libopenscap25-1.3.6-150400.11.5.1 < > , ڐ f|p9| % KR"*2|nыgKо}*9 D֡rGv$ka pJ!b>n5RIJN:
iFy854B#(~vw zE9.sfДK
n`4h˪
t#率x=tt|}G4 ¤\/ޅUj>յe|WD> ]͵6:&PjJJmU M
[35o > @ ( ? d $ 7 p t ( ,
0 8 z
2 2 2 ( 8 5 9 5 :
[ 5 > }A @ }P F }_ G }t H }| I } X } Y } \ } ] } ^ } b } c ~ d ( e - f 0 l 2 u H v P w x y - z C libopenscap25 1.3.6 150400.11.5.1 OpenSCAP C Library The OpenSCAP C Library for easy integration with SCAP. f|xinomavro dSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries https://www.open-scap.org/ linux ppc64le d f|f| 86c6e6fcfcff942be86ca329d9eb48e4bcf9b99c4a3b1d539fc40c0f82f8ae6c libopenscap.so.25.5.0 root root root root openscap-1.3.6-150400.11.5.1.src.rpm libopenscap.so.25()(64bit) libopenscap25 libopenscap25(ppc-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libacl.so.1()(64bit) libacl.so.1(ACL_1.0)(64bit) libblkid.so.1()(64bit) libblkid.so.1(BLKID_1.0)(64bit) libbz2.so.1()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcap.so.2()(64bit) libcurl.so.4()(64bit) libdbus-1.so.3()(64bit) libdbus-1.so.3(LIBDBUS_1_3)(64bit) libexslt.so.0()(64bit) libgcrypt.so.20()(64bit) libgcrypt.so.20(GCRYPT_1.6)(64bit) libpcre.so.1()(64bit) libprocps.so.8()(64bit) libprocps.so.8(LIBPROCPS_0)(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) librpm.so.8()(64bit) librpmio.so.8()(64bit) libselinux.so.1()(64bit) libselinux.so.1(LIBSELINUX_1.0)(64bit) libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.0)(64bit) libxml2.so.2(LIBXML2_2.5.7)(64bit) libxml2.so.2(LIBXML2_2.5.8)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) libxml2.so.2(LIBXML2_2.6.17)(64bit) libxml2.so.2(LIBXML2_2.6.20)(64bit) libxml2.so.2(LIBXML2_2.6.21)(64bit) libxml2.so.2(LIBXML2_2.6.23)(64bit) libxml2.so.2(LIBXML2_2.6.24)(64bit) libxml2.so.2(LIBXML2_2.6.3)(64bit) libxml2.so.2(LIBXML2_2.6.5)(64bit) libxml2.so.2(LIBXML2_2.9.1)(64bit) libxmlsec1-openssl.so.1()(64bit) libxmlsec1.so.1()(64bit) libxslt.so.1()(64bit) libxslt.so.1(LIBXML2_1.0.11)(64bit) libxslt.so.1(LIBXML2_1.0.18)(64bit) libxslt.so.1(LIBXML2_1.0.22)(64bit) libxslt.so.1(LIBXML2_1.1.18)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 c*c#aNaaLaZa G``r`__/@_Q_w@^^{G^ @^^]:\@\[@[[ @[
@Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@dmueller@suse.com meissner@suse.com rfrohl@suse.com dcermak@suse.com meissner@suse.com meissner@suse.com steven.kowalik@suse.com rfrohl@suse.com rfrohl@suse.com rfrohl@suse.com meissner@suse.com meissner@suse.com meissner@suse.com rfrohl@suse.com meissner@suse.com christophe@krop.fr meissner@suse.com meissner@suse.com meissner@suse.com rfrohl@suse.com rfrohl@suse.com bjorn.lie@gmail.com rfrohl@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com - require shared library in the same version or newer - added Leap 15.4 and 15.5 dictionary entries. (bsc#1203408) - openscap 1.3.6
* New features
- Select and exclude groups of rules on the command line
- The boot-time remediation service for systemd's Offline Update mode
- Memory limit control using OSCAP_PROBE_MEMORY_USAGE_RATIO environment variable
- Allow disablement of SHA-1 and MD5
- Allow providing pre-downloaded components
- Introduce OSBuild Blueprint fix type
* Maintenance, bug fix
- Fix coverity issues
- Patch the `segfault` in dpkginfo_fini()
- Add an alternative source of hostname
- Fail download on HTTP errors
- Compile "environmentvariable_probe" on Windows
- FreeBSD build and test fixes
- Add offline mode for password probe
- Initialize crypto API only once
- Fix UBI 9 scan
- oval/yamlfilecontent: Add 'null' values handling
- Do not set Rpath
- Do not split `XCCDF:requires` with multiple `idrefs`
- Allow empty /proc in offline mode
- oscap-remediate is shipped via /usr/bin
Added oscap-remediate.service.in.patch - Rename oscap-docker to oscap-containers and provide oscap-podman as well
(Relates to jsc#SLE-12852) - openscap-docker-add-suse.patch: add SLES support oscap-docker
(bsc#1179314) - ship python3 docker module always - Since upstream has moved to Python 3, switch the BuildRequires from
python-devel to python3-devel. - Add definition for tumbleweed to openscap-opensuse-cpe.patch (boo#1186735) - add old patches - slightly renamed; cpe are needed (boo#1186735)
* openscap-opensuse-cpe.patch
* openscap-suse-cpe.patch - openscap 1.3.5
* New features
- Made schematron-based validation enabled by default for validate command of oval and xccdf modules
- Added SCAP 1.3 source data stream Schematron
- Added XML Signature Validation
- Added --enforce-signature option for eval, guide, and fix modules
- Added entity support (OVAL/yamlfilecontent)
- Allowed to clamp mtime to SOURCE_DATE_EPOCH
- Added severity and role attributes
- Added support for requires/conflicts elements of the Rule and Group (XCCDF)
- Added Kubernetes remediation to HTML report
* Maintenance, bug fix
- Fixed CMake warnings
- Made 'gpfs', 'proc' and 'sysfs' filesystems non-local
- Fixed handling of '--arg=val'-styled common options
- Documented used environment variables
- Updated man page and help texts
- Added --skip-validation option synonym for --skip-valid
- Fixed behavior of StateType operator
- Fixed some of the coverity warnings
- Ignoring namespace in XPath expressions
- Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning)
- Described SWID tags detection
- Improved documentation about --stig-viewer option
- File probe behaviour fixed (symlink traversal now behaves as defined by OVAL)
- Fixed multiple segfaults and broken test in --stig-viewer feature
- Added dpkg version comparison algorithm
- Pluged some memory leaks
- Fixed TestResult/benchmark/@href attribute
- Fixed memory allocation
- Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent)
- Changing hard coded libperl path in favor of FindPerlLibs method
- Check local filesystems when using 'filepath' element
- dropped, because not needed anymore:
* 0001-Fix-memory-allocation.patch
* openscap-new-suse.patch
* openscap-leap-cpe-15.12.patch - 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval - openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE
Leap 15.1 and 15.2 - add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301) - openscap 1.3.4
* New features
- Add support for FreeBSD
- Make use of HTTP header content-encoding: gzip if available
- Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps
* Maintenance, bug fixes
- A lot of memory leaks have been plugged
- Refactored rpmverifyfile probe and fixed memory leak
- Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions
- Fixed DOM representation of the profile platform
- Test suit: better portability, more granularity in results, inclusion of memory-related tests
- Compatibility with uClibc
- Local and remote file system detection method was improved
- Make the report a valid HTML5 document - openscap 1.3.3. Notable improvements in this release:
- a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč);
- timezone for XCCDF TestResult start and end time (thank you, Jan Černý);
- new yamlfilecontent independent probe (draft implementation),
see the proposal https://github.com/OVAL-Community/OVAL/issues/91
for additional information.
There are other changes as well, here is the list:
- Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF;
- Added ability to generate `machineconfig` fix;
- Detect ambiguous scan target (utils/oscap-podman);
- Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory;
- The data system_info probe return for offline and online modes is consistent and actual;
- Prevent crashes when complicated regexes are executed in textfilecontent58 probe;
- Fixed #1512: Severity refinement lost in generated guide;
- Fixed #1453: Pointer lost in Swig API;
- Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities;
from system_info probe;
- Fixed filepath pattern matching in offline mode in textfilecontent58 probe;
- Fixed infinite recursion in systemdunitdependency probe;
- Fixed the case when CMake couldn't find libacl or xattr.h.
- dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream - Add upstream patch to fix the scap-workbench build:
* 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch - switch back to official release
- openscap 1.3.2
- the test suite and build scripts were improved to support Debian 10
- offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes;
- the oscap-docker wrapper is no longer dependent on Atomic
- Python binding are now more robust
- HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents
- Support of multi-check rules has been improved across the whole workflow
There are other changes as well, here is the list:
* New features
- Offline mode support for environmentvariable58 probe
- The oscap-docker wrapper is available without Atomic
+ Maintenance, bug fixes
- Improved support of multi-check rules (report, remediations, console output)
- Improved HTML report look and feel, including printed version
- Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
- Probe rpmverifyfile uses and returns canonical paths
- Improved a11y of HTML reports and guides
- Fixes and improvements for SWIG Python bindings
- #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
- Fixed URL link mechanism for Red Hat Errata
- New STIG Viewer URI: public.cyber.mil
- Probe selinuxsecuritycontext would not check if SELinux is enabled
- Scanner would provide information about unsupported OVAL objects
- Added more tests for offline mode (probes, remediation)
- #528 fixed: Eval SCE script when /tmp is in mode noexec
- #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage - temporary openscap 1.3.1 git snapshot
- make it build with new RPM (bsc#1160720) - use distribution-release instead of dummy-release - openscap 1.3.1
- New features
- Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation)
- Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers
- Tailoring files are included in ARF result files
- OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line
- HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition`
- OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide
- Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2
- Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool
- Maintenance and bug fixes
for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1
- removed patches accepted upstream:
rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch
test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch - obsolete removed packages: openscap-engine-sce and openscap-extra-probes - Drop gconf2-devel BuildRequires: It is not mandatory, so lets
build without this obsolete package.
- Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires:
They are also optional, but not obsolete, and previously pulled
in via gconf2-devel dependency, so lets build support for them. - openscap-1.3.0
- New features
- Introduced a virtual '(all)' profile selecting all rules
- Verbose mode is a global option in all modules
- Added Microsoft Windows CPEs
- oscap-ssh can supply SSH options into an environment variable
- Maintenance
- Removed SEXP parser
- Added Fedora 30 CPE
- Fixed many Coverity defects (memory leaks etc.)
- SCE builds are enabled by default
- Moved many low-level functions out of public API
- Removed unused and dead code
- Updated manual pages
- Numerous small fixes
- xinetd_probe.patch: fix trailing whitespace in config
- test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test
- sysctl_unittest.patch: fix sysctl unit test
- rpmverifyfile_unittest.patch: fix rpmverifyfile unit test
- rpmverify_unittest.patch: fix rpmverify unit test
- openscap-xattr.patch: removed, included by upstream - openscap-xattr.patch: build against new libattr - scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible
to match both opensuse and sles or official suse_linux_enterprise_server
names at once. (bsc#1091040) - openscap-1.2.17
- New features
- HTML Guide user experience improvements
- New options in HTML report "Group By" menu
- oscap-ssh supports --oval-results (issue #863)
- Maintenance
- Support comparing state record elements with item
- Updated Bash completion
- Make Bash role headers consistent with --help output
- Fixed problems reported by Coverity (issue #909)
- Fixed CVE schema to support 4 to 7 digits CVEs
- Fix output of generated bash role missing fix message
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
- Fix Ansible remediations generation
- Add a newline between ids in xccdf info (issue #968)
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
- Outsourced the pthreads feature check and setup
- Speed up in debug mode
- Refactored the Python handling in build scripts
- Prevent reading from host in offline mode (issue #1001)
- Many probes use OWN offline mode
- Improve offline mode logic in OVAL probes
- Do not use chroot in system_info probe
- Prevent a segfault in oscap_seterr on Solaris
- Out of tree build is possible
- Use chroot for RPM probes in offline mode
- PEP8 accepts lines up to 99 characters
- New configure parameter --with-oscap-temp-dir (issue #1016)
- Fixed OVAL record elements namespace and SEXP conversion
- Removed '\r' characters from help output (issue #1023)
- Full Python 3 compatibility
- Removed basic Python implementation of oval_probes.c
- Added support for Travis CI and Sonar Cloud
- Minor fixes inspired by Sonar Cloud
- Added Fedora 29 CPE
- New tests in upstream test suite (offline mode, Ansible, etc.) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch /sbin/ldconfig /sbin/ldconfig xinomavro 1719409547 1.3.6-150400.11.5.1 1.3.6-150400.11.5.1 libopenscap.so.25 libopenscap.so.25.5.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:34486/SUSE_SLE-15-SP4_Update/f409e49276c156675c5887317de897cd-openscap.SUSE_SLE-15-SP4_Update drpm xz 5 ppc64le-suse-linux ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=45e82bd485d24cc900f0f200ece43ffb6f10d746, stripped -P R R R R R R R +R ,R *R -R R %R "R #R R &R R R $R !R R R R R R R )R (R 'R
R R
R R R R R R R R R R R R Tfݦ utf-8 75109012363d8696ff11e02b939a20fcccacd38082442ad96257851c07fa3b92 ? 7zXZ
! t/jKT] "k%4"tz-q3"~р1]t m$.u{'STBm&
Km -j2 :hWUsahΥ&9U FWK,j7VΐNhfh; P7%3'/,ÇL vv=XUi@1(RbzE˔)&UVϟɲ:e FL&51)** Ec6w[ `%17x?S!Z%-9U bgKL?Z(dpX
I
la
k]b\K ɶB4 S#7Nߣs5KZsr"~*&O|3*\tM5X(Ҕm$,3] \l>|- ^8J߳ގYg7DSr,UubzTa@hZ.Q(+jؘ^f'K<. b=
ya
* !Z]c
)00[ abTe
} ~1) >\;ѓ!Y,'o~{ϭ ~ 㔳 gQ x;
Mfc#:d) ),oYHi4MzJ< VJJg~S:rk$PAoSX_2k(. 5u3Eޥvg):b;WbLVd0W*]F"L4ø["|?X
vwP[M74X# dʩT5-*[}0
xgL^!?
\kDu37ma9#.A-Sd.y(x9M S$^mya燐p5 NBF*\%to;Q sQԕmh_kکN駲V $[t%H8, bQI\̂pv\FUʹ{ vI˥Pyxԙr1Hrr[/Pw_Z~
z H~MX׃R%鳐)a
wzӛ 2 2GI]\܋ƝΛ{LF`dj
Zr7̌6XV
"sLdE9s0wAЭq曉wN#Hp4M;أ6.}"j cĥvdKHdȧ=kaK,Ͳ>%Bh I{wN>Ց&?Ns_j&. 70xgR$5^~Y`Ik쀸'ߟLj|QGt6w%^L&vv*u WiuI.S/j蘪4)Nw7|%^B>u(u-+WEH4oH)Ԝhck\6(Ж ")`F{BBP6r۾qE#!q@t>|t+dsi 5(~q_y 2~f-
в~n0J.>(?D#.wZ~|B@ I8V,_[t)UzẂpjKυ%=>@} @VLQӹZ3ꗚ˹߈.ܖK(pɹ2S]fևkxN#բ- I ELgw? C>e2UϸVoŝ < iѻ5tZ 7ܒ'oFL>!jܪJ(c[+FEnz:?q=\dMx)`ɕ^0UF5cRxԽ| "f⧸k
J$҃CQuTNzd L4ly<Ng3)75~t
a U ,ڂDWQFA60 jnhL0.1#[zlMS8K)o_%ZRzS!lAֻ|81mߗ~ΰ
jr\Lth\fA;2)Ƨ|c1$ֺ_Iׇ͡e4m &H~a,p#mt?>{lY^,qR~!>ZI2 WQ>vJ>W
%*kĵ |3aޭdeቌok}j>ӹ57eg1>>i=~>.7ҲrU`:Յ |!-odWtKy]煤{H bJNu9]yZu{Zp=\ e%C"(((zЭP䅑w:V<:q7uwp/: |e PTnLhDX *1Ҫ>q
85:#H>mmE7ߢ4 KTLZ$b6nl@@
j5ĸq3tI-}%Gr qe2 ;WsoR= NlDst
˞p"kh] 59(e2<9t<<9|\Rƴ %a2 U@_0O?)+&Xh a-
fIZqf]
]bΓ?k5u ` 5+gfO^rwAqgl^-{`xMhCA|c$;32nihLU^ A+;ڃ:\λSil^XG'DsD;d y=j(~MWba]:8Pohr}$N5b= #5.
̙Z|$]Їݍ6ODžȾq fQb70# T/xn&cጶbHP.chRXy6L2F}cE !:F[q78bBɯդ65gU~Np~>R5vߞGS4'{ JUO? ʚv k˕83^Þ&!W
8.B(c8mѡ(C \Qt]1u9gJhD͓5 0'Nk뮀*!GJMHTҲYZc3nK *)X63ԴZ5^7;<ß[v2NO#L
,Y Qrm,%E.gfr*$I@6G__b6FۘTŘuJˌlS Z3sEJ[ғ5I !Z$=rlp _Qe| CG!btϋ`hv z ա!NՋYc ,\8p) U߯hLkLQKa , %B9%m;v-eۈS]==nbeh~[UOf_)} ˴0z+1K(Cu;o9WJeuK&י{Ra*pv"| 簽@b@G Gn
~;*X9 EgLvAԆyELDD4kv%$=mx x xjx\.Fڠ&3U d}k+84yY
c"ܩ%wKHe# iM"izcǙOo+V1,p:MWYc+NhΛ/1BPkf([meDk)P =`Um r{'C?ep%1jJ}~1L.>9~l] k :ϕ]Ń>-(A)ɝZ g_a{5z[&"%FwOo>lP!~ȧk[͊>!BaT-g;)Σ{ 0
N8Ţ\|ڮD/aIpn;Ci!
ɄK^(z >g0o~6FY=1Kw
K8- {,a?o01RHa)
_"WzMS@/h C*/1aE fDg[կ?IUK߲k|;sj>1ր*YNZA9 z=Z04x7ADxon$1'N^7>b5W|MĤdš^;0ûk K_u#
ř7*Zi
!TA g ,E_aV`'F>}3H8,{bl1wryͽ[r_6{Ia] OV@;Sw 7- 9dJo& #Pp
D*<TtlL52*m n%', [MVZ gJCZ:dl^:3
#5u-/ׇ8kMfp@\/8 -(%X@@XAwO%ԕZ6,CN+R#9]'bltb|dGzc&1ԾM T ~ɃU,Z. F QQ^OX,oї^ՉGR.iҼd~-J}R2;3?:U.hE #a@dX&5t,M`H4b> Vl6y^eS`(GV 41'7&&e$"y ]uSݞx jp'%:D?91{ g_#Go ֊ zQ۞Gaj
vci4h$9l`xSpaŻ0a[`TE>Gu5$bzLg3Bajm |u@i1B?sV7+4GN
]}X-0?%,$KLʲ=U`1Sze\3d j4zQYW OhYN L w0߀P7lfQOi{ b Y/$'-jfqY` rP;J[lȳ|@ {ANjƂJ9Lb7l+¸ Jq{{: *J)
Zi C
*ظpՙܪn) 4#"im س[xqv }'&%pWՐR6љƮ#8>96oM¿3TEM|BO~ڇ? c@Yce5q0| Nֱ8'Iԭh_fFΞ ּW9+7Fr Vl}+5yhrS<߇a{~j
2Ep2*RDTwH7@ Z G 2M2PJoKu[]
weii%3bIW
ܵ$sU[ Ŷ^"FD!yENf蠗$>QC;fkn?
OK%=M>ZM 2\`]3xE8{$غmb9iEdCz}-w|
xF|ݽ;n=$ Hm'jjc辺-]$8 3?c%S==|5o9 >`ôͷeWys1\ы7W `$d5J G.d|Ԍ%$Boܛ1wv2LطJ 0UF4|eYꨈTFU_T4,WYzG;W4rAͦ_jLDŽdɵ)|BWuN$P'o GI^ <}b-D>YjpIZKαÁ͡Dk@U1[?D҇yʄ~QȲ@ehYK6f{o-3̈!Sl9vnԎ/q7dpx
kA4twʽeLCrʴF(wJ5$A2OAUr)E>J"fMR
/b¤AYr(%ܑxRNy7`1D#-LBx1@tOE"/ ]b 1Zqxe
'Xc \Hoj}XIPPZDfVA: NhѰH8 ܧBIHkj Nc b FUiwaLER"f@%%j϶2[ǯ?0O-CP90Po+Ghr>\xSL;DEMCz `* &b^vc' P_UNq̯ 7{qH&yI )_וV2OQL? QPm|
G.EIkG%)68}1*z!w,lk,8m.Hp7/tVE IXCba&o;W@b!i!j_.a8|Y2Sax17d>3eOBk[1WG9/v^1 /O#c89^$Vl{iE:3ފÑÉIcޒGĦtEup7v O [C.3F6oo V4!WBfGD>giL3
l z7pڠ ўG4:.\fgz9M7cTتyxZ+k$Q7y|×u! 1
L5c~<$KKV/EAU&Yw[Q\R
u7KV -8/E gz#/ʣ\>[J<F9˒1 "%:#%a9mރxCL fWѣ wV! BڷǏ<^}wOlЫ7|y U? #UvhQ>fQWı#҆W `"199OKw)#S q\ZLy%g .3jfov϶ 職Z,s ةPA GABh5< ߔ>@=P!|j$K]#
75đz{%h7,rxl- ؆
Y$5@,'i[ /x&mХxwg}0 akMRuwjƖؙk,ͼ<$4L53
L֪8x E
z r"?ebOɯg7.ϸf wYzk6Rbk P=xO ⾕Tϩ(ؕ,-0I^&+nv/IV}pe*@`q~si/fun`·Co;kzLp.gqiVܲ%)H;N8GgwJR7i-ʘd@B&!d4Qԣ,=˩|TKiP:q,q; %|Zq~R1yiLnvevXJo}~ u
3{p,3HЛ":_CPΨJwچJ܅¸}t4,KySl,P:1pE x5 +9VB\5ӨR~VLXq1֖IfJמE~ 1Oϸ<jK@v
'^Úz
18*QA}ARwnۆ6)]QkۃJ3+ ЋN*fk5F"j-.Q"t 2I @ Yt+,rJ:[ Sa!ڿ,tǖH7 6`e6*(~EOor0>a Pb^E*?Hb_qac2rQ{l; r*M=QLNVgdOR|,
}"$I_:]ZA7ՃG43
Y+}ʃh=aEޏ=N X{C#71,.%JrcNC2I9IXk]߈4|{IY5v BT38]0ƇD i2 3Gڥ KNLr!Gib^.L~5$@HTy%41 %0ޡ ѫD`.
(mt@P
|&(OF~2SG ifzpjIN7 f tdeqD¾H³ &aJ㨉&:ECiT <](UUĚ NI5H
,VpTXE:gGoێ"$Xt֢Qv
D?] Zđ4^T[RK=2yJ
û-H}1m/v B @B Ϋwጻ4avsWиF=Se_i-Gwli$ Je,
ƍ a<9Pm5=1gs'ȋ\y3kf
i4rߺ_! "?آάb *8
wjtkuEP#v , Ob [o_, )^]*@p04 p]3 qvP* 0uC ۊE [Q?H\o +6 . sZÝ>
Q҄W3,>J < 0з_a>3XLZ>Ȩw]8M-^|Nfb*Փ!Y}\wAɸ&jF%3b7V4^Vȭmq<=S!n-EO_TwQMW~k2~e-86 'S[ez^frYf"ؑ`];)&KMQTbSHmvJ.< իO/; 5`Iq^6lgi ŖmVA*
cV):evO3lVRo 4$7aaPVèRPgŲ ӕ5+xڼE*C^UܦZeuB F6Crc`G:l
lw
iŝԃuLy0צrPih8:GY @5DT5/3啂4К~ ş2ɇrc_P %ŃuCRӨ
؍pn*Bɫ]K {HqQGQ(;@&¯c[rKT{{ rE} J2Za) !oV]n*w`kh7ᚥNH4 SgNK+~Z~O@) W҇4B V3Rܪ
n>t<(_=)H<=뭀v7?Ch # /ɷFE&3ϙK69Ǘ
ԋ|QjGnj :xU'A`" S;eT;dQQNmNyeITX~r CM÷;2N~rM~ޒ܋MIì< 5P(8u{uZ9 G+<N8X]7vgj+Z'[D)GH^Bܴ{Ѫ S*#ߪxqzdh%#VC gNpϴYӳT@.]zęMVGA iD(ϖ}}ǔ`?Q59)B`f SqEE:,n"z#9a<~ e؛*Q.X1Ǡ] !H(gH6?'4.")v?G gJ# )e #ڻ'czKRGDnUߚ)jv_1#7ř_el V=4qx1S7
֟Ӡ/R::f6aQvC J{QO` e HG(h k_ĻA b]͈)ˤ'VÛ'Gp ù<#R .vl,i8yu1wc
/jىĭNAmbcW\ GfY-\?O{ت$udW1I8W}b"_QV aD
8F慾/nS=p1S|FtګhXV0%4VVeQT^e܋
$
ȝV$xv=$ŵtVY?he3EOu9 =:%ԆB"F÷2 Hh/NS9 "kaw_5, q>o LUzpn c(P~U)
EQ )u
_<8(UB!gM_#D'aKi#ɋw-qpwHA
v6=YAnmu7:Asb1'#Ζ9.s wtDS ϢBXHG
7jWi܁& @ Cac{FM0n*شq U-g%&^@읃 8~"-cJ1 ocVE]R,D ʝ4I)F8ah
ZC ;4}8ʘMjkP?ꭐH7+Ҩ{QÛV,LV]
شG
ph}\LUIk Ha} eb@6 SޅLI?Y~
|oan!9f12.o$EΥ\::` W$b5)]4u]jXmv2w&wuww+} Rǽx R̹Ǹ#6#OyQ.ԬbrP-ئ[`Ak+[[ftW izV7N$}PG2WpK+:Cћ_Tv2vO膠
Z=oA'xu-]'H
ksz~4S ? U=ho@FlxuDMƤJEJ>A wOuX-K1q.)8?T
.Ag [pr3XG˭(5Gn7UJ La|VkYPM0 ;}T ;LiN ^VVZhGDOh !SR
rLgDg.Oűߌ v zff{ J[5 < =+au*y*[Rf馅.Is*Tyf6^W $VȬ;R ?v%̛tq5I;҇i'Ɉۘ=mrϛ?,/?%N.庎ԐraOA ̛4fHj< =&o^k`,AOvguk7ήGb-7eQV4er~L>?8_϶oa܊ Y}M ~2q-ſaG t
08GC^y$ dN6^otH=Z= SG¤ܰwa s)~N:r|Cba ,Dc+Ω%,75d|1@\N/`'>~,6OD- 1
-`~4z
!2 gȀs@yTlu|ky¬ga qZvX~~ W`6FuLy¹jv=0 A`7Q:ٷŏz~ klU_MBo n1h٪0^dN+$Wq3 wE <mKz_ # t7 ']0ߐݙv'F^m
Qalq /P
".! RF -o6gX T (SW ;Ǘ 0 ay웮&/@0/V37zA=:e ̭@NUπ3 5s=ht b[LTsY4rhңssdGj~.E_? E%KBبXQ[a?HMfqT^S0n6s By aҨ=Pl-W3 {AwdY"[foqY|,~+Gr=%sn˒G;'UwVvB.Ivڨ6دe;Wvv*a0 @W8O-X)"'ygq7֎$ST7љUi Z6Rp-W䅣D&'<*Z+<1>M]B>8~a67`F?I,\~jPnH|Bo9JG<(׃:#m5LCq˹3{|~FO ozmDEG7Dzw!+ Uy:RP*JV7rB[\j=%f?I~y~#͂ΗEx <\&RHAw|^FVP3[Y"p:cg
wMhBX~ Q\CpKc$T$[@uz兵JC`Ly tݼ+i'8XQ5@}-i8ORl`
x(pرI9hw2s0
pzwWPה 'BGYW;~Q9qIZ`YًW iͱCUӍ~I,ɘ&v5; tp/DyZ0' 'PF@pIeUC])-cw+2ـKOP _( GIxEIrZta뱽x(zݻLڅq ï4
3̭%@HщHp'xh
ה|jR~p g *st]͈0{jQaxvpĀ?|=uNv>-P
b*KZ~ S^G5%{i-g@ѽ)gsUY6XG69!D1lo/oaTe ԋ@96K?̡o+f+PI1ti{5l;STU~ٚDuwh78wxLnW ¡MyW g?g8 S xq+ U2*i )~PԵm :0 )h曈aYQ=ѭ59Y=33J@53$i eO-kO_лsTt0,A )Aky{FC^$>>aIoHX\,Zj꼈 ~YL?̋{9
_Y洄:\ҽJ1>,=*Cܾ) ߎ̿"@mJ+X`|ca,_2{ ^2kz zZO^X$' RS
]Ϡy_BfKЕ;biF-L58#i5WfI8fmaǀvď#*m9P =mw+t+~x\s]m%[H
GB.BV8`9$ t䮣^)^+_]\3}l:--4w#4&:ߔ>dd
c*+G?~b(\"!.1S X C_HbГA VN
4R,e85[]`.HdXz,.̺SSpV< 2 !d1hx }ф:buY8i dH/ }ɘ}Ό_
V LoW
W
$ Y {0ڞP Ұ]z*: *.%%TQ~"v;дvsa Jg&V(qHCy r#Cpf]Nn}DА sk.n[wz~|mL59/ %2:
lMc J̍R -' &3+X%.>ֲ:p!沟 彁YIO߇3˪Grw/
fW75iz-y&\bܵvE RW_0`jq) QɪvXFFӹ.QmDȍ}&TXzSZH3eQK03=
ddJ4GG5%'_$j{gmzTbSm#۳@(S\66z0J5vLG)-A
kULh4LG",eF_Sf| }݈8H
; _):NX=}?S )] p+F(WYUeIP4?D|Dsц8%õ|//Gob="+) N_ --L-Y M$s5bm^M`iPJ|հd3^ ˯G|01
<Q.|lzr |߇έ\]P Y5bIL+kӐ/g*V7UsLn"z~$?KuZfs JpF{iǶ>BkBVō^~O| [~׆^{1YW"1!7E֣:#[ɳL,䚂h5Ggb#d}( J
ĭ]pRfi3\}(͉FbP+!,