libopenscap25-1.3.5-3.10.1<>,@aGp9|g:KCnE i"Bcd $.B䕖ڥ[u˺i::v}m:\R.,$=qR1NOۻ%}xq]M4T'Y3и% @W3dx+K&C$i|zk2Hu v ,Q]Y(Vd?s߁Vh*,>`_ɺU[ v *G[YrVFFL.!|V>@} ?|d  0hlx|    $ ( 0 r 99 k9( 8 19 1: 1>y,@y;FyJGy`HyhIypXytYy\y]y^ybyczd{e{ f{ l{u{ v{(w{x{y{4z|||||Clibopenscap251.3.53.10.1OpenSCAP C LibraryThe OpenSCAP C Library for easy integration with SCAP.aGs390zp34SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttps://www.open-scap.org/linuxs390xaa32b3bebb15fdbe24b2ffdc93373799e999222ce7d8094dd7a7ee697b60b5ebaalibopenscap.so.25.4.0rootrootrootrootopenscap-1.3.5-3.10.1.src.rpmlibopenscap.so.25()(64bit)libopenscap25libopenscap25(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libblkid.so.1()(64bit)libblkid.so.1(BLKID_1.0)(64bit)libbz2.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.3)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcap.so.2()(64bit)libcurl.so.4()(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libexslt.so.0()(64bit)libgcrypt.so.20()(64bit)libgcrypt.so.20(GCRYPT_1.6)(64bit)libpcre.so.1()(64bit)libprocps.so.7()(64bit)libprocps.so.7(LIBPROCPS_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)librpm.so.8()(64bit)librpmio.so.8()(64bit)libselinux.so.1()(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.0)(64bit)libxml2.so.2(LIBXML2_2.5.7)(64bit)libxml2.so.2(LIBXML2_2.5.8)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libxml2.so.2(LIBXML2_2.6.17)(64bit)libxml2.so.2(LIBXML2_2.6.20)(64bit)libxml2.so.2(LIBXML2_2.6.21)(64bit)libxml2.so.2(LIBXML2_2.6.23)(64bit)libxml2.so.2(LIBXML2_2.6.24)(64bit)libxml2.so.2(LIBXML2_2.6.3)(64bit)libxml2.so.2(LIBXML2_2.6.5)(64bit)libxml2.so.2(LIBXML2_2.9.1)(64bit)libxmlsec1-openssl.so.1()(64bit)libxmlsec1.so.1()(64bit)libxslt.so.1()(64bit)libxslt.so.1(LIBXML2_1.0.11)(64bit)libxslt.so.1(LIBXML2_1.0.18)(64bit)libxslt.so.1(LIBXML2_1.0.22)(64bit)libxslt.so.1(LIBXML2_1.1.18)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1aLaZaG``r`__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@meissner@suse.commeissner@suse.comsteven.kowalik@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- openscap-docker-add-suse.patch: add SLES support oscap-docker (bsc#1179314)- ship python3 docker module always- Since upstream has moved to Python 3, switch the BuildRequires from python-devel to python3-devel.- Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735)- add old patches - slightly renamed; cpe are needed (boo#1186735) * openscap-opensuse-cpe.patch * openscap-suse-cpe.patch- openscap 1.3.5 * New features - Made schematron-based validation enabled by default for validate command of oval and xccdf modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added --enforce-signature option for eval, guide, and fix modules - Added entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report * Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added --skip-validation option synonym for --skip-valid - Fixed behavior of StateType operator - Fixed some of the coverity warnings - Ignoring namespace in XPath expressions - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about --stig-viewer option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in --stig-viewer feature - Added dpkg version comparison algorithm - Pluged some memory leaks - Fixed TestResult/benchmark/@href attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element - dropped, because not needed anymore: * 0001-Fix-memory-allocation.patch * openscap-new-suse.patch * openscap-leap-cpe-15.12.patch- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/sbin/ldconfig/sbin/ldconfigs390zp34 16394870471.3.5-3.10.11.3.5-3.10.1libopenscap.so.25libopenscap.so.25.4.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:22092/SUSE_SLE-15-SP2_Update/8eb6c8da01aa63e373241225bda90817-openscap.SUSE_SLE-15-SP2_Updatedrpmxz5s390x-suse-linuxELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ef0c33fb3be364467f8b797a6b461f557fad0fd9, stripped4PRRRRR R R R R RR2R3R1R4R&R,R)R*R#R-R'R$R+R(R"R!R%RRRRRR R0R/R.RRRRRRRRRRRRRRRwgdOO74#7Tutf-88d5de507d56fd79b7c3b8fe502d86dbde3dd649dea2ef0e0d04ab5210cc90c69?7zXZ !t/c]"k%r=dRzSbpqgI4B 5f1Ǭ-lhTA0b^JNY~_ `Nqzns->q @Lno& @ |qi.i]# Wrʾ9yP U5z„0UCkSVp*q1/ohr;aظEu-RUgAAUQ^׀`bNygJ&ձ?t MABXXU>m'1&46FgٔTt> 5yR65Zl`#a~/PqBhGHԓ^E4=10H0?~Cb/֑ /7|pǡTljA-ҋGJ Z<̑6Tpϵ>m< 8Ӭe t,I<\nNG]a{+Dwej"\z^l XDK vqx*)aV*ޒ^g֬-m`ܠɞ~rXuN`tG7Țմ/&uRDp-pc1i?h0p$?|Jy=u u|dP,LLFb%t` Q Er8{`ʌ2B xL8tVM4GGwT8Ǯ8Ȭ %- nJNq%@oFDĶtΤ^9"wvYYl2զq V6$ÌsOdhڭ “h&dJ q>糲onL?,]9Ofph`<4fZcs-$s#_5>F=VNנ/ s0h|mST-OIQ>[?y/^+O/.FA")T,'|R?XB<Ȍʇ.X/3;Jt2j_CZ MIj X1  D:u8x3sq&E0hhLec7[ۆ : $W`2V$fk~/*c] nߴ׌'%{^Aن B؀Lu2;)2_4E~)% suZe!Ċj5b (K'ۑKԷ)P9˗ׄW+a KrX.NUь^ˀ|7r{CB OU'ܥ:Y FoڒKfzqZ&L\tioJ,Er& \dzIPq Щ? nH\:sލXכBz?unK!itT3ױtarԽ:zk/D"YQSK7^k&1Sװrvm!8 j}'m>1{ҽ.JD߁eQ('ɲ42`n0=Y&] Z=AZwCe j5P&Lr! k6/s]Ż#u?xQ̞yl~ێI#]g7n,p7k*+3Rb[H]NA1{ mѢuEru{= 6\_'Tz7ǟ $I}KIcb܎ &𲥘 xfn}"}g|,!YR*4 &y*ͼ>98s +@OHKu 懁Vd66:#_W?0$!3|i󊏟I5lP'%3*lL]6h׾EX֚fN:`,̂ 0b7gub[M!ޤNхtLGX F\f/Y6j ˢjDmnt V2aLT UAF2{0Cr'F` Ul=,8ؘ'VB]Z"H<0u3XR L'ȸ)(Q ̠Ϩ{A uXӞh BTľt٭tQ=(ҍ˖:ռ82ɮXI\6!RSEt dq$2,.B?]<<;?R)EeNn\"DQ`\]Np^s] ]q̴9n([_όkh~%iB*Df\@?[0Y-^)e߈,9}ZJU4dիO@ ]/T-O#kMTʶX LZ*~O쪬Wh2}b(`"2>h on5M3 F䑛I_Sk:ƭm{2My%*4V26jɓeH $w)$)/ `[k논5ܦ&FpI!$7j`;;VyW]yzxB3[L."7M0>:_sU+aEm.1pϗr!W &Uj9OQCɴY拞VE.zЉ*`3d: ; 0 oJ`iӋ]UE9FY{g$㑞 LoHCA z'}>BX>^"t?Y e5V`>H·m='S|myoI1[/Y;N<2r]9ohYmbРРxvw !,i;k21L{'(2VCOl?nXg[ $gS"bti2:aωʦeF㆞:6Mk霜)a f8" j+R.I6WJ;Om9 U$Ҫ2v{PM]{@o׊hdF&RRNe# waFds~9mE7kY͡ M<7X%ì GXhS@{8 _^c^ѧk>T }^SRԩ>  (& b(o6Z=ޟptu^*V"nJltz+ ΐW()b'zKa@%E/̵@qA-EB ae2]M[M:mz\*L7.EC RK[cXe=)c[1 .#BQ?ئ䆍d)`PS%M)$N (u^cPk;p2'T { ᇧvN/'16V0pS4|sPE@ڎY2 02y“5dJ$飞(ʆ@qwWXc$N2aNj'eUu8=(A3+n[ɈK":7{B)f^^Xm"t1z>?EY[va!RG116>-|mᲬԅk6ܽهU%T7g>+[ W HݥFowhd eSLe?P䘈1$& T?^| L*;F=Ao')O$DtV5=[皋8[jn4 T6MEH _!Nc8 c%]eR~j{ xDO:NT Ţ:4I7k(u/+nJD--|vGItxN3LVqZ}r:pSg=?gT(tGmvxmY7wQ4B0"c+j85SZ~k%+ a*(d8O mEՔED0BcR Zgm3oq>s!Ь3\D쨒=*~VLiB:~;r*q.i>#bh CQIX9t~J_'in멭^>mw5tI4ԌIƍMl2Kbvq)Zm|j{vV+?q{\s z{KpGVJyj7P=< \1^kr}S/^fso"Yyc@<d pPO^npT*Xdr\S[)پMS#,o#ITmK:&UYyLcg} 'd yJ,%td;FXr#7HXvEgYdTϊYwʭbW N XMApɕҌeU֊bUS_ԠDe[2pR]4VJ b ͯ_%\"j]Duk[A1]rF+V| l/'InOFhbP;Z^ 8u;6W8qRӀ!ޅf5E\w>̙wFcKy mnQH1(6#v_=.2/7jiXo;Bݵ<*/.|2  GoUսf@MUM( so<v!x,v[Sl\h!PO]yH'M1̘ΐ[ާ4pU< )eH ]b ~MR#aږҨaE]Pw`<ɩ>8T5dRw-^/G2Su~"^Gu ]1*n*Y``wwḥ ,l2q-WU5$Q\>ħC=,Z|1LJm2wO_-}*oQO'!&g#cb _A jg2j:(+[%KuIec1 *ပ;EYNʃ)mksM1X”D,'ο,ʑ ~h ZG>M{-'"<8C[.Cq@_>?Yk  ϤH(4!t\ҊtqsM[saʫH fGK ִ3Z/ d9qʌ(,s6~.a];Zfi=K)pTc$[ڂ# &%1JZpB7]w'ETiBV<&}RT9sW )7 ׯΉFhESl1^'Pp'c|Цڢ/Wj=<RV4oƕG7%> Sd|NRnw\ 9Ds NiRR$DɚuXQFqXLXx:d"DY$j2lV e2RSdqFPU8ӻNIW>WmWӤ+-lC $S>h,az]q\ ^=QVZ)xJVUUUלVFϴE8ūS=aFonߊ( эT#N 貟+V1[﫢ɞ8LJ_ҵp!ږ. 2ڻ&RVFSm'jS;\P"KLN jȫaƷ_onpKYrM11,quIDl@VZ+ F : fsC麈_,u tQыݰcbV4ި4!HH{ۥ]#ӡ=~r3 '"y]nIh\KP!(J=P0_ekan ]TӔ#~ߪF=awP#Pr:1HH>eEeVHR<_ vstv!kḶ[ />Dp a ˖%D@۷+bo*9h5x).#Y, q8C2$w-nEin&f ~ϜH$[SUL<1:]jȆ3*wAn9o/Aąd }A,᳴ uǏ Ө6bza8_|}DdOi'v 2ܨL2a)42_GLH[) ^pO"# ;ҽ i.h %V`E@KlOa\R۠)SqˡaA T%yd+D}z.<./{&ٯk |9Rų+ZI1T3um"a9`qx ?Ċд;N:GVZ x p+iv419/g/*W* 1[WpOc@5C(>Dk pw<>˼MYh*vnU*[moJD"p_. &DϘDX=pQa~ʰJ1*'J-*L)c+d逛pmj'+oJ[DpҽYMm01Fۿ{ψvj9}Q)C9,%܂U 8*$7;*O1A:eǵO@8DJuG WR|nnvyo76ᣴ7#:ֲNfĢL@24*&]G(s ?OկJa: B".IR {,6I9O/Ox[ _69trF'ﯸ٘ڸp/IW\&Ns C;&_~Br;g Ag Fjs= o7A WV' IQ7:C=pO\)_I'|QQO$١XYn=Efμ8,wTnc=7f͍p,<20z]_(2^n8a}LC'M!iJ& 3.K߄ЕAJAaJwM0<+"q#29+]T3;R7$%MVji!,#Z[js0P8v$0&{Я͌]M;@M4;uN<` :NSܖ 2VG*s򊋭@Ujx . ̐m窍ٜdEӣBю@)6kB)y+EGlu`1hn,n"=GQj2U(&MGlCi6]"[㋇-26I~cxǯ{̀As.Hi錋=zSbcJ4"? f$y?!罝EK*㶾 .Ĝ7ciP^4SU/n|$!]5Hj:MN]Q3o8b."y!;PFc8^C35Ծ]`<ڇ,Ӓʽynb;F=.ZVs#>ߥNIX&DH`.X!=sG_3)^QCva  G/Il95/>s)0P͹/.ζ0."͵2 ilǙܡ#މ뒌tcqF-L6ۅ܃ C|%H+ҝOBcGۑ0". 1Jl &g5W@e'6YupZho7npIڊI(ʕwa5HZ"ߜy3,Jfb:I$!]Q}].eF#t ^DzN5.HI0w(qR,p/"\ڕ"=)[`țR-t)en/Yu&y?!R`EHSbgY<@Ms%F\PۅC \`<qA NrT&t"P'Īpgm|0RʉK%`3 ڋ1~pߜS1ᘅ[*N@GVʉ|m 4-V=) `U.¤h;4#FbVE[\+qcJhT'BԩB x1s zFtOO~?iKPxeZ yӫ+qq\F4t^iQjT擬2"Z6e&{3C{LZf.$ چ b;ZguPp5 #!L|"pX{=YB%זӋb|!crZ_*23slG A`!#4I0A# &9Rf:.@иJ_'FԊ@YOsΣC ^DH)Fl`2#-4:;儢g2g(PNY%PHczm+_P'Rs%m-rU`C{xO^\) /pI;G9dU=| '+VVjvL2vfsGM09m(mAnW~퉙'}Oq{WDY [IĮJl;]{d1xK>4 }_<;ylr1 4לo=dƱPӜ6lB>+}_W MIr.ˇsRtSJ5yo^N=kRPmrjطH 1v1Qq j$`CeXu7<=u<-> q8!P3yRO8Hm#z^r+I6m80/bApŠyG5N -,ֳ ' XpS0/Kn aҨMq[#8mLxr0(HbSɰ|)t~YJ\ ,G=Dc%{×JC 3/̹9ڿ'Ȧv[|{qt0>3=e4l7Mu:;`voGOyG *zLrN{z6<2]n'c?iu* _#wRGЏnl @;,+3 36|\M> $e >2X؜gTz8(4HHOaz`zr h#XE0FYQAcƊ>.6]JM#HZAJ:'U97Kp2#Ы2J( KxrKpj .-w=9{=,DGv:uʸxC$LLx݀XSiˏUe=\RC\ٵKVAeVSɒ0mY_(Fכ V'4&ed`^m."z!7\GWѓԃW SH'$f`²w$ (˶CĐҜwP\j;E]ӶLc9e Nw-09۾djxX9{L9៨LIyh4m 2toJ5>M2b;+6H x v&M:,`9yxc+7L.vĐ+DrUh4Gf ɷ2}~1M30FIB[r jVFP=k[N.1g}mdKCA-QwU }F_C. 9Iad )a,n2N}emwf" :PjέuWX_WZ@(l|hcyPZeS[- ŘyMpv4oY }PEELR<*fԯP_BW0ծ6Xoc_0@5OkubΉ۬L''lҼHS/n.|8#v*Agէ*&'bH)lk'K8L6x+~&If]n#[) 5VH΂Ht[Rc*0Iq|¨!{nh췮#򀏞;&Q# Fs"˒ 0xz;M EVZ`jC˜BOQ7'OǙQP%m`ѪJnl sjq򱱏dz *~g–KS![QtkAn@WNBG^٩B3-bzKӬ5(M;nDG/ ȣzf"W}Ks8JR>@s]0gfW{a=&\aG(^:*@Θfn:ʧL|O'7 .6Ȝ&Jy(hgz:Yuq/".W %C:CqNS,%K,HXѮƺ7m?Xb鵫Ms< uK6KJ:ѱ.T;5z VNlT(oV+@-aɏ"5~1a|OR qS؀[C408s^ŕ)T ?}zwY'd>S{nM2BL(MKZ w? |[By: r oAݠM?Mѳ5kŪEoK`0$u K\.5d!3'+|T8VAհ]Wpgބp}FHS*Mo*Gkl8 R˂VQSx";7Wד1_f Ņ˷dJDžYpF+&AnG!,?n粬"Kw,D0KʕBk WzB=4 CMFtuG$p`$>_D/$\Fm@JJXvؐւ#qֿ.ԮYܨwni=fJ(% [ba"VbC%HIfd(rAQ,F&(]1Cyfi1' fߵ0wkYqA~.hR C$ -}jgJ~NkpC"2~˭sk:1}+ˋe%l9W.47Ҁ溥؈Ƈpb[!iQX~yV 5g(g*ʢϐԭ\B<4;ן%2*[l) ȧiWgw]%!<g&FiLZZmoC̶ETEڨg16(ZZZ%_kL>B _V,ZNT vѫ! HрB;x3M9nɹ垻O}WAKDUñ7@(6&I N6-MjV{\.TMn.5;)s/hA!#9K<ӑQ@eeh>=~COᣣ@d{gp.(}N:zW ؟\~lT4Li*++ih| [:ZEEL7$8̧1Tv~P70}PB>xYy (!"wrLWf8;G!~Vl'"nca{HIDYYF>"zI[t!Ŏ5TJ^rghV5R# i*$|ػ//h:;Cね市±C3^,W_Va:,EZЈ6oNЍxD.BqǵxCϻ(ѱąadttl4  `A_"q ?4L腼~Kh9yf0ͼYf&+2ew[z<94|l(GC!$ބ);W&]8mcr .)ПJjl49~=~B|ː&95q#:|t1m+~ֶ./[{gUv _ig+Kc8 v^sw^XGAw]FHR*I)r=$MϘ|% D.ɦu\ZmT,ߋ'ٮE#1jJStN0.F Tl]4 -SgxLQEO w8}G N U ]YasV,jW+" PY+(gOu:crj]x8M3_>^}7qzs3B9Ldl\[xoZ2Y|%e:yԆR!˷wCje>ֲ̫2וB lL{tV쮋[-ڣ'bxlk-61~Ia:;@좲%X(E -uDql~Bϼ)yGK* n^= ኞrرܨssr'%z3ѵ񰪮MlQSN89fthu_PZ5^К2y R -їKs%WAJ و'X͌{{aG!kW%x_0JxH꡵me HQbo CKȍsX՟e#2̈rꉔW#^ZD'8s)/ş%Mg[!pJZ[Ru&<3jos1-(4Bl)FBT+ȮAFxUjgֽ||U2S@Y;1Tj} 1L(3[͌iݑC5%eyZ>qܘq )} Jgvq Śp)TKsCvKWA\wdG~Y?.}PFY)eP =@ϠƿOlnCBVxZR 5?"Q@V͆+VݣNMCw)._zc&N Hko0wv[# y Yŕ&x)P )D %]0#(_ú[\~u b;ӅOzEբb Yz~ZZA8yeY\E3;:]e҃C3/\^ųa 0NЃA8x-=Ӂz5$xŝTQ(4œ49/֞L?uiG}i~wgO{-ʷ/K:?T)1`(͟J Rr2" CtbYaєF8Ҳ[TQZ?lWtH3nL\<^NӍbZmUȅlOm:ĊZz N8|ylGD|z(9[Rk_s!ttͥrXHځ'vC̬g,&;WNOJ4 1/V))^d&n9^ ]n{5t'A-$InI'zz8Ú_ >kjWiŖ8)WۑR))8Iq r&al7:= s08jE 7X:ބZ}^NЁ 03(hF(`슕ShϑL%,Nb1|SYԧH YSޘ UQ} ثMZ(0?,k9E7wBl$xqJ7>{MH)m0 Up=t* 'ף|F N \r1$'86ƺoD =͸J*(5S~|jK`#?H~wO;zeGK=-ٙ<ԁGa*SJ7s:dRµe\*wS 6q0}ƴ|wnԻ)|~c$.8R 1޹t0A:V o_2l޿KWBYa tcHd/\.k%>-11'& .\ ?upnƠao$y|1ԣh--dsl\pqsiU4u<Ʊ>.fxŭyʕA6Rn:Z%(Kj=-R?/ 1f̠DH“^b4m~~zMם!K;pNipfr-2)"OT=QMPmBW b^&R=$Dףdv:.߈Y}h#u&#a^f'^z`&IUJ}n,ujb-Fv⿝xA_̶%-1I:dB>Pn9a%I/3]ͷ#6u 힞ɚy 9:[Ozm{p@a3e'@6; [/&[aSCjﭳ㹺zMsԽVߓ |j"#`WdXW\I!%t[|+t;Ow,SL$(*L_?i .4\\aj&im=ܗDYfhS*˛ĆO]k4xyDn`)$gR?7b2,$?e&{Hڶ·Iӆl/؉ Mx஗3+mù"zki5tF١#:*Ě{ 8o)|QFtAH`:7D͹ou2 r\J*L0[4ٍJP29*I <)ddIỉAGg= (E,MCYPqqq=qLQ&iPt+Dt.9^>o?'D>v(䓋!xy 7cyB^Q47p E8l2My%{=V $Py8 s[aB"8-޻ v>24N?N]ᖕ#? C&>پSCa^/uFIDo3(NV5ꎴ)/=ИN3K*ہDR3;N-dQ|SE{ј=+ *a_`]H{# |^lӴw01>upbI(>|qtTHyVF+aATLu$4mY DC2 L0m\S4MQ˺g+Vc;,btoIA%5Dk+$Tj0xі3HޓtxW& &V^/Rbm$VU= ̺Ξʏ?3M`q"lfj]%d)h03v#34J-%<ڽ=~}m =)8{;p{AKGH=7Q=vZoJ`*H a ? |f VߐqM Oҵ5t_%]/w)+V_I?9˚ըsdqa) ]856]vML|>Tr;)6w澀~3y ]Zx)JĊ7JeJ&w=ڕ$X0W+Q^a#'))dPYsGj,IԗKat_2|N_XqbK!VO{:oO>.J x\M1\Ӝ}JFZ{)*vOC@%,I@ēO><>#e.=*zXQ%~4n~&p@zЪklp&ݨVYٞ5臒0qs,;{wpruBsFǏ3#Lj{Hس4ӨGW07۔B{,r*S86,r_)I#"BtIDoL{%.xeeCHouYK6|G#OӨc}iM˘HJKyIzzB[禓haet()sLCtˇ2<%d~s*Q2ž0cLw>nx W@. bNs8E0**C]jA"U-F~Ě+c+Z6~mxϖQ6 Vyu~}*#lS%' ѭؑ7+S;H^h3xJ r x… 214Y-BɌE(i#QYzQ{&+;%z|݉^ )&bcNs9 'NXPd oٰ`:6'mf3uKX]zW kQ#*Z{!1gywt/Aٵ| ' f'09 C"r6=C_PkH҈PXg">[UQy|&m'=u}~ԬwtOE%<7G*?!1(tb&҇t]u -/ _-՟QwjPb.@^0;x 9>6/*n\Kaš` {wM5!3ۡ@!i'} Z~-pvOfDW䂸Cü3YRoN马EP`Wo$c!oDSo[HKҚ2jFz+b#V7`-}EE2"h f__5vWoHq c]Xh`o۸5cf_7R>lkp.{V ME`}m3}%KV"~R$QhT{C )MoWMwP£ m<|AݙX@("+\bd^seaf}<" w? 3\1Yߥ>Y"eRjZ"5=kI;GΦNn/ `DV #3>S+Im' % FO4](Xa*2q|7 ƊP}=mKhG94ڐY:E[ҵ *>EDUj^}[5EYRMPsgv .VMtS`p ]2TZTES~d%^+ZR.&~xDVv<3'.Zjc1|&RͺrN5;+ \d&"9E9vq^. gm(.bXlUQRĔ(g4'բƊYCމ /K~RҴ8,B=T)װTLe7!Ǵ\ s2ZE_}x F4@EBګ aԼՠʣZ(G8qz4bw)(DiR%:p8 s^P!^1mO=b$v6F:l[+-yO`BUEJ>~ rISs ،m"ٿVW×j1S4;\( EuF U0=a}:L]Ƹ5q$(P+{F&0PFoE1gUQK B{?lJTQ;p$4hʼn~ ɽ|u2FG 55ZʸB!w):#+;yH" 4. YM2-T/&:x/-ˊxh֗M^PSpvcNSL8{9/13t=靠V!n׸&U&.&;ڑ{3s f_pNd஡MAjAOkl֢;џQVx| aLP5/sۢ~8r*ڣD8%o X~ 0!HU=dZj/'n9_E>_KR'񵕅 Eay4>PCIғZtM }ai/tXj,l@4@ҫ*<f鿈YA t 67Pq #αD#I-Xlt7ڗFu`9J/`A2H${lON& IZ?, ߾1VF7pͬ:b]yDZSA#}0(pxމxx Dk8׵}BIH>ZաeAVSHH;>tX%&tپple,,|Fͼ^B%X%QHŴ,(X}Ib$X2Ͻ)#)1m8kO߃\eD%<=O1oaŝAQFs=-&6[}bg9;S.c$zY 1Oɟ5Njݠc1Me/ kf>.<<¦ɭ6s~RrV$?#^+rS?E׆G;Fd=KR1U%\CY ~C VzvWSu4BM=sicN(EASHf hsMWʟp'b5$Z* D_D&.CMGx2@C>͡,3p:p6žٟ;5>YQ+@.aIƏX'ID[Fv`7h[zܾ-_*3R݈[݀na{2PXCЛ_p9+4)ɫ Zq}V9"#Nc+ں(feX&x5wJ_)HA“}Z,=xg%O D.Dz*H"79 _0g 7ؙq̼1\=RuD1s/ )0F,Zv.G@Mq޽q?Dr,k2'NkR:~={`ܗ}J~%NIRy&UF?oɜ`Xac<٘*hu1yw *}[$.D WT72^n'L!zCשPml_407GsW GǷaH+S}i~Hf ژK0Dތ,O/\ڤ\$f UdɈNIY[4}:"bnI%#yE>g?x$[oq\Uzo ote[1? ,j Q٫OjWBNxKkZ,RrGX3 %;Li)Kkm2~ZlV[O D*U]>Ɵ2AH SL. Rzn^3CcGꀵ3C'";k>9Uf!f?#kpSe]p\3)_f!{ͩ :byU aa0}E;|X06j]%_K*VS QwRM4EMxE|ѩ_קB%32%ZQS+xwn ^m)aߋ؏҇< _~Z O"Ն4,MMqZY *fE M^lTђ{4c( QT= 3O.ўddFA؎pNZ6ž;OD@S $5'π'GĤGYڽ@.t'610ѩLIQRoMR.h cmXʫ O*ŋc9~6eT  RDы-v%*L9NiY'lf*RЈ!llÍ@JBh5ۖ$mP1^īv{wS@LY\7EIVjK0)26ۅOFJxpu+sm+Zf>8gJbú"1Z&Ljq~ }rTiNl`C&M[L,p(o*LbuE?D45SP; ym X I.uۭD<=(p#S~@ ߙA4BXxr$o?]avWח&E:gD.6CfPj[ d:XŀE5P1T!צB P>rl.|k(C^RBg rɭ7\h`/wR !kx/ R|\ayGI+8Mrב}3NaS|u&v#h&i4k][miתkȝV8Zp9x S1+?B hI贱 5v<~2,7¯¥^Nsu&MC2.߮J9ЇK8qstp}'k݋˹@֚ڃ[pk:9t̍x#7R|w)^A#$}Y̙pfͮ %!ج+JI>=.&|7: KY)?~Vt]ˏ`P|s~LtCH^롄\LiՍyiAgf'yаfp !wp&" Ta`WPOid֤F.c[~2ƙ$[u/E˒Dm׆nU ^*`RWZb D݆b܁JXHbo 6 =PgMLWr m&*>BA aJ~KQuΑ(0 VuS!I3U><'գ7AbN 4Qw:<EF6Jdmʄ90'vF`fokhZk IXx$C_Y U;dea+-5K](tXC8U6ufJۍ<bf6^ъU~΃4Xfϫɠ9ozS( K2CR!M)ޮ+ތ{(0%){گ'작P5v6µz{)|j1]G)}Ai'TUPoҷs7m[RoӰpA,}E#oC co 'e$PydVQ tû_y-&Uw'K) `Pm0y` H &\(auſ.gvd"߾wcp([mPWznL_*42zeVǒؔMmj =)$hfN3Fde/cIlq6@YjBi9X чGjK<.z gRYj}$2P$M?+jDBYu#)!B4)&T1].ߛ|l7u?_^d"ŘvĨ~|e]qTGJfĉW~`LNi&zG QbV}0~O]%YY6uFx;NXz>cnU5o",+N5齢K&FYLEƃBvMĬZkjf-F#W>\=:Ȫ ʑh20aO^.-TŹg26ʼG4ʑH?&T++u0lu] >X]!&X\rA|ӽ ^Q) ad/nVOOvVvǿ$K?9 #ŖiXM?KLE2ְn,_AAԲNoGϐ\Fo\@}[`i^‰ʛʱ;6+L!F}ݕ@5'3dgo0#՚ww\ѲE) rwKYhb6+X5L25l/7}mAw ^IcشjzS xZ#~5Za)h(\fwZ} 㤩] >6ճ0Y[rofDuLL ӁPٸI"F*:k`jqahi}BwlM|R]aJ?VGt$ +Ny h+jsMG05|'xUu?za R5۱[nd y %xӔt|dcy[: lJ@5j# 7q6S{ЏaP 37fd"CNDF'Է& >f\^!itrj%_hGF0Cmr3{;Կj7v􃣨Q.PJǻ.'M8S+2UHd$@e!=6Aݖ{Oҝ\v9؋le,r,؉_Cf-80E? E{< Yϝ#Tzg. GgR~#Tr.?qvb]\CA)Ӊ:g -IO|L|NB7zn8m.jgjWj^ .dTG#WN*Y}=ƽ]{otg1it6T^1?sOV qq>AfkOᖙ-sA%6 򘓓j( [BAO4;S+p@9y975?-% /ʪ@F؁b:S6Nuzʑ"[{0z".ajߕVM\:6Η7;FØ~QRqK봎^Id-~Dj[NVoa66v ;jcs.;ۚm&6NӼր}֕vL* YF!x2- h,=pъPE JCٵ|r3<$"ILGI/}K "l㓀[|t }iTwX$H=Q\NRǹv'] srIhV<-QnFqom86&79 %Մ#byT[iM<0͉i YVa3dȣar`ϚN]ɾ։jLȥkʊc;~:pIb;0!0v ASGYc*zӀ0C̉/ca1fd\G`#8B. l$bZUKy=/XYv4Ni~x>b0){B}۫Y߮l)J#""#C<şͯDͼ8$miqwL cs[}U[ˤ/uŻ ꋰH@=ְ%E}wcL9aKK(L`D#j$=SgV'H6ϸ#]ZP,9Ls jfjH65mQ6:ëP9Tuc1$]Zi;U_z.oj|lxodOѥiCGM kg;KUF'M~,v_+{9ulR4@I: b1{J}h jB(. D|BA z,'oh032(ÿ0ؘxң_d*}UiERdEMV#1jm0HOr~)vjjA,R5ra- d`^+&1/IqW<|\fɪ гndq;dK9RA K>e[3j)x:K'ZݒTX4Z"5ހ&*s+:XQ"1 L&B%GT:Wg]:~ңCr gȥU3hh` ~抋HD:*&NMZsT}W< 鎋vU^ ~J9(C #"y?SIı&t[7Ș/:w29ٝPX2HTAf1:K_ Ϊۙ@Z~ 0DАI ʠ|DDQD#pĬZ$:4? i׎ y d8CkQ-_T\)[[''W cd҅{p Ktbh!>SOf`qB|CYea"M_#1)r9d/3Z`%\!QfV74K#ٹf1G7@ 6rks-Oei8C-ִ\a=[mOƎ8 *۬›`kmĽxC֚*^WIiڎ}:53x DgC'a+'^le6˃5m\2Q;,x jRmdɧ.Оgd'>wus3߀1Pw]M/)D!}f'R )hD"go<ac$W#{``h > (s01X+{*c;2`=fsH_ӾOeog@-?a%F(3]9ŞXsu'Y 6B`&Tl2ӳ UaCO dd+ym[t-TSjK/*v0"̛55x3*DCTEяһoIQ Aj&I^1nKd>L"\A7P94GGduL n$ps&nbwװ NnB4tJc(0$on&FZS85n^W/T.yjޟJR_}(p LݺGmBܥ`B~)}?%9TlSoh,U3zG03;aBΖJr|TZ5عse4vH}:ʆ&N( slD-n|3;Q./:;JI2^.*LY FTv~,Łyd7E\a߭>= q`vmŠ3@J7@2Ʉ橬>M@2I.$lKe._VG1Pwcg_Q-<|-&QK|J MEh!rv@ JFv1ݕDŽʅ3i1)m$z"e;v]gɳCyC%0xw +)av a54U% sJ&4b석ߎ?z(060_>cІ K-ب1% O\Iz}Jʕ{ůC-!0܄E K7S=R&>p@''߶O=_i1TrMpCQcLFBU'uFKq׾'DM @r%aHTY,QRt2Ab.8(#x l0xwPnp>}o8LP݈t,JIy/?1xay{ǶE-)((4&2}5?K\X<^I fV0I-)NHq_/1CiR#κiq]ïʯپ`,-xW$Pmńw5&kDh"&=i( |És޼q!@o|4g ^);hִȻ (%'~iW,ϴ~EUJӮZto{b|_(EX1'oL2"jڒ(~c@O8RZmݎU2dXtD]rf|Wn`R|`~T)YWؗ3)-̢1e7 _qAs8gYl0>+Ġh+Ft~>Z`$0wbSz|KFgZ){Pd-=v6)jN$ŷvx]SZ*m5GaC=Bf/.É4KU XզS6LЍ֛:Bx|Tv5?KI@I(jÊ!:ukU%4 i T(^ Yu92jv&3bb/ gL'M:zf\B <}%ׯ[nghnqr h[ ɇQP  ^Lt;ˑ˲x{՜!̫b%XbcjAyzV9+|w|P.I ޳ Y> sN{ @tOvY$Z=P]gn 憅D)Y:+O(䙓fKBB^ԭ<ဓv\PEfRXוe3GlọxPCw)$T64FMF ?j\_,n4Pnm[=DDC}"Cd:(M22LL M* )-255NlPĚOlؓitGc96h@L6!]'Ix5˳_,Hm6yQ\h1uiMl$= d|rPACtO.l8{naatQQkfЯ\#l_3ȎqadPCEAں-Ҍ!NWA/PFev}n0=^)R(Fx_gu|rM7z8w4.*]in]eO\c7t'VXe, 6 xlRIYu'.t"O.i4ޱ&EōP=6kVL+c(1?{%^9g?Pw4Cp{ :=3o2S=u&sNɭbNMH7;sk>C-"O@OhD}#i@:bպ}Mp~8X/h>~!;g56<YN8~w!' $dxlж-U}ĮϟxU~ZJ;| ,ڹhYg>I4diLZ?>{C9$O,k۪Ū!D0`-2# ~8- H꾗ړ^%FT׼My-D&vﲶNѬdeJ9C`1Zg@|M[^zF/ '_qJREۉ%b=c'b%6{vhch*RgaϢ?I|Iܫ$:vA7{:mcT?[oXt ry">cnߵwTdXrhJX5exĴ-qȗ!H H2[r%hSwLl ۝|R 3'&%lrL;S3W ^Į0ZHIFrY/`Id N W?[[| lP:@x0N*;ݣ@ԾW݈[74n/> VJz^bAzIzXxȵfov@ ^#ʪ\vQ#lP@l?( {b.lC/[3ZrZ04 n 8+gu6TN {SHhSnJ~=d Am,[T\e92G&J yc֪?&}!ϣ͌/-&n Y;k2[[΀ k l&]ju&(n:~On {IŸ\TfµB Xhpmm96}[HNEZYRCm0l N8HysY6ݜ&1GPe6]m7[szuX`neգFɟ?9a't(+}*Y6&wfS_>C띻'ǁZeuU5ʶ1,/.QGW[=Y&u?arwㆬp.l ifrWݼ-9-YTsI%X~ BZg?hI |LO,(Ii'ڎ?N4nF/'ڽIX&TEIrU0c}?L=Gn|HtPm' [R$XfW./2B,!ʄJEXȟGj!yn|d'+#voD!}Mf-(#~#IHC&AUjŭHČLyz\"I-<f{Scr7gPf/>Z4Qˋr]yq;upcse=srRREIFzL}o0mȥ+/ߴrɑXX3:)N!woEkI\xQ5Qש-[H8Z-)EETUgDIcP[̊A4fvL#‘I x7-Wzl^J.PP:v][ Dq5/)lr䋓'%nl48H5?W8\*OqHmzUV-iHZܚ- ]J{ +M9`X+__VH5x8;{[^P " n@o%ZG֬J՜·a_ !jdǛ1Ln4/ɲS8ZggΎ3<=Y( .VH5Vrik dAǁXO)k~8x!pNSg*М`$3iLTC76"GRJJ -ZWġ=MH@HڊO5z8$ =K-5CAe.Q.GԳyNLY4{K6,̅ >h8X> \/AEz7#֜&>kp]kQ@US5IBuxi9b~$—:0naUtK6f"iTZlWԿc KXIҮ% Χ\y+ՓTBRBr (xWGv¸_G#?ܤ5LmC$!8©FE9gX}>PcwD󂄌t<-WR.lM HQOnsX#: H#|sKk.ʩ6K7INp"v K0+E\=0wlwѹ7j{:_%Uf60@ ɜxX!+sl`f$qFb@H<ԴDiIԏmALnB=RыIoq5Sþd&m?_x'ɨ#'V?q _v*ȃX.Z꼧LKD%>V)`ߤjD{##1O|PhpY_In;{'^J7lL(ܱ> IƵv^`'dN݂{BraRjAyP6 |_gWcLw&.U>z+]57CQvŀm6.Kso{%E:y,~)H% C$x L~&(@d(,q<=֐4ǝ%ǂ;&6/wx򞹚RΉɀ>a V4`ZU')q\^?6TG46Þg9ئ[TVlFxxmg" o.|)i*^bS]v-f }_ŸU~sŽ{A3e+mA3yt'1-^'ߵm.D9 kwMY-R}3rNRdwA%C 8vC P"Y։=6{]'}%z y4K/$lo .o~3?"Sɚ# 7ˢ(H'â1 ӷwep3RM'0rTC5< X<ȗ\Z)Mp&7gM2(׺;[Kdu2ex2k_Khؾ Jd!n1w_z07_.rE~_ n<|j{fm_Ot F%QGP/9}o:ȉPp̯D7U2PGB l]/>I?N\FvdxTQpEJm *% )t1rR=ӁpcI9>Y1 (wOuD'-ڈ7SkYgKF*ıuJo NΫ˫SҪIJROב[ǔ#7fkJj=qcL$X)zU7F BbYQ@OM*nDuO^k9}N ?;ڝN(ઈ^86S9ƂcY6xOlF=i?ڪCA BM3QpkS)ޗcw9vDXڕCS?ddbLr=H A*z,=7C-?53?6n""Aj}-4s;GO4(_I7C1v[eƾKa{(%!VM{De)m/(\+PP6o*ߍ[9'KAxFk$ c]"Ory:'YOoX :Bu4,<{Ax>;$lipq85I&*w2.@MiƮU&c,7Q릜T:doQZ.f]:k̾L[F Z(FUS`'E^|XA:5w|7R7*6+#; 1Wmgj,68!L`OPk1rO-6Ӱ4FjԺyω. XxVowLb-N'}* V]³W,筂u]0gE]&vb%V\ga=}=Jl9zgʑu N3^Mb) g~ڡ L%'jqnf;p3fidnH #bn2 =(Wo)c;6B53*X |+~_kZp{.!֚a?5|0xt%B<)=!UQ|͌q٠?h:cK*k2UXvh8p,aBa"mY܆~DК$K9$o+E4Uܶ2&{iZK~m=g:s (.%Z.OC>g}R:̥*|p<參mutd^uGqTW@4./t5cnUj *M^tqn^!wc ΪYLI^ Τ*SH'*k;xjZtf٦w:`|qVh޴}}B4k4fY5' .{HU^+Z2Huv|@x5TiTޛ=jW98+$mZW=hP`%[Ht.ƈ@AS[*ю#0GS{l82:<+wُTvahFam7Fղp K`L'q9?yc}sAw dZ-?KȮQiƴ3uv]{bNk#g4LHBK;4: M)vǰxԝ A@" 쪾kD4#>7Lz@sn&V%xq͗FLxXO@4ʚ7WA':|8 ( n ̄DG3L I ]P~+7t6n;&@nKZtb9\!p;fCpcc2GCO+Vf-%H+ii oûϚzgz}_r2)OfIWvN$QCY$w񣩙{[EP|C9!en/P5P.)r-'oW#IC*WEq0Zc`Dq2625KRk12UX3أpZeFTJ GVճw[bnQ՜U\JA5WAgٟ2|޲z$SZQ6 I „+m&xk)gݫĤdT`M`% Uɇǽ'^tJq-[|jzٛ+ži*O^Lٔ97|oc$w$2#%kܞK 0lZڄgg&c/X'OA73 "JsQ@Ed)8HƢ뛑)MTflf Q+@$KXWL ]`݁ RYh "xUY`yCd:qB~+5nu;$tϽVio]ȍRH[P~k~АE[7? Z$ NdzI% R=5er5@f6^C˔'4b,0"&I1=8ΫZi!Y\ӛCe;dnV`'4RBe0S:M,;%/|2u|E슢/ OfF!nXLbT5)gRIAe[QzAE MQBPZpOyQj8LgbdW}!yե-0\ͤK> ~ ۬[=;CN1SQ7U׈~]n7Ω6 p5P<06 =cEGjõB&x2V2Loo %^sURƨW:ݷP^[' Tቁg.D[mΕ,oT3y%[6EԊQ5CuQ@'`W$n쨘m&0{Bv÷zrlNΐͣ-Q˶v ]k7;i hS ~,+(ހd"s2Gnwtb F.mzmM7ʳU8 /SH*eyS~@<C[D0OEsH;;-O.$N->A%{ 2Hۻ jxpD+b=#y]63$<@ؠS%Thk3K(qS up3vDX 8~[ym0 Q;b7ܠt;(|Q aF qU$ȒTi\\΢y:b!݅gT6P.VTR၌Y.v T;to娅E6oe k/*=N*6#ЦSt fC7{>X!@)Doe]cIXfkCH ]yEBPM}J.{Y'[C58t4ߕpdc</rQ ! %g5 ¸ߥ!z& >&F>;WPsCj4C:EHa#BӢ3$ͭLP[.t37x&22iY;kGTk̇3UPAf+<`l9.cLhX k[Z^ϴ8|~s:ɝMXguE]br+wT6E3-Kg`0 9@w+#;N&L;mW,뎶֘` PN3r"8ғfS2.H'|'U,)L5qQu"*~ab95PR?#GVmW{i,d%,krFy?{rJaI ؚH `ޥu|myXx&ÙE⒃smJ|"{r⦜wQC{ޭUHZ=ᖳWfR ox!GVE"%)ZS`~Tօh~ۦFIi0B^2jGXأM?osJ,NKg6G4ZkgϏ̟^\2*ƮcD jT[nQwR2KDZ8`Oɉ\Aģ58sqzjƯI6{TR5G;΀8DeOȇQxW%*wiٚzH7׾y j[cn;e\S=㨚 GVyr\cj100gr\4c]uS*uY$5E;Nb mYA~Ӆ4X.Gq}u 齘! w 8!x7)bW{\MoϕY}_uHJJ ~SE[Å9MȞRF'Nsu #C:3 fb=M>Xwk" %(Q#Z*!7uǘ?MS? ($-\:3q`[X9}IEA,\I.Z뭲Fc}s$\ =;{iԣM嶼QժllTHGKB͆Y+M7;2a E 4LLNts.FRd\laUE3/z~&1\.!zi|nlh7-ڝ=z5Gݼ!퐰TWYJc `~cDioHլϦ=_#uCȑ:ρԮ]mPl t!_Rxֆ B֣Jo -CfXe/MV]xK}HPfy)W̾ԁƋvFQs_<4,@0||sį eٳEuqĥ8 z!GweH;‚:-&HPfQ¶?EKRaxܸT[x0B;nm3੹GTX3[.fEN@y1gxȧOXAdN^ #^"+ž_K.45k j\:2-5SC׳M3a65 Dӎ>Ģ4\+xv9u+XK]Eh9a=bF=0@Q|Dq%9jn5EbbO}%]cKg0"T3,uj&tX)̞LD,E>h2-|*)4C]goq+LVCY:g3Fl9crw9֜WEtYO7sJgVIDmi)G3sZ֣SS+ *Az|6X􅋾 A5mEz)n[~zLj`KYd1U4 4QrCXLj7G6ځ OST]p*3h8w`]Rݪtsď#ұ޾'K]g*E|4iJ> (!XnH[2plm hێ\ssq$/gUޖJK RhNf)~֏`zE5.ed{*vvrvoۑiu(2`P|1n)=dˍaD .۶'Ts. 0c.7*zߣչ\23;fi[> )[&c,~*U= qAtb|$\Kk٠=mEE71љiF^ږ?L0K}jco> &v)g5g=),`g)zIv5c"Lh"tD>TEDW|O7y.=@5^̖ӷ99-ﻼEٻk֑}D_mKm&׈ں%%T*i˩D 0ȧɥEDtz 2xrRXVKhi:ϲ,oi<ZS <;aFڦ{Ӭ7)0#׍p(2.O2Izf) ˽Lv?$=eCpYF"!pHiSU2r>6>%cX_{#ǐu|m:Oji 2w+9܌^2O@5fa-hY7$'A G3s_iغG't'S r/dOH(J=]6Q0qC-CEOk̚h1OGŲ{; fA8_ݻS^&bD)#r>V] I}yّqo (vҫ=YF3W‡ò>o\o\cCZiimLTF'9'ߍZ2. " xX9)͜D"6iS^,9۸J1uj  ,Ɖ73)v4z*ЛžyUcThҎ+{svPmg=&Br*b7gX"N3V7'NVa@$z>8ZGd1t.l Vg\49.R%9@!Ty;?G|5`j 9h$.ɉ7;Olr(!sCuނk#PޙgϏ Ӗ[AX ?'CCiyɞmm/B7s: w1!wI>I`C[)6Xzp3I^c3fvH7^́fy xze܎"aosIK(.884j6dMNZ@k6hf/ r80B}A>7VUsz(BYܫ*dѝ(ql(GFGf ls}(;)yIX) L9^ :Lc=̓̅x7MJRċ=+u7Rzi f inc ^QUaN)ʜ`r6Y?qTj9">sout蠽XM6:/AQ ]]z+nAFa` LWKAelH%°w+O=(VoDam؝tIdM"֗}y c*lw1p U&$_,1avQwv], ϛyZXQ;Y"3 *[5O{♓yB5GXn,`jA_Pν<4/[ciӄ/Mp`?%}v[!֖ۡk4{nJB)[I\Z.v0%st*jsR*Ls*'tȀe:wo+F㿍Pq(1Il~e䪜@o"1G|rQBo>8,Ȃ*3Yשo#0.11ߜ ]j!?>":R2?OXecp0ڠݐc*[j(Q*bObȑr^X\i[K][d+SvEE?y]]qV5e #`v|PZFkd-Wddг&\ YJY| (wvm]lx~K4~67%NZ%I8MaS;-nFSxc3Z",IۛhMTK'0g[KM5UG;Ơ-W>̴N~9V*.-DY@=OF?%ܺIJMw,U 5 gx)-N0֛ v}7E>Rw~原5j _,uT:c?`j* !W#`1K`:%~1rAzVY%V x%ٻpKMIS|{^;M-H F?T[mn;BNM?7)I ;jtmwwmz4wudiHBy*:#&Q"rD9v.ߪr7g6#׷. n xU&DPdq=:'])gRT&FnG=~?M0nA+eƙ;3w2W wH wm]*LR\O>1~t1%;cY:XD\l"#e y:O.ul%~/ɕL\q*& gj0rA;nkgKBQz$XxZRa>iV%azM3 ̂L$]U@-4~G#kp,YbKT zL?m1˩ݰ03c'(tDXQ M؏W,͉ {˜V&'9CO}4v4FCp$x?ƶ$rFӀ! */Ͷ }Ғ /sMAlTOСdӪQ)!a ΄Qqm@3L@g)wi $s(>/JًjoaPJmƇ<~G^rrzzt._ @}L9cw4|hvkZ>, 㦔17)Yxp91P o~lS(mJ\ ޘ4ޗmf>Z˼ީqFs[2}^6G*:]*MdžBpY65V8֞@FDH u@U?Yֽ%xbO 1cHf_hN u 绫#{&-,u#~VF?é`@F>USm9gjnN&J`R.\ȡ}4RS-~[DXmz4w+f%7EUNza:&r_PmOܼ5K%EFN/uau &q0R fŵ˙N=yc&|D(F\E02 :C=&&MiNvA'Ѓ腘i|r-ءlzY':R[/9:94a~a떋E3g^YӍKbGc #`L$Et!}{haj _#(7J%!՚^c[uYDX,k/nCF<HY>'jWG@%a;ZڍV soUY{FGrt#2ǍSpg JVE^L!R`~4LRgIS4Ug>]7Km"2*q$$~pM&i,.lABsgiłeHúDαwح8֖ ,)8@lޔ} {1ȖjEٺ@hBƿ ՗$>n])̹ݡhs:ZgcJԳ)3'سìX t$+ЪO癮::tbm%V}ZGQŌTnB)n!CYnlڔ8`PASQ`,=Ik&Nn55ݪfG%q@)]>`@uXv{ 9HX`*&Η>Yqq:(AFĭ h.B!wyu }+Z070#U]m}OU`Z{e\f=n[l |q(Y{JbL0sZRg:p1q!yd:!XH+lI6R6=ơYiXLg`22M\kH^Ȅ&:$zz`'2zAl1NiޢJ(Q*GW2jp~$~roD.N^yap`\d:RNW+S$YL.^`vut"ؔNvCSgzt C)cF#"Y|f1SmD8o.moW6Ğ } a¼ xr)9`Xfh9`Wkޏ_\aqӧ&ΩE4y?N#V.dqh#=WEؐ@'p.9^3ž<d:UWΣ ;46-2)RXN玚##黕VΧEt D\^@d3,6jS˪!lWS>+J![Y/R(-9E FEneX\e¾9[u4c=|Է ՋwqGT8@+tW^!ve6U 'Hs0j[0 ' .rFMSrXJ?MŮb4G&_}$k~TLڸ}[47%[ڀUdgіǣBm]:fIr )h7D01ݡm`AMr1Iq" :gE 3F`KNGLРB}=MɨPPH(>-Cv?D yv]8+f\3{eРF.cgJJHia vY Hb Oh ŪK>zN(wAu7=jz(eo,bOr:v`"/; I71hD&٭vG#HG S{FYZ<_mGÙ于}ixBSx|gYu[s NՄ2 w{qQmlLhѫhC8bow *F,n[$X(83 AP^oʙ#XA|楗8D݌D);OhøCDL ][胚 eT1`0}ڏ~@w,~ BE> Н `p!  +kη3:,@|qanbgPZ*%9y 'V@$yaex6m` 84Ы1lbz1qoL5tGEc ?ٽ[ /v[V2~Kk9N_Y56;֜H-74TL[b\؞«P;.3j WynizHJPSSm՝ɝer2#Ʀ!M; ]8C΂j)eY ,r% lA:OL=mY1m=h[ڙ v1RȻ%ߟE^~-2t~O_E|9 I,̻/>? GgC]xhthg6RfYƃl|׻Igs"'$À,6*[]Vǿz' -aHZr0>!ev˭H4$vߍ -*DgN2**RN˴ -bbe"OUS~ծ+%0LصF @*nFTjl5+Ե/OQ'gMp^eZCHbٸ\4m]oߋ;F,PufmTұ"赣p4cZ#("fa }Rv2W>S7a:t]arOIJ8~$[ǙL8M%N(x8QmڡytRn(gH xOck_^?R(O "/Z&:!Mġڔ@QR7H!8`.FaހBlĮ-!QXAh繦2tzԓ)ny@ŋFpzT?;ǡgΎޭ|g`BD =N}V8ըګ#cw4ⰌޔVQE4_XƘȺ7oWX!V8{R=`"ove<_H:"+ X{zeP4|;vCN ɿu03pTfJĢ~&ֵ4zW{Z1ɔw戳pDVjbN_E 9Wn}IjȕU7Bߣy@̦6qgQ$81eo_N LoCJI >9ĪqUJSfqOOi~.k;OP3EU 5Hͨs8\_-z)sDQvEAov\9F݊F yuxsgznwwJWF[ ޙml:ʪ]3uQzTq:֗tdeea%gÂB tb?jp"h4Hi}z > >2VuɠOR3:uBŵ7P> WmA!B|vΔ("7޴|- ʬGP5.yw ;.Kг!qVI.GȘ8);;z]|4k:QƌD{Hr#5NkpϿeȎJgMa>~tQ0rS eIXJ|,&%e"j Rv׊S~UUbE''}Zyޝ5G]B=92+ B=ٗ. oc XKkq;qGƤ !caBfD#VL'S\8[D#[,ditsk@ 屒Ŗ\Zuą?/rz*n`wK9N2@XXHY̝=M-z9 :>b04٢J,ZvÆn.Y'^ޙvcuϓ;-.7%J:>8xdu u190w}翵eݸ1(QoU>O˿Z;͍WZ7aX3;-!+\_BRav]Jּ{5TJh_=z)HSX>V' ,Flɯ9vs~c5k6|R^FAIPGf>%LX'3k%llI' Z+֭V#< 3Y0~7.꩗zW6f ZrxmZg ꀹ ^5P01OmҾ$70l4#.Վ7՘)ˑl9̗d兺0컑Q8a~a3ېj[UEB?c_TfMB,:zQB%(C09nIІȈ`s֛#m_\VB. 4Agz$j2EF Sz}/37WKg&j 5X$N:O|k߼1\hJ@^T/K""/r0SK)VGwAQî1F&;)P[EcWCtFHЪ#TIcT={|5X;&G<iJu[_^f!iy^KxRd(ghuHcfjl#by;Eg9ڹ};^6ܲCV'c}\j]\G^bg(ā$+d@EUB폡4\VڣDR%#itM2O >ŶX*YkBL@W I$LN$+qZ o޹VM W*+շ(H!5JyEv f$ ̥kGS2GgXc^g e ?#n.3:GU=mU-@DZa6V3?LRJUm ;4} K~B(yQ:ݫ 20/6:u)d6p:itI֔~nim=&s2]aw66BRf%v~}TWde f@|y9z-w͋+ 6~! Adb ftj4g ,{5gҧ^]QzEچLoSH2$SNSSeIALITv;YȻ.;sX'+ @²[GZ*$&d. !H$Fh ל rz#5c zET=!YzI`i}%IQHt:*1ؼsw>F^m/`=jIvw$DH0rZx )S-NyYp%DG|) (GUG7v X޼~4 Uu%]酟7NO&ʕo$;[(xe \_nʂ)QI183ߙ嚕qYEbƴ|F,(=g-PsFDzN=om&@ZPуCaSL-m?!须 =cuw?CӼ9T*ԝcQ1鑽8PpȞy7Sj}zȂh9jkkU#:|b^O  YVK& k߃9p*'P@ O| 3_oUPA_z]~_5i- xAu nDw :gCђEґP's-{c]y3b=X*įj%'`*xqBo ,obL#|UjZ֍UhZ'7ض"pb`V4 q}bj;\{E>Χ şގ<:钙 Ag )@Qim~p7{H;'ӊu| ?8 Jo2vw#ZON&'%thiVRnhzMХ gYMה?ն̓ 9tY Zu_ʊ޴YGvcz9-U38dP?%ǜ ~43$q+Vs(X,;* /SHpmȂ@.XBI1@[?6֩xӎ ~#DA5G7 d! pnh0^l'[}s";: 3[ô}w%^ѓ9 Ѣwv+(QTҏ ǁ_ʦ/}j`6;9$B^e]ՎGLdwvMdш!o5gs^s, ߖÔ ^z_!DVabCH ٪V2vV27g0i#W ǝnkiQ]ǥbEt_:Q}# )ZbĕΙrЩ[Y6}Zaۖ1)gL;8W]Zz=dsu)c,vlF _&F9RQZَ3אB#z;4=7v]h,jO21S|&rV!} ڕ9տN[flRPz"sy^sx.vXeknrhnn X)47d}QsePCg"ǍxɠGUFfOQZ@RX)Q2Jx6kmyaӍY zȦX%U[)VB%ӾL9l,d_+Diu:q=E,800y޴4 Mlt5wίR Z:,yJˈ<UGU&m1B8'ݤq7͹eF~ "|j &Ɏ57|Ů'iϲXtbOs$N fe+3)g6J9kJhmH_s=?0lh 'M*rQ-n ؛d?V9 X@+:iWd^Xā+ ,0߬qjr/EuA V ٸ-N>c}w#q6?̇ZW6tAo߇~͡2`]K3zP!TX]ZyZ h5Ĺ3"BF@2 @ @fjm U6J7ֵGtS)qbIJP& ^4!~@qQa_^J?gѻQ":@|~4ePiR0@2$LϟM_aV/{mAPYS$}?-Ti3ńX~~^ΜGGU"dFj-" WmM?ȶ13SJ7ſE,&cjŴvQ+'Vgb>R2@Ml6-.pP21 +gT^N\gD9l1~2/!.ԞuAhҎ3?9@vL0IƘBlTJ *o>6}]0ܼz T4d'1Ch`"Y)2.xW nͪص I$e+N}-={*I=~#^Cm#6f&y mrpbV^4J^9: ˇ򋯌=ԧ -/|>U`X`:/t]gp0Z35XBJΪjԯUF4'ew^Ω([e.4ZUioSr~h$ oTlne96z]Ud <2;[ld!ʠS?`*~5nj7F&G D2%(062_ӷwJ:'a3Îb_' wKrs n>|2 X_.eIggJIa %zXIE\C>/IHJ@BA%܉{/*{ONj2ξM3W5-{tFCަ vy*P3z-{rbJC#\nh=$NfWգد/d8 l,q;6ٰP'̈'FT2DwN=ִL0r{Ǚ{[/`1I̥tQCT$Y'2e kdp_:w'T k &Ai7%k$~('ݮ66l]NOϷ9 Y$,Ę <-@f#O9hkxOsg !l]e")8@635!M f1'|@Xm 3e חy}q?HF HfN)+N2uA͙:1GO-ƴGhHMm[EkOS6]ze a*\ko%A]{+$ IrXΚ>]5}za >#NcitßkPߌARvzU>K&u˛y|Ԣ2{Ҥ)Q5^'~? r zk77/nV/:mݣou=Kz$$Nd 8^G0Y?# V@U"SP~[cL~S ]oᥩ{Hs8YKel}W350id %vi̞PT[:"mMR\cn 0nz Zz4?ObCIȥ`&; kKx<3632܈04Ͷ2Hs&z_۴EBJ DJrGDPD>"$6|n =3@.'p#Ϩ?e=O/@Xiz?XB!œϗÅoR.4WI8lƞrANpݚ O:ЇQͱ /(s[VOM "L`WWd?F$(-7 %EYhDJUgҤ׹'"H7}-HTف H|Dɞu6sSO;:Ӫz3i#+:HH̆Ij32 G&VD@{o5R#Ҫ=g"'"  ~s:\Xdj4[9-eq[zǟ jOTlOL껇G B;A?yP>DN sCEIƫL3Nkyj sT*> v37e-d<(k%G١@TTc 7 :Q9KpV'-y(G1gw.H22Je1![Βzc)2Ei!%r*&XXfBE%&F!@#Vڶ[hpx+3?iw@@1 !D+jxz4ϖd_("`L/ 8f\d/v!ZuNP44JX1`N൥(eRUW;J 1onAڻeĽ2z^UQKe^zVl3+:tD̒"SM1D9DZLR:hhDqsMϑ@&֖4 Żl%a{N޳~֦EX݉m2$\7:O} 1 / ?5zp<JCi:'qhd [1^AQ6I?Sn O\jҟ M쫩uW* Z OVs(2A -cT$).q(\!J!~ 3,.~={ngkwzγўpb'k“+jff==6h&$ QC LgNxKR86l9j{z=4q}ޭ T byգڊҳ7 j vc, zUxF܃S >0ap nhy )0a)8 RDD~ǰnTWX -;.){4;iN|ws2G3Dà1oխPi\Pv[?SlFw !:֭P) %zq-yɯJaa+ֻ[ !K.кAgB撞i8.c|X lPnVt [j)uxRN͋INt ThyjS.Zt*lw!F @="_r"7~l{^äC^zl%N96t5W^KPq>|ǥ=yJ_jLEND@@ȚUI+Vȅ1{U k:ވ"m}4ɘDljF潾nzq%;c2<,lԘH"3'Nx ٺbŤ'MC4FRc۾mҠ}ޤ<H~Q@GݗRŠ^'8jrtF aaؕ~AG8^^{^i@i&|ڱ u/EN6 O|>-4s[nGԜO %^)]Ud50 X E]Ln0cј+o2`4jut%{fٴ@I. H ˎt@d $0Lbi2b)}O_J䦏;Vġ@~DnƲ|==.֞QPI1KpS&{UĆۥv_iWebp (uKfmH&_T:j"9TH7px}.ϸ7)$;$mޓA_0ovد