJJh8{&/@I 6B 6WZZ,/;I)ᨉR"y"m`-J1g!FTR|-F'aqt=G`롦%tZyݦC}/d &ouāV&ŬMZؽVyGCso}%ybUEӒfԖ6A3;q1UJDaQcċ"}9`ty&Au=|{ׁ nGIiL[/90O?^f\,t N+<8Vg Z=[>nK=xP(laI6@QU_$0Ide*mYKY/ushF&BB )R69'Rdn<nBzgG6w`dyCszXwWJPI4֦MAuycߺ|CqaVg<)KTp#rMXOI=pC@f3Xm(1Z%]5D&{h¼icS<9jΤl,j_{(`-h6Vg`О [t'~.VO`7:C(B3\I $\SLH/%ie|8ݪ>^o;v$t6~yB&H>_8mqB`:ͷ18 zNig?H֋KS&^oM"i}`uSȁEVnt5V<|r.cE1v{ b~ b}SbX/w%m#| , f7]dYA*-PJbv=7iOH|;>AЗ@o N$A 5mAne׌ƙƷ tص9nb]!F)b$}6s"یa_u ;̻ !BmdAV8ו} xD@,OpD*}M zi}w,gg5ⷃLtlQ):5c:;8C[j׏NٰƳkY|~i~i6cdqS;L!j!x*ˑɁw'. /MrYtHՉ~hs{k*bfd3uV5td Dݎ,cQҮ/5< i?kY ptw*s%{W]kOL5iCq'+T34ݓ~਌7ZPD%M$ *|׽T9EvM=1SV" YpқW b+%]*х]:SSa"L>`8Ub,^YMs& (-0R7JCqrOW%?#"<0tDa1?Lʕ /H. {<)"MQ^EfL?(⟺oBƪw8TY(凐̌$|}M9~\kKW(BKZE 1|fL,!jwGwԾ:#mej~ƻC\̝IAHs=&싘e <y#׭[+Rzl5GXTB -:N&na~] hN-8"9I*Gze.@p`>3-8UKBM̾LdM8yjFz-G!c@}.kHѶ#nPx}ㆽcz +RVq yLȠ* ;@1GoEuCۻslC +qcɗ OE~l_օö_b ν"bIp, UY)G{nT6© .-u+ ȄЫPBW3dB)0wQp;p~!N$0vh$}0R^V|AVޔ}'L=+'zP2oY;Zu}/d 65^c"r`*529cvf;z4t!tLZ;GGT0+up1ϥ{7Z4GI-dQc"@2p#^& !RTK<A ӣȏXLj8eᚕy(eN練Ǿ%dj7 16r7a=Wj47g. חC_LѰU)qBM%d?D8meEAhi7 hFC Z)Q7gm_J9`4xtY&!2!`8dx;Q8e1 |l-r(UBZB :rM@]1غ_ʻmP7y5K-ךhvh"w"y?ƾUMOWLq4o.?asɦJ(zHrrUҕygZabCHx֑ {sپD>-&'ZY* _Ůqc]j%hɮOƅY2)j܅yԇh5(kI O5m$W#6'!EeTU{-% џkOWq![ԩooZ%*J|N NmU}+(h5X|AZLiC Ĉ"l( *]~UClaJ$)*(qE-d* 5b=5[#P.cr)p:K4#uumJ&DΧ{"c]^͖IEM0S@|J|x-ܞSngԡH <j#,!fɉ Bp2>֓m[|Q X6~SuR߼K?VLY/0U&CbfVm"LDz!& gV\B~;$aҏ$yƸE9 *].n1ݍ^ǯʎ Tԇcʰ|M} l[bൡGȾcW^x`1z"L/UuXU~Ι8AY>b }렸9rpʵݗ^[h} UQ싌l-?^K0۹+m22\=ASxR8ftkxx:4O3BaRL&JwqבlTي1G{eJ Uu'/IgCN"3LkzܟgŰK ໵mD~.@vtŗУK\ⱽ1&6!xsh[m+C@z^R5>K,^-1 *E7PGc M!3AUQe3'Xh 2OqCFf[PQUAט{d%TgNn} kgW.EC0BҊ(UͮWeCChX΋wf G; ;z̐WŰ%O`s6K387|u{ +S'Nf[U3;|OO'!Eْ^c&W 9s`B2ƅR_rngc}P0{/.) ;^X|32,UI$5FF2SPZ#k[ P9o ܜP] (A?ܭY,b9vřaTwl:ln-A¢LB%y#B[dp!vpMm] v{=Ab:ab^tQ4fuM<цm|_)?+%RsϘQҚHv&@D'hq;&7m2%4T_ DQ)?p$+뀻x̳I B V(A=Y/*By.u% pr| nf0Pn Xo;kK]}٪]rF'"vZܦH2yv\,I̵rh'/1Kr_9כQq"|TRd9NޯK n埠 So+廷% O^Q_@/k m 15 Mo \ٶ}a:e )1j6%v`N$?j[i}4$8'i|D0Vd DP4PyjN1Z|XPM{8B4[g9 NJ,EHYOT*DTaMֽ3eFCp >^$t)Nt 18a,+;GGf]@ߢs]Bl۩٠9\l•PH}-Z_2+nP=?ƹb:2 |& '0OıL?eCKc(P_5pQ\6(4O3زyʖ/Jde5]ó¸$[i>槻:?KV) DBdžїwJ[d./͔|22'nD;E`]W]IGN9?Ԅ11uq S |҆I {JT}|Աd(˭3AwaSX|&љ菁?-RJnp %@桄kPH3V:iM7SF, 0=1?d/[V K}2-tfѤM]5 '޷W{q {'!jOr1cbt[D\CLu9l%B+tڑut[ê3>gt2ߪ(p7a+N%0$T 9᮶ YZ