From b5af6311289b2d65dcb7682aecd951b155fdfd5f Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Sun, 31 Mar 2024 15:09:38 -0700 Subject: [PATCH 01/10] Add 10.10 release notes Signed-off-by: Tim Smith --- .github/workflows/cla.yaml | 1 + .../aws-pack/aws.autoscaling.group.md | 36 +-- releases/2024-04-02-mondoo-10.10-is-out.md | 80 +++++++ .../asset_overview.png | Bin 0 -> 22562 bytes .../xz_policy.png | Bin 0 -> 46135 bytes yarn.lock | 218 +++++++++--------- 6 files changed, 216 insertions(+), 119 deletions(-) create mode 100644 releases/2024-04-02-mondoo-10.10-is-out.md create mode 100644 static/img/releases/2024-04-02-mondoo-10.10-is-out/asset_overview.png create mode 100644 static/img/releases/2024-04-02-mondoo-10.10-is-out/xz_policy.png diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml index 85ffd8da0..0fe9ed22a 100644 --- a/.github/workflows/cla.yaml +++ b/.github/workflows/cla.yaml @@ -1,3 +1,4 @@ +--- name: "CLA Assistant" on: issue_comment: diff --git a/docs/mql/resources/aws-pack/aws.autoscaling.group.md b/docs/mql/resources/aws-pack/aws.autoscaling.group.md index d84c34a65..1dbbcdfdc 100644 --- a/docs/mql/resources/aws-pack/aws.autoscaling.group.md +++ b/docs/mql/resources/aws-pack/aws.autoscaling.group.md @@ -20,19 +20,23 @@ The `aws.autoscaling.group` resource provides fields representing an individual **Fields** -| ID | TYPE | DESCRIPTION | -| ----------------------- | ----------------- | ------------------------------------------------------------------------------------------- | -| arn | string | ARN for the autoscaling group | -| name | string | Name of the group | -| loadBalancerNames | []string | List of load balancer names associated with the group | -| healthCheckType | string | Health check type used by the group: ELB or EC2 | -| tags | map[string]string | Tags for the asg | -| region | string | The region of the Auto Scaling group | -| minSize | int | The minimum number of instances to scale down to | -| maxSize | int | The maximum number of instances to scale up to | -| defaultCooldown | int | The time to wait after scaling up / down before the next scaling event is started | -| launchConfigurationName | string | The name of the launch configuration | -| healthCheckGracePeriod | int | The grace period in seconds before an instance with a failing health check will be replaced | -| createdAt | time | Time when the autoscaling group was created | -| maxInstanceLifetime | int | The maximum amount of time, in seconds, that an instance can be in service | -| desiredCapacity | int | The desired size of the group | +| ID | TYPE | DESCRIPTION | +| ----------------------- | ------------------------------------------------- | ------------------------------------------------------------------------------------------- | +| arn | string | ARN for the autoscaling group | +| name | string | Name of the group | +| loadBalancerNames | []string | List of load balancer names associated with the group | +| healthCheckType | string | Health check type used by the group: ELB or EC2 | +| tags | map[string]string | Tags for the asg | +| region | string | The region of the Auto Scaling group | +| minSize | int | The minimum number of instances to scale down to | +| maxSize | int | The maximum number of instances to scale up to | +| defaultCooldown | int | The time to wait after scaling up / down before the next scaling event is started | +| launchConfigurationName | string | The name of the launch configuration | +| healthCheckGracePeriod | int | The grace period in seconds before an instance with a failing health check will be replaced | +| createdAt | time | Time when the autoscaling group was created | +| maxInstanceLifetime | int | The maximum amount of time, in seconds, that an instance can be in service | +| desiredCapacity | int | The desired size of the group | +| availabilityZones | []string | List of availability zones associated with the group | +| capacityRebalance | bool | Indicates whether Capacity Rebalancing is enabled | +| defaultInstanceWarmup | int | The duration of the default instance warmup, in seconds | +| instances | [][aws.ec2.instance](aws.ec2.instance.md) | The EC2 instances associated with the group | diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md new file mode 100644 index 000000000..013d7e85b --- /dev/null +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -0,0 +1,80 @@ +--- +slug: mondoo-10.10-is-out/ +title: Mondoo 10.10 is out! +author: Tim Smith +author_title: Mondoo Core Team +author_url: https://github.com/tas50 +tags: [release, mondoo] +--- + +## ๐Ÿฅณ Mondoo 10.10 is out! This release includes xz vulnerability detection, expanded AWS asset inventory, and more! + +Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec) + +--- + +## ๐ŸŽ‰ NEW FEATURES + +### xz vulnerability policy + +The recent xz supply chain attack in xz 5.6.0 and 5.6.1 (CVE-2024โ€“3094) thankfully didn't make it in any mainstream enterprise Linux distributions. There's still a significant risk if employees are running rolling distributions or pre-releases of upcoming Linux distros. To quickly evaluate your CVE-2024โ€“3094 expose we've created a new xz Vulnerability (CVE-2024โ€“3094) policy that looks for xz 5.6.0/5.6.1 on impacted Linux releases: + +- Alpine +- Arch +- Debian trixie/sid +- Fedora 40 +- Kali 2024.1 +- openSUSE Tumbleweed + +![xz Policy affected assets](/img/releases/2024-04-02-mondoo-10.10-is-out/xz_policy.png) + +## ๐Ÿงน IMPROVEMENTS + +### Improved AWS asset overview information + +Get the context you need to resolve security findings quickly with expanded asset overview information on AWS assets: + +- Volume size on EBS volumes and snapshots +- Database engine version on RDS instances +- Storage size and type on RDS instances +- Table size on DynamoDB tables +- Retention time on CloudWatch log groups + +![RDS instance with expanded asset overview](/img/releases/2024-04-02-mondoo-10.10-is-out/asset_overview.png) + +### Expanded Endpoint Detection and Response policy support + +Detect the ESET EDR in the Endpoint Detection and Response (EDR) policy. + +### New Terraform checks in CIS GCP Foundation policy + +Flag critical security misconfigurations before they're ever running in your infrastructure with expanded Terraform config checks in the CIS Google Cloud Platform Foundation policy. New checks evaluate Terraform configs for proper [GCP uniform bucket level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) setup. + +### Fedora 40 EOL/CVE detection + +The [Fedora 40 beta](https://www.redhat.com/en/blog/fedora-40-beta-now-available) is now available for testing, and Mondoo is ready with CVE and EOL detection for this upcoming Linux release. Keep your test systems safe from critical vulnerabilities such as the compromised xz release (CVE-2024โ€“3094) that originally shipped in this beta. + +### Resource improvements + +#### aws.autoscaling.groups + +- Improve resource default values +- New `availabilityZones` field +- New `capacityRebalance` field +- New `defaultInstanceWarmup` field +- New `desiredCapacity` field +- New `instances` field +- New `maxInstanceLifetime` field + +#### aws.cloudfront.distributions + +- New `cnames` field + +## ๐Ÿ› BUG FIXES AND UPDATES + +- Improve performance of AWS cloud detection. +- Fix Windows policies with multi-language support to rely on the system language not the locale. +- Simplify the Linux server installation instructions. +- Support vulnerability scanning of RPMs with a `^` symbol in the name. +- Update additional CIS GCP Foundations checks to work against Terraform configs. +- Fix `CIS VMware ESXi 6.7 Benchmark - Corporate/Enterprise Environment` policy to only apply to VMware 6. diff --git a/static/img/releases/2024-04-02-mondoo-10.10-is-out/asset_overview.png b/static/img/releases/2024-04-02-mondoo-10.10-is-out/asset_overview.png new file mode 100644 index 0000000000000000000000000000000000000000..058b366bf4d59f3aa8e61ec8fa3557c585d5bf80 GIT binary patch literal 22562 zcmagFWmsHMtSCCTTe0F&itFI+w6ue}Q(!3W?$DyeeQ+I|7I*i-rMP=>hoX<3bKkr2 z?!D*F{?^WtBx_|SE7?i7vf>9UbW(Hx0DvX`QAQO2K!gAQ@J6TzuaHC6+Xw&v&PW-g zF3Zf!$j!}7NkJa>@r8_(L`Fu2o}T{Y<%O6KpM`~)i;J_iww8^JEiNwZ*RNlEe7x1w z)sc~rp`jsPz8K%!+@z+aLZMK3`Hx9SNm*H$W@e_gwl;ctdLkmil9CdNN(w?kLY0-3 zR#sMCUY=T7nq_5WE-o$(4h}RlR23EFAkb$40e)|9@9^+&RaKR|yxfO}2OS-4e}8`q z3kw4S195TDr>Cc&pgX{zVxmh*iobvV?(XjHHSUv5rc&i7ur zQeW~+Usn2GTB2SubYAL$UW#m9etEw{$=*7Mwu-Q;3NkA=inZE_w6sKQssI3*e)2Ms z>K=)49+icvZ;zGO^>20SK051&jiV=SzA0!b2gcJR*UM|_D(-79( zosWmF%HbS(z3RbEpiUZRBPg6h*#CC=S+z5NML2>Z`M_UFCsI%z&BAP|MLCXzPiI}O zSTAD`ic)af%~MAVlC2K0zT0u~oBdN~(p~YrQ%iH$2k@J?3l)e=fsZ;p9urlPyv+X* z^!E-Zi$_bFZA5QP(*9_vUgvA>{XDrWC9{nH+b&;OnOv@GgreTy`6YEkc(GV4(9qIS zDMO2VP{&U~tfSv`I^MAi^8^s!#o;ij*(3wDdIR^*b14vN23U_OI?<0mS#0nIXmrf; zr%ap$?BSZP{!0C2L2&t&GWw zVv*S{YiR?CdUut* zrl+ugbs_h^fud=grhYomdNKr2ehrAs_6j%xnJmCjBF!eCJE}7AkBB$=It?JA0q8qU zJkh~Ay*I$5 z!+VV&UZtY#bKy^z(&r5PUpmG`rV+GF{(ob#Glhs=)gs{Sw!LT+1rnaPIlSKp;$te> z9T)zYDgF8YsPh#U6*t`f(h=r+c`Q#B(X(GeJj`(n6IurnV$j;e(^z!r6wQijBg&No zQEMlkJ&E@(V(=3t+mH;ukvfr2j4!&zVkjz+8@i_%ri=SH8}nj7kL52lNxk61^Iqsq zbP8qY6F7pqzx71YL%A>Gj{rvGd}KcJ)^?8HDP-m1k(A#R5p!PHFdsz|?yL27RUn)| zIU@D&{o7x$=66CTTGc<3$5|O>@ihUJ3uq2Q(bPKb5!htnU*V2!LVNZqK9Z{I7{R&J z<3uadcUhr2h>DI$iEK=i?W7%>v>$A7bn3Zbyk&(OLO#0%M@-(zlzvd^3JfH9pZ7La ziSD2_^P?H2mm*?ugem2mk5Hh7j%0okuc#d*7jVDGX{{opD{|-zhVXY9OI~)@`h9gXt zvo8-m_lPLq3KJqRgvx^NcWHhpv`Ezq(o~%R!>?-!x7tX2y!jK|OQVeYfK129v9vzZ ztg+|T5Vyhg^QQF7H0bBMwstbN(X5n`F&;ovRS?b<5s7m^A8Oj* z@bwHfuXH|i((uCV_YHg`{U)~?mSU*_0TKqJMAP&9Ab&F~1wl`g8Lq$BccocC)MQc< zQ~NX-S`1=Pp9y{VIjr7b`+(@{_t2b6YNB37WH=&vSAnqDlLW~~l80R38BY^UsY^!L z0kW3?6zv+kn}(n9hRZ=FzIjwiJ>^N`(}Hw|(TjBEr*My^Mv477^K6+vfU>at9{T!0 zY~RDC%JfL`Hy9iV+8m62lJd8P4R-%Y#7A-Bq@gd&FA=br(z!!0sL9;Z5E|e}cqVMM zM|rYt2Q4b{v51Ll)Xz} z-$6JK{qP7sw3yE*QU6(7u>?(mmz~y9N@vP!+CrY>XiDKpGMon=TlR-X+Li#$X_lkO ziYj)zf^ia%*N zFmVa4LpNCgk5H%yBuT!!kxr?LETNJ{$9r=|#KS7}Jwb&z*R0(Rtz{!CNsQcQ7=Ta3 zvQj62_EorEkE4$v??cXKBkBdz=MoUj^oMG^Sm=xstDzQ81qki$nzMAA1iSYA%mx3c+TVe}~#B(gC>eaJZ3T-oIY#u%ZY?G*iP_C6d2w z^>S^O+J%3LCuP(Z5f83uTh7IWe0&lzNrK<;GB9r|M4{F1T66Nl*7PY}zOQs9bzeM2 zLgIo-hh9GZ@k6qFJl#tiIG%3E|5+L$$CQPy)dz_G{5MqX&(CC>R%jbWPy_B=+Qog= zU8nQK>99I%?=nFKO;!Hv>LxH+C=w1R~@8KugA66Pk<&aB3scCb;w zj(6JIR|+Ciapl!-Syga9007@p`yn-{e{zSiW)T$^7Ds!3W+JR_`*SH>y!jcsTjB_{ zk+r!F#@JO+*LI197f%KOYU!Z?E!DtGN%E>9XJ?eP)t8JM{-!Gh))K}-Vb-)6 zj|hH;XG{E{uxVacA;4E?6;eRsMhe+2%7${;B23k_nUCOnyX06omF*}lqb@P8ExdGw ziy08=RP!!JSO)T*8VM+%*fxNE;BO?!qh(Q0HK;oHaSB3WTRZC2&pp;e?$L)1A0BrE z8BwyWv(s^TamG37&wt)nf-y%1(z%OCr=h>4vHEE7*f8*HNz*acVW^>XQ_}~GyC^?W zwMEl0j^Fin;(!NUIU*TjZOlKtLStuW79($USM2yTx7!>e zs_sr^z=sL4hoCzQ^o;o-?zo-C^@mbZ+KNw?5(lHZOqX22UL6z2*Q;HxXG%t7RG z$+x8(?U6n*!1=DRsF^SRQ6^?Gg?P; zsX0}Eti8=YB>!0xHJ@@t(oV8GD@l!bssjzd$3}}Lg%iVgnC+ou*5Jh|z89YDOqKQw z3d*coZU;)igNb(Xj15xXaL;2EjvhmZ`G<~7seW%h;(hyylyK1IbLB>|ytr@-)`*}X zB%04rT~GX3y}x6T6bGNH@=aD1K3u(Y#9Ye4JewL5hlIsvd!%{G^)pzaz5sXpQw7M? z_T6NmnLrW$Ng@}sZjsJjG9@Y82IK{11`5dDC<0a-XO2kLHopp@Z{`r28V5nZXh(7h z9$dHg&lJnWfDv7Y(2n~ZDZV=U&9e(ZNS~IPq|e`l?=!C0cjpv8Mf-%w8bEtHYf9k; zTgmb-8afW&)9< z-hCxKSVfI1n;i7 z3~P0+>CzV_tA1VteBE3I8dw_erj557LJ#t?etdTthpCTi-6T2e;e z!HeHp&UbKDTg`yh>pm>&&37fXx%xnVX3`&M{rF)}1iHSjbWC|AzHgZ@m_uj-LGo(u zTNWzOIZVCnbD405)8^4by^!s?ku6rKoEa~JS4Ey#x@BwoOkER@83#8!Y=tcJT=Rng zOL5@h6wCC~K6*>l>59uUzm|G>P?)S2Ew4+_5k2&Wr-y6Vg{8Nt`JZPNwfedSu4m1G zll5dvTYIlJb^e3ySgj=>8Ko#0I^^TUZZ`bM>e-_UFUVC`a&~BCR#NyeRFkZ=p#cl= z-WJe8D0_+%V8V%F)}CJR?N=uYe(-EP1!g^V{LQ^3r-!;B{G~Cc$AW&fAw6CT_vzPP zz6;e=?X{7INQRKN>1*uyxE@F8dnAu#6_P93&1~WRQ!wtpIpR;e??^}_M9X*H!KM%9 z>uQ})eu6Nq|H==v{83zq$UBB_`W2@%v%;iCs>>##yQ1pO!$#EU4>mEbXPDL=l@;CyKrUOO)F^FevAevO^H-X6>#bn^Frf6xET zo#OupE)bt@na<*==M32LHv%b+agI>8R5Rwhk@y}F^w7`D9MSlj-tQ&GQJ5LxVShRW zy;k+~3m2>txxC31OxwaUx%deAj+^iSM)y5cM3tVVcRLP8+r$R zBL$*lO2GYZL-!bx{~)Yzoc;K-b{z4R=K1%FA+!(##g(_Y_-g4L!Qpj>b5%H0qkdUM z)hL5{?tGfAr>~!G;C6@KM$Mt{LRU!S!6(!Kaz{p`@w0;jsIKFuW?LcWh`%?Hi-W}O z>@u|!eECXK=L;mvz30KX_rg~_{7Yh3F-n=*sc0&Sq|6%1g8?Qqg6Fh<6RZB?brClR zxi=OADb8Ycj?L)@#oO$k(!X1VqokHi3Y}{GNWY@13*~5p{q-{^;Pco${aQK3TKyEj zK^`x+9T^jF;=Sx;!JT00En7tr67V zjB7C9s>)$rQc^x>VcJmV0z4{QSBdTd?J5bTg1%p75g@3`W={KSjg zjy^42KR>bf{RBDdP~$Jyddia7$f~>lYH63wKZ*-h&N-< z4Oi7Lca8+RpE(%3`j<$fji4Q!&JHnIa0F)daKRo$eU?unjF_m>5cfupHKcR@=hpG= zqZZRE$_^0g!h39H*|v#^_uhTWI(|&kg>7Ggff#D)P_sq>d@UN?U`WLmaxEc|hW#Vk zGc#cZErh9SYg_&Azq)m@3~nQ!mWqA$?7<#;z&{@m4j0GNBYvr)j*Mi zU+Vf2xfHSli6WDD*uOp=AATqQgtxgeHmc(+zr|@x{VKL<^d>tI{-k_%Qehpufvpsp{L(lV4CbL5;v~7HtT>-eUIu_T)?r4pEhtXrSC`iWb^- z1u2p$k}xHB;5hT|X>~@FR_SW!%>G9HmKCD7wxOeYydfmk!T~5_#%{jO88CI4acKSs z=@p)6Q&fE4rR)g5hhv*uM*q&W0&X?YQWA;#mY!hQF(c7!V4HFL>L1Cub@_EPDNcN;oEvi_=Vtu%;4f!WX$Ca1# z`T*IMH^$Ma$gSVBIzOFVmHzzjxNLmXocj@xp>!>9tNl}4sXHKh5$-2wbl~T=24+RW zy1?Sa*Inj$CE4ios2l$19$Tn92v6U&{~5JFT&A%TOe8&eu*({h_i88ak2 z?ecH6oyaadGNh^4q<8|B2ePFNK_EOv{t~1jb zyOdq@f6_~S{PgxZFOG(lA8sBXFMg2kA_`MSJ#q@V2?X5*VoJ$;1KA4PWg@7_&` zTvACqIB?ZhGg#i&&x%!El6IvtBq0(Re8uWNl=2lPL`wkxe+x4j(PiF!;~&_AO--q$ zZTCr!qS1-I*Cu!? z$dr)kBd!X~pXjbe+6G4DhnYM7wdnYT__x#VeRKF9ZtByoqtQIHBsGmEOD`AoAcpps zORY|~=7!0v?79OYUfvkBHacKfmZ*jPf?p>wwq*NiQyV8|jCZgh(x%3mMnhQsEcJ8m z&8XwLz)?Z|Q<0AG3F_+s?+xl9z!|?qxn!<-)J@g>eZG6&bghrp$u|8%edTO-d9MIu za`7YqakEkTATBwXBBiBx#&5h8mO3sme&Pj2f4kpSD1N+K9RU7$u0ppMd#cl{mp>7u zdT0`Co!awWzhw^B)?{_Nvl7={=jgjy_6(Yr%VAQ9U(m^pk-M`d#|;$JH&ELUy(m!x ze@xF2e7<&Ly}Ac&Zp3oWbxRGO&L1cxRmu27&MH5|F|#A5@4_oBrT5xg1qY@HcduM9XNb+L$jSraruEav1Sc zm;Aj;diP;@`n>LH z_n48fM4WK)Fnnbxc%>mMX{#j7s$fnz^1jVrBDUBVDdI&H>XVMMRf&MX9DHdpAQ%y% zKqPH^HRpI8^lNSNhi*V7Za#hN3hSC4Zbx^y-D4dn{RzSkP9qCykP}1rreAvbJ7Seh1KzMbXJDP5In_N$2cft$kcpBCw=$H42dQQ=wa zONAIa^kgq%LW5lF6w(){MIT~2&jv7rWIT|197?(Rn%_ddTmQvo){?buBQc7#y1KZOeAM~RAm%lg7@TbBjA*W5IRkt?6(O} z-xswCv)}VH-`#*n;V%qoWd;>=mpN-XOy-g8TR82CVkn3>0K8)WC*`%QKb(lQ1a+Pq zu?CVsTiX^$6)<6ILJ}EgrOa*qKWNO z)Wd&sOMWjk4X+8AZLGB$%?IMOH0FbD&om{Rm^el7>)1#cqy5S^h%ES!GI9G2t&=h0 z-9F0_#YeD?W99i(Q`=34!E69~q z`@~np(ISAqpl9DQAbi}JhjH_cO;_o+@QzSvV+u>6?m>j%@f%3EI zmW*lPG&=GNL%ry}+b?ysU*^|H_P?^v4hUX)v|Gqn|n9`o%Z7 zP-82Y1lU?S@NHm+AgfUa8d>@kbTYgjr@HewC}|X%WQX(R+s>7|yiQlOi2hEiRWegH zx8{e15Ejm%#Z_G>k5W-FXzcG5@6&fJI^h8VK&TDN05OyA^hu+#ft%9 z`~w{8xb9ZMR)Etsd~!>`P>vQLP$Miqncpz1DmZ{O;f_tfn3CWmu-%?Wxqoe>TT(lL zR%v)lpEtRroPj!fHa{tbTUxcoa7(0u$Uc!tD?R~|p`$r1uQ`k1+?OzWvN)tu+FdPT zM_1mPYFOhl%cvHfLiW=k8#u(t#XL06&QZ?PvC>q>j?+#l4>tfrds+gpS2LLHc}Lt?JHWsVzhpZJ;W)dx?~sAf$T03 zZr}_9+ngF$>l*gK-IF1QmdPdV2ybJWa2F7-hy&dZ0|I#2^SD#P?z!-Thxrk990-Jh zQ35I3ajLc?1-ARkl*Xw6WgrZ^^?js_Z@esL2ZTzGYS2h_>+4!gC+97dZ!MOp6#2R;;nx}Sw3F#Pb<@NgRVTG zEh0V;zhgi@kr`xhNfe(g7OeU>tW*QSEu-kT6q6wWY`yO^;2&Us%GwAp^AQDR9vc-I zE8j6rw0#x(da$%Y&WBx+QnF`estyPZ4K);iw{|NrH^VLma;Y(8vsW>XpAFx)C6B}k zzONjri}I}1WPZOx0mx(C0>%m;W8_=cXkS!NKilS(!hKMm;p-JPs4846WHDBRBI zMyMN-CIq^c{_54=_Iduw1>Nn(9A6vT*;V31cebm-cDBl!KuDE@+M2&FMiP@12CW>O zKdJ1rYNr!(BztoW-HB16DTTX+Pcq!O`{=ZV!Q!Vaab9Ab+FFRU^U#a=g~ z+8p!5a7)gi2+uG!g}`@tp(=*|+0$@cmBq7UN;%fju-A#FS;O z4n2L{HnvC!etxz{ph8_t8rZAl?vgnx>*U9CvgzuSHgrQ$drLt5mWxyf>Hhb-$?C(t z{Qw>4a{}S*ekF=&yOxQ^FdGi~9euW|Gl!wgc(bNhm*Bisby`|QiabzLLNFf@tf|Io zY1L{~VOH%~1JW|5FBPF-AikooS}m4S)!0HRvw9z8jrK0cQGAPp z3?slVJ}k9LIXR#mC79W`M@W# zt0ktG0KFW@UH@HTm0FG*=4}10fJ+4Yw?np!?+cLgC8lKfq(9iNCWm8WjJZ`Z80NzA z&oI5(qh2h+dy(nmVoc4FKF~|eT|1(}AO%_Ay(qP&f=h2LVSEcaJF#a9M zIN(kik^#Av`-j~c1eM&No1Ezu}Paw1eKbs+grTR zKfo=2D{G-@z}x(g^k-){J7a(6Gx|T1EbM^OSxbs0%a8oUA&N>I<=0_C^cP!40<~N7 zk)E4HIK1VX3MA#V7b&}?0Arq7ZX5$+6RhUK;^rrPKu-~a@H2V{Bfwu+ud+N<<3+nRLrG(<;tY0sC1x1f2lO+ z_uxx%fuih{S;2z)-Q(Vb+D4Rfm)-6&I0oZG)Dv#6mL|`dFpe)3UJt$8c26jv4G*xo zzd&;Kh_$}^aP4_G9J@FkAWsZ1C}TN_a+?!0B|o72-)bA418co z#^14xZQ?;g4S2dUCU#j3K7X##h4|^|qWWK}dq2$yV03j7N6T0V%HujIP->8-o!uGS*-IH3!dqKklU;w zpd>)p8eX&-WGxXhj%1MX6}=|c*X3sm=jmaO7p`^{>u40^qGRw1fM_2~yID}L2M5uQYWVHML7@{$%Du!to?_xivFRFJe}@xe?)&@tDnW&gTQ#7S zMY^%p0S%dt-`JUFMXHn4o`EanpM1jJUx|}^G$&Jp0H8!|rw|!I1$exur5kl>7B+$Wr?YmYrdGd7EUH{bM$w}?;@!L$ZirkO1po>dkik*1$^A7)uIO- ztj~qy*Cdzc`rkJhnYDsmv4YWq$8R;ehG)1W1{;(iL1te9%DxvpMjgH4JKpUr>}pT^ zV}iZr(a+8O>L65vTcV;N8GmDGyqx|Du*Y!F&GrO0^OTL%p#~TdfO|NvqBaVwT{n|T zs)R=>#c%_vf@EGIWz<@sMfhUg zo;6$S?Ep zza7yXhUrAcw!vNe*%`xDQE+U|=dWR?ieLGG$?P~~n0Am)Zm3h$mK|rnB!&Y4G*+0z zvTAh7!cu8aY)>&Lup8JSd4V0X<%H>Xw61oy zLMbq9mwk0zM~Bx=_T@2#@ov1ybP3Xk?J;+wxdEHBcl&otgW|??m3p%XsAzP|(=VlQ zr-wLKj$w!dub$Bx5p{a0k7xfprLI?%{T=b2yYvc#b{s8Np>=X%%BZ-~=af{xC_|{j z9lwm78M6HD5TSle>-0=S8+=Xhd`)e*V8oAoO>z){A#SVC|M#v=c2h?DCa;ru-U_Xb z#qzzFeAvwOpHi*co_5GBU5uRL)g6lGMPhPwqDGuXIEJcZvZMn75}ae-vBKjsl_}Jg zRG2%G8)8OpkHtW@^bbJ zq`M+8!FeOd6PXgDPPv}aH!U#Ji|;)67VT`rgE{d~*ts6(U5`1YPpggYAvrd@ob4Y& zW`r$p)ldY-`47m9DqCt;RfahVFy-<6H6J@LXVZTMW{Md5mE-h>E9*_q8K>PS831Lx z2UBrww2_;Aq2ab@58KACRVmtW9_S}6ty$D>jFA4r+1Uj$5cPnr5QZGf-v@ucS-OfZ zT4ueQ!+2m5Cd>N;S2OCzA4+qy;ZW^S^j&im+#o(%A7o^{)-kWR>b6f z(?{9-h02etD|&b}Pct3`zcw)*P3TD!Y~4&Y0H5W*=1f0*FrWIiwr*DEcqud+Fes2; zG(y)|E?N0|ygy2`7^EsrkWrcL_*EadW_j`q6Z%bJsMz>YlO<(1UEQAVYKDdAzHzR# zjb**xH<;cIS)zkiC)Rc}fUWAwUn_dYk%F!`)ULw>>?NtoUYnaNv0gNvF^|%Suy5pI zC7mm{Kdz>auzyfYBC>L`E$QJ37L$@_`UDz{Bw`>3Sfsb*+q{bzA;ba1M^Q0bSIN8t zjRIq1z-gVb+zSq}?{Vf5k|Eo&Tuci#h%EBT*ko{zpD%)(vF?fkt-QhRbm2IGo@lNG zUp8D;BDuHnQj3(+rU_fl9+8U_-e#HLS$<=;Ln9ax*^%__iy97n9C9R?34OddM{cq> zXYfNQ4PSkr1QA~%VdcURs>tGhQF-A>AdlIvJqaxLxazf8+;sE9$>z>twmoE_VRsm% z8_;@R_J?bFstvEIux8W#><47l`^`iG`S;4Y0Flby?w^$96KmPPKWhsKhYB|M$}Mw& zz2mCKndp3R%Hpfm@9Jt2YWwX(=U)P|KFUgm-jU1!&Gg`?eUUdf9kTQ8vchLvk1F}M zc-6FAzVsw=sRf1#I<;aYsJ7LHD)h{RV^_%&IBZ3{MJ}pPo9(r}8$DVf+}(SuwV<6n zaAr{)z~Ip%(ZQ3!|4<`8&5QrN7plfd?rFleC%st#cxB_@SsqDImSPTsr81d~?lD^H z^3&;kq+vAS3&N)RBeD6x2S))^_uRNxmmZx3MJb`JWuWD@B0_{7`gv(>G@ISG^g;D> zbAK$+)<62AviB2>{o{?v8=ipTEjkfHcrD)2{#MR*wc|>LEl40$9s-Kg_z%pCl>kK9 zW!A_zY>OZA2(jAB?fUEegpTmxA7;xRg5&Cvu50qbm--Ti$$o3cR%1<8VO3RGi}|OO zP{VVz7z^F>vN}n1;Tem7HwSFcV4c~dx40Klg^`bA55=i$vWrBY8nalVq$hPA2ZI?d6xujRoq4s{j){H zuw{p=p@rUs-$x;L?Q6s@E{`c%&P!;3!au1@zC=$^2&`x*%EZw*mV_ z5cn?kBjnpw^Ly}zMe~UF>hn%(+`MPP(O{DVtbkoJtgsHa%QvplfjZp>%@A>jeAS3r znrUu(ma(HZnuvIOX#n}Da12{z!9O~Ax;e~gX`s|Z4y;l|U(M(Lyuq)BR8mfH{PYy? z%FdLrH*{6PWQ-_2PMO$?EQ*gYKX9R@bQtAnQwdZqJN%DN(y{J|lgC}>oKTD_LFC8& zCqV*-5f?nM_ywyE3q!>_%4D_pOCTWO5MK;$tN9{ECi6-KUrTPKDjH=j5%zjPJ&UvL z+LOzflDSZ-I)SW;;40i8~o>^n?<>Mnm z)Bz00`gLgl?)*!^OPwmsw?8Zi=3Ya1D6x2sF_7ewLNS{*%twExE1Z`?$iBMtMg?Xx z3%^hlps?(DR%|p_3Q15#yQWbu{`-&t)-$JO z4Z*~zvLM?X6><>Zk7CxGOK|)eG^cGd2DJ2mur z6AI6X*-=BiO;9V>UJYyW%9YlXl@{(lEeFBcHs#r6xy>?%WDW=$BAOUPlpYX!(>DUQnc(|K6zrqp17w7vDcz=@E^Yg6m~nDwBc?Jzy@S?;QG{mOcRw1SU}cv&i;f=A=)G%Fv9^mE-puZ{|1^J#P;sA!);5 zgFY~qrtFPjZ_BRRV(CqEn>qdWm}W&r&hK(aw`OW`PMuWy%j>=YMc3e$WM$0i!S~7H zy28J46w0yr-;GbAme_6S)eS?98U~&$A$jtLBV|=U(xtLV@|G2oRxvc#cDr4#e`Gyw z93+{EXjpTMfZieNL%3OO?~ZEMsch#lLE0(9y5Vne|0?R=Ost}_ReH~dX5@+CpSnAY zBxPKL!HPE0)OHAOYx*3bn1=nl&G5pEF2?qQM4TIJ>yDjeiAw9IN@X1X!oTxDcl zD}To2ULR+#{QRbs-0Vd~3aoQPhQ$Y!bfBCYe|{_a6mq zAxq5c@Ws}ham(mh(ucmV#=S)fY{m?_?=XShK4)jmj*o16C2Ap8@QDjqf}s&wIh4?K zUmW91yWRk5B+jJv(QOxgz&fj+N&pXl!1+CG(I82iwlsODQ_&zaw=FglTL^n6rHfT3LHZ;`xqzu!t1@p(|P7Qv@SMt-$=&ZQH@qbeUU}cyVWw&X-A)s>b73EAR~a?g_FR( zPw;M7KkChiuxb!Fr7L~_OgUx7m5c3sQz0CT#KWhbT6Ng*#RI3n>5YF?| zPXR0*eotcgTS3H7@w&zEciem;+`nx7N%#pfOaKSC@P{^RTQr=t-d5SBP5?#U{`wlv z8g$N{FBtTq zFph8Ov-6bFXTQGFD#Wd9x{7x*XR&VGrmqN}FQXzT=PJ%y+|-DiuYzU-sGIdpdJwe- z^-RAa$nUd%ZGuc3!L0_XTz!G(6zuA(Z@>i9HPi#1idZ6!|Mw3B5BAZmX2g(`)k$!z z>avyN6bwYj5n%G*i0ERA-F~>5X4$>oWc(S$K~#pX$0;&+^w*?b6T}70hPW&4J*O!~ z*B=0${7^(IGO6h=4>*?x5&yBl8{U~~w`Z64BQk#pj`qppVQ?a>lhPz@MCKQ4osZ26 zzQO=6dO{Ole9mOg%{EA}W1ziM#!n)z&QL5KGR*8?h)B95g|dq!6eBcXao8n#;eEF; z8Y#BuyUDkQn@{FnpvT|4;wWC3OF|%=j=#c;*v~1Co741t<*dawE&r7#3rel`+9JVu zcI{gGnq@^z5h-1X>4V}8oj%^y&`M4O1kJe9=-giHL*Z1LX&$V1_s!CX?i>KsD9O$O zSEWidr)S^TwO%>w013DD4na$Z-`l`{%;>KvK+zF#KAX{dv5j1nP>>_*pNiGCumzyY zH>W_oZ%ZJ>=j4Ucy!v#Ta1`M@npgRhr)F^(zDCq8mU zVMY%tGL8(fYYhlUejWtPUmbl$nQPff@twykRxbGQ&R>)lpO>A}{qlOXPu{c%(s&dL z>E&7*17BrAU^iZ(FPsNIYe_8x%;-tCB#ohJg_1>?&|YJEIQ@W1`eknfZq11z(N@+VBglg-by)L^4%-Ku|lLjh14 zm5IVQ;$3g*(@`S}BQAu{dT*voN?-Sbz~0%FNu3A0=f?D;`NZ5n{7v>83;SF1yh@B7 z)_Y7O_55PdRW-+d z7T*{Xvmq#Y!E_UT*Fg@>1KiEU5PP;5Ik(qWLFJaU)fLRoBe51_Vu@;u8$A5@J8Ea% zj8&E+uR@O|vseddFBf`Hws#ZvcdW!N!L5mm^gJ{Xmv82J-EZX-{WOElXt^@G1&Py) zv-1W>qV_n&?mAX0O{>P_!mOlw$$b9n>h*(m~M*rNz&l{-8N^mXW;t zP5=&2%9RufoAJwUyqKLqK%_lg1o7bHh=kZx=VVWyuUPr1W^0+3-klDOBG&vIRRvh< zHAM592YF7Whaj!@1cin5tiaEi2RYB)qaaJJOmyS?y<7#oEzz}bpl;cBjWqQYe2rFA zF#J1@5wXp)JLImXc!>go^l+tG?Um)DRWYk4WE4Vlby1t>h^OQzGH#VE_<^b8s>&SS z*#~E`^^nTz{Wb2ZwA6!j=DxdVsOP^Vi_I%1!B!B(B zRf>);vab@NEat+^*kICUx>X^FXd7kFKGylOwi0yy@cv#txKZj9cvIjQbWjds?lp77 zuV9Qh77az8Vj|J&q7b1vmY%bbZeTh^e%8)&6D|?TywbWksbH`LU~b*@ zAX)07vsIAm79?%G(H6vNn8Za^lr;-s64FV&do68byffcOB>4h5erQP+zEo16GSvGz z?+CddQ6d~3;r`{?-rqH^#^@y+kQp1*vrfz#mQtp+;0ig2%P+aG`f0$)j=$7hbb=}z z?@;=M?B~2Q>^sSvVuPX#hrAbyfnZ2d(Sq>t)f4s4rOEW_D@6?W1!+JNVlULx^b-#8 zH(7RkQ*So4szqDO_y8V8p2#5V>70d!EyY)dvVLv<7D(I{dfs>gSA}Mb!QOto_{6u4 zx8qamXN}mH&&s>tynl#%I|Y*Bh%u@2^5_zAPjU^_ls!?`)e++L z>HBZ4M+%gZ_D-oa$gqA&{MLc&yVCue@D?F22Vo5NZOG(wY`f4nEP$m^B6_%Y-tQ$X zAK0hL0?x~9$MFCMY0=xFTHu$tVQLQzwIN(;ZUeb))?nK*TGR-FgZ_fl>`F1fX{T4dT%7uh_$Oj~0h^MtBZkb4!VQVp`q0;8 zQ2V(CQ2aYnU4e7GceR=F7q?_5yr^le}t(A5eo5xGJI66)OdK6V-b>-O;QW#uKa zPDCv!l!tNn)jZmvtSRDwLW(okDtlHdm#-Wg(T)r)joBOUNvyn_gl~0Q>Yn@`-y5 zzu5yYm!#6llC$;nLlvDX7IJg0LIYF*fu}#o^gP|;tDkC`ozC>N?LDLrsFOQ>Rn_;f z^7DT9ZO1}O!zx`6XXF+R@%Iroo#POPp=VN;sqvFEj6H-0XFv#bl8c(J(4&{o# z@wPRWEta0YKs@e1X+3iVVw=G)%bBhK4O1v65TRvq(!w}OF3J*OwsiDpr%TC-Kbko* zk*qU~MCSB%?xf2Z4B6)HDiU0v$1l}^?(_gBmxnNIA-o2^XhI#;ECDFtEW>o!Xvy;R zL*K2EE&u*cc=X-3BwQ=Lu70$HfGGrik+CM&q-U;GEDL*TgPE%SKZ=fwLLIH6>wafM zCMN65`iuQy`A@2;^xSvriVFvTleCN^j1@unEju_6T;B?WmW#h(n?G1Shl6QppMHU4 z3aFC9!>)ROcyWH(^t4kr!!k1WUm#&0#aZ$3{)GNdgD$Ct3vgYC?e@4hIw$~5*cdh&H zyY|`ZoW1w&oU_*RKF=Or)X#!lX^T8)fo{y6>AeEAwDR`)2^mwuxWWszi>t$gx!+Tp z(11Xt2lrA_14J4N1z56E42~X#x~{0NFL|7UUuC6bKoox#zPy*SN2pXUL4B;?F&&)Z z7B1ebD&@Ti-e3Kxp{EGYea<_-LjIr#6t)Sa?Wg_TP<5JFYd|tCk^ET9lnd$lYO!tD$@6GIE&JP$xgmNE5pD17MWn z7qC-t5y;rG*H)JC&Q*+yK0TrOn+ZWWNvBW<`i?uy@&P_}=Z6>T`%9{(^(=zammEWn zLzx?uR1ZW9x(TDBH@yel^bvPk6IRPp!>T}%@d`}ptqbYp3Qp>g&8kpj%GF}Ubh2wo zLm2vX$)P`ov^?G%Ynr6goWP5(e+JRMq#;bhgR{XfBRPf#ycKRd281^&kP}0HGg<0M z)dd7Dntayz)u@ov9rofkz zIMi7JK{{DQ0CuL!|J8SHfjU-FoND>DQdcd82Nz`|_j}K8!7MLU{-zf7h$VCtHKauww*NziAgaVxyJjQ7EzBIo$aki;3 zjYhufdpkKRw8{}Fz8LLlqb!UTX7LZ|g0nlJm-}TS6thEO+GM9w`G1c}xo47cTGoJ$ zq<{307BYJwinbXGY)>F4egl1~f&wq{pcudH7tdJg2JY3@6CWgSl|NiJ{=rgX#k}Ma zdyFp)-anQmJd27D%?>FzH}yh{QB~`9SaF9#n*m@9hz`CWX6cK#8)p{@{|2;#J$1Hr z6nLVeA{kN0K-6X8XLwA#W{(E=!w&$uW32%HK;L&C3EI7_csI93_ze!p_(JwKZA+;G zmjjXBBPH3=O;SFH7tzw`X03qwLM4NVoD_(huko{7{DlZJUUzBvo`ux@8O#MhZ=+g; zhjyY}_hbQC}=SMigxx zzsU==pKytzC(tDHp0Xgp}Id(B{G%{HvOsnty=`BJ_E!k>y~R0xi{HmqIu)S zX*SzIb2;*SbgTKatgZn&qRXGOqS8Yi^W^P1{&dr`x?U<*>p0CE@z5Syef8*vS*v_t zF^>gp7Zvzi%1JMry2}B~>_VeLnwzRc%6a2I`pbi}b)4Sx{Vyou{7K>0H-4q78&lH% zP&}XoZ*Uyg%1HBmn|IDwWJ!6`qZD;r2+}gcI2Yc&Rw*4wT&~bQXO`P|M_d^@H-qHT zx%7^qUOYpNjXi2lLutY~lkd>i&SfVkxVYpvqHx9)MQ{ea=V&TH)k`&Q>StNi_dS42 z_?3E|VuVcKZE_|0r@h#+rTgW+VExJ@uV}q!lTfGU2iW3qEr*q~a%!}xG+DN8Mbg>J z@Lgd_TeGUcL_XFO^1j2cC240R9xU;QO0#K5OenHLaK7;<6(O$da0eQ8Mx%S zU*pPPH9^!Ar+h5;D-3D48+XX@bE)IsM3*U{=ao_uJMT^;c531;XC^`pzmsz2x%W~yFG;uiaSVtV&e{e2aX-p*%LAAnF-YL7q z%7QKI7|>V+g_N+Tmp85N>Xtm#{7W`#mknTR6X<%dhAM*tJm}R)_guh>+XK(({lFQ9 zR9}yVz#GP|i_=L?$ndr(=WaJOfU$+}@NG6sJ=@>8u`wNAcH zPgTk_<1@YINja-5hGf`egy{47TxbM)zit*B^`vw5`Lj%|B4-BMfA%dPPr2hucTC1{ z^VJVQy22(%BE=_3>?nQ>CftN=J|)_h8?Zh8OV*xS?n$;3c9|wnvpBF#>T_dJ$VKJJ zYs#4uGLgVd`#wX=)>Ja!W9u4Q#&iv6dc8D}QE^(a=g!`Ud#NMY`+Wb2L`PyuaF{~@ z)S9U&rNN8<%Rgw-3&0zL7i;Wwr?ZF&g;R@O&t*}o+<<+djx!?ea^PHCT_HI7Nw06* zh?h6+#D6aS9h}R?N>UJ6-&GLeS`wH1`5Zd{(KgHqE1`shD#31(BIKU7UfU|wGDURP zI=Y^As4*n8^{uQ~_O=`U{|Qz9BF9Rm9WZtI;*nJ6-H$sd1t7_g?KS?;SC>sLAs5W_ z4*F$_B`>&mju^qyEG_GZ@T#Gm7VitZm4r+Y)RT$9Np^DI35-mnVo_Hd+}Pc!F0}MS zM4@6y1kMFMTm@&m{Gkkobghwh47ooE@)O+LDdJThvL4zxNz5u&R;=E)hIgcoWim1! ziqyz1Op(*bzyKEVx0oSmk6&3^A4bj)+xa_m=sdi=fwyWlW5TlbP%B%GaCE}YYN$0mU=2jH@dtOdR zxYtVK7fTkT#7oljz0v`5M2(Mb%DTCo(n!&?ETc1&eYa?%L$yfgsudJhCDzDq?*;Gc zZUxvaTD&#VWsOVs5bn|>++}nTvR6uZW5zplG67+1dL7{u=uek}Cf)|oe54bgJ8<4a z7wXUmbV;-fbQ9GEK2a=j_sL_^J4lkV>Tv;{ggJ6hk`U(F4AeC?awJfcnHaVY-@<74 zKp84QTo287#cICWi_0++RM+wucz_$sdqCzG16V_w1c$sZ0(k2U$Hr9OnQZ1}U_2sy zefBSRXA42=YwC~5{K*}J1JyrE0r5edFnVxI+J|oMYISk@uTF0on#k(RS(?tZVW36| z|ECc|Co^~pENFa2nSKC;-yhhN&?CqriiFu&O5(Nx5UQ(6dxGhGa4EYwQ@)~95)VtY zxHWst#?Mxn628%LgZdsf;#HLjXU~vcpmye5#8f$Q=x8joPb)RrZlk!8cwoXZ`@T=9 zj2etNpD|u8bK6yvP2-netFnY`p=50s7PMgrgQ>xUkfv7E`016GW1WMeEREK$kGtTw z{nG~%j9SB``4rj#u^3h+GtN-RlOIEhR{MoQ6^E`RqH&a5`ioKle~pB-=-Lfp&o5`6 z?s!M_iKmn+#KODh1KVg6>l@!iMHwm6eEd3!c+I7MBj=^u$a%{*a^4wE;rky-9el~- z`IlbTKO^sOg{&+g>!f@~Q*WE({;~HxQ)GJod9M8zF1@MOvLu?G6_~{vhuWPv7HFf| z;n>~bIa-Mz=JIR>e-9u9jtKd6b#|^%G*a~Kqk?mv(~jYz8XLYz{?bX3WoavYcfVyA zZ{NScSSKwgbUL`@{GjW~WtJ(&;j!Yr2FY$P*|EtM3Ag7gSa#=VQkqex(FNoAebRLr zG+S@b@=?U--9c>~YY3aNyGIEOh5r`0ZFFKvZc!<5j}=u=M_7%X0s_k#&I{kao1k*& z_TzvKS+Tfyi;Po$#0b-I3l6x(OwEb`#6Oe6py_$^cS$fj=CNWUc$YotQ|1#Hqhv5> z5Y{6%L#p>VVTJ4JHh%Vn#Nq@m`p(WI)Sr$h(J&`}em9>>?i&(hj@Ke}XnSr% zGEMVHwEw{HvKSOD+y#EUkpKrE4&-JFris~iq3V|e&>g%uj^8vNZAIyrj4i$~u~UQ@ zyRb3{dKGdd5GVh8B|u{au?I#+6rqX;Q;j+7_IIaF}L94|l6-r$ht~DRUN` z!L|O>@qqsx0ek{-vwi?yJC2i!{vEqBqv7xN^iHYRlr>7A+Vie$0b&+tWLI&;GjBxQ zHAyjedd&asxV~5d`|VGS)w(R2#b856(SLK16H_|D);o2b%c>SUj6$l~(mvP}7?4ti ziS0e)_lH&JQBx5n!rvZY7I(4 z<9D2FqlKHS2IQ1fuRLL$;&uaoKW~;lhzn^;5qQXn2vJlCxNxt?xLBN%)U3uCxMf$B zbvV@Sq|$%s&4m^;jtBvhi2rycBn4ZRg!Gj<#2*gFJ~M%-c5eVuOOMK4omw&t;hj5N zK8yTph5oFv9O8eezC?l*O^%Afv3AXj(@L>8;G%+X%ITLI{El&-pY9tNCvg%g%>|A_ zn;Sv(KMu9U;o48*I!UYNqUe9w*m z@n{bd;osI!nBps_e=fqi@pO?^7ki(pMQAizA}@n{ME@@HfZl3FnDTT6+o)4GI5hZR zV;)c14TxCE8a2TuCV9>z8(NO4AVyK?jAj~#r3cZ8P{|th_3D3OgLb}QV4t=qNjA=m z1!N~i5~|ug1aFXN*wy@gXfZVVl%Xx7ck)jP*=oNHdK-=qHk1@+trwk0l7V@ew_tMt z$AxNRzIij2S!$7dIkPfkh)*;5s|x11M5SjhGuqZ401ju4db+m(LFDeNOW=y^rqAp< z7fx$jzNbe3aqq%0?hfomHzjI|5;M;WgkQqX$+mxfdJv9y3j$Moqrl{aHV37)&vb!M z(dyQVA1ZdB+xX;yXW=Shz0Xvf(kVoRMd|tp9}12__E-;$?%2d&%RmD=ZULf=xBKA| zZ9S7Dy9u(X0l~Iw_e-dOBiU%0#+Mx-?EcJvfyXJF@8 zI^@^A^mu=M$sM>aI@-zhZnY-x$CUWl`M_jb=drnC|kd}(&Z0iO0RKy$ta#Bz-piCiJgcKgv6-epwB>&Tc%td88U8H9mZ z>s_v$+jxcxGCZn}L(stAG?6(n7pPN0yt_f9s(L8O$7RF+-_ZAO5Pjp;nBa;>jE@&- zNSdG1b>2;_Xw29wjlZ~w72o*eT2HCdo&cChiZ3Z0>HQBHu pfxMkO7%SdT=Kmrj4cBIzL*Ul`wyuSbsqo# literal 0 HcmV?d00001 diff --git a/static/img/releases/2024-04-02-mondoo-10.10-is-out/xz_policy.png b/static/img/releases/2024-04-02-mondoo-10.10-is-out/xz_policy.png new file mode 100644 index 0000000000000000000000000000000000000000..b3e0f79c1bb9ba1ca2937dd9c05cb8c172d8dd40 GIT binary patch literal 46135 zcmce-Q**uClKXn#q56X4^2ett?zON)w%zQ4bdlaa=Yf0B|A|CatH zAtB`8;2+3lmYkfNh>8f) zh;XpdQ0vkQ0I6`RtE>B%jToAP2L=XudwcVIJ})mXkB*KUxCVU$|3X7UWomp^R#plN z3nfT=1_-~7kB^s^m%YDzkB*M+@9!TR92~EIrz?G9VZ(FM$vi(l7g>D2Jba^KfOW)u z=jwk`QP6t`JezahR5^Y-@;?p_4^dGQ5RwB+0=};gzt;!9!$jZDcfR{GzO8xhdFc%A z&%ary#TD64Ww>n?JHAJYzA>>OVuZiL8NYQnFDfc3^f_|&m%i0G&YMHOYrMY=xvpbu zx29{qf4e`$h~NJdKK0h`2@&0AqTz!_1-R)nZBKp&o6bNY0R-7JD= z=u5|mFnH;(_nC67S}NuIB>om-D%0eAkY<_VrMJCfbEAtf_oo-9(G+vxJFlpyq;C(U zukn+mW#47BooBJ2b=RV63hrex@E6*yW77J~pkyPeXbu3>JxPlRt9h+ot}@#kGNFw) z_hJQW%@HLdFLqJTZ9p`E{tl=c8N;q-S!9rKO5v)MNhR}8N*&l9B5=z~94NC4k^Ls7 zhWq!8Wwz&?WNUJlcoyXrz?=QY*U4XtZ5Vz6N zcF+<+qXmS2@-M0G`Jzo26^bj zpp99D4>N~MiX?oS1-k?=GgLgKOH0O%I3j_-g}NYJC@W@2^pu17={Ez zL(_xT^|%z6-z&ebYZykbJ`m7gaq@e0M>{tA0U^uS`E$0Dzxxjn@eCo zfT4F${%VNw`RiAvNpbO*U>bPka|g!GLDp6!?zZwh8w>(j4>mf{6Hk%I{dsFl^>TR} zxwE-#8ftivH96Ay>myST6S4m(q7pAg$fDT!L4*Y*X_c%Y%79`uy$5R1sK6cUO>9SR zOBW=aZ)?XDJu%VgTxz6UoLf*2mEXyw*(R?EX@cUWY*nJ-%l3&b1~N+<`-XgRx(5le zj+j7>e*~8Plbz$R=81+ElY-Yx%=p-fgrqJMS^H`;2V9OEhQ*SAnTd(X!tsqefKqf> z=1+hl?Pm^>koDc@gHN}IYHi*(RLA_YS5vSV>y}^OV`3jUy5b}zAM4#EI<+@putBn)$bZ;waJ8)ouk3PN-8T$Vl3I(8`LS!q2_8rpDQLEQ|izbk0z!95J!Y*NdC7Q+~CmAq2X}}f{_lL z{?4IG`^Le-jvN6N_40<^!TEGnmBh6`Y7)}$vQ4zi-%|-1jTjk}BpI0Pbxuecb=BxU zE}!?bqBgYK^R%zu1GC3HF;JWP4b=YZFGR`1w!U{gA zF&X}uh}PyyS!?)?$3K?e!r1h_U2;&-!@{#_Al9thbx%axzg`E(#dEQ}Oba{RSF3{< z1GPRHyu79O|H7Bp(Wd@UboA=2`WG@Mf|lr~8^3x!R0!)kem{FWPf)CU=Q3q$c07Wupl&We5gi#d=70kngQ8t5dJQ5 z;%;pq{{aH=lrTpKUUViB&b%c;xy*yat1iqtqbZ#Hj?uy9` zGz}|Uvsy>x6?360iB^Wic8#xH2wiL`K8L}88XzK-6rM-u_nTIopb-Obp*nmtN2d5aKZ6jg96oIXm_IHX2>0~Kqj_Xq^GA+K1=#vePgK8AiNBH!mW+Ck(TW}VaeCE zr}9A8gufjc7-=snpFk4qwMR*OS^lA0So&XFg$SCAieaByM~GOa{6x_)7rSH?8`eXwStB;KrbBJ|klq`(bI*hVNfwm$h zt&fUl0yJLBW@?SA%_uim4OvgRR}HO62dL1>_ur7B_GX8_-a_IH=4ww8UVdms4u$y? z#eV@WM2v?WNU8RIH{(eZ(J?}1SOx3?4r!W-!&>=pLxc1}bjl%qXJlk_Nq~y?@7fE% z?TO3Pn0>&L8U6Xe{nJuuM2LjJPG&4&G>R9Nxr!31@WK6?BD*;Y5%KF&&1ID`TJ z`e=p4+p!Z$<3sM0TO+s6jxK<-53Og;HpKOK_7(;$nJY3Kd!jw6M?-7NS+3x(#cr5j zuQblvIi+aRpy6FWPKyH@G-KWhN?TxP!@=w)R+fT;kX|n9v*MH8oIJfqvI2KZQ2lv3 z3yFwL85CSx$qHFEbVe-7|TNOib=+@Drl*vIQ#vdd-xpNSkC9b-OSS z1ey>^YTY#_GqhVJlPb#8>p1Pa7g$3Xy;T}Fu5p~EE1fQ++#b1AdN@2v0z9<2>5kX& z3Nel@am6eisl0@^?_Ei}j5H-xo5Nbl16K~?v4K$~r(k2s{_7pX7?V>_<(;jqtN+X? zcumT}?Xz8((vBgdp8SXnD86H6kC{C zdqca$jpv?j4~n-$xJmcb@55}Q-KH8O1md{w)aPSiW@diV#qX2H_Ue}}iJmic2H5As zmSZ&shpL1jIoEjTaw|xe$XtKj-zRl5?BsPbe9wA7rt-0%Oon{ilniShJ@zEnQ1@K4KKQaON5?4;z++Q35-R+vO>=$oo0`t zwILDOoB>X_oO$1Mc=ElkMEbDjdruoA7JkxACh7Z!^UIC;bkuP%vrIK$a3pP;nlZ|q zYpHX32*9ryo(IwCViwXW$Z#b9d8pw^Adctzyt?Wp9At=ZBz+30rl8L zu_7%l!Tv`8-M{bzr5sw9XgDx}0I!!dMvqXIH}F3+bB`_UyuwFl;hdHwUId-XFit>l_lM0WyguyR zUK)7WSVFk<2_qN*S{#iWoUMs@N1+VLO~k>)jO^1+coGm`54XZ%b?cZNKQpto<~X9( z@v`w19l6LwK?35h#>sS8Y*oKVPcjKCsrLrYc3J9;Ym(+03Xe+_RBl(-+93WFa@z>UV&Re`^h$H&C8U% z9FoeL3ogl6I1(m^?P0m4KQ$M=3Q<9ZR5egtP#lrC5?&kPURGR|axW;zgS-Y}RHk81 zF?7Ziww(!i%FHP9jH-B(`={Vg=p+quA`Yk>cxp;>T5 zF(+#Vf&xo!vg>(C2smqRo@7GvGg0D}hRJ_Pyyu2{%1|F7y}F1^?nH17X;Ygj$-*95 zuq3>c9z$$5`R||8kC#OVZAI}r=Rs4RbYffJM}N<9?moB5Q?27>;x8KYQzA+KskOo! zqi#%DarSd~sORA`aP1l~K?`ML-DMz!KwX{Hdu%|-z2JI(Cm8Wf^eGIC;5zSXl@UpU zhYr3#oSt?0 z`$iV237C_?b=Q%@&*GtKmvj2(tjzlzJyXAa>TZFHlqi_D=5YMrzJKUl4%Tj2MLyCR zIWyCq>R<O4Er^Xhjbf zXc=c7F*Q$}H0E(pv&}j%*yc4rVP6D8kX%XqU=}L3Ek?rS6T%`b4YX`ce+#{$7ZS=K zxCALmYKT>T=n!(gn$sEbi2Ts2(`lZqpLyNS9^a_D|{1Y5wDk zTDsJK;+|0{cBu#Z5ty8*jcV4H`}?E&{%`T0m-nOVjvpd0r+wZPkxA)-D~{)_h@D|N z59Z(3KDD=UKgf)?^K#c@e+BlTHdIS?V3UOBn^Xzx)MrH&SQeFJ$O=!$|^3l-lU%MKc!ExUAl0xqrZ=hn$2Tnf#D>Sk*ZnPNN z=x-07$rVd)OXd*F>lpmuUA*^~DeHx>0;U_I%wd$b!{n-&tgwb62xk+UmjUC8U#F3( zXh1%b6ss@Uw1y(yymhF>-mKr~hY3)#T!%k2T8jFEq2u!T57S2d~!5X*hbfD+oed5a1y ziz_kPVFRXPEXR)+>CWGLh?F^X?fOC? zk>MWsl!WH?dGWIJ@uh=pbDXU;z^Z1}##|n;;(k8R($cO(2!)Y#vi%aZa;P!9r<+>5 zs>nILy;%WbG!V*ma#@g_o`${(A@Tk}GKv4Ujjg@fC;+wsJX`jjNoRx;yuy`_lJ7;T zkH3gnlHodW+pE&A+H9Hr68BII?c_pULRrlFLs#}m+hAr!XPc`}>F@{S0eV41d_e^L z3ASL}?yh0%-DwB!qP;hmz25j4Y~_>E7tBR}of~vn5HJuEEY$afp{M2n%^x9k@Xy9^ zRYuHEBasW0KGwrs@=;w`3=4iHK!=JB#dIlX40fv6QtX&q`u1!x);pl@zxzwQ3*OI) z(d*W$&`>l+Rr)M3gd&v@i_KO2IBdxUp2sb!G`MXBsWE`^u2SneeGm*@)Q6#v0L|;N zy-F(5aa(DV&4@87$SM1;bZ=dj(ZEw=xYZ<#rmE-QSdPdM{*KbYlIc2)O}g|$(eD{d z7uTdPXx+soBMQMQvSi+(hK|xsuespqoHZa>Aofoce*S^FL7pK{`Hfj(lqZx@)c zN|wuMCMD`f2Da27cf+2M1Ty3;b_G{c;`3oEy+%JzPvcN>i+*sbk%vfV@g~?Hc)tR# zJq{b{)*43sk3CEFU)yGu8O_F`I4f?5SjKuaK{BYBKN8QGz-Ctw4mtDa_QZaiD^a{Y zx9+fF*42o@%Ex$CrR;W>I}}&ItUtt;9(f|>T%DsplY4MLr9s7=NQ&D9)P_byjnldT zl;UfN=X_ISny+Cb0_E>6&s*lXdKFTsN=s&IW{LeNWVG6=H#r<=(?>9hXK!%g-U(^r zI7^nE-qdA;Cn8Q((Qru?+7wHZ>P$~DFv%a`K3wz`Sa}7eOzEcW<0D<8#PAHVqTYbl z1s#Vmssz}POX%31@L`lYn&TtKe6zo5;!#3|o&1y}GQ0!5UHum9%ch2kV^qlp9UHN= z1KtD7FdlG|7g3WFm%(z&&OZ+E%APw~@&_=Je-fh+_1wL(nWD}gj_)3%YriC_J8>#| zNrmUhitWdYN$dV_je!=)WT;`JJdpQAP5ff0(dOvD0qs(2w2I=H=EXQVAn5+%I)PiV z(KiOezP+(;?|}XXUw9hxi}JaS7)gvPJ9fyJo>chXmh?`Kst}@40Hc6BlexwREXN}K zf0FNB2R}i@(g~v)DrBzX8(vGqDXq=TyFv=!dUmSL7^Kud*Tc7~xU z9V6qMk)9laDvcF#1SThS22GD;BFJO5Tnu&I7 z00@p8OP#6f6f9%b1iJNsT#A3r$1Uo~+`sG1zlef@qIMaKY~GB8nt%J7ATuR5K!#bG ze0^Odia4)m8m$oUNXbsydeIC+M&qB>(NWP&E&W<6Swy0P2EJb8 zjHkvT@!sdf8f#mI{Nq8#f`5GqdxZFO)r!;^C2S$WB;K}18nJ~WS}zlpA3wiOLDNIQ zN*fBj&GH9-F*#Ff)K$O1zl6n>Se3eR>wVz#M+yiWRR6xNchV?PXkGaMN>~in`f)D`tK)@*g@c*rwkc|L1ECmAE&j3OWJb;9(|L2h7TnNnQ zv&KDN%oaT;)s}u@7$L=L+X0}}eP!Fd6pW(i2`IkBKk5Rq01`$Cc|Gg~n2-R%w~*h# zzSvVvpZ^l5B1-pBmnBZmEbT5YMT#mdkhxD zi3sTO2JB7)0geO!uLnS176|aaOOg7#7S{MMgIr%OaZauVZKIP<2E?8)B)M*=XiLOg z>gRM0Aq??1hsT&sx4?2$%TXce@DOnxE;kI8-@_g*cc>Y2BqSP;u4GFms}*N^#oG6? z(%`q;D8{Q#tpDiF)VTbpqwcN-^c>l6oohi0LX8sb`RoC7}|vYm&29@i1{xv zx?u_ISZlw@cg3!?sF`lM*GL%vP?FZ*>7z5@=`IAH9w6#us%HX07>fF?6I1;vgEBJF zJ`J)YW8PZMy0|cgEG)-{_wm#u@$x>6S+YDnhMp)YdpU<-s*t$>xF$htHD-Az2a6a4 z4~PoJpcdHhQ_aaNqpy`L3m(n;-V0YY$$Bw<)OR&YDPeq;Ie$!&2SKZQfWQ-*T34o4 z!P_mdt(prpz6IP%R9?b2+nGKtl0{dz9^WmoW_V1mx4nvl1MF$4=>_ap9C5Tbp7K2T7~jfWYIY?LB(F z1#A1LfJHEH`Unm2&f_pEa*Ssm4;X=s^*!C44MwaGUnAGgd+{e-9zM=xmXA(zq`oJZ zi&Ds=ciI`t*CL)CCqWcdz)pvAn?0#4A(IKn%mwuzksML>lZ47f;P6Ej;qv4{zR zsR%e2I~KE3)P1qUZNFHN02Vuiz`x^|%-54)OTrKNR(g7>LK72)&tro1oUOIBv%B}H z8(!9{PtNo-hZWr!r78cu8z;$X3HT_cCG2ix1zaq)53gr?OBo)KJA{Fl(j4eVpz# zz}b+(t2n$uUtoCaCTxLm*i38`IZ}#S#JLOi?XIrj*K@!Ai#b(7V;IYX((V@Gj_*qZ zVXt1D<%??K{YS$lC7s5ZBeYZTmx=CzVikofsL2qYi#s8 z@V%(z!NH$pek>9hk^01IBj2y_V&z+fcAwViu{l7OxYOi+xzNkYlhKrpKc(k52iE%1 zkRZ@et->|Ym&Ag1+bBNguWXiNDtc--mcsQ!SO*|~8IZOVwkTc2T-k6Z#=tnW&pnw? zJ?i|PEfXErmZsVKDxATnoh$KJ4imBOm?R_?Z*9=&eqtPGl#NzW{mY{tug?CUfUGYy z68Lv3GXbgVH%bKsL4J%dBTYpyuS)tDn3ErdK=%znexEfQ*LYt9VGr!T+jK~`@rA8s z)CbfDL|GN(I&z&shsm)q+uVIARV0`X_^K2fbIqe~CgL_8+ zUj#er^P+3)r#&?^lRo&}3O6^n8=5h4bS{1q^qeo=ty#7OdIXr62&FTGgB9|v@HeDd z586o~OAG5LUti^J$cd|FwT?)a_=iAk6|uR=T`QJwNb=|(&D~hiq)zoGMkS_6=|uRT zG{48z2%ymZ8K60fUn)5UqQmBGLqc%b!=StFc0$I-%A%!J*%r}F`D~I<4+*7Wl(9-w zZWVo31TP?&kHDSu1yZj5Wifr%Us=Nw61F1lJ)MGpcF)!1aCn1=UTbfgNT z?eIkFr?#x z!WGB~eqq-?KWyNK7}jgWzAha#K?p*JZQp{&eQ+hdPZ-?#M6}&0^{EbtPKH(y^X|Jr zOVw~Sb%2YCrB_ImEz)0Z93S+WV=uSFC62GnFd$%MN0W@}zO&<_4>{uUfU2|?@2}|r z0M*;`-fp?MgdTd;?Rg4#qrfNHkIg4%4K3f<7;FAX!gkZ}+@<#8D5LEF9 zU3b5UH6Q1c`w5ccFh8c7M;LzO7{TN)hp;PbM9dUAL0T?1@gyHo^|{N9oPYOsNgaOm$Km-tj|2PuFY#GKHu|JJI zn+#g1b;h6GQa01az{4N|Zd)ZD^$T%qggH1+9Yf2N>O@Vu{FhPG+H%gJM5F)S=}-5P zh=z??=%J_)18ch+mXRc1{^TsxjTA5k9&~(EB>N_}`n;r3cWqxiSUAWJeTm!5rT*E{oh`G#%Aje! zb#vNmC>>O)%RXQ84@ho|tO?tMz%<_a3Ta)-NGXYd0}uTI)H?lni8*Oq@y7MhFHMGn zR;+nQ>WQTt0~e228*I zeV`7>B)sQk=oK4@cO#KX-3#C{S$VYuC1Fvc{wSi&VbJ$DD@rhmTUrjg4@sXc^TSEX zMNq@PTUfYOWVAOGkP;sOvI6jqMyYN=9*^Iz# z&=t8GMFEB~DJhC|L{k6ll7}Z{M?&_WT^mdWYr8cT1V?VRfMsG@r+=&ZeEmn$B_Lt| z!O~1&wYi5I_uB3@{m8+pHT$Wr|x0B-hpYj?{Hc&MEv2L~zT2Kf?N* zJ0YVk(#Ax%OY2^v;UkxFB$QGA2i6sU+U$T>owrB3HXiJ@g9AS|FKJR}zLus*pSNX^ zqM-3W>`Vodk^PLWX3u$}EYbRpE@ck@t4LX+RhgE2PCo)j(;r0AGk(>FOx>ugeF$Ra zS*u2lJ-VkD(R#$rTWz6Vc6SY*KOAJxCed6!m@-l&rV5HNF_&~2&7p)nHmtu6Rty_8 z0&+P8Q?49aWr%mukb8-3+{B57y~8+G9Kt&QfxP;25U{kIE7-h#E7Mhv90Rr-YS+zn zsz?@?*t&iitjG-I=vNjhC}}5v0UO4Wy?l~%l#rxrE`1)*{aRn^EqjsI-scPEe*yr`?4IFiWMsZ8E?Sv2|IeYsNJnf_=S5=wBa}nCLD5%rrd#(DTI~!3Gbqjgj(5 zVB};|2_4mkXhdHyi&rJAi_qoH55pnozgXHTpjHloJE^h6a1YjJsaPa<(T`$V|2J;* z*o9w0Z3u{OZrRfy9;2+=28-exS4J+-Q%tg@}*guu^jKV z;shL{R7dSYrn$v1a(qp((cpTBxO?$cj(Bu8O)ESQ}HKyt04$`Q%=OBp$f3&_l=ermWWlRCQ(#;$tr%}`Ce7e9ifB84tTP$N z!#f%6IU>3tz5wVA0I|wlwfH2YZMcc7k5LUs%C?HGmM<=*)I*U;Z_oqm2x2sGHf;XiFM$L zen*K+OeS+hC!}=?BG~*`7?Fcu7^i&{+#ntu*K8J3(dKMjQ)4DPBVKq0Y);xZ=@AD( z*Dx~~vQ;Il+#=cKM66KFq6XR+gDU@M6)QzDO=>+Kez~)2i3|fG!l24!;mDboxcJ^M z_j-@i`C$dYo8B5U^U2v#Z(OhYg>HFkwqjzl-u53?J;yGw-xlWCiunmz{YBANwsWYi zs%&|PPL(Zxlr#N`n^XQ%m7{0(+_ydwjDmHyyLXI&UBG`}+4%(SdI0N z(hzKklqJ*OEsJCl1gYt*extIDD)`y$Xh(ZJUzvuvaeTS@A3+Y120!Tj>mW= zHl|=sVe6B&3Ny+S)Wwun97$Eoprh=XL^-% z9-Y5Vmw7Dz`2yLfE7m%eC6i($a7~am>j>|MeB0UUW9)?gS(ygqY6bZn_!^M1KAP}Be!a^7Hq$~MMu?<2m(^QF=VWJiSsqbw3WX=@zM8gSWjsY(~*g) zsQqstBEgp_oG|X?h+kfl&uHM5i6wu`TD)x={b{n(CP5sXKc3Tbl9sqU*2~icVQ*GR zERaEw>WzpIKSR!V3n_K{RIm-pmarD(_7l$9x$xpKX9A3>TjL?AbXAM#&@bh4QN))* zl2eGc%M^uL%NO{562L@37?-`|=~>iy2hBDc(h(x9w;&X%a@t)!qMir^Z8^A!8z~7+ z5+NhgCCOjrMuO+nyt|{a$4N*=D9xND&5`jfH<6q~fZyu{g-cfI#Ks%~^<3URU-B+Z zTRK!?XCV0b8ZQit?P{n0SYD*AA%Vr z%Z&Pkn;E!g-K@SgE;|%kKPqw9At6@a@-W_Qnmtx5!ISnHeyIcVgwZX z=Bw(w|43svt7Z}J?~kfZf5wDv5WCNYIRA#^!U)SWKH}&FACDpTP79*Lz!=WaItZby zDtE`?jeTHf%d#wWP& z>F=^|!*W6CCX)BQETfX_@5)~nt=RHmLvR04epUXK!#FEFTwcSaZmFb363s~`bJ8?ue?%27c7h(TUi6-bjBJb^&bdT4Zwl9dNl>i`5cO%(KkY$;DXBMU89`&Ja z7*PNn)5_vkJg}NV;xsS1C<@)>S$+(z6>T?@g=r=?NYq_AY!uOTnJD38Ks#!X$Orr! z(B{o@^mB$N!@h)H(@lH`!>}w*l(WCyI!0%lsr2Kj27;(QNfDHOf`f+IE7WXq9L+Oz zVhGq@$pola^p~x# z=WPS0*2_td*Dwm{Gjdy`L^!JSDFG_TujzxUee2?VK_rrG!bq(XmdG={$&NR3GwowG}MSt6{x<9nuXGK7})uSSN-|( z$I<7vGL&X96wuEvH{^kLVWunCenynvncy8C0gDn3>XR6R!;)1EF3CuhtFZv~P-R!U zHf>rX?SO5>9(!7&p}Bz@5er$W9{UIf!or&CR5T)H)pgL_s?ckUGs_p?N986 zN<0v0>O|yE&&rq|icsC+$pUiHcL-4GsV!ydgN7y|>LAmlt_m3JOx1^FYz}+PuZfq` zSH2cpe5}s9k)?x#QfWn6%os*gM?dMNLe)6PWb|Pm?#1o=%Td(FDd$9c&5wwWeh7lO zEHrc`GUy&jWpV|;D_pLC`QEa755_(V=0(Nh8pmso{wDkC+I9klk9)0$-{y`%5U^iK z6^G^=^iiNxP)D{Fq9xEaLxuY&q>nVC9W>MVsE2P7(|`I99Ths`-ZM2$dBSzeRP0+Z zT7zUcBHYz8-KXqU#hASxR2&QN(@nwAlYx@yXmqQ16G{UzaeiF=>;ud1g9hDtV#E2} zFOJ@PzulCz<-NVk@4q-h9LZsa6^gN+OOKd{q#u#+Fcoo z->G-DTlP_EFW*~;WTvia{5F0hNj2jZ!UQc4;8URU$;TjN*Hl;x8@d9Jdjg3X^9>_7 zOP64+I?2r&;2bgk60)wwU^E^`9mxw|DqE8b%gn8U1M5C?D=?2W6e3a}%LDsl<6P(2p7AImZkEiI&e zn2M#W7Yj?$D-O|2fXJ9N+$ETmCm!H|j}ZO3T6^E9oCh|pc2yw%1KhTLO-0_g3UqfspQe^L|&$Y9oG_x1HE z0#B7{FxasVbHa#dFxWMlT=v=+X=ZELs8`jL#WoOCQc5A8zNh7`0*mKi%S_X_qL5iN zZ!f5L8$y?AO-cLb_YV+NmK_EuR>pp!%432%4YHUVw*vM>y?sc#{}uw4PJoU$wjopk zlir`z(+&o2!Zm2Daoi(+lEZcg)VJ&yiJsuG@ z?mI;v^*@skK_hR}rOe7jDQAvlaC!eCm5KE=nyJ7LM27QIL~`FI0-RF%5b?Hm^-)aK znfC&sQ83bu=HH7e7K&vf)2`fQi_Ie<$~_j#S!>98h&iYXheCKf1;f5J^}k+hvN^TL z+iSxPJQnucy+k?_fG8D?H@1u#hK9cW)6hSv8MLn1*~a}_kED&TPlW7xGJxPGLU>$8 z$hU8CXBunTDnco?Q%+ofq{@+j1P-KkI#7ZRthlOvAhWVxWs^wylPXy_X?bzdmt=>U zVfp@Ny20Bne$9>XWS=MD@qhmQjWE;4gA+qAP|v@&;4oJ%0K%P9O2hAhdkiO|LdIff zhH6612WA78KJ`1viXpNWw95bf3Y17k{^m!{%I{4^q~qvtgASIvf#5a64+%XyH?EUS zvL~s9J~MD10w8uN#_)}DBN5!oN)7O3hrV_!GQ^xB5pSeQ4y43|FJ&{L{ZTX{5TjAW zvCKdY5c{w-99xqd;Z`~(&nB)7N7#**HE07o0Bm9-%aJ0Kyct0g%1ak@CSg}|wI0cwAG(qI@F@>b;Bl*rzeOMkMW4fVNYHM9KZ z)XsD@5{cr|%0P5N$WSMpQ*0I0%yJho8}}p~2j7L|egJ~+1R>e~{8bnUR7g7uo*xz- z3nT!!ZKXwT%NC9@j)!3-Z2pRFYdS42{!V1@&c*V-aoUY&jc;c@Gy@U_d`}PD=?e0m z^|j*xkUOE_3MxvdO!p|BmiWr&ddD*66NT~{N9GoPh;5Fx@#bpd`us(#|GIGsy3QC& zEJm1T%HgD6s@7vALZi*J&MKwW9+0;J^P*?RHnif-Ky;_sA(t?#f}wyinSeD)tmd%d zYRzk#oRNU+?HV7r%(O1-{f$UuB2Izb2QOMy4qpT)%VG|RIq*S*uXAX1O#n2`908L2 zJt3%O|S-9yGnCKzkEi<6J-<{ff%v^s5%9orpS zZ+?iQlFDsgdtp)X)W_a=bC=!zXwa3T;q1qLU+oToVB0N59&u3d?t3dn!sC`E(Qe-_ zM?y_LuWQc{@%@xAPdJH#F^0^&lutzw5yh9?TSBQ9_Ue$Wt*gPhwg9{E*@O1zVQGP#_^TQZpf!66!f#eWT2EM{TmXHZ2W6?FQX7rLdwy)aa0hR?XK|YlG(@>V)krBhz+}W8e9gzr*(9n+t zoga|5ld)#oC4(d|4w`ut8T+qhwQy*LZc$%sGF9TLAI;mPHuQm8DEzcQH!yVOQmPC5 z+tFb)cUAV44Q#2>v%ka&uX;dCg&HZ+HQi1=vezUrm7LFYC@f5p`PX~u`CM~Vl1Lky zH_w{Dn#rB41`ijPWgMw`5C$<76CIuDHCS11fYD65;B^DzPFk2B2@~^=go+`Bp}HLL zsRFIZQGdPlx#E|IpNlK*Kt-}V5m&W>P;6ohR{cVzPD@*(X8w1`{1ML*Erjgr&Gf|7Q)cUGJ=d% zjeeXz_{qu_j>IOxBfE~9)FZrikgYTU)Zdr#tn_iq-Im_fwYmR({||Hmy?m+PG!$Ts`Z&xjP-TZr@1CKQ>=FISo*P}Msq%^wcOYjwRXzk+3I zX*u6aq9xj@;gv}w=@~5V^PKSt*tYd^b6-!FA$4iNcsIkJe>?Y#^Bgf8Mg+=>YB!XY z3=h$&?+{6Px}BLjgiXm3Xu)&^Jo70ylk*PZRRV+R;0+rZ#HZ^9yM1Va&ZamF&UnCt zjc=JYFZk2(v*b0#UCo`bwTaQLfcKAD^kQD@B#=#&fQW2AVh+Hy{vvo87(R?lRJ&je zv1Pv_7{n;a#xB7?z$CCeT8xg%XTQa*$ag!3w;I#QI8vchj} z2+hciInlS9CrR)E^qd5W|LXlmPJ;wMRuc#~xx>8i`*+4`$QJRZ4q`pW374MFhEREccs{Ln;dI8_ZU58FBsIQs43+}Q&^1Ti zd|L>5-c|XQhy^8iU$~dF2GV+?Qzcc|uX&fXH-DkH?N_GuR`3OF&{6=-ca&b=^D)-* z9!lS5T((SL1*WcREvV|$9T?8cPT@2<6r453B8aT%C)m^(4{@WkP~Rlb zvnvKxP0c6fYIYTu+)Fv6s9@$db@(L1)E4~H=n)|#9#a%my^uzN90O5*Ed~Xl_oihY zA+XiYQ6av@kP(>w#o@+WSdxog?OY?%%{8ggWQY3Q5E_c6MePK>qkHYD&mRKgX>!M`NDl6y43t^syv3LoYK8=Cbl%zh?=iVyx{mufZjn1KPQQs$Vo`C6S zz%@_ky^A^L55A*MZ%UTiV~+4p&b>z3J)9n9VhiRQk^8vLb%CMk$`)qD3Cm$CS#|I! ziK*9+?1GINm6NJQY(x%LCq_7oN;-Pem$pnxc zQ{nYoOZ5;8rfZ^5c95JxK!@;*{~q33O;ul`nU|MLal)RGk>IaM{lu)V2925Io^SeR zVMZ(ZiL;{9s80dO7?XWC^7jXDZh)OEhr#C!wLF}l_XB6KK=llhZ<~KykeaGRB1}I)8Opt3I8Vcr zgRVu2hyo(-LJHnSF5u6%OgkUA_W(mQ5F1H{IwX zOc8>)X*y=dJ|NAa@2+|O}r9q>}<`ww>f zedHO8&nInW@Xo&@+{mWrTwZV7F0jBLF;jqVl9z~(-}x4;W=`-Gf}__(x67gAFZ>=( zBWs}-oTi7*ezAvWE;ni65YoK78`iU^ZN@1APLgD`pZEqPIR}8F)jy-0Em@#IEV`dsN$ILOt6f-l7 znK6zjW`>xVnK@>*V`gUB$*o)O)$YCT{n*;AIzLX0G*auR)oMv!e_|{;Qzf%#OM>Qs z3qsxvuBSH0z+%^0k=>-$a;N89(m(acmj9S33%N3}q%EyKqhAM}w(nb41 z;^}Vc1Y9ajwA(6_w(l=+hJ2O;uS5>^#xmRNO3w1T9%b(IzFw;Y!ALAf#QOQ&9@_i` z>^5MW$W-9)Wa&?b9b!;u+jwRF)c2rZ`|{3*$O_9@XC>+z=3%S#*ZznM%tUxK)_+## zUw>Qg0fvus`-pE-Q(bi?HK{Fc9dQjcYv=nm81&}+k6ZG*|+*N*3 z%!0B*WxUZK-7G~UE%Hx`a8bJnmHm;AO8A?vszO+8b*~X6uglHTKb8JTg~0?0*T}Dl z>d=jEsSTZZ*Bkme$P=WW#!6DT_w1(l`H9QCtJQ^im71S!a zHibp(XCes4?(fU9?Qzpw`DO;eoz3a&qES=UB!bi+aZ&mL(UFfA&DHI7yJA@Yr!+wqFncMRYvS7cdC^{bd1I zDwAbF@%D?f0l3j%{_eZW5aP*$m6RQm^e|c=Joz5^wRO6NoV#b<^XU#J-C>X^;V=g? zC@|YD_Mkd)U7C~}_DYR|;b++%8a`@40l^h`tG{=zB($s=)#I}&Da+Ua!ZLc>AJFYW zBpH6QIH|qUwXF+bLqWKt#g+1RWmnfi*o&?bMoz`Hi02&SBXl*6$L}@sW28fpnj~1;2{zTm)X+t;+Pt?xUtRiBLWVr9S@mgN9^YzehSw{&6N79%M zFsq)-$J_*p17yS}ppK3%YU4Xc*Liq;dvX?{#qS$CHzAdg-Da7ml_$aS6{^4Z92j5; z6VT;Pmn>FSz{tChV>mmUgmMQC&kwT~j4be-=HI%$zb5;S_TkSP&bS4H)$FCk;+3mO z8fkrl$IQfSVEe#R>yADTl$U~%liPyoT-|R;aPA>~t+=1U>f!t*R0Y2weSA%6uKit~ zbZ9$sv%(`A3pRiX)f)&R4ATwkHow6wUcV#Zw_u1kP69QuM>Th1j9B1v?fGX*A1H7u z&g*yivb#eOJ}55=kBwtv^@~Ixam*@~<1-$B^(mW~ zs!NvJ zZLLficO?)v=+nJ+1;{;k3eEC|`}-Fx1C)lzQeU^E+*_Z*Ts9@Z$1*xjsW6-twq0@h zn~Ftx7|QdPB_*|U7txMzplbQ~3>b1>oM3*tgL)%cTI7x5q+s=x0)RvH z^axKKRh%jS{vMC!q8{AJNc=Ywdl#xd5#9`b7aB)eg(8z+Ot$V*hlcOR@kkf?SU!Bk zJ`Dkq-cR!v#xdkbF14nx4K1_f*|H>G)8Vld7R>@RR{%q?+D|sRmWLWQ^IZh^r zuADYgRkhvnRQM4d`^z$dUvHDygx#9R{!y_0!&;Edm*=N6HBnwCzYh;wrFeX`WghKHr1!9H<3NOB(6uQS z>dVv0ePeSJ*8E3w(X;y>ML)itz?vtIs-q~Ww{IfAL#5)CmxIxk%zQtoo{ z6pRMNA145#87Sel@~!a?7IgHCq&NOke?GTTf352Vyg-L%(ytoZz&ec29o(|@O1D#| zfIpxlNRaiRt6gOG*=bNZRx_ZCR8lsM@qDt+*~MIKa?Hkv_)s0Y5k$k7khmIo!d`7e zieCKLGs0AEWgXG`PiO)^*Lfmq;?i=igGo{xFWlbJK!SZrFc+-KVc$u$Gv_?Cg2@n2 zMfG{vGxV3miA4$bNIM5x9Tz#hDben6vIoBd={?*#H2R15LE)FHUAIGy3!Tq-vj$(E zQQkfcvU;u1Bw;S`f`d5Q^3iXG{Ut3kzij#SIC`N(=dJ_M`q!X~!o_YZ&`+H3PPs%_ zO5xl#ABipic%`ff)@9XV_U^xbyW!oXO33_RJMFvGox1d7p0jydFX4>RSUY!_5r6fM zY+;bNC@uT;rOH*aUE>wX+Qovbh17Ymu4zBlB(<||Pve6dS~Ti?wwekfRXx)@qI36J z>S0K;m3N)rD58}P|M2&S+Ea>82vMaABhn!m56Vt+-B%*Sqmx;oY^}5V{zi%|bgByW z>bWRP%PAeR%`*&q0%(VMJ}G}hbAlRMy;#3liKRwg_c2+l`f2 z=E=4luBh@i{C3xcb_{nv9%gss>TK8x4@jp#?GDH)6?ar)*2^Z=f%46xCf>qFO_y1p z8klL@upqrhaGL}k2t4(V8pOfH!6$HBz&69G)w^ap9h^PeZ5dR<uNdhr zBF2i?=mOq0-pLmvrQNr{YottNKNAwQ7+_@m+x>htFHTlN&pY+?5qF@*@)6;+oNH2# zho- zp26(!=t|s+Tp~YxXZ=<`U*Q+2-}6AJI#viOTUt8j_=Bl4DpBZGfL3k}E={kw=A$vW z!(YQ?fYqCI=#5oR%O2sPY&%f<^N$i(7cWNDX&UF*C059|Gk9o&LfGPplZ&DR@`{#6 zfo7+*Qn8Y_y`N2P_U^aLT&}zM*0J6{jq6tE^d%;#UXQIIsjD@d3TZvA&4l!C`=oCz zwaUtC(47tp^^V>K$M@savSj_(Q^1PVbRTtfeM6!8LOcd42sQUhbvNr!K9UF&!9PwZ z5J|xE`NpW&7F0L_RJ%b~U31tYN`&=rzbloc&6QG?OY7BTs^MxrTER{9Ce|jshjE*L z@Q#GxJn$M(aTWNF=;}#wmSe}b(kdF?h6~>63JslndJxvvcX|Y!CPZX92Jc(uni(V4 z5$mG=re9*Awp!vyw;ea!yk%|5p2J#u@%q|PAE2c-f|GpQ<17VDYOmLFhp!VP!bY$x za#qz^g~)T$_!A@GHe9cxT)acMRPCG(+vhh*kRFslo&^BiyKV(wfmr+>Vu2$9q0lixG)egj zge;GcK<*!U5A&h4+Gz!Dwa*Am!;e#W*l9cdxup2Pg20s;aSMjis9uzsHo;hAn4gYf zDZb zvj^J}>fV-$1-f*EzjHU43QV!DDz_gKRkO}F@|3dkZ43AkTB1&((LY`#d932Ca-ye* z+rQ40+4;g^h5doR>%=wz9;lQKjD=+00tZ?Br`T2X+>OX0dFS1Gl^vWBzeFUkueyrSpJexlPJ_7NikXtu3-f&}`%fN> zTfNy@d_I4Z+Kw=D%}un+>T_Gkd7W=O%4AgRLuM|*YHWh5AQuh4gl6?o`?i*`=R%pV?fHZmYf zgN|P$P3IfEiZmwwp)@e_@8Wk0jf6X7tA**b;dkcs8AB8r^tSc@8PGtX6xwgTVc0hf zB9u8zb$pI%gwj{?UxL-r+Quo~Cc<-hHcs(+OB>h4Uy}<@kXyFS7F*NXwH$58@NKsj zg|L-v#(@1_|$h(l;j0FM1+?uPW-7-2^62QqT4R1DG02hPMpRWfo^3Re>r^8omuuYS+xm6@ z>NzC2Z|Y0`Jcy{2*``-o(OwF1{3`N(xnOAX_14*7J)B2a=6@A)aoOIDqLHr%Xl%H= zv3|AAsT?CB>BmO3=-1;n(By8!{7y>DgM5xQtFCZ#Ia8{Fyl}Gx%DL}uY3Vjo6JuRR zVs5m!bfx_36>8r4ii!b6+$gJI2UYo@X4U+gkuRcm0Y%BVWp26Y?T@_Mi^#W$&+moN zrV&abP6ytivdYt{XGt_iHLS#2985dtdr8rs!!d~kub;fgNX|nh3(bU9tG2A%<=lK? zbdMOLoSy+!ftp^t>(0nkjN`pJM1^i!*B(5WSIZWTLE(mG{)?Xjj~Z@_(xK(cE6l7_PS~=DR%ZaoM1OfGnp5@M}3lB@J4RIv#?>GgWHz3 zu;Z~l_=D18_+^)n7IXdfpvo!cfGQTU+Wc>TMzyxKCQE3=Z?57y!b zsXG0rCjziMNMEm_B;3q>^yg2?xa^lNVo)%V7SzvB_8pLI`EG7pbat-e4#T<7KPstUwtUvy(cBK^@XO`V}9@t1-ny(LA`~ z6DdKq2Hhd)B4QtT@gW;oXG~cJOcuBkKiJ;g*$)gGIX+Gnetl4uGsnUnnEn^ki9zz3$?0l)Q%u*iRQ-2 z_9h-pi6~fim7|fPPmo>c*)(tL`%{8N^>i;R6})3P?I={*+}60}R&MVBr{v=}YHfNJ zg%1#qGlIRZqDEJCOpv4+4GY+6s;8s`j96P6V#>|;ar#3>FvF4d7Gt(!wYKk2c~N-< z7=no`n3BFkBae z{nqDX4})V7LP3YN1Fas}O5U}p9JFT>=Z5r|D{%KkZDIjqbo)I_0R6?h%W~&W(y83g z2F+Ub*TN@25Jer|mAHLqwzvp-RVEiJGuqB2t(V*HKP(t<_Ad;YEST6t2%?(|6ck~y zNuQDWbNJ}KP)It{8M_oK(am-jpc~@RlJ%@5UlgRatdUjib!q6T> z@ODpj?j7vS#_rXx-xc)Bh7Vt0a*o*YcUXYRw&w7X==^E`kzAl}7@y2DV{H_{exxnb zoaO5QTdiuZDyd$EDTwpzMBr*PahN$M98%s2TAL{id*0U8Ko5z2*=u0zZ>fQ#3i3+$M(OxWLbjki><>|FZm^)WfE3{y{{>HsYKhv&0O zePZrr;^O6UZ8icP2>`GJ327XXga?2iF^+(mX(&KkG#UVG?F;~z&TI0XQI7c@8ys95s~KmrG2v$iWJzjeR=OEP`fO|APlFHL=Y)hmZzWq;OP)F03eDB zB8XvK4utkJ4;3N`z70g&|IE75c@Drvp7w0F6d&t@0RV&_(fP|58^A(`ulrg?< z^T6GHGp<1nfdsGu#4%3+*s2}}%j5Im+68D4G~ss9CGNL7+S?=Il0WpZ6@RS%o(&0_ zXP9oTKaG(1plKOdD3V~;s)Y{?I0!d`4_jn_VH7#|(Wc7;Pt7*WU|w!4v%*DEJD585 zZTELdy-A!imb%-~a9fcJpC(eo86iPiWRwRp3n~C`Bi;bqKFvotyGXkp*DVh|1WuUv zet+BR1@2m1J6HI!717>JF0J&Gy`9egdP(CRZM5T#9h|v8LY~}5A4hU{_xasLV~qg- zI7`$3T@`BGD)0P$=FPgKJw}DMF8_tlX?!qs{x8(|Tqv;A z{c8A6B0q2KODSvZqI{Z|P&WSNCjtOSk&1tcdP!D@vr1ts_Eq9o_GPD6)xoVMSCgR;!;Q6rt|$%d$*pYj_mlS6NUV+Lrr76f7+T!=SI%`upq@` zplt0_mf1ksp((j~>m#+cvQyr^>NxYauIRIX`s!5PQIg~ z*}kZQIo{pj{d-Dd;l4{HumVZwD=On4qpJ-2t&v`z+c?yJ^pf?52!VWH`Gji$gJOkE zxnT3sF<9894~?{CBNg&hY2DV98CJAY;n!0bmMqg`^=dLcPLlA#64Su}v@qw;5SDU2 z_5rWECX!Y0j=AqjUXs!3yubCNxHle-TQAq4Pi8b%)qS(I7ERK*zkc61R1@4}8#fI(|HT zK2N)Ct-cA)C@*<BS4U z602G~CTzUU?5})CxQu*Gg&GCdui=!{_OuL~ziP$`J@U%JdyaV_4iI}KAr4WhmIL+R zhkc%*ovRv($3w<~)PsGp9)n8lVyP6kf>lX^UWg&XQ-%!2VXa=8M;GZKy^fbK4Vh9K zbo6M5)xcarb7oyDPn0>p3)eQ*LB%b?;N$&g9q8P^Df%4NVky2oWxoMV<5uRZkg?^B zbBKm<*lLuMFOhOchJnkPpx@oU4yl40^SsOa?gWF|pAM<_0F~g{@`!=Kf(2h%k5eHe zF(0cRnxz(7e4$GRIhVd91BvFHS8>Ctvu*V#X>jX7ThHb6YQSOvc5+`#_?-^myXpmB zTEEspHh;c9Zpl7iS^tIOXs8`;M$d1qv)&2$^?iAojlo5+%%r7|u z$RWY#0fs1F(1a;S3IMUTw!SR#1|tUVexTxhnPL|6rV8B(XfRAM^px#iQ&B4%@H8 z{iaqPVk{AzLNl83umQR{En%@WP&HJKUM_?PXPC~z-=*E`ftjbFCaR3{EuyHM2qC4Z z^j*uUPv_@{VlB>^C&57;0ARas#ec0^2T^YBLnoI@zjz{3l0r`DceU)iJJVP+K$jM) zD|m%@0V)qmYr#J~WznTeM<&dbq)Ql5MrsA4)qw;A2dNza zGV;=W?D(^>maBpC>D0^qx&t7H6VSKlkL%f1xDgKM@T3e6k<*mVKj7_2P*0}>UxS> zgPg3VlGHbPcVmMC4$pGWetV8I+;l2RZVMR?ZRqTgUYuczkv_veArZ+K*@*J{Sh1;~ zifa0%LR5X7D^!dYInPRCA&hWw{S>k}sNuv)gsi`P_(%o?2v`{gnhYN?5`qWVTas3I z=W|R_G=9d-O8zK~EQfhqc?6~Sd60i`LNRSAFT=x@KBA+}Mot=X-=!}5q8XP-UBf1C z%r=%*Tw|+GR|-=!QZ8=TJw9mX=IRZ*6nIf zp_>Xr^Yi=>1cb`j@^4$hPYJlEW~1+JN;5c#BJ|aS5Bhv;HK$Gvbk-w!A!t*p*ouz3 z9=S#;uy`m=-<66GeOJF$j*M?C!R-R);2%3_go9kvNd@Ghv-|nKP~A#*yd`6S!}$I+ zIFn3>*4Mzg^*nU96{z~Tfn~(po1nG(t}FpuS}UVR00{bsvc|sd$q{Tb!`?u+u>1|( z`sDr^ikxJ~;;rhUBW|c_^oP-^ZijndhMp{HUVR3KP;Hq*^Ef}{jjkF0AE?%RLQule z#Io6{*LwOT>B9Q5x>(qiN9XzY+{ex=1!?yaz3Igrfm^;cibx|fchMVcr{ZaB^#(=B^_N9>L8|0v^n~z^Ax3< zi7dM#1znsXUUN700IWi3r}8@GPbFubURGhR@@2i@n`6E#c^q2Xq4wuCF~XZlwAqHH z7}vlL0wuug(LlVB4{djFiOY`(6Q)^swdc>?mrh3PIbTVk+qevz!K}nKuV#Q-dmEwx zm-c-h(+N67KJc~0q~344WLz4LLjXl!WHAt;2)hs1eB{BGZEI#^qBSL!LTYI18yoR5 z?bm{*r=^M{7P6YSAB?A0owMt|=_Hws?94oZq5ZuavzI&qyLRemd^jWhW6gG-klDr;CvvL94%;rwhXFi6r7#P=W^Z5yaS_+ zL*Xnz5(XKx17ySSUG6KDMQ9fEEt&TU`@x1_yLKkEUN@&BQ0FI`bv$|BY5#ovngWu3 zn5!k9kBE+S^)zyUxmR_&kA?f31lijX$!<>4qBMW}Dbmrtc}>FSTRntffnNKM6+Tiv zPLbHDTo1tmd@`JC!H|&G+9WNsJO*j_ksR!7Gm>k6X{xJ;mw0bL;^cKG8iMpf&c1+d zL86($vZKC@E(0QPawW<++sVKMd~dTd|NK4$1q;qNWhOC{FI9zKXY_p-cw!*?YSX9+ zKOg7YRQU+zcP|>MW6cNtpucYMy!X-1-~&AZevKr>vIqV`X&T{Iy=XhOZs&ZlXDgRQ z#Q2Z;9U=9DgS`z~odJ7pOx_L`-s*IO9ct>+E5>G5%Xm6o&kjNW75!&X>Uii&XQ3{8 zd7XlxzEt$zJ270Q8?H95d&>m}y23_N{^YW2SCwdBf&1V)b~0&?*6+lRHBUBMltL5X zP(D1p4>w;TJj!ZScvTuc4dZ3n3`M*oX8(sa%>C1bAf3m*WRIZwB#T6=hi)}>rn}m<+w5d)f_W%*gHjId zyfLH^r_@mfDNjnj^1BWx6~>vg>(7?Pnuffzko-&2=J{dwb+TevMKYgLWMx(#GXn%^ z_=JiZtASsQ*UR=AKdFZmbAr<&(iil%H9{2_JkF4F`Y049yi8;?3c6trV^~IGWjZZc zy0_*4cd zn|`}KIq+ydoYN5|%G-}O_qB9iU#PDSl~T3;vfCnDmq)G_`j;+lnD)v)Y43iXi>>=Ild?cm0%7fEw zb)GX^hL#%e%t;1di$D7X2T1%+Gupes&V4SIWIBGJ93UHN$__SNsB__0Q^8px2MZ0D zD{w|H@its@IOkDJa}A&_sT0HYoF9Q!2f5-k4P8DU4hBiwH_B{L9J_WvY^o_l50V*?Uijb!$SM z+5@D{8$O$iMoUuy-Te_RnG6us24M5`ygr1M4&VP2zTjmFy+Gwq!GtkfYjExFJntWy zB{BQYWTd?mqhS<7yT93K=ZZ>FTmBNoMs_j$ctc1HHO`5PP%;sr49F43_dfG6S$Hu- z1!o9haH*!A`sg zh;1BHJnCA&L*3AaLVSOnkZH=Q*I$j8?1()%>n^%Iugq<0>=_TO-QV_57ZQBDxwKVJ zaooCNlwl(byZ`6O9AC~n0t5{07eXd6UUP8FFS#Cc5f^_v0$RsAmqM-`yw(Q|nB2&O zf_L_=ZN^B3L2te5BxMb#K~Th#7nj}KH;A@1gwqp$u+Ryf2$!#*b0WzG^lect)f6}r z16V(}usF*~b2Ixyq6wDqC>)z$&?UECy>IoyZU4I2Zxx$wRMgCRcf8&0)jT5u#AWXv zcg>*TP3OQl8@_CiUX=Tm$;5uWcozkze5eHu4xEFq(vK%aNs-P!CpsAe5OaasPKv%0 z0swMB=S>10mssV&>mfjXD4KY;(-9O^BpM0`9`F)6Z~|T!B8GUaiF`^H*6+?;9^;54 zfVhBoKEqvKQhUOm{9`~Y+$p!NT@DPM{c|q60|3}a2>{V}vE1ensA&v!YrrV{FSD9(V24(MW$aRv2^9^IB(VkUD%ny$qHUk9enB=zD^D+x6wc>spR9Q@=IyGMhHHebG3 zI#*|g51(TV?>?W7x6W8|__pXPK!oy7I02Egr_;&bj%)f!p!_s}hsLbEb0JyC=llUr zpHLNGJytpoNoi}F=Ch|T)95#)q41NX;)-V=lY|508~#Rvp`gKyC)SfHFc78bYYIjI zAxR#08PUZ_%Li=Z>;wct0ZQEKfDiruGy9lf?|&s6`~Tr0`!7kLlO++$UJ!=(G=UOx z8^$6_wn9Vq=1)Zv=XX^q))a&#TBUZWjV)E@|I^FcQ&spvI8ex;82r&{5P*EZ3;yg5 z0E#&j(5!q%Q>$#wLV*UOsPf-FcK|sJ(l7v2DLSofdtC2b@Wj z$B5wG*1N&tj%RGmO2S4{l4HPT7wI=W+q}|+LZG5LXDlqZS9ibkmDHU9fOWHR3|XDW znW{pO0Hlllo8|h0Q6(B=Qx*V#dDKOBl!5vGAa(mMAM*d@d;4FLKqqtl{|W??`yGpX z4*yS9xc@cR|3esu`|L7RD*hn^s%hbcu3mGJMGAf=8wCi5Tj97ZTJTw0^jnH{Bu6+G z4qoopIy)!4*T8Jy*(^(9CJH(;TdclUQnSnPboTUAJKS^Paj1gCmPHQuM3p1s8Db^b zlE~A}5h(KusR0rC0yWZ9$F9^MF^vfx;-BpN(p6txppKzp7$b<^Fzq1!bt3eWEx8^| z08XGWqgVC^LDH?ZtxKgP(E&T+n>`e`ZXMaCzS3_$8|8i@n; zIG&q$a6x?>>iVLu5VnoUW$-z=uE z%Cifio;^c?O$(UYyM<8Nn(k(Z|=LXIYXbora`wG?jJg_W$oKm67Bv}km1nG7(|oC}|Q zvh-oo}<+nEH4HC5hcuk!Q zF(<5EJi=8h8lhlT1<}KrTe$A7 zh#`YwW;#IX<>yxW{`q=TKpkp4zts%!!FAmdM_QG~>)OP7p~Z9YEIQJP zthrfX_in^FI6v0xBZU@yB1{zDOmj6LY@kk+Vsk`djMhi&@<~y+E`nMz8Y|8>uE!QS zx5uTDoe3FA)+tSm5JuML+rGDs>R>Kl{fB32u^`vh8h#u`Jj-XSU+Qc51*kGplF~g^ zZ*3ps^*s;*ZGuJgntt`KNIT5jZZ{t+q%w2LY_ND`*!Z?!RMnu-=$fs>6V+x0%Si^7z5+7~Y%cm^9ufoAy_Bm(u&F)S&~wMws&Bxt+lwUOCVwTB zlOPupRb#|(`VrEeL&1`(yX)aXu7r}}&Nq2N~_}25JcXYgZyJ)Q%bmGa; z6R+pTlTL2?34*4g8W_r9ZHcN4U{a}3pyy{Oq&4%jh%GSfOtQ)-x!EG{C7Axi??h8E zc2r4qg&R%Q-s->y+=>uOTqdd6m= zxwDC|MW|h;nhhz4iiNr0LOvSe4B1z<4$RM;xS~bzpm9!By_5ZT%~q02jjYA zp6T{hYS!%*C1c00>donz-=ixAOnIlOd>E`$w3d@DVif2Bl2~CU<`Z{+*|C5GuWzkq zpyOQ?GDhW<7uTe*8hUBuz{WGT4T|!TZT7F&hjfr0Q52+Y74u|%ZX(_-DMUIn%dJ7x zt(1g;+y?l*0?fYwGoR(H9a1GAW`uf$7>!wUp+)mDLUoID)tP*ghnZoK_#88Ua;!Y_1z!R&8Ti;lSe=dyJVR|(M>j4PJhMhEFRHuwZ*b|&%$|2d93AW; zg6Fe3bQ^Dt5jUrNMm@>v@b0{AWdXUkgc_*vP606^l)?g+E@JP|Ml_NXv*qF+VRpx5 z<91A+)jU24fIMj1L_nNj$G%4TNvfKv*h{tt3YOyH#UuU@C8rbwEFxo{ZFEeH6p@VD zj^}dirYm6JRaz7_pz1O?E$|%Wn$sVQh8!;ZtUZn+b*4kh(LqG#_KU9mni{LIm!JoU*E|PF}!9bzobo&>C-Um z{5akZJ$9Goz4Lu~x{{ibGP<~a&DlIf3K|&278yQImSYVJwR>bGGt}kg=6;i+JCnTQ zjdv?Aq=Qn)4`hklCJ(dzQ!4=Leel~c1FuEH@uM4E@T`T8f>>JLDX@i3M*Qd~UB?sP>p>pTx(jQO@ypps5eh?Q z%l}jTZ%H(8E?fK$iyU%d_^qI|-uuvi&dw#K%o@R&cHfLQdV9R|Lp>n_Zmrj6j*OMa z(i0$6rv~ML_~3p`rdz?zzC0H_^W3v&vSzG$4~&v z5WROzK_z!X&`%Se5G*8zE&pLPJonCGcyW-xhE2H(S=l29f;_1vCGQ|f6H>XQYOth` zQg9p7@5S zX&hro>8kv&>)&pa$sptEyH&>PC_EOOzRzp^C0Uc}KGZ2ek^T0@13073`PTv4on$J?d`JazBs%#6d=G~ zIc(5XNz+r1-v&6_)F5123}NNup^u8;z|2YYW$rrUhOH=lx7#-d2@lhaMha+fRS$xwaRepASfA3Z$mM&-L}DCPZ!rPC?1W^8d?H(M?3+qa|0zGY3;mVJf7J~R9oDyjy|ACV1X;Xm&rm#Pr3o`1m)1OXSf1)v z{^}`u_;sSXUAvDg)_d819om|f_RCMv3mVn8kb?9RS+({&5NXhf_%GLLUL)yqF+s!C z(9%cBsNYc{Jv`fO=H+g0MVHHEyM|wA@!luG&nb_CuAIa=x-M1lgapWQu`NvpC)CS` zq!<|(Vr~FX0ncM$*(bak}f@VzF+-B#M`rQ6a08-`R3k)shUIty>1QKy+WZ2iLF<(B z?Fz}|%u!vD(Xf8jZ`+eQlX7T0G1z+>h2|qqr@Kd6&ofz{%-h@71>5wv>21EY3$6-w z@-XZsZLGJ?2nS|WYNFdEqk6i>dC=;^IfUy=kBN;0oi!Kd@6t>1k)Pxaxv-Zp-+iTY zU31BQ#JZ!TJbW%Y1cdXj*RUA_N(B!Y_Rlj-J`8j(JF@2)`~*VG^WXvyRF&mfQLBl8 zRFyTW77obfy2ol4xitA4sRT0YJSCTYG!c>%b)UJjZkB|KTZ&Q6&4XN%^hL5w5qt9U z{ov(SY^dk!@R7W$YJX7?iXXxIA9RguDkwz;=9}AS`PT>2A9xTp(iBYl*j{w-8GQv) zeVZFXcq{Kt{;GZrLI}V$c*mTeqH^YZu{_| zT3q}P+TN-eO$-MHjC}xh7=w&pEejDBc8BD?V*e?Yla0Uki=Z0W^ZU`m6J)v%{N@1z zS8`#je6ZBx8Ws=oT6|}&@is*QvVXAlXailFpx#a zQ^AHflaou8dsDS(aeuM`6r<=%1HoDuXKC=lTaYSoA?$ z+?qxZ1JmK?4-gZxi0R+!GUU}^a)Km}3n9daSW)QeF(E8p$=;&H!V!=R;&XKvK@^ZX z6#UaqWO7RF7$C3h8HqOcIXG=e)BR0&6*gHI{RrL$f+(tkoHtMX13mqNH~mjP{IZA7 z^s(pT0Dpfx291>#QTU2u)tuw=TcVhLTt1 zlWXi1tU~Axhv3#? zPfFS^G`7<)7-?9IDnAFUt&su*cAIem?|}hc*_T!P)$o9(<9iUXbGFuZj}{;IhmPNx zfX&LL`?cbfjBc?U2}j?-<)`v&u z(m@;(f`w<_Vt5kruVq^-?d$AQB5~^69eM^K8s)O^VGC$8(0cUt0!0hXJcREVlMFs5%j+5B;x9BrDS5k)A5e`0pXE-;2 zAZj092G4nQV8(z!pL&3~WLOJ?uSi{WcvL`1l$tOOjK9-fNiG+ELr3vEtoD0h#8coA zw8cp=FjvXz&1a~+GYG+x|_ z;RMpFv7irvG>rXK&l9mBDY*$IDZ=z0viF}PAq}W9G*G4jRqK^Sm}ypF7?be`(k}!X zH%0>nnr|i1;#I!_(_HY8hHO}xITu%#q+UM4gquH(vVHjXZLhjCm={xY$yi9;QLLMN z37yK|j|#D()BHkH9(&E}0VUaM&}JlCG;oeYRN`02$G@OOQ#19&eXbWM_n<^^6X6@u zx`AO(sd~@!51zD5xsYN| z@%JW808Q(Ccuq9$d77Re{2n)rX|EyYd`&<;`LSnCM9pY29;&L*F_vh_aATQWT`g` zfrkFhhlge)GxO)!kT0crZn92UdVOD9y!(Rba3T-3EyuEBRb6B#f<;pAETt4v1aRor zD_y2hR1NkQJEQ$PgYyFQ9PW`XRtUpYX-G4!?}n}Z0a}pm2y07O$b)B!9_P5JHAu!J4eKRH|vz((p0lI1N5R?@XV=e6)M%|mvtT^N{Xd>^vJ@x z$|Lj2+*I|!Xu<4@E`m(q5xR>yjOJIDyrs$Vaa*L2?#86K5b=NAW1P{n54jTMWer%S zH+h{$w!sVkIYdqg3;z0N$2N)-ryo(53jamu>!31OxR_py&F}N)>9Mdb5<_h-@}Lj= z{_K{YtQ~dn9GaqYrX``GZfjDYk&b)RrWm2U;2g0vSK6CYNCTK!GO{2vW{Ba zp7D8(b?1OKSYul*o#(~nmm`^(*GIY0<(KC409$0paG(&tFyMY#5Qqyd&TI_8{{b%= zF4i(5CNAP-$VA)q1T6XiVk-hXPun*|Shk0yxciWQB>~j95~c@ZSm1$#ktea^xpO6| zc3)B&QGRs_*ZzJYbk;q95eq?fc3++p;b-e>bCq@AXOr9y4JX2Qu7sC3H5z zCVoBjzcvDbEIC%gMxenv5^-GvRShVHWlcz*`0<*HPtMJt@AyYwJ+$Ne>eKRgd|iJS;|8&c{X71t@S@vLb7fgfMK`;7whd~BnZI8i z+mvi~&P{3YV*F_6;Cf~0t2OP=l^iU8s@#pO=mqlKyFxI4-1xvi?4lOSQHR&!uMGF? z0pzEaMrx}TECPaKS9~g0W|(vU^j~_7DZwKdCt6v8jYZ)Q{oaYWPjx!pJr;-~nuAlS z(DaY4dGA|b><<-bKbwo-nsON7ZY1w-!mW?}TABAAAKmtZeNKlwv>mfQ*M0^EQ_fzb zU&;T>1Q=ZZG0mnj$XTh6UNP@)yoR$`+5x|4V+Z|) z+^})ZQz@)!5z$;v0toRWbS_jkjIUqR2vKQBUV~fph4z**fH^g>%ma*ZVzS~z?xIlNNZm3_kumtjF9LhuoyswCH7i@yRaOqBA%r1Sj- z_g?*>M6=^nhvU9>W@-Bmu>-(WDao@^nBb|$HWD^;3`cJC7j|~CzW(EZpJNLSk7;~D z;0-w$++cCK#qUs+MASPCq?;t`L+?TE{^1MJSfc20Uc=5}dF4&9QU7LXP4V!H4y+)^ zc>mvec6`Oqp?eF{QuI{StuIj4p{(0-2s;L_3nVz2RXP!QrHYx%!yT7=R@`&Mk-#!)12A~Pm z?v3|0$v_NU1x|LkGeL4?oAOrcJlNrY}ut8P$PZJD;>G1y> z2=jbAf;jaHYL6~nEs}o_uHR@E(JiM1sIlQ~E~X?c*Jqy}`{JSmX3iDDK%i#4&SU`E zjh{##>xiKh^`jScpemW~Iy?X!tE4)YX`h9}5kw)Nw}vJUWIRP(7C>hrXs>xE^n7>x z9t!7n^wbDqkz9%B)&XbwdJr(VZ#d_o0%oH4`w8q*c`75yK>!Xz5`)%LpJsl5oVd~2 z>8l9f*RMJls?!k$O||3!$ibpsGcb5+?f)wBEtG(O{{^LlU+4TZF)#if6Bzv$s;aUU ztdN11C+gVb-b_-{8lXL6Hnb#TMsmi$abpz;u~c2sk5zc05M%Jq4X-2Dm5RD81Xi_T zsS`i~LT+WxGtM*Y>NURe7rF$EF5Ph-qeT+CH2xb-`L#If^o<(|CEuvj3#)36uOSlZ zu!rInU!2_OK?^WBQc@8#W7Lhpv}{Gkfbj74$QuP@K|?l9oiIFHJ)DT$E+V{tbpkgd zp26Tb`YzBkpvE7?`ynW^8b6q_biD@(Wbl`WO$FsnOXP_|@B8;K6Kuk&-sURze4;cQ zw78%SBw!%9h(xJJam2UADKfEVaf6SR)Ti*uB$!z6L0BH}!Pf<3Q6CvxNp!=)q2zl2 zpuA_nqQ&hza(WLW05Uq-Z?^oM|Jm-?G_wJWr?o{Nc-@MWVQ&3Mm@cr6v{zD%6iikg z)`ySsF(~+9*N>e{YaeS%2@KheM{TL2|0I7VfM@VlkTnj0)sd)VT3+*ERrFR1+yKMT-NV(Y;D8Uc zf)wE%*2_*qe>8SZghluEPR-!I2Gp9HSS{BvN7bK%3Hv|mm(&t9(90N?m4sJ{ek?A? ziARKL+&*zHOJpADk+Wf1V}NT`fW!? zEMZk8miOG5=7-Cp4gx=wc`eC9nU3O>WdA5Oa+nyVEh6@y*@85M;YI zY^9?V27q+FJamWuru^2heN%g=5gL|9I!~`8JJ9QwU|%Uf{h%AfayuXM2UOvx`!}7f zInI*w%a969g|G3>TshaB*bVixT_f(C6zRX51oZ(0;dt6#kjtI1TRYu%4DkDTZ9_XV zW4ZZH96SGJ=D&S!`PpiDgWvSj_EVwOG(1rN9TIah^-#HUm%u8~^u%3|$5SFvN<`nD z`$Id5Gli;O#ZM($eTX|REl`Y1cYU!jWscpK8Eu1^7~i>$@i^8AEi?xO#l4E*v&#_j z`$_S#h49=-#18?P)E5EJXevY57;KSaswmy8nkY>7i*%-FrrAF=*DIn18oTvm?zYCe z*T&lE81S3*&!ODsjrjz@Y+l&?dvY*dTN11cYa(xti#ltBCo|VwkJ06b>a^Ctm;}p< zaa9TUNp$nddgVbAYnF(5-D@jXc&E&?48 z&WcU&1D~Xvr^P~qVv{;KlYdOKPVZv{YYm7xL(J_ zMBMtiLNxZMD#GPaov_|K>_b7b&;NqVRb^~pY(c0YCv-uF75?Nk*>}RCI(?-Weg5W)t}eCP5>7ibb(B3j(j-P)+T!YkEL0Zcioi!vYL@nb=FG|b>`fD}$J`k8@r>3* zSc&MVDOa(z?_}khHUh{44IhY{)@JnACT7n|s4Gru-03(HXcD~Lu~0Uj#Yk5Zocbys z4A-|^M|uRR$iOIfwA>rZH$!G3tU8<>XWxR=W1gZfkM*?nuLl*^<79I6j9MB4HIaV& z3Bxm>%=R}dZTe|KOsy9eB@<$L9hMjrm`k`%N8At>l`2?A-MwkJr8J>$zmesVi9D-( z)a4iPEpM$C;u1wUGk}XGbf-1QKY@PAbL4tsv*f2V($gp}48b|Iy+!IO_ThM>enu!Z z-In=+g!{dBG4cUw*E>#|qbeG*o%KdS!ioXk`6W`PU`NUMGJJM)B`j9fczOXD^Ce8DBZP*K8@~QAR88k? z&$2JOuAdczApX7X{*OL%f{AzrL4Up*WfuIKFeg3Mc>;|e!6MlQ$toGK%x1TuYMpbu_fJ|d>Acac zJU;c>-br4S{xB@Bvn6xBD%^tr1LJwC|yoRVm!ir80c^UU$8-_pZ7(QMS) zWh2PAvsE@JHtFDIf39`b97+p+!Q;ejmXVGUW}vx2-40UoRd7j?ZL>;Kot8F1g5#a_ zEm4uUbg^cbe^A{Q|AE3R75oT;@maAj>O1NS6Hh+gIX|tR5ox3&Moogcc6FFG#yE=F<`(vSCH(S& zWZuxyX{iO%_OE*xxk*mNZ~B`B0lR~<%jz;C+d<{15nC~8 zR(ngP62XC-G4Woa6hT7;gUwZ}?@fOXH{QS-=nKGlarRhm2fz@^Eespz?gn>feO07@ zpDgTzD4ltMCuhDYQup-yW+>DRSr|`w&Xc30#OMKM_bGhM4yt-sjv0aot7FBwf2qkG z0#}J60Y&T-^@Bzv3yQH=h{DA#S~R4QM; z)a~u0@{9dREh*`Ygk<}n1&C`se54rTHiDJ5M6iZbRbVQ*eBk$L0|>K@@-j3fS9|Pj z(Y~e_HaOgRZE&?vVIf}e5KYI`85)vyEpNRe;71&(puzUiH(imPEb%_7Ma-1%zNSgo ziATrw{xv?#MOoP)AD;PLJP}@k+Qg273XOIa z5SpxPFJzR=uqW(;1xxH`WZyyA3vwO-ZloyNXL^G>km>+(^Hwmgs+SP#GXS&nxS=#p zj?(Y|Fi5ykztE&TGU&cO5Qqp`f0Y`v9gT7kfEwjMEC^tpyFyZ~B?bK1{A-QG zh1$go5cgz8!c{^(1Ru8>2ouG=J9p0vi(=9ka$IHF^|=BG5$?_SoCNWMpopw@EN1}{ zzkm~>5oaqtr7bfzz;gx1w|aw=JCTP8AoQ+yPt$RO3lqv2VOfjI`VLSd_lpEzVm0d% z1fLlYw8IC9RtKCrMPnSHiMdH4PKfL_fdK!#w{3+PxYj&?37EZm4YPOu55?!j=JiDC ztuN5+jNvok^=Z#`=bwZ`C;hgXlEZdPY(GkK;KwU7dHe2_T>r<4RrUyPI- zXOOSq>9+~dx8T=AuTVO$Kn-NMl&JrN+k$P?$Drz1QFS{=|&^- zpV$l}76NB=zvqQQM1B)G0m%K)xQ;u#XGb^b$Gl0F=GV_FaQz{V<_kV(5;9tTr!VsJ zpMG<8Q`738wRzimQ;Jk%I{Q(Fup(T(5Pgxm{B0t4A0megCif@a|J)Nb-{SWd5x$U| zhe(733f<%v*g!M`qrobfuwiq{LIJdr23NMR3vRebUv@I-U5S_W#1gTQ+sQ&KCaewC z;GgHe_(PmBs|Th=hMH%f;dXQxLss*DC71w8W=`&G)ITWe>-}*jV0Xs%_;r%`cnSUjS*bjhL zfP)+^RmIFUfV7v=s7zmtAKRJYDDYLA3&$CSm$x@x_TNezqY5TNUZkJ%;M-&NFz0$P zY8rnYea>|FZH7q%iU+P zc9*HGQD!HStJtdFN>neL@)?{ht!V36tx7l3E%Iby*N+_5zz!3k-wBlN1*~KHfM2i0 zP}8@-UuV(YHK&2i;V@J8GbVRa!O)P5gh579w7_!IzgdOolIBS*$X?Ikue{xR=$Qmd zZ5yo^S4edj_m}w}hI<~1(i>~9t@(!!4+bH04L@=F6YTWx8@3qLK7_raD+m40_U6`a zC@?0_!HEGE%eFzkjZ$NeU9&|*9w(*LQ)RKz02g5kB}5l9|& z63+T{;$C)s4@a0CAx7tJBLgPq7m5XSL1bNJ2O?Dh90@8#gK?wd#AGcn4>AUoe$XF% z{|O%_s6>C?ieS*@&mkQVAvY046IJ=wr zjHv;QHGj=3Fq$}FkE7EW#HPk?a%kvMM)drZ?W?6Hd>g|Y4W`?GtVoXDq?uc0o~c#k zJ0p2fJv;l_Nc-msxhv9Y(V1v?aQ+iO7!lp@<Wrv+-60$#kL(I zPp)H%j|jn3%fu7JD2=l>)on`d=QTq+1}A7X+cSP&hYV?^%8J9B10f1$v2h7gRv)-f7JB96lWsG*N$3X**cFO)x zY$Wl@v`S(!QCpO!twKyBn7O)WJ<}RzunpQSVL2SoDtSig9CvrP+WdBp;_Ic-Reb2tu;*rI z&P;i2A%IF>`p^gxQp`qqSyQL>aM=HaBNUT-a8uigHqnX(t&3?UN!}+YiE|@9Oho%* zu5qKt$;%#BikVI4P7Lte68?z ztIZSl*p9*WF+l6?U%ED7xbDx#No~}Tf1hru?V3Tpwq{3Yg=Vz-?HyyroaIC2F*hHL zmd~JTr_f?Uwvsi95hWdkwi8gka}LDFW1@r}pmPf(W1daEgCiWGBBnb9Wh^wmC322^ zLEFgap_$mrzFSG++^V7`+H9F!5upwibP=W+jA7ei50?2D-u$tuNFHB|%`q=7+t)!a zFE1xRzO(8y@ukgM|LyyMtYucsF=PJq@IqnrjI;m~_-|RSM@Vvd_E{N=ubuyTQyAd0dzypkJ!h{>^8Tf=dK?{*R5}9b-hJKd zz2s?$WZr4{?pE&E-tMV${ORQ5EVj)9<0_%!w9vm-p0gVh-q5F(?q|DIVc{*V3Icv1 zLJBTp@Or(-D2S2fBa0zd7zR$6Mxaw9?XC-1WQf7v3(ySb*?O=<;Vsb1$Mu1|-x zAs_v%vSvlQ@uIy!3KhsD!6XWyYBA&jDiMUh-m&L zy?@gGLij>FKnD)Y@b+3oD?#td6)kn_`ZIGHfMeuymt4v}^Wp|qk|SeQzjE@<(pnb! z2@2tfCaR>!j0bV0mF7ujvR$g@*7%vzu0U0-VC7B7Mr#r{Yx*SUF8nlr z%H?~Aj;q7&C9a_2o4c@0r#9Y_2{t@2HiE|QVG&uS&oHa1U|HT<_BdvPLHl*gFmd4R zmS&tdhpa(hh7Mf!SkLpdgkZsi)qe*dvLDB5$KNr)d(&}S%NVe(w!!`72c+Tb)>)UI z`T0Jca2V)6Vd~uCM%KHoRs*{(r-Ay5!P@-pD}pQXb)`rVXvExzVApB?NU#onAjEC{ zTkG%Lsr1m+6wolQmfovR=XaaWhWiJxiA>rp4a@l2E1nlyJF%onaFTgJ6V#zt7I9te zWUQ{M*(Y=EDn(d9o{&#u{&LH~|DX$AYlZOEkaG9e-?gWCDO9+SF9|5uZUy++Hj1oV zwv+U109`3lN(vC*eg3EC_womu(I|HC7K%eI>!`U!n(ky_t|z85Q*O-Ac5(@DZK@br z)Z9}rjAf$c5C~_jxA!;kH8pkfBK`(P1U`X@S1FVAmq=Cv^?<(+<+`q7!Y4phTwMeJ z$WVxRB>fJb$_GNGNECU309^om_Bj;K<4}d}bdgE^B3H8vX@HrBX52|`&FI%*VDU(EUOQ;HNFxLW*0rX>phZj_)c1t*Hv8OsMIGM>2B6r0fS(fA+Wm$PIa6%W@FLOK`_hf@=T( zLsJL)FK7R%T$lB8_G=*+jCSU@ui7>EkIfw5s?S|Usv(5@Wg+@p18B=^nT70>7 zE0kYc8JBs2XOs_>$t`48UB|-G;a4u9m8-bk$v1fTT3VzFGsr*FB!W8f6o{U+hK7M3 zGmAM|*=rRHk_Nu!X~y3s4ClG>Q{oJBDVGGdnys-Vgqu#I_mA7M7nH@l@bB7r@EMxP zjT!4J)$8auQk4w)a*GFCYf4-wbBSK%-=$dm<+Y+#es6$k|KEr@i2x$!fqmZ8Hp}1n z1`}Jq{Up>}BGKVU_Oo+rlV|wtC%{;573HA3ofj`c3R*Of=5FKUYHyHd`OfuRReUPA zJxyPVr>CHFhxTK>OR6u7S2r?kl$zkNr*Syo5T@SA{Vg&mktQZ1*>y-O-zMZ5a_q|wx#p>(kK=rQ zsut%(YD(=B`vc5+j9VzE;KFJq*^sc>QHmTN0#@gneoxMxO=i`bybxO@x~ERbG}`=2 zfzb_U)Hq6G}oZiy*Kn=V#jzuJYPW6YnP)OyPuDCU{OS0(9e(hryp;V zF@*w6Jca(<#X=nS`ZgPfdWrq}H-X@a?{N{c$vzVd>l-4Mnv|HMJK-D%^BWKmoDrWf zG3XEin*!(X2(Nyefuq%Im?aKHr;r6(>O=|0^uH-@vz)Olf0Q5xqoq{L@I{HtY!%i% zf49l&NPKrj1{``^m6siODoXXb{7?1~ya9}(K^6p69M8n~A_K5VsVdCHmLkufM2|x* zF}PHvjr)4~Q{e*Pi)Aqu-M6CIFfvmad;naMzeJ6#6p|DOl;@zU%hYX(AOG;-TX-O+ zAC}PAi42u5vWEHx)xt`GOYVzKOmG&g+Y#aj;#gP!HB>M#GaDiY2MB?iF?$D><%>#I zYy}7Sn~f=tV2+iSJyIxCBy!RT6dpyu2Q>VeB!Hh252L;9X`qH_Zh!8HMm**|z_D!e z!)ww@RrFlZvVidkhBcZZFs1ngS3-S$I~yWW_}+eF#(rBxKxAL%zfA$@f}Jts{@k!T zDj2qQ{UN)sTNU{T>?{!ZPwo3N!!$2g?|-j&joW-1(M1Lc&~t#}5=RyGhi=fVydCQI ze8fBncuO7YG~F{G;Q>I=05Hxb7^Lg};&(Cdp&g_&3joVG){(lvK{jjzZAjArJzu`y z5~$lV!b7qm&Vsej0l9^oBWox?$}20Z{|^aOI(}ViEvGcS?9Bk$95$Mo#JvR;oI@>x zb#B`I>MyENG|n!nUYc+=Zi@SUx4OHV{tMX#yb|(@+Dot*8_kK~ClA9QR|ofEe_r7(8_ZSa`s%{l!ZL|SKYeKyThXcpYLZk z9hvs@!26!viN1KQ*F}y@>5@D}GQ1SAOwQt&s7wx;Jay1Jix54bkzcaZW&YGaad`kc z(kU%vPXTcZFL^P%){i}iP-aYcB-O!mWuXs5iy$`lAl~&ex|gBAe|cK7LjQE#lXLkZjtJ-3~!iA6A~DeZ^30 zQ`rw-a^Lx)zU9wXyymvMsIc^6Vr|V;|SX*ssS05vNWN=ZyM-)wJ58r2L@Sg&HG3)^CE| zuOwYwcCRf1S9j?rj|}|T*x=v%Vp`TZd^@h}s{;EB-@bFEGll))*0^qY88pCmu(Y>y zZp_%5R_OhB=1H(q&>&NV{#dD$;JBa4Q}(?XA-$g1+Sujnhv*GFw**j3F#+StlHT*jbS!ptQb}3|C(NskbcUs@LLaG%r);+*=vO=yx_)@U87Z zzt?{5XlX6!-^+BGSNhp}@L&D=#hD;S3&axiCH$OKaFmQM(iVy&FJXA(i+<@Z7~E7E z{^QT^wC9mYV}PHtXEw-Yv-HM zp@?g86aBv@UpyvWuMOU)b>pj|0)i>MZ?_(-j7_~uZ|c5Eou+lvxCicw*xk@xWX;&J zvL}BEX$mJ25}OG-NRycCn;g$*512J6yxC$OL|w~RbG}F@#d6W8M}{u6C?3?JD2va1 zb?V}Ve6zOpru!yok4It2&e`nXwqSh39T%a4zxg9qZP?8~pJnTvh0Z;`+|Svv*2wo3 z8s60SZf9GsPLX9ERhgG2dwNw|jsj_059q55z{yyt|2lC2F#h?2>YH0;#1PnupwVC> zQdo#{Te5k|*NB{ZJ?__KS!3{a&=|(UiT)D;NtBOGv4Z`$IM!SuzbQ7Tx%oi;<87M> zuM_$s3wOHBCAR=)!U?fX+GcJ22`}!AOm;#+#`pL0nVhrSp7BW3pRtizepT93Fv?)v z$3-3?q^gzarlEmhiy{7^W5b7?W!Gw+BG#rG%-5(v0tCW)13pGc6(lmD*=HBxM(VVf zgq_@&lW81=bD_KWf$f((bnpJ)S5ho;5Mw^;lXR+hS{EPA#9FekS-ASX7)qXM%X11O!ovZIs=rquQrGF_sb+m_uN;}@h ze(ntV@N_j^{WB~KdXk~?l~SNiNHuaypzc2J!^j9<=~Z|1rPW^S`#S!G^zwI~X`LH>nw)6ujPZivNcI$?GHhhYakA^91Ge*ieU3V}_V=GCbm z4zCh4fddrRJGf_S3_2c9JFztX9{qqm9L3yQJ1RuLw&%*}?sNJNY%d`+Hx};i?VZ%- zK31&~x0BR>azXN#hFc%hTJdbQid?f+@#+j!(prtvFMel;$DHnFenwB(2DVg*AIGX+ zZl=>Lm~8l95!(FzOn3?%Q%y!M@pxbl)y;kONQyv$$t;|RY~=axvh9q^{sPGzM99V< z-A1QHkp22`mGyeGe*c{&F1|}i>)95C$IqpW=_%ClE15gniksTwZdB`J6~y6_h}BXz z1gc}k^Hz`Vk5Ltk^CO=A!N#oie03(Ah`HTgA8Paj&Me-#f@PI6E?-{k4K|~Tt}K)G zX7LBlzI`=Kujl_mdu}TEXK(a0M5G^tCBEAC2>4+6CHMHa?VqYLI~>>UB=1?9fCH{) zC%^BJLQ?X!@I{BJC(h1rLCL7$z2eXVe$ld6s+Voh&IrNHEF)1?3bGOxK*j@EEFTo{Zu6{3vLqJjUA-qrDxt&TNQ*fo%w= z^S*!?-JR{wm%Z^+W&gQbmC>UC#=q*7Ri3t!0%n347rXV#Pm)HiRe7jAPD@WGX>g&l zs(TM91y9w*vtA1>=ev_u6x<=To7*S12ZKMlxsf%VB&|strwCHqoYG(J3tvWvrr^6Y3#k=dF&1AjE|Q+F#CUJ~*0hcRj<< ze7PDf1>ro$)ciRb6X1^&MU%4#SA$Jpw|9 zH{^PB_skqm2%KM!%`gB|ZN z$W^QjCK$lF4FcEu!@Rr%cuga)nuTwFk9GlYx-FLV4y=VkE%qvQse2OdnhvLtDDWT{ zeD_rdfcI-4^r!U!pZWHz|0LwSaa37)%o{nVa4w@vPft)?P2?IGB*?usjNbbc0g5cK&qo9 zLWULoFLZaqL#MeT=c<%uX7J+Rhe9v3JP~B0GEPYB_VU7HiVBk>sq@JNlweQ_?Lac( z-GP@s2p%eQ7TLzkXN_9%=z3qNCp!W!i6aX`89XpI{ol!hPu=8rYfH20|R`>@Ca~x#=Zc7w5?J5LGCsV7fzMt?Uw958RqGRP13rf zJ-{7xaP!{7|4mp{)J{-ZYt;hHbd?A%3^ool7!b$clocsX&~9j=S!ca=d8Ad~`W5%= zMMDyFy_*Bm9rrC!Q|q>0>aHwoVp9Gc2k|<5S&5g4CSxutw>OwzYdP7QMJMd+30u*4 zrMMCSL)^}mnc5ysU(VLr3ES9OpL!F|o@eno9%Vx*zs}BBg)3p_SS6ZSIgukc!UD$t zvV|4a))g^iug14oG?icV_~ymFnJDzq$Npl0RZ%o%kQ#*; ziHb9oWcRS2{@IZsk|?jXKwT^rOQtyzEX9||TBE^4Y&#K%e~idY&EN^E zK)2(|9}p_ozMH5ok)H^d8%4s~2XF4CLrRt{!nkmvq!d*#1!vFwLs&4*@JkT0Zf`nl z;lZI20s3OQ|N8D^@|$G*0|0fCydv4f<+_bqcTRI_pQA~kq_-?p;&`gbBmY8mwS0{%dt(-@T$i?2M( zWa`Z!0QnPqAea0i?dU^5lb#s?xAb+9GU_BDx;&O6+m*T^poZ#nM z!QQ6epa+mf*0_Bw5+(gPgnEl(o?~mUu=PkwtxMIoA|260xBXJ6aD4O7XKq{SimsL3 zIY*R2ct@p=g9fOv8yu{d@52_WiBFjBp1H)J=+IEX)YkHDlGnJrJg_NWU(}pAtpcS+ zuThRntGk3gzrCWvHlyV{x`kB;*vmIyR0ctN%3F22#tPH-TgLgl_Z>qp7%R16lwj1+ z@sydxYMiSclWJ1Uyqt`1S!I5i@chaiy{NhScuK>;zY~QwGCF#ugE*Gog?! z35gzBL38vGAoW}Q0r&sh$c2JHVY+nm&)63$1V&eRWZyM6=pO>2)r~UIft{Y!wS~P; z(e!`S%F_-q6}vxS81FXd<+xO+UPNY>0pR+qcRM;d!^91X-yzIw%(g^fve}av?*d=| zPGTK(y}<8P!oON~+v{<*j@;cs`{3VC z0}6}vC2+<_|66eB*u&^GaWrtU;@*^1nxeRsn#44Gsr{l{fHthmSy{JOfb>1_N`x%o z`%UyyZG+j|f@u#ao9~+0E%G*%wI@Z5{G$is7m{1`=RDBo`|cy;-H@#C#U(qtnBD(1 z8{!$@;Y|@!Y9_+bL3iW8Xw(@+oxD;v0p$0X{^+-60n!5H@#vyeHeolUOe$=%wh@qj z$SU}*oJ1NW4TvW>ZRpcHn4-f~at-Bv1e)a$nS&!+`CPh`;bMxBz305|b$Q|{ zK!Dv4uQ`wNPv`9TbPdcQ{qi-<=G3cxFInMRm1sN*E%-@PcPLr^@VofM+g%>+f`+z$ z`F=1P!~|^xhf;R}KFom_h^Zt8-@zl1sn7f=+ZP)FgaZje)|KyHSUCp4@la=)K{-&t zm1Y7?T+vVfpr`>|h-H~QPZn3cz9)HU6?gL#r5OGZD*6#}h2OJ+E~K)F3Do+}$~jwZ z_KOenp@n9@`zI`k--r1@PD<>WCrsnyfhM=FlrU!lu=%=`>sJTZhj6Q&PWrKLGK)Y}s;K{_5YQC5HZ+?{xn+ zZnOWBGfl`1hH8f)T>iljE{!n2ixnR~T6z5)mtweR`7grWf` zS>8`iw;c(E$sd&NB}z+_I?G%h0Fz`MTX(u|F>d2`Y3)F8#qkg|3CEkH}M~0 Date: Wed, 3 Apr 2024 15:35:00 -0700 Subject: [PATCH 02/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index 013d7e85b..d86ec2684 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -7,7 +7,7 @@ author_url: https://github.com/tas50 tags: [release, mondoo] --- -## ๐Ÿฅณ Mondoo 10.10 is out! This release includes xz vulnerability detection, expanded AWS asset inventory, and more! +## ๐Ÿฅณ Mondoo 10.10 is out! This release includes XZ Utils vulnerability detection, expanded AWS asset inventory, and more! Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Package Downloads](https://releases.mondoo.com/cnspec/) | [Docker Container](https://hub.docker.com/r/mondoo/cnspec) From 9f5f28342136ee478794f664573629feb8d01e58 Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:10 -0700 Subject: [PATCH 03/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index d86ec2684..993c83391 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -15,7 +15,7 @@ Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Packag ## ๐ŸŽ‰ NEW FEATURES -### xz vulnerability policy +### XZ Utils Vulnerability policy The recent xz supply chain attack in xz 5.6.0 and 5.6.1 (CVE-2024โ€“3094) thankfully didn't make it in any mainstream enterprise Linux distributions. There's still a significant risk if employees are running rolling distributions or pre-releases of upcoming Linux distros. To quickly evaluate your CVE-2024โ€“3094 expose we've created a new xz Vulnerability (CVE-2024โ€“3094) policy that looks for xz 5.6.0/5.6.1 on impacted Linux releases: From 60d3671e9f21e399fb5d2e5821515170ed4fc540 Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:21 -0700 Subject: [PATCH 04/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index 993c83391..f2afd2aec 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -32,7 +32,7 @@ The recent xz supply chain attack in xz 5.6.0 and 5.6.1 (CVE-2024โ€“3094) thankf ### Improved AWS asset overview information -Get the context you need to resolve security findings quickly with expanded asset overview information on AWS assets: +Get the context you need to resolve security findings quickly with expanded overview information on AWS assets: - Volume size on EBS volumes and snapshots - Database engine version on RDS instances From b29d3536be23d7fbdbaf92379f57fa5a8751ad9e Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:28 -0700 Subject: [PATCH 05/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index f2afd2aec..55d6166a6 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -17,7 +17,7 @@ Get this release: [Installation Docs](https://mondoo.com/docs/cnspec/) | [Packag ### XZ Utils Vulnerability policy -The recent xz supply chain attack in xz 5.6.0 and 5.6.1 (CVE-2024โ€“3094) thankfully didn't make it in any mainstream enterprise Linux distributions. There's still a significant risk if employees are running rolling distributions or pre-releases of upcoming Linux distros. To quickly evaluate your CVE-2024โ€“3094 expose we've created a new xz Vulnerability (CVE-2024โ€“3094) policy that looks for xz 5.6.0/5.6.1 on impacted Linux releases: +The recent XZ supply chain attack in XZ 5.6.0 and 5.6.1 (CVE-2024โ€“3094) thankfully didn't make it into any mainstream enterprise Linux distributions. There's still a significant risk if employees are running rolling distributions or pre-releases of upcoming Linux distros. To quickly evaluate your CVE-2024โ€“3094 exposure, we've created a new XZ Vulnerability (CVE-2024โ€“3094) policy that looks for XZ 5.6.0/5.6.1 on impacted Linux releases: - Alpine - Arch From 740f94e550ee43ee3e0a4a0d07a8f03225b8709a Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:36 -0700 Subject: [PATCH 06/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index 55d6166a6..c52d78d8f 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -48,7 +48,7 @@ Detect the ESET EDR in the Endpoint Detection and Response (EDR) policy. ### New Terraform checks in CIS GCP Foundation policy -Flag critical security misconfigurations before they're ever running in your infrastructure with expanded Terraform config checks in the CIS Google Cloud Platform Foundation policy. New checks evaluate Terraform configs for proper [GCP uniform bucket level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) setup. +Flag critical security misconfigurations before they ever run in your infrastructure with expanded Terraform config checks in the CIS Google Cloud Platform Foundation policy. New checks evaluate Terraform configs for proper [GCP uniform bucket level access](https://cloud.google.com/storage/docs/uniform-bucket-level-access) setup. ### Fedora 40 EOL/CVE detection From d9a22ed34023688ce3f8b2e36ab6ac95ee131018 Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:43 -0700 Subject: [PATCH 07/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index c52d78d8f..08ad94406 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -26,7 +26,7 @@ The recent XZ supply chain attack in XZ 5.6.0 and 5.6.1 (CVE-2024โ€“3094) thankf - Kali 2024.1 - openSUSE Tumbleweed -![xz Policy affected assets](/img/releases/2024-04-02-mondoo-10.10-is-out/xz_policy.png) +![XZ Vulnerability Policy affected assets](/img/releases/2024-04-02-mondoo-10.10-is-out/xz_policy.png) ## ๐Ÿงน IMPROVEMENTS From 02b6f0948c9c364401ef43ae58773d00d6c08bb4 Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:49 -0700 Subject: [PATCH 08/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index 08ad94406..2688e3aa9 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -52,7 +52,7 @@ Flag critical security misconfigurations before they ever run in your infrastruc ### Fedora 40 EOL/CVE detection -The [Fedora 40 beta](https://www.redhat.com/en/blog/fedora-40-beta-now-available) is now available for testing, and Mondoo is ready with CVE and EOL detection for this upcoming Linux release. Keep your test systems safe from critical vulnerabilities such as the compromised xz release (CVE-2024โ€“3094) that originally shipped in this beta. +The [Fedora 40 beta](https://www.redhat.com/en/blog/fedora-40-beta-now-available) is now available for testing, and Mondoo is ready with CVE and EOL detection for this upcoming Linux release. Keep your test systems safe from critical vulnerabilities such as the compromised XZ release (CVE-2024โ€“3094) that originally shipped in this beta. ### Resource improvements From dfe44ab89eaacaf5aaae631767d508d4986b546b Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:35:57 -0700 Subject: [PATCH 09/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index 2688e3aa9..4e4045b12 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -73,7 +73,7 @@ The [Fedora 40 beta](https://www.redhat.com/en/blog/fedora-40-beta-now-available ## ๐Ÿ› BUG FIXES AND UPDATES - Improve performance of AWS cloud detection. -- Fix Windows policies with multi-language support to rely on the system language not the locale. +- Fix Windows policies with multi-language support to rely on the system language instead of the locale. - Simplify the Linux server installation instructions. - Support vulnerability scanning of RPMs with a `^` symbol in the name. - Update additional CIS GCP Foundations checks to work against Terraform configs. From 14e9918b37aec6923563cd024ce3876e0e8ce21b Mon Sep 17 00:00:00 2001 From: Tim Smith Date: Wed, 3 Apr 2024 15:36:04 -0700 Subject: [PATCH 10/10] Update releases/2024-04-02-mondoo-10.10-is-out.md Co-authored-by: Letha --- releases/2024-04-02-mondoo-10.10-is-out.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/releases/2024-04-02-mondoo-10.10-is-out.md b/releases/2024-04-02-mondoo-10.10-is-out.md index 4e4045b12..cbb2439d1 100644 --- a/releases/2024-04-02-mondoo-10.10-is-out.md +++ b/releases/2024-04-02-mondoo-10.10-is-out.md @@ -77,4 +77,4 @@ The [Fedora 40 beta](https://www.redhat.com/en/blog/fedora-40-beta-now-available - Simplify the Linux server installation instructions. - Support vulnerability scanning of RPMs with a `^` symbol in the name. - Update additional CIS GCP Foundations checks to work against Terraform configs. -- Fix `CIS VMware ESXi 6.7 Benchmark - Corporate/Enterprise Environment` policy to only apply to VMware 6. +- Fix the `CIS VMware ESXi 6.7 Benchmark - Corporate/Enterprise Environment` policy to only apply to VMware 6.