libopenscap_sce8-1.2.16-150000.7.12.1 >  A cWp9|>(쮱+"ö8Q-C6wL-}Ć\?%Fе[$W=`qHm[&\]Pk~1'O&WXF`Gv]bc46a1b854fd89a41c02598bacf7ed0694417f3fd537e8eb5d5f302d8133f9b7428cbffa4e3e7c95fd80365500ae639da7e659a6cWp9|jYVkTˠ|I2*U`DL'%xgQtBpȓCh(ִ __3~ir%Yva싨~p,mt }(Q7|M|Wi#**6`A]ug>)pfq=s {X½U$~| WW,r aOhSG?˯N/:{#&JKQ6_pf/=N%(.m k%ؑRC'BD[f\j>pCL?Ld ( T 'AGPX \ ` h   \(8$9:>Iz@IFIGIHIIIXIYI\I]J^J/bJ;cJdK_eKdfKglKiuK|vKwLxLyL$ zLHLXL\LpLtLxL~LClibopenscap_sce81.2.16150000.7.12.1Script Checking Engine Library for OpenSCAPThis package contains the Script Checking Engine Library (SCE) for OpenSCAP.cW\goat16SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://www.open-scap.org/linuxx86_64cWcW8e382007a5cef54bc57582cf1034681c4dbf84f218011e1a9df561883948ee4alibopenscap_sce.so.8.14.0rootrootrootrootopenscap-1.2.16-150000.7.12.1.src.rpmlibopenscap_sce.so.8()(64bit)libopenscap_sce8libopenscap_sce8(x86-64)@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libopenscap.so.8()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1cV~@cR[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- add perl-XML-XPath for use by the testsuite. testsuite now runs without FAIL- 0001-Allow-DS-session-to-continue-without-remote-resource.patch: build without remote availability of data resources. (bsc#1204579)- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/sbin/ldconfig/sbin/ldconfiggoat16 16667052441.2.16-150000.7.12.11.2.16-150000.7.12.1libopenscap_sce.so.8libopenscap_sce.so.8.14.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Updatecpioxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8cc42ba25d6924f02e11a2ba8c6ecc187f464397, stripped PR RRRRRRRz73j[d$openscap-engine-sceutf-81df59b03bc5b6de2a79856e8055f90b9d9dfe63412006afc7b1bf76427071a89?7zXZ !t/.1] cr$x#GI HRٌLQq.m=&¸Iuh;ӨH,IX@ƹ< Ŀ(kY*o8uB&U֗5%eV5?2YwF_SwUICy3ǟ, !4fx0Io%cRDTT>Eʫ5UcdoJzpA;/Qj(sI23_1)NϷ,\bZYL3ϫ)c1H;顂#+9ivO)dwEҮ "o/7CEYE8 ᩬ;=>*zac/4xgZjMydCb߿?i0d u=z ~Kq< eMZ[O4KVǾ7!Av/FJXp5|PykPyi7#Dh ehwE\?9/A:ǁ|7kILv,@+-+}!"0)5GͰul?RM: ML˒ ;hcG}naT*]y1Ry됈$篿ˆiᾚL%1w?5A$yyjRÚ>7GmCfUJd%OcBįF+"ۜ;7p*\|M`f;0`Cلw$"[⮰3&hӞ94K9BZ.:Fpim I8F8߱za*"_9$_ -##CˤYB_>Pz#8"O^9F~,IC*SA|#X2.Lae5_Ɂ*=8b5_@sLp ;/1_T5,i_u x8kp؇"VX#{:ܵVSuBjt&6Vo.PՃ[ `R]NtE-WQ>oR-zsnu[ҞSi9p|չB d4} ˟ >ܘNuJBL&rth) jS#8GMTҐ$|1YѝM|)|ں~q^'Q#ik3!LUa',Ȳ|pZ/ld4\fI ʹąk2ƒl5½-C" ^B{țKhe%=RA9P̼STK›͚+d+OEA\]1&V$uHEZY4j+.x@:ި{s,*n.>)-KW7{̉[ [ly2Cs*䞝g}0Jvb89LPgq[ 7hfҟm5P^ k Gr6GG#VȘ4v:՚(q */*nO7bOVdz~6\.Dܓlb;3[SѭLіf(aue]FmT Ǹsç] #|hl@fݼWֆ1.HE?k YbL4Qچ$"1SnѦJx!]ǡP5JРkh\~|CvA=Mh}ݍ߳HvZKT~VUiVK݄0! iӓ:a X+ z^ :yxl>X"jU9o^&7={/p&?;qʂeYT*K0M% 4@[hAԊ Zސ@>CAt2c ;UCB׊;[J(FB}߼B=ˡhJgAm0}@Cm+?v,9c-<r#K87附n+Hl2 ىN4p(OW(վk׏nOFlUx'r?I}DJQf:Ӈ[Nɒh.ztsT .<3U t6&[CbP1Jvul 7n~y].^![q;B-E RIoA9-!LC@?ܓCmog§o~`52ԓ @1Atoض8LNw8b&TGv4JzVe<_ hD5tg*l@ʙNuvnA=CXAVcn4i@jJ/2=eE_j$hen|4sq颠CYPsDd/\&-y1'pEvU275N=F1Cy=8!)Km}{e*J0)ddb:"ݒ*SMӧhܢ1?ț&(u7+;L.,!B4Lh^C;u!p݊|d)xKB^O9FlG?&|zUU [ѝɶ_\)JͰѨ(;$Y9PCV$^?iϲa\Lf!>|At/or%! ;3nBO yo{U/aݺzNwPApNc0? c2^uS܌N ̸WUk .*V-)H[!hGTՑ\$e\vi?Α[IA#ET1r!m'[~kSP:,ʼnhgk\ y~/kt&QMl.aiU箏hX? =fl*G)H_Ӑ|b`!M>FD@Wt9˄eY&݌4u`(wMR=G9nS?&gZ'%B|4@<8F>5--S*AGoi|(ꯑ :%@+~iV`>x@| hpĚt?s5Ov`5 V".[}ךe:BĦÈyLLМ6O''c~ŋUSռ7`VRG$|]ź'1?s8,> W|ZFE.q||7IVsDH 4='/%Ae+;[\gr%6 !b9e'"$rWX緹~gqؿALCsj ݣsĿWCRbxI~qz>KЄL |<{z-bh'{6a#?2tc\d#iy%9߹"װeB)R.neSCy`K sfsZQDLO`.e'G-_ Ґ;*L7\.;\^Wݶ`V/KAlY%bL5+Qu~_ɨ r * 217Irls`i﬐EQQ/)%v:{m)FKҎ~sΌm'5G&Mgॗtbs!z֕d5%sA'N"`dsogYXW h9%pyyE}$LnG`:7|(|8iINUoۉa غUvU1b\DүFTX걏N6ډKK8.RF!e2iZ҇fmiS<xvbP[`Sy.؅Κrmio(`6KlnT9ևUI~Ex`lzޑWd%hh\C RY?) ts?`I<ɇ%.M)CjW@LJMue+#x|m7ܓACٙ?*/e;V8ϑٲ+U8L*Յu.I^'ˬe  e`.ME3dIq0姴o0)|o<"e7Wt9[VsI<*ED;h(oɺ5i{VYKhK/*x}Yrʓw$,f*Y)--CQ1 %7D1؋0h52ߐtj߅@Q .IӘ>K,@װ 5Z#Y" T3d(QXUp6aͭN^MZ*?"T2lgaFeCbw@|1 oϊ)߅!P3"',+6tY ;8.al`Lpc@40V+7*8L]rfF \u` g?r/`)^ESp,n~l'V/qsS|ps"/~Z`W$¾ђ70Ћﺶ_߭z }?7r]0U*‹-8-d9i!Lv[/&$N/ xr6<;9݋ܵr:[=i`R4d E0 XgTp.^86pl]8 ;(1@tATzDe7M~3/waQUME#!adO0bE}BI)yS,86%4G6l|uᎽCCrwzZFX;ɧmCޗ0|'M }53hШ)w2 ߭ RkoHRҿ ?ð6R&f> 7>JlJ6MX*n D%NKa_LC/ ڔ> 60؄)Dj=!ԠO❋2^}-X9DZl}zr2 @#*&2ßfqi+OGB 09*o;C|uI '?E 0Ve|wϨ cOJ8"zу6Z5co!Rd>T4V ei*?kɈkfػſh~ˠ5>+`]RR&0Ȝ`1([% ?MZ(XUavK nuLVr4>&_tpNVKz0aX7a(2]h*U#sۚ0{ZES&c}K=k>M/p[& kR|q>}a(SRm J_29ъQ=WF\S I3ǘ/&e#9 Q3Sgި&$MkR/3cFc 6(^銲vl_'%r] v1 3j*$=Pwm*Aj44qlKBysBCaN[ GJJ#`nʪ[`逩m"IA8hO(Tl'J+ ս+6 !ZШk$6K#d!)f}q'nAl7ʲzӳD.( %4ycKg 3$z|=2D<uNi-79(ahxỿ#75ӛlWcɗ|EUb (ȕ(Y^dݵSqgMl#[.Tֱc[|t b9s8>X(A'i"oT׋Ŋ`+ q/BԭL3jLrl%z-`Ws`9!Ʈy/=++V>T+ ANC$p>rK,}|MRoqjnJFY 4fUB@ UM[yUN"Hq/6,B8A'0JFB#欜AJｻ=~Vo>qNPBLu"OkG_llIIUܪ,qO fܠW[h<*QLRnZ56iyyXZۜf4BdˤcdK s+!Rc5H$!<|`aԼKJkB|}Xvj|1]i@28$❅1K `TEt;*J5a)AϏQ5I[HEZ#s @@cC)DPMz>r7H ZFQQB{m &l&ln Z@Ͼ|#ǻ*EyEB  y*UxRmYa3_@6ɸ(NSͨ]*骑FFJm͢.Wy'Df"|?$Ό;F*;}6, MDAXZJyhH5CsX:[!mQ3Dj; )gyQ>>~"k m"tTs>[ tWC=Nۛ:3F:@$౽CNH-.x.J&f`ym2G_r-!`H8Q֫Ԫ"B\ϯ?;mrhs2di.> '$43gzӺhEP8x,9T\"7 yX񵩹s\6^ϟV|T Ƭ9 |ה 4|y>Z%%r[et'IyrRlܯPS6ao7`2:Zc5EM(waU zR)Z{BGeG9iiԷC22w:JR:A"xUB_}[p10xG17t\@HaDhl`"==$Յ&>%lfvPJCi_د^#C2\oؓvqxcW̬uKJtSZt~vx[s8  mxWhRb 07}7^{ׅ7yy<QD&k Z^ª|[#b6iyEhי?ZpU]1پ1Y訠Cb Lá+R<L9kl~~"MXmMt0Bȧ5n Je7&!}awL#] 6QD`ǡ2 0:Isd@ip*OmHaܡ:KrKN(8< ֙FDl_n\Gh"5a QwIy@c:`f+KBp];82`{rW؛bAG.tSB>y _vp$@f@ [ds}:rlؚt$Ls AIT}X\pdmϘ_yDtE3W܎*P9 ŷb C/yG.e;SM` sB< ;?\ASNDH832,E (VCyho"Z!TP0KDoS MEuvF/ZYaq6Ȯ GrfH V1zuܼ. 7t_q]0U/O6zyK̗˗kǬYC:rӋ>kv< B?ϩRo]N[` >W_ F ARIt6yh`#A;mٓ)#C:ni\ýI (/12~"ZͱgD@'olp߿#B>lovI7zaM?R*3@=Bɒ _v d($?A)W5 9C>i?\[-@.pzu+?yl ExHns&}G3ȓdhx!ؒʼnl3`j~>)5^UJP$m%=մ gxllj9L>6J8l|Į͓5]M^PA1CgʡN3؃pDQzh :H:綍^GFae1(s'I{݈Etqڎ`LlpvjUaTJ͂ @ ƿ fWyMDip> 8phBv:~C{UvppsEjH..w[[(W c m!6tɠ|qz@\y8§o:GRތ8ZJ ;d6?OLn|aEC>8JMel5An+;-ʉd[Nԅ#AcmB98\yZ $&үg,ѼA=JlTX7P W<t-%sƤB2n*a8 (#H/ҏ~spK5n7zP,  {m ljtu` .tY}REZů0eV( 恰DXP*⁤vc Vh^0X{k\+϶{jKƚg9cG[q ѥ|bTAEw3y~Z푟\1f.&_%^ N*/S]X!IǨ*UfYfEgׅm~2)uWJ`c >F?ϗt:~1wy#1' 5~?eWr&0to& uAdH\S `&"5q$$$nYbVʀ$VlQ687%F tu]qzlmh:ML3b8fK=Narr*guSWoUfDݮWzL(kHܽDhF nyR ŅhZ:bٿrnnd}LLLtǂf6LW``j*yx+^ h&;FۓgpZT`~C~ Ȣ.Q!#眼5cdBsa[؂di(Y[ DvOnI'Qs, Z|5nGU#Tg\.ld5oYrNBSU)vxViϤ{ӨS+z$iTlc eԬ㱕{"b}+\lo YZ