libopenscap25-1.3.6-150400.11.5.1<>,Tf|Gp9|OpPKJQB'x`2. S]f&gM|Z}MۉK&!O߆. QtKS\09ui7}AgLkx{j1M:s0fD=6rΫ&Pn(arvԏ݀ OPst֙T灎?x6.QRH_i) >@|?ld $ 7pt  ( , 0 8 z  ; ; ;( 8 $59 5:5>~@~F~G~H~I~X~Y~\]^8bDcdpeufxlzuvw$x,y46z  &hClibopenscap251.3.6150400.11.5.1OpenSCAP C LibraryThe OpenSCAP C Library for easy integration with SCAP.f|Gh01-ch4cSUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/System/Librarieshttps://www.open-scap.org/linuxx86_64f|f|1b911066c2979fde1055707713affd7e865134665652f2ba40485e2b6e9e27b0libopenscap.so.25.5.0rootrootrootrootopenscap-1.3.6-150400.11.5.1.src.rpmlibopenscap.so.25()(64bit)libopenscap25libopenscap25(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libblkid.so.1()(64bit)libblkid.so.1(BLKID_1.0)(64bit)libbz2.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libcap.so.2()(64bit)libcurl.so.4()(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libexslt.so.0()(64bit)libgcrypt.so.20()(64bit)libgcrypt.so.20(GCRYPT_1.6)(64bit)libpcre.so.1()(64bit)libprocps.so.8()(64bit)libprocps.so.8(LIBPROCPS_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.12)(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)librpm.so.8()(64bit)librpmio.so.8()(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.0)(64bit)libxml2.so.2(LIBXML2_2.5.7)(64bit)libxml2.so.2(LIBXML2_2.5.8)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libxml2.so.2(LIBXML2_2.6.17)(64bit)libxml2.so.2(LIBXML2_2.6.20)(64bit)libxml2.so.2(LIBXML2_2.6.21)(64bit)libxml2.so.2(LIBXML2_2.6.23)(64bit)libxml2.so.2(LIBXML2_2.6.24)(64bit)libxml2.so.2(LIBXML2_2.6.3)(64bit)libxml2.so.2(LIBXML2_2.6.5)(64bit)libxml2.so.2(LIBXML2_2.9.1)(64bit)libxmlsec1-openssl.so.1()(64bit)libxmlsec1.so.1()(64bit)libxslt.so.1()(64bit)libxslt.so.1(LIBXML2_1.0.11)(64bit)libxslt.so.1(LIBXML2_1.0.18)(64bit)libxslt.so.1(LIBXML2_1.0.22)(64bit)libxslt.so.1(LIBXML2_1.1.18)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3c*c#aNaaLaZaG``r`__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@dmueller@suse.commeissner@suse.comrfrohl@suse.comdcermak@suse.commeissner@suse.commeissner@suse.comsteven.kowalik@suse.comrfrohl@suse.comrfrohl@suse.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.commeissner@suse.comchristophe@krop.frmeissner@suse.commeissner@suse.commeissner@suse.comrfrohl@suse.comrfrohl@suse.combjorn.lie@gmail.comrfrohl@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comledest@gmail.com- require shared library in the same version or newer- added Leap 15.4 and 15.5 dictionary entries. (bsc#1203408)- openscap 1.3.6 * New features - Select and exclude groups of rules on the command line - The boot-time remediation service for systemd's Offline Update mode - Memory limit control using OSCAP_PROBE_MEMORY_USAGE_RATIO environment variable - Allow disablement of SHA-1 and MD5 - Allow providing pre-downloaded components - Introduce OSBuild Blueprint fix type * Maintenance, bug fix - Fix coverity issues - Patch the `segfault` in dpkginfo_fini() - Add an alternative source of hostname - Fail download on HTTP errors - Compile "environmentvariable_probe" on Windows - FreeBSD build and test fixes - Add offline mode for password probe - Initialize crypto API only once - Fix UBI 9 scan - oval/yamlfilecontent: Add 'null' values handling - Do not set Rpath - Do not split `XCCDF:requires` with multiple `idrefs` - Allow empty /proc in offline mode - oscap-remediate is shipped via /usr/bin Added oscap-remediate.service.in.patch- Rename oscap-docker to oscap-containers and provide oscap-podman as well (Relates to jsc#SLE-12852)- openscap-docker-add-suse.patch: add SLES support oscap-docker (bsc#1179314)- ship python3 docker module always- Since upstream has moved to Python 3, switch the BuildRequires from python-devel to python3-devel.- Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735)- add old patches - slightly renamed; cpe are needed (boo#1186735) * openscap-opensuse-cpe.patch * openscap-suse-cpe.patch- openscap 1.3.5 * New features - Made schematron-based validation enabled by default for validate command of oval and xccdf modules - Added SCAP 1.3 source data stream Schematron - Added XML Signature Validation - Added --enforce-signature option for eval, guide, and fix modules - Added entity support (OVAL/yamlfilecontent) - Allowed to clamp mtime to SOURCE_DATE_EPOCH - Added severity and role attributes - Added support for requires/conflicts elements of the Rule and Group (XCCDF) - Added Kubernetes remediation to HTML report * Maintenance, bug fix - Fixed CMake warnings - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local - Fixed handling of '--arg=val'-styled common options - Documented used environment variables - Updated man page and help texts - Added --skip-validation option synonym for --skip-valid - Fixed behavior of StateType operator - Fixed some of the coverity warnings - Ignoring namespace in XPath expressions - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning) - Described SWID tags detection - Improved documentation about --stig-viewer option - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL) - Fixed multiple segfaults and broken test in --stig-viewer feature - Added dpkg version comparison algorithm - Pluged some memory leaks - Fixed TestResult/benchmark/@href attribute - Fixed memory allocation - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent) - Changing hard coded libperl path in favor of FindPerlLibs method - Check local filesystems when using 'filepath' element - dropped, because not needed anymore: * 0001-Fix-memory-allocation.patch * openscap-new-suse.patch * openscap-leap-cpe-15.12.patch- 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patch/sbin/ldconfig/sbin/ldconfigh01-ch4c 17194092231.3.6-150400.11.5.11.3.6-150400.11.5.1libopenscap.so.25libopenscap.so.25.5.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34486/SUSE_SLE-15-SP4_Update/f409e49276c156675c5887317de897cd-openscap.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3bf46175d80c1045c5d1b3a609ade8943ab51a3d, stripped6PRRRR!RR4R5R3R6R(R.R+R,R%R/R)R&R-R*R$R#R'RRRRRR R RRR R R R"R2R1R0RRRRRRRRR RRRRRRuab,utf-884d7abf6f18dc5498111d61603d578a9555d3bc7696899bff380e965b32ec683?7zXZ !t/֋p]"k%4"tz-q3"~р1]t r;+K_LՊϭ# ~윛 ]gNW+ѢKpu%_V92Ckc A`Lϙb?ĦyzjÚo(H}fIUt6E\  pax~mXܣżlk /cPfn<{ppUE%jIqaCx}r8"w?/F̯jg1 fqA%%(A66/NA`}f9w+PԦB[xC2|<팈4c{= sFuhEŠQVu&!u=ML LK'٥pXc2\*~`hуC_\EwlQqF5_2d)~$#"@؆w{_RF_TP})kCyf;ެM1stb/H#Uo`AZLu^"e%ۺ5;/#NܥCF +\Y.mjߜ5ֻ(>9A- kA"W d3Ț= *J:$~K"^;r#= QK5X2I-J v9dr?bOqШ^ 0lk[xv.u V>hYRM6<6Mx-_QvoU2L8o8P2BRkY6vH6aɷ@:1QB*R-^Ue}/s@|3 5ECRWse ֻrRY*XXDb#G;hYZ?;VfY:'<_KA^0)NO(uTV2yRBSԶ&xdtYRԊ)w;Al3CЀGS+ӶѼ7D?^#%;|2Jݶ'["7:q hѶ!Hx}buEZ4i;I0u.1h!C^c nFliM̫)>22)rޓZ rK+6pܟE/ z"ߩx?vK8U6/:QʽZjxFBB"Ibې2mWNɩȢ۠(wW`!ۻ#V;Z_ AMђWѴl;샙ХAz `iLf )€$U`*J/f Aof<P;ޅgڬ| <# jdLXơ)s桕þjv% RDv&.w_sJbؑn4o/)ҩ a{rZ/01&`P_8z,G89wqc{1Z`9qǣb 7di8q8TsNPAb4miNd{jmBkfj3Q=AЗ#!Dn?;eB≣ga:}|kC[:{ԪNt ^: HO ɓt-|@N=J~!ɵs >^ v'.X#ꃩ\.jVi&vv3+=d*puׂ@a*b.-QFXf֖ʄ/*x*E2(ǴZ]/2P[FU-:Q0T'XOOP,01΀A ibW:Aµ݇Tx;+Id[m0=tt{-ȁq+ՐJfĎ{.w6-W6\;SHw/ Fʇq}ט6 66=UKˌe t)1 z|]f/AUlfaA_^nc\jZH,/u&?5Ř1? =A,E4-E Iv%zfVq濬]:Fi;0IZ\Tj ,uB+t~:ڋŏ BQ\ޮ]JhbpzZXcQ dEFQ'HbW>tR|MOͨ;F33􍩂Wp NC .S/@[ ?C6ť4Yrπ,18T>"zQԻvIVu^t+tO.a&O0u |JJ5FzM0^xTn*ΧhͲs^ވ/I$up3=Bt&79&f.3d4ona"Р+ZVNe_n(sGYR3/f'N=RrLXwso%<^ِ@{q7# {ԉW\ɂ+3ʷ`hoy"l=d(bLΐ *EWg;Ofs&O3/.{[8]y#R̾"] )5s$ײp2Ax2EYi?F,-WFd25rePB-3ԑѱ-zw!kKID5Ŵ|L.~^E/ X/8G&.)V}!<]fbJ媇Ӡ |9&+ mR;$>+z轿1EQ_G5_s?)YIJ L?Alcd5%Pu\*g@[5bkY +) )Ȅ:a{t ʔ9^A N6,LwSo3&)ڰ?!ˊ5zBK~=àE'Yc DU #cpfYPկcnZP$ 2mB:˅ɩ%V<.% 7=Ĭ1ny\nVgA5~:,.f:UlVqj^Hq\#Ɂ˟čy:PR?@6[F ƭ# ?&[a)RaJEYsRCR@oBޕf8 _I1OV8Z._QCZ:s#^Z4a?۪?2XpBhCϔ %n( RW@x&n/ҝZiG^g6݇xmȔ8d9'H²s#/ nK P"@W{m]ŻZJ"J(ەWFz0G^l J.#}&_΁:NWB VgBֶ4ƹY3%?mfIJduNOWZcyO3KZ&WD4[$G^&^h({bŜ!uH+yX3r":p9^jN0nBBBPV2-2ƘM%zRlQc iA]rɖ1=yfΕũ˼8:kR/@!nZ1V= Gjv+ޮ:k6X#DE"QpQϟ[Gt SU0tNtU&[;=@k )rRQsY>ƋDٖ}KMg#6A $W0, u N\ܷ+fQ黺֎B0wˏX6`Gu"[ѾtK ܠ+W5]Ƈ~t]5/ZF;mID9u/gMu16Fa )4C/ -GUW`bf,Gt8K䶇Q_˞Aׇې3鴶#FMndC&z'W? 8ପ>ck JQ:PQ7]__Ix u`UiHUAaP4yhS>( aW셐L޸Xj<ߧRv,dWp[3_)]s7\Yz?`=7}69DTQfBQEVFic) C3~05]v ;%bdc.G2qyvvA[y&BH1@]B/ҵ)y{:b$whQyFWɏսL(eG'Mv%qU˻ /&>ئ62 ^r:Tq692}phQpK9$I/T2[501+cotvȚAԃa˿ 0a]u)yRt̋'XMuﲞuǘg-$3ԾHi`$ƚKxW[ UOm;EV<"3fqa*[1(EAiDalNkY .g'Zr{o"MdA[D<{訅$Gznkk;Cx|h7ƃ4ܴbg]TwOv}\6+j@uͨc2c%L8i N);+˧U]!heNN ݙ)@#( v_<`ʡ/\D?ۯOTH Fq o]-GLe:c_([Qqv[h \>#/|PC™ܟ7oe&]лƹC` 2,F3^s#KkX @ ˵֖"H=,Kf m \,t>yBME<{lc@f4#[8R㳒[_ bQ׌cH0Ԍ\VE'H\OV<"̒t Sb+q9WyXq9' \ۧ<$'QY?)%ҷ񍲑rHťc̘M:2uv!є?`-͂&:HMxLm=:P+sOm&] GsǕ9zL_s^ow YYǁD޻|lǢje`jǵ/+`{*P@8ljL]Q K;|!L4{ !yަˈ4ǐS:ş##h4i@w7ȢεT9hF`(Lqpwi)proڍ p PKdLVɄxᘊRYHޞ<;: ISYJ  Y X *G bruu'Kdzܬr%>=r+p+oTKjo)Jq˟֡12{_h ͮK !YEt^_"_+Ԙ#mlt"lvM [C^VdUT&Q;RAu29d5͒={y8o XoNõ5@YfoG :a؎])7eZ+B@#&☓q W|vQNs h%7πBa22vZ}ύahQv~wIzfvM~wӰ/z! ݼ"非 ;!UZʠRv7~a%+6dHR5ʼK|s,2r v)x F=C:_՚+Y2w36/gvq,.mrƒQb*GzHn?Jv?q7ټPĥː-|J0GɃ_”(؅d2mx" Ȍ.nc"v lWrqheXq&a dfh{1Gh–4D\O2U\Bbɂ8[h11@#)­"yNuq qG%(R=2h/qql25؍(xm=f9 F '33ܩ%x oIP&T:qƷTW iݩi"i#=9SlߤΈ 88w5ZLH`(}M#h aJy\wgWdzߞ! 0Q3|'&HT|R఑'׽}TK*: |[1}iK]=0S䐹 ^[#.\V]Q֯"r +E: WɩcM4̹rXisԜ;b=CY&Ldlw/]JuT+}SMNH$Er_ m FH5 5Ƙ2Z{9@>dxW/?NĆ1ӟ\e!)i/]9ӠX~ju_8!\#ɏͰK5Hn=lUTH+[ 1/V[]͞O8.쉴BK+zqЗ]1wk{^ʍ"|SvE\Ҷ}mC&V\v odHԳHșQh="l! ,ɛ3omOJ:^ą"PjH5 R 9b%Ԕv(3WU[EϜgq~ID AL4n;=J75*ӬVjW}Ի!ko~J&!W*AvnAi~˖*UB"W$Ĩ^8^{$Bԟޚ] .O)s ۫Ef)ͰTȳ<{` nހ)ۊ??}@1֢PfagdME%\=>bzm#.Ͷ"N+ KUEp|VGqqD4B0ɌĈ729pQwgx7SK=X T{B>bdNy<;)>C?UG+@GЁ}fx:ZkP/ze#mg\5l&uKd ҥ&p2ٖ/EZ rt[y5s.;s֜G=ɭQM6zlXݒS<-Iz L) ;R1^̼CEnZ$%%MyzFn=[Wj̙y-D6Q ,yz1s&v6'T*kOiNޙ(0# /S", Yr;W4 IA3fyW_YëbQVU1wgmӃhl#۶S%o[DJX)f-aKz,+|չLl.Oׂ-sEdT{4CSIHq TIȾtK+£k#hm˸0v1ougob S}ݷLh|lq|oL޻/)ӱt8 tg-I6Ԅ& >#7 bwAܶWs򓝸V58:B8W֗X3w1i1M(9ْ$mJW$$?d-NS'rw9 !J*;4E.&J Ӝh)OQe2O%"2ZPy[=RcO2~`) VD.vo֯wd}c'{-󔝙#E~mMq HV7ܩvK`xR>X$HI;Th]|׍'o^öuVDbA(AV-]AwrxhvXԂR%$V%Sr4"va <Ap+ԚpiRv͔~+Km {뿟?~%-?1C;-/nUa;bRnUR9ƫQr*(],xD .e&Vz~+ֱpg,~ ٖ̥e&ߎrg5{S"\yPW2;mUHtѴ$oYK^ 7CJ5A,^&߬>7 7ډ-6mpE92%x]5u̫Kס'rTwtGNbb]ng+&hgA!q}ܿ]+]IWX?QgfZ TW վ+-LsRc-=uN.1FXW+Q"U&˔n'sȗ/!_;YżuZD?|Ϟx9@9N\ C/Ex|]T DhVӕI]*2  LWq Qtx w`8)ڒ oṋςм<S/'7tqx0e.W%K J'"'[+Ƥ{az==Xk2& jO~p"d+Қ%#& N 3DN#JG-=/lęFP>IJlpC4#4>R!!-VNCAZާ% ӅñH% OrQsa')iՙgaG*0LlZۗNH'wޮƦ֡LXKw %w+~aVx,MA,+"c}񣧵LjNQ 3T lǎ˔RĠu}zQMIgXqQ0n_6}}Q\EP`:'[rOڝ6sc'5L( b9R8Ke5JnRJQˤGM$1]Ɵ^#5j[\p=+_s,l rHCiD䕿|){(t>RerI3q]ls<٥ius(w=8jLbh+0~Kc4 QG]dþ!fi>~//.(CǍRFWC[1ݚOWՎ!̻{$v}Jcv ~]Yrfb1-ɧnz߀O!TSӂWix8}vsV]7|) !eDo` iA-sd{WM`~>o'4Dx޼w]ח{a ̀lcx!y2I(:@&!L7Ɏsv:Jq.tDsc*YRU {hFY`fUATըni]\Bq6grǘD"Q8S%iq2{ft.&/ Jq!"]f7"Z,K{@7.s|tu1ZibLE5vn5G@Cc89ei^̘IzY]Od6uEߩLJD9O ܚF_jvuw~h,XBe?R.6Z(Sl< C:{Kkl оKL+?CxVv;`= [5 H:[sHj)XY163ޟk\m0<%wG-ZH7P4tQ!B$Ɇ޵Ax< |&o(cȃF?;3M2؈\U\4+ 1Q4/S^WgEV{"F0$z十%`2e9wmy!SR^7W@I}sס^[U5)4:G,x=uB/nuXt}AAM܀|c[.]wwr*ڿeo@wf/*G%]/e=;p[0/)a#ҵ&%z>1SqY>j!Tc7TVY߳ؕK:;RC{*stv;s5jAռ>lqBƲRn! \5x>C%h뷮zNEU*ꄕdpMzcd]Bvm|\6転X$QP:㞆0iI?Gܰxi>24&(?n !{=o.1!c֘/xX*,d y=Ɉ7X(a ߃x\@bLE5i=}0з(un$6hBxBNfyy2wT /]W!\tĩpoE>H&IyqQ l|EMg|‡cC#h; }G̀V1kSF8Nfqe<KG>[SF+<.-)AnPn vzB5ý妘un9InyK3m7*?;,{YC+:D6-@>%~jB:LIGdr 歫(Jf=C.Q˘dmBNï πfrP1;u㡤!h_EL(,-1y)uŢ.}9rSEc^b灱գ;vC!IiXH.ׅG:ށM7D)A!%ꇂRUi,sSڝ}AxlW DLalϟ@~cp2ү'5y0*+m?sҜy8+*ȻK.RXSc&җ]/Aϝc͇}DvF2\ 0KP$jD_Ҿcn^GƘrWB3WQaRƢt؁M*B7ðWB GI* [ DA2-IG=&:KCXW'i#'.&=7 UĽwM3)rj?bsr3})V~9 ceyV2%TKHL¤JBnڡa  v~"Ok+mowH _ 3SƬ2+X0 Kad,@7"7I'EV ʴOs>`ˣTbu 7r-@p'cqj/G&DG'9CX)morZg iOKTۦ(IqJoE/a`4\´\. pk.R9,߮@\zI4pqoIpNI6vkF 2ú'pA/wV\K<8b*E gD?ݧjOxJNzOWQ̓IC屫& Ñ,8M^/W8)8.6ձ,|E(\ |$B W k.Ԃ*GL>D9#vXmJo&WO%!!Bޤp}Iߤm1Y2jJ.̛SRp%K_f16|џ$LC]/CRf;bH,P؉ʓWN吐a"x09-e%[m|@7`?#8cJ&VGq#)plu=iJ\ܨH/ݞ #q7gT}OQ(jA;_1#Z ޓ[7ZmTH@1owԑfp9r/u a.` e #6BSI~[sG잘(YW|ga>,s\}~ D}Zk̇ySP}_um:/Ch6AX?;Yx;y+/w9Y\Xw}e棢ýp6t7z5jT~>׷3kEKՎ.Ց[W봜R{w~G*%&G7^>\:FlS 2eED LF6 壠݅{gQAeR8%q" oSDÍڴ/ַ7M_i ΃^ļ7#g2cf0>aTZ/(Qe i8CxrzT˕KY}i@WAXsX<$@S6JV]7Eڴ .@k^64"Q 8mgJMzUt O3U%mlq)0a$ղA"Pș_`S޸ޜpcJt(@&l$۷s[zE0Mn>lENc$ mU]9. (c`sO*8J+XaB:/%DHO^ź =A r%Gr9$8r:7H^ #, nv5ǑՌG}ڼN)_*u\Hw¼r,Xv0S݉[3Oz|zY״\/$)3rpߨBsru,rr[R_srd HF…q%ݿ(P f.7AM܂72zz8D e35\䍩hiTanuzk— H9y^JqZ_—o*I Ÿq*\ӃZrZs킌iWVT,=%io"tJ/W8>2pX!"OM|J"e Qw%,Q)N=Oa+d' rqG[%B_\ڰg/ Ih'}-@rna#.O}Kbnw|'K{ckA򹒕4e  ^AB5^&JA'p۟࡟fÎhiJHEkK2vz2:;WO䱌. V-QdvS ηWwevmR|fιLVx26zUUD0$7~!Y `9! kd8v?NqI%jU afYCP3.CF֌ E'cɽv`y;㵏MB&r_ɍt^Po$*ˍ QSW^ba!6t-(+CrxhܭǮ&ȎcTjU~ˀ+Av=lF؀'eztAtsKur缌4bE7_]VJKƦA:CO8qIRL'7--H&OCȋ cu%9u 1M"heXb$8²ȅPt/'6Y8WK0 pg@Y@kmU ^->$_c@cm>SG}+ L$W$xt1oU!?2mQWUlZo3'iI+.}vew6"`۰5PT;OsGнNмo1'OȚՅbRd@N'mGKxS"O$4"To[` 9 =WX?y;sa ,ހu;tr*{jK@L;p|#٨aL}Br=]&ljhTצ;k!ZrIg2 3ohQnq4Ph\3,+lؤ >@Qܹe'hyԮt϶^Ǜ/pL~If^ѽ:B,c%w$0(:DH{E-&|zRW)Oʏm$qmiU1r_M xS (`Ŵ6Ӑ;lq:*"WUIQP=];M rzw0)Gv-[ KDs W_u+O Qòr+:ELO첵n"D#B:Sf}wp'fbȴޗ`N_p?vF{E;aK@(2$0x֡.g" Q dP5 7bx).E$߽_pi "0"7s"{ӍKl!‰P-2Vlr0hSۜ3m :u Dߛ-A8H+?H~?bU.Zfբ5Y$A[Z!he+(r/߲ضWVdwN /+^kbx U=R+7?.(=xX$̌ eؘp+d^oz85뀱$^cvTd/߫qir#LRC,{qeHMj QK K>|`"~:D{?FVA6YUSvMh21[&NÝ-{VA^Oޒ:,Rƈ7S@17Rۺ~."#@$p X6 np ?do;-M; em 3'J3tF`=iE {˛|e9k$*?EM^Së,\7:wnh*UT%}ww-г`$`u֠B)϶'6d{,+2z|Iv'!GUR,){ˑŮg8*KIA[,WLӪl$x ,[w_>[V/}^|1PcV,^Sa{S6HK<097gsTᩂ\Hac;Vd^͂_f^,LJm}IHK<g:/f"eQO:Ȫ, {(4)P5Dv-8tS./Pk˧A9'=H[m%zJS9LҴ(hEڊz13#V`ϗ'7rgPOaՐ QAWs>ܐ?UI81|]8ߔz ڨ_9R(1U9_kfU )ݗVcc`r-w*'sFmsxUGWY*$& xRV%|}L (c~_$0}/ӫ ЎcA^?kK̕^0}x-[shvB-A-C2sf0p#e0TCP&$F5*篙e))G;zu[1;?Ӝ`_1fFf Y+_ b5-Q5u9uvJK ߃[)H̼akc\2-~H-1tW\9ה{x-V it(ih< 4N~gǏ< P,;R@ޣŢȡ}Ihj\47#סM\]jCO,Uݝ6ZSWB]]3>Ja0*Y2rAd6FA cil&yT dD_]bW0h ٟM|Aq,~2feFtvՆ"HA ځdx`Jhb0Yl7=V{I7]wK80 1q> Oja#к#e_2#7bB ]SB?J 5' آ֧8ͨ8y~v]֏f*5$-K <p_1[ :؟ $Lʧ+d;H7UքR4D5C?vE f&M!\6V-Odխgx6ZT^0lv̄GPÓnl'SE^#cӊM%UVP%XAO:@m'MOCj9 =&V[Hx\!ʆi2VHOf1+BH"Yy 2sPBϝPeŅ*19d"c*+&7!(b @/[3)c%'l_l!Ǘj9 զx7{ xĦ g(tяtӸզ;@N#'VG&I-ꂪ[}׎/e_^{HPt_:,H1N8}zzOgsS>.$61_ؙEq-Xki( c/n~C W)z=¹ms%tL/ d&5U'Oiz^A`Rl)i ?mHc1h-Hly5Qeu)!أ*l_|Ezה0KRQN.\ƚO Ic)u*"37p+üXB- nBu6ϳxʽL^RS|#k'<2lw)*s;K(f7mqgmsT/ d$avCH:f$1i?171vě(8,&/? n|rMw,A|O-o44\ScydgXpvG?aR?g#"틪yclT.YFo$K-(Qa Uv YԴ!fqx 4&=94P*f51i2@B\hiNUE3) /[w{ޖ6u\&n;kbd{z.!gknC`4xkSy[5!MdϢ!!ߒ*@3.6ZGJ]jkC >Ɋ;!lpY1x)s;q/8$QJ 8;tmXTY_~>'[WʪTke:SiN!Su&NG@3˼286rfz~3'i40% Țx>M$4 #5Nf@`͉y ,Wv۔3*G#75G¹Nkkɵ+e|Y^DD~/0NO.lX&ꍪ ڀ=h - Ahnq kjh!hD@ W‡NGVY*Bh0D;Qh.E7SO$ Q%"m9E4:h('k^8ʾiXfn3FMܕՠ Wm/z@mR~Օ"7E #0ǷeCfܐ H&!d맩=i1H 47-W*D5O `}1>sD8r7dW̷! 6RhbZ,ˆT묂􊚋v|;osg AQ m`&GqrޜE #ߓwcQЗ}{Ԉ턗;`V)ɟupʰ7ɾ$wR᧹Q7iKNOݐ?mMS A[Z ÞӖB ӄnjBfewRp<8cCNySS8 #BִˬkÀç-p+!)<u&I XD;Y&=6 `b0茢9Q6v)**F%-!3 hU`E v7B!)O;-eZiGFsêܬV%>Mar|& xlw0ze䖘Oug`cQ:κ[u:;&KEΆ sŊWxJj |=TJvUϬ6>1}Hijaiv^##U#R2՟"xG ULz1 ,MtEG*4QWHB$ރ~.rt*XFLtNjm^X]Q$4,E R|v<Et--=ا]I[5}5 |,4xML{fHL"=TV'cl[ܔ cL +%\pw:KV/gsxPQ{y>&'brQ#?RQMPtfYqٚ_ Y͢HDͰBOB{j9bJ^^0Z8z WI'l8K:q..r^W۹](FK[W: "VyfV]|L?"Nօ ><}^~OfA\Y+<y@2T3n-1 ٞ#EҞ~ N~K.Pp*c:?j@([/ZIkGՆ5yX:izP#_<6L DܝNAУv{DqjW$y"6miT"1'4]_}w oOJNpj=P+;`5ι8j$]_&1:CёXႝ,1  Y jPIQ"ql:+C(Q쁡&yp98u^[ht+Dp40GWVN*h=UaZipN ?.tIMq@2XWnFqYp2LP\9=\fFR eM^Tdpyew۰|þfo ]NzerRmP+pA7 Z9`3JZt̿_SSU TE@D8B_7>;{r%"Ѫ]`bVk{l+X :qŸaOu* 'Ep*.En{5&SO{M _#Gld3bTU4XT2aU [KS i SnϢT4I.u$d9 "i8 {b1x)^6=*Kv/<`;A-`=R(ϱ77*z'{P3eKh4Tb2"`l9ދ 2ݢGyT/L/`ZD2]^Rņ-+Tm{x0D;5&חiͼFUHx6bΎƆaX4dF~ Dwxp.?}ݗ'nE+9n=5")EP~]2A2[@;u }3L=.v/9B w&R]":7"ʟDD6}ęx# i\0a5&wr?QhLUyXYy9hXvS̉ ?ӖWV$h4AgNxcPs\T`Lՠk *~aAS)l=n[GӺ"oְ1(G %_iwdXj>q#W"N;h[SP掸 е|pG(P}}2f֢_#>=fӯB50㞧yt [IVKn0Tu7T#)щsW޿Pj4m(ۤB;xfH6NeykuVfb(2vv95saѠ9uI@F~n An3k71-6s~('m!iYo .M=Bt+mHc˭U<9w 2Y*-//z)0`ґ>QV/׫=%p>P: R?`FLZ θf^PթIIU? "T :癩+K2Yi`m,m,YQβhp;|U6cY7 p_(2J^зBzNqn"Kb mzK JVE;=7DJ Q h/J`Kiӂkvhsġ6o>?s%[?K2).YxTijKTG_3`}v֪aRb^)FZGQTYϏͭ׋ca+/kusU(w\]N܍.l_>RV0+*$JO^yXaKf4u`at2s=|E_w^r F˜)R/LggZؘf x-9CMަC!gNU>qRn8I#iXEDNlw ~zvԒ%^)Z 4iGӤZy],vSl;G>k:jlƸ9k K8cxs ҮN⺪߻C븎(f _K伄Kz4Pis!"C]O`,W,rw3Xqf/Yʃ!);t-&cFVnJfIJzZ7{#=kր[R$?;]f-l,~h|,&=D5xgJjc4A+ =ĈkIw՜GqblW,_{\= tpl݁`D5ls|13-"0E\!V"¼h'7zۀfpcLV_P4)+ztSn9(̒7΁wMh2?b$X iKe@L6֚nZI$ZyVd*;;E@(3bay1$^J*, *Ar;&{YH5 c~Vm[73x޵:0w(M JizhWqUޒ>c]6IagI = lqku[^V&@1?\vמvbO,uZ*HӖf2l׷ܯJ}Iߍ*MY&.icQRi O+P Jӧ>n3iXwiI-'h-uG~s$Qw }hJtm{/K^M#-3cPnQ>(5s#lXgL1 %g$ j%-,/AZMYihTL7ZzǙA?Ddb@`'m~* _kn˫NŎs`kg[+ov]Oe/]eב*fQDk2k1Ru[T]<ps$΁d;ChC/=.W+m8@0o ^&.fIYa ͱa,4qצGC6u8zťi,0l!8O)Q,K~Od|[4v4a S8ns T %[xW ^b $Ö1P  $9 $s7 +lo5gR/Q~ɏgT9r!|pd#`I(l΍NۏNbprzI.Ua\>~)v9 C(+=3' fdC< e2Y E9I2Fg,$jf] pl] .K׵@ M(\%ٍ<$풏Iw5t+|O1IF=vBU߀ Ӌn}VӪNeBԠNꟐ t2|_T-}B4SRjɞ )˸$^yPVCmGkU]+ͨcA5P(t]s jŦ%aj`50Д ,*0@ŀgYbҰS;i ,51zrL U$HxiVQNL1 +fFV*j_Y?Әwu"00NN^٨uL悌^%5."6/܂qњu}8,F|cB DN0ؙwП!9 U襮j.4: Kwr@0xv>`+SK,<ɼMɐAGDbޖܝ$$z[T