openscap-engine-sce-1.2.16-150000.7.12.1 >  A cWp9|aolǨt:bB) n߽ҭnAT6Mco#%A[aeBqFiR D]Rz%5kJRto;s;~{uP\#Q5qoBTpsã.O] UtAEm@ƧK.S^n;?`&<1Us{,#b)~S҄im+918;=7eff9ca66c84e3caade4789fba637033d846f2ecb5bae16f1a7bf4fae8d1a50bf45f115479b866639b0ed763c3ddf34f9fba6534cWp9|ihARwe+V}{&r9dŞޮƦ#L+P50lU8'.Dbj11GP;]@:{ܮ!CD5$$ꪆmJhW:#"2 ז<-"SirQ<3#MtSɕmn bc`f792Ħ h uG;aٓ+DZHna<˳XAڶ\TSpE{]Nc'ز1N1 ՄL!;aTB>p>Y0?Y d + O 9?H  (   4  P  L   p   !( >8 H9 :FQGQHR IRXRYR\R]SP^TbU/cUdVSeVXfV[lV]uVpvVwW|xWyX\zXXXXYCopenscap-engine-sce1.2.16150000.7.12.1Script Checking Engine for OpenSCAPThis package contains the Script Checking Engine (SCE) support for OpenSCAP.cW\goat161SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttp://www.open-scap.org/linuxx86_64V$.@_W)X|%eI dB/AAA큤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-1.2.16-150000.7.12.1.src.rpmopenscap-engine-sceopenscap-engine-sce(x86-64)@    /bin/bashrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1cV~@cR[{Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- add perl-XML-XPath for use by the testsuite. testsuite now runs without FAIL- 0001-Allow-DS-session-to-continue-without-remote-resource.patch: build without remote availability of data resources. (bsc#1204579)- 0001-add-a-safety-n-before-the-end-script-comment.patch: append a \n to fix scripts, our default ruleset does not have them. (bsc#1102706) - remove cpe id from sample scap, so it runs everywhere. (bsc#1091040)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patchgoat16 1666705244 1.2.16-150000.7.12.11.2.16-150000.7.12.1openscapsectool-sce00_integrity.sh01_bootloader.sh01_disk_usage.sh01_group.sh01_passwd.sh01_shadow.sh02_home_files.sh02_root_dirs.sh03_path.sh04_firewall.sh05_netserv.sh05_openssh.sh05_openvpn.sh05_removed_libs.sh05_xinetd.sh07_log_files.sh08_pam.sh08_permissions.sh09_exec_shield.sh09_selinux.sh09_va_randomization.sh11_aliases.sh12_cron.sh14_nfs.sh15_tcp_wrappers.shsectool-xccdf.xml/usr/share//usr/share/openscap//usr/share/openscap/sectool-sce/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26539/SUSE_SLE-15_Update/f23093d4d2ad12bde4eac2a576c2a6da-openscap.SUSE_SLE-15_Updatecpioxz5x86_64-suse-linuxdirectoryBourne-Again shell script, ASCII text executableBourne-Again shell script, ASCII text executable, with very long linesHTML document, ASCII text RRRRRRRRRRRRRRRRRRRRRRRRRz73j[d$utf-8cc916e225a8de6644a6ab40100a1c505d28dcb01c546307fc0a338511b7e5bd9? 7zXZ !t/Bj] crt:bLL P lN՗sp{f.|"9{T $X8ЦފL(@@[J hȑ&MӇqac eD @2|dO?]5g)9 t!¸d5ob}HR҆ډ~!X- ]|]ﴳ19zM&\|Cu~N$54s{#4zWFU#5o+H+R" SoiJJx5d|Pl(c%^rgiQ;{=;VJ1_gIY1T8ZҪ\/79-I\yo3-:Lj…MoNU(5''TOF0`4"E{\| rF{g T%Y>3}##AڕpN{6:<)3zԢz|^shpz20ymCB:ĉ`f%X7$9-5X)O+hco< Rb8$O(CME:y-*X܄۰T]]U(,^T!PMNn~VR8I/Y e /߿4F,+>u5puwۣ{:}{Y2Vqf0R`Zۅ ?{yz$5U*vXWH9eQa޹$Í:R]FG ´v0Fc[;X77S zȳemQ$Jg7*,-r?kDq3=-D&W¿?ʨҒ-r%\Qw;2JATfbB̃)7όy/@܍1Fܙbp:⩝HƼQ00-C! 䚦D0L[]<[4LtefDq쭐clPc)O +JOJu #\Aڅ,_4`v^w͎++JRxb 7^81=6ZN w{P4vNov.R.%R8[ / d %D^ 7ג3{]֫dߵX>Ya̗p]isg`%y47ljMܧ EUҰZjœ8MV*urT}J+XJ?>Pr ^D +Tf@ Ԇ!i)d{.2Ԋ>+B35UlqjTA3}b)~-UʁT;fC1_P(/f(CkǮA2oNG7vVqZ6?CjJ8(K3Fr/Y%WuK&cG~31ߢk^&-WLN5Hd(;O[?\0ݝ[ʥ X9v>ލXFQUѸܨ'OW"I^Yvi ddQ"ak**yDۏIOU>bⴅ:FQhJ"ű3FeoRk@:A2ȯ*UV~SXe)DmlTR>9Ë?ZWthL4bp;6FVDg*C+MTS2»LOQg 3;:֟x.qhy@h *ga$“ʯ.jе2^〶ZCyW_D?bAܨ'MPJxXBњ F='b@WNu_+%2MbU—Ii`}a|7P>1IRDF;!O-SZ|tz$R UGEY9Z~fzbd\Xg } YA;ܪq}ym^[ {8A/zPdTo jr-x!y=]Pwn/'yk*^>fw(:3F;z^y_Q 44"ht 5L7̫CLӉĜq -ԥ,jJo"9 W>U'YH 됸0 cvLAi#22\O$Oi%z=5[zWw ջ甝\J!Hpl"#h3vlHDlQX:j6'8g6X0|"kIpJ#W]A+;+6iu2Swfs07yK"|j,`%ǟj&z9\Ql99Ym S~U^F(لv:<^>ly[ K\C&ݛ鏝 #fw<[ y]!XZ81+UEX S"-5˷OӬ3\=%~\_ OQ h`+ZJnVF6FW vVA|,bebkzc2w/S ]tt+X;d& i] ֨a[7r҆jpeb+2C +)nyK|=A?('wIEm46х'!%"̼J X#]6$qBQe;1] :{/dMy} /u_J B1 I2ۦٝ]a9'jA1Bhi;@>$)5*w47 89Ӟзɐ>l4;Ж6]:ѽPu\Sʝ "pkdFT*Ǥh dq1T !8;AC+IԲ@nmeǭ?E|dpFs};DP+w(3VW{N, @~/!2G v!S Ν2Lnp-Nψ<e7v}PCF&H=FɆ&ź< $ͤM? 
    QLNĬ+P/GJ,40(.el^c@~.?eA@ ;A0۞GvFXt^32UKBq]G:0r<8SK0`o uuOCcFC@{,X8Dn|! pC5 \Eb? ^9w%R γN*HGc$ugvuaؼk vsd05 xz|T'G\S?#-,֍B!gҴ#~'f<}[sCI.@LuVX4^3OH`2Rݛmo7GJ:wO]L]u ~)wW&㵂9;qh2)Kl֓?7F`fmzHߎ*Gi۔mxܺ/(Q1/w>&' iJ-Pxs8iB4{ ?- %0i_RAsi∙RRG~s!YXvG d繖xoK V2R^엮9o?^Qn/fl^蕆ݓto\ѭax)a)hȝ(9f48q5gע5Ls8R_U)qKoXJ{}K8|D Ƨ\W2sŋ+E$47bΈj33_,< ) w#GaʾP$hPh[Zخ3#Q&=C?ƘބAf M#T#Oƃ H&eS:)U9%z"a%T~ 0Y'BW& )> mơ֞w_7;J/TX.B͙ܱ<=hKEA߫Ȃǀ s2FDy-Vz㽑%1dHX|QK:X_d Goӳ[zpi2Fh)<\uZA=:h.Cr<:kQ T۹+9{~n]D= 1hw[9o_ SoT6 ikb^I!{y~%W ٬ThHi %P9sȈ ݉9KHzj΢ _5|Sv$dvv908؟M q^Y`Aǻ!Q@ ;n PSxjb.AGW:(mUn;ݘœH25,8pދj4U\#H!2E?>jyض V|*B3:;WІ /bŦcZ.5U] c*~F[3g)0@ENZ2L2@ icb{HAJ} & B1\`^:yi} ab77r}A(lb#l{ '=dFO/SZ_V?7MX#Uw.qVV;vy۳tq&A}ԽCmREW>KX?n`Hjt] o1Ȳð Y&vy‡qg_# 0 ph q):{1KxpeNj>`ī\RǩmSU&C[ɌeovL'/ւ-Ox`e lf_P؊@:,ĕ |0Op/1+DqT޴"ᆡgqG G(*`wVe"2aojEzyLQEoD`(nf?j%LXxY:)U<Ir5gz֤b/B&7_4\dgyf( es'S("lMa({__]JH!Fjtd_lYdJV /pXL4eOJ9[s"%9&7ha##s#Z9q0ۺ&f9HU[6Ș+P-5?%ܥ2$i;r$و\A\\ mT#= &kTo%OЗ7((8bsPmS F֝Qݧ3O3ʂvO .$X[tT ;rU,0de`8:rq(a[G.kFwQ r+E։jBm-(TAޤ|>0K.*suޡhɽTލG7]^DO m&bi zzc (P/뼬e ??Kz+Y6Ku[=A1`_ \.͇9˜/)0;z>ê _E*)Sǰ%5/Jg+QS} mu;t'vVs|4͛ iB:km; C`.#֖6 hU(*[/^E8Fr ͬ#[^+.8+WV:fGZy6E,Id SR}PDD,ؔכf;KHҌʊEo? [O1<ЄM6OfbD_ް1Ʋm?"9l(ŵí~+ JÆAHǓ۬/rr\4eF'tW#B1Y.kዲջň>L-^":ߊ#Ri軪-TvMop/tWmV֑Z5;5WhMw,@qӥ.1 ƺs8/f"mI_EimȞŇmqp46[+8D"]ѨM(9Mam;[RL1{@Y5*i<Q3fVx1r2󡙬|P%vx~VؙXG6|b]ni/K@$[Eb;$NIS5ڕ*K0,?һ?l@vb-_a2ـ~s1/zBn@4pKbDk{TkEV}&\ "Dߎ_xo0nDks?q~xftG%0i+Am nNu8ߦSZYi{J_G-6 p5Z)Rv(CMV2%{ҵ 1#ė[>̈_zuv7Uo8Rr=/z֔K&H *D:Ǩ|"b"0J>i "f%[._#&?Kqܣ#,aC4G/UerE.To> XjqVD9`B ;t$^jr'\H\ f߾6<[3q +n?i+&1" cq陒X,*k@ؖf[6kyoy7 ,8ig5zjpw&ov6Z2ν7"~P43O!4-߸( t| .呮)|AFHoOCsJI9xdҧNIȺ`Qʤq<"G`)9ާj؈t^ZoFoX 36Eio)6\0+imE9Ӈ  R#a6C$ ML!d c,?҃duj,m2XX Vw~n w, aAVKfe1Nr~X-+<*!Xu9 'DdH3Qe #cdA f]?6(x2fIR RH^À8|.]He$o@s`X'yiи3ygb`oЮ'*5W?&$c9D-똳 ]8M. (%TA!@Z3s8|H( DRC`1BOHL/帀 <}:(ghQ|3gtScyb,Ҥ!L §#vnX&$Ayb|QP*>dHYZ$'ܴjWm% ;=x۳z$Åw1JotVUf-&9]*Y9alNL6 wJݢ=9L?Db7W I1WE,^AhL,fR(?LXRɥf5:Æ K7qM4Ud5Q]rBEnK_0xmT`x(84)L@oG2[6aeߴh--wTw=4ԞV Ka'۱b+2Yg3̪OؽSЧs{P*\tJ#SH́If:с.ڑ6p3?{G $qq/LbVNlQ/e/ v9M)ٱkh('tb0〭 "2KdG^Q)I!]a0ȸRV2er(-5II^] 9)V5/߀SˑFN;.^ O~ٚ[ iQ-_[:c nx_ k﹘+Sնxښw:R]濈Qʓ=owףs]ޠ/ 8zD7sTuP M#@\߶Zxt^- hF:@c-cZOL*toCdMCCr鍻QægCxRi l͒$<1: B=S\iT‰{^KJ x4|H ДȪP+)b~BI@r [ O^{0<\<דn m쎶OD}M(m M Y<8{Ye:5P^p{H"(n~Jr'YQdg: R@{#9ms8D_jb^w!n~kEa'ŝ|:gޝ7v佔ܬX첉 =-WSZ!K9KDP*p]zImy`Fֶ3Hh4E -v KYJYRӎ'8f\b4 Fk7yJDO 0SK4|JPv]s5҅ > T|`XfnS/:x@]@ }ÊpY}J?W@n7~06<R %2^SB?BI99B{(84$ӔG$81-(2c]@2}wCۡiq֑%] D?Tm*)2f#ZA [UF>EA^Jӝ؎ͼCʀ%V&kIG/kR (0U'pH{R15o2Ph 5AKZg0.ʨP]~8=qDc4^9nm)3,n,,:<z(1.le%r>PbVn $؈Wt-cPҟ; Y]-smR;VFõ@gd 2#dtZr,s#h$/Gc_A&`ǁ6Qؑ{z@x쪿!ήTCTЩڿ p.f!,8P^%c5UL`'qܳ?*ԀH!CmP.`lkD?k$g3eq8NxP(sUsFo2XM\Qu+K]Ps[Ͽ%M`{ɽ 4YU~|qujccs9@^Bcm]w=MV\ၔAxԼ{Ul pl~U)T`'&nPc?Lf\i@5X "蠵6\ۿ\{w^9@Y"x=M9<O4RvQr(uW%ss&1AzDI C-{*dJtDFh8a#)IJ1-v`=^%G1UDv͕b)s?iJ!wDN}&.F*(ia,=}.*wUA|F>3m`6 ތ;>)Ӗ1ӎ P"ceCm$hfZ­J_ z) eLym饴/Yέ{tHN2Gf<5рacR[z/WSW:48L \tUBQ˶hna]%ٳGCChHFI_kR DJ翂5Z]:Gpv8xxVC t&:+U})+}FOSybW͂3o1Hhp>*3QtR>3-!1v30**ejW2! 뮬ԅ F VzX2z0 rO50I_2n@!N2YněSCUCcsKTW5:x~;*&nN%lZo,5K KneipVoAPm?|~2-ҝQ Ze+vSRQ!'@l_P`|TR~nɯh *3JKu)0AnyNOy41! K'}Z5+LuaN(oW@v:O>7RQ[R: 2O3b˪~s0q)UUgQf>K sd*6WyuwwfH"YhiXTI [p/c2]G[L:/j۔ [Kkqtt)Nns.[c̫nL 2\*CWY)[c^?G2%l8~?-0Q4Q~< |t+]Zɵ Dg˩>Apqp~6Q3_^b%Fr$q~B6jH̀%3 jV٪HͲTiZ)BJk ;-z#ɦ\<Xe [ u+Ӿs<2Pm1^o#Ļڽ?DڸucNjiIJ6Zc‹&S&pg^V;~Fׄ 줈֫@=jV&ud|p#`8fOE uN]$=g>6cn&OxP6|v\YxA?#֬5K^c>YG@-gɼgRc T.=RPsf ZuR2fڹaL ;'F|zC"O=,3c#5 eR2? ܞBR~KC!`\jaLC\_~ѻ8ŝV1d,<4x8R p{:RY~s;68-"_\ۄ.'S|/ \`C-cۊGm,2=ʟb_4tQ=?KqzK(<QNBZT@?o6@& ͏F8Zfa ɵ 9ɜ&ꗩDž!mo_L1Pr+|5EK׫?(Mu:o6VN(AiϫA=e$l КVŕ\F6 h&'%!6 .[OuM,!2͘8f< k&.:3=\0I\4 dT߼:5-}p uT2Iꆖ e;tJ9'x\Akٵ׈]N?1P7ϗS}f ;l .v&~y57“5KB@您s+mGy4 㕸a[߲o?ho NW (vTR-'40STPBuAty۞A-&#LiYl9I)|pn92V:4Y+3+c?0< Tgn.vB;-`ȧ6[ D`p[1ِك2/Ô &[:3|;m}n_"/Y5׃mK$zEaWl#dk cHꑚFD#r>,b.f؁Ę ҾR»-xQOb9|T ԉNA-Hr`3oҮqWcſk6KC_ _Es{'Y&{YfL,(%XcısL'ǫCgl(NC~5bD<]xO7} J(qpj (ҧCv FyuA|! '3niԴSy$sfZ`ɑJ)ts3T C[.V&'oH-ME@)dQCl`\G k[ 1*4fFZ.` Wꫳ-=|&rKm%sH^J}?xS#]|`UXMX%\mBJ#/hukA } Y07]B%C۲2^Rgg^`ƋT1|r!J JKB cLcZ >S5eڠj7.&m]忀YL,r(si Y!e\ ZD&\Yt?J j|zjR3ӣI+t&yjZfAr*=aY.44i|b?[Ӑ@o.Nug?[-j$d_&v?Tqt5[ų@yW}~tn+Vb \ feUXȬ.!8 Ii/ 6Qcp,֒f n~\VX2-q7"g`7_Sĥ23XK:A8x[ в  Xp n]Zǿs,T<2)~sEv6('%qµR4ҒwB/悗*!+W ѐݬ_-8_dշ"tKKiN[nFuL;K54/t&,ˈ$(idgwϱ!O00|_wnkŻ|bF]\T\棒޶fuXİN/Pı6)q5ɵmFFeNx1Ejڦv~o=30`#2\EʽTLOcѴa*lF2 Kꚜ*taIJ|a#"32A-G/ʮB a;">N3,tR I2UIAG,ݒ ïQBFЖl^2$clZN528j9(#߬',^9(F.)5֖dC)Ŝ|g@7t},NG"Ļ-t't YeThbC!ƴtA%g-vCj;f`RtL^N]=ń&.JGNm\|3%-rM⼕D\ Cl?1[&$]CޔY]eƨq~V0Jf|ߓN9 6hS"<~25dA'K8N ȯaL0gdhrQ=$,-@x!Џ޲&/:@ny7[x H/"!"zPv _0QOk`^s@(q"pwlD.!7;VCd)9j c ldu8D!@%Q$.U;&|.)7ŇoHÃMUG2àl]Ko"Wљs^& DCʻ Цw3wn}\<@KFha\)4 ۔ߪf/f .+31s{BqVP;<5ܮ1SCCM¥n,ѥ̫IDh4^dF"q],c<´@hUe~ſRӑUY[qZo*-YtߦT]PUce YVKP{I9dް[ 2Z*uZ^f.d_MU{$:(8צÑ}^wCHTYP}ATgV4!-*[`&jҰDrw'vBv |- &ij@02\aqb(,n>@+0W5MӘ l-ݣjY%vaGu,>c7-{7z,IDDAf^BƬc=;?n ↼ hnT`<꽑=Tfv6SXb\jM Wjlh #[#?μ%^ g PS )Oȴ[\g~OHKǵkHo=!,`1]Fo )? 5:&og}dF{ڕ{`+-)"]<퀂#!/ڱM^^pA[ʎC* (F"5'E{ܘi8ĥѕ{(~Sde[ IO!Fy< B`6+ SSMiȻz3ث&\-ؘϽP\і<+֑_n|d[8bDӤ oe!TKjgf"$]aDt #U^ y Ziꅔڣ}5> ʮE1NibJ:AɒJ߶ Xku}MuQ8P>7\mXvZOF1r/2RSPO|\S.VE"W.|Se-\B#m Z*6(9xdIt_d-Ī~ XˀYj%LBx>ğkt˖)<bM;dUBhXD p"X @Ud&AjZl| ׀\8|yZo/vt,wE|s+.wHglWi*aa kΨVnFqs?KD%)B+5`Ck/ij;|8/M$zuPЏA@*UFuJ}4$k-_gz5x3 Ah>lAwP%?qbo!|gDhv.2/+7 |+bc@ k;(;HcC#֒ԧ]B)# jȕ~}{)5ikVcRtKfBK܃1~:g6&WeomrfBPiy_l*R-Zh%W+YQe\^G).IKc/Sҡ-5 - JR‘CATM+u}0ay"|O@%!XYɺm+vn^|kQbw#y).[:3 }9@؍"MLq-OSL6-?H=B WCB[P FOIjCd`cHW֢+,p!:nW#Nݵ'j^wMi;,5]g0=Xx]LQomr0y=KWnH6qn;dyھV|2|wt,89ts3rmenD! P/~$v]ޔȞ"ppK}kfTBY$Tn<8"Y(|uu葎FqlHS{e[s̀4_ _B G%thƑ1{EIIw:5_=h\6ɽ~[fн %4~xg><F8Ns:ힼٟ|Ͷ$eƶG 8V3 Cu}6 JoV\ 7݊a6}>vq zVS^Ϙ"SϦ!gB:c⇉C-0 26J}#hE6+ 8:jaqj9QrM~5_[g bU:s5{F6+`ќ4 $a`z2u;n|0ígח(;C`` g4~PeۑHVʨ[6{F*Mt qb݁9ՠ60ݽΥn*緃 ώ$yM6ΨE,+/A2)^\H錍V;YIoG #]W: 9)C9S(ʳ3=(oecb(de A3f{~mwe:+y?R RaըV0fGPy)q sXh3&zӨOŵ|hwF>]\\`Ѯn 4I EW8u4*(- ͷ\ɍ#^ ikJtQgkIQE끴GFMuʳËiƥ/I{-u5.9ܞ?B-V{?RDv@'yY*zVeZ =o2+r`P2(k, \^ R6U_bmT(X8i+}N A͞"K;zvdwiQ$oŴ760 YVK$ !pSvp*^Ը[(ge+ MӳU: ˛ 9ؑz^aq= z+sdP|T%X8vhQ%Is? IRDSajӬX %5cV|>*}5g s=8-]/}x:~$?JKl8X,n|$?|OĔ:LI-&;&ZkOՍir|D"l<p]b|3.w<bjHf&5eKfv*$ź`Y]d`YR C<~a)*.GѫZ T[J-v^?)|-XMR DoΒD핕E֘YRrUgaqc;*~c{o0;!זXݑ*MF #>3!F}͵['$ߐƣC:bu)Lbr3`̸FZ#N׌̯(cFz6 )k +Fx*{+XSL2"E:Ͱ-Sjpv HQcÛ8\B=TUp@wI?-:b +Kƀv$cS盨5Bn~d[t7K/nE5@O~_JI;e$ida;/yPPSJ_ +Ú.ŌaY{]U nmZ9tѩy.DZH{9`Trp^]{7oژc{vB)B(&y8@dY4oY cL1Q%dEPbO4q ;-k5LFQ o= ɕt+ `Ӥ׬̰mTY*~4uٻWZ}Έ(|2:]4^iMsWyrj ]eM7UIa$ɚ5w"yn-bZ:Y<5QO`u~"be;UY ,"4 73*4"0ٯeޖ0u SI| SCxdVW(YkH-{ ;trnO lz(UC虶L,} Sm fFw|'{ ? HX_^ Wj(R7(_r)vd%{+Rc5^@HjNt"ζ~K0@6 lo,^7)Ժhz3>1`|R$(1ZMP#} usdl +nN  h𻻐M2ǘON5 [_IL;ܲPƫ-0%R4z/"8PVx:{Σ(lWcwaM4Elr+G>BjlKdkEđl!xǧ|[ME"b[?@7u]?_TM (aPdl0Fdv`{C>Ej,3AXE3KD^s{9!ɓא,_dZM8ZK A gf+eeD:ijz$z֝aQl5|B;*BjmB ]G$ʷɌTQuVI.<ZPF:?VGN*Z ҆!-u +tkx Ũ:Mx=D>~KSmbꤰ`(GM;;bp/':* 333#S%!Y*iiT~jƘb`[~ӹq#nNA+r\QNmtڼOÆ_ʦeBj Oð1ڥ;X@;Si ,X0R?DS2` IP(= &iqnSRٗSX.t#+t`H8q7S!Lrf!Ak[$C[\0s,~G]I4|C&.ai+ X1RkU~%9OH{9eGeTef4Syc}-¯W@>@zOuSqf}k#FGפ-0Yj8mp* ATX߻u߳lݧgWPцDkRm|pR9z`S׬˖jhU z|KT]dFAsnM'%U Ǘ݁Fg9F3O)_m˨%!p6չ~u~jmp$u _8V*5U/B= T[0 YZ