icinga2-ido-mysql-2.12.1-bp153.1.91 >  A `I!M@eeeVF"U0IY;/X{GJ!Z&VNc8GZYlJփ5&ԇ/c¦Ǽku;~5pSfTLŜ2Uʕ:d HWه U˜&Y%pBc?cd & N  7=E/ L |  t   ~   |    U ( 8 O9 O:O>[@[F[G[H\\I\X\Y\\]]]|^^ b_c`kd`e`f`l`u`vaTwbXxbyczc0c@cDcJcCicinga2-ido-mysql2.12.1bp153.1.91IDO MySQL database backend for Icinga 2Icinga 2 IDO mysql database backend. Compatible with Icinga 1.x IDOUtils schema >= 1.12`Robs-arm-1 SUSE Linux Enterprise 15 SP3openSUSEGPL-2.0-or-laterhttps://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxaarch64if [ ${1:-0} -eq 1 ] && [ -e /etc/icinga2/features-enabled/ido-mysql.conf ] then # initial installation, enable ido-mysql feature ln -sf ../features-available/ido-mysql.conf /etc/icinga2/features-enabled/ido-mysql.conf fi exit 0if [ "$1" = "0" ]; then # deinstallation of the package - remove feature rm -f /etc/icinga2/features-enabled/ido-mysql.conf fi exit 0&T )9 kFA큤AA큤A큤A큤`D`D``P____`D`D_`D__________`P_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_shim.so.2.12.1icingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticinga2-2.12.1-bp153.1.91.src.rpmconfig(icinga2-ido-mysql)icinga2-ido-mysqlicinga2-ido-mysql(aarch-64)libmysql_shim.so.2.12.1()(64bit)@@@@@    /bin/sh/bin/shconfig(icinga2-ido-mysql)icinga2-binlibmariadb.so.3()(64bit)libmariadb.so.3(libmysqlclient_18)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.12.1-bp153.1.912.12.1-bp153.1.913.0.4-14.6.0-14.0-15.2-14.14.1__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/shobs-arm-1 1621356882 2.12.1-bp153.1.912.12.1-bp153.1.912.12.1-bp153.1.91 ido-mysql.conflibmysql_shim.solibmysql_shim.so.2.12.1icinga2-ido-mysqlAUTHORSCHANGELOG.mdNEWSREADME.mdicinga2-ido-mysqlschemamysql.sqlupgrade2.0.2.sql2.1.0.sql2.11.0.sql2.2.0.sql2.3.0.sql2.4.0.sql2.5.0.sql2.6.0.sql2.8.0.sql2.8.1.sqlicinga2-ido-mysqlCOPYING/etc/icinga2/features-available//usr/lib64/icinga2//usr/share/doc/packages//usr/share/doc/packages/icinga2-ido-mysql//usr/share//usr/share/icinga2-ido-mysql//usr/share/icinga2-ido-mysql/schema//usr/share/icinga2-ido-mysql/schema/upgrade//usr/share/licenses//usr/share/licenses/icinga2-ido-mysql/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP3/standard/18e04080ffbdaa0608b22d145981845b-icinga2cpioxz5aarch64-suse-linuxASCII textELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=71328d9834960b5c94c0a1c1a26fce014731e1e7, not strippeddirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textPRRRRR|:eF ]U|utf-85fee819ad525ea83ef2cb6b988be0ea09cd43472953784d762b76c81719598d9?7zXZ !t/h] crv(ȭS V| zW;MH3}'tQ5; A?j\خY۸fj76~>/EͰtE?z 3"xQ#U!Qri{߰im"tF.EA_"PfJ1=ߥFFv3?-?/JI$EsOsޟ>16/ڷfny Zsv,`F089~#x4]SXv}ѭΗ#TB'"f3Kn'Qݲ"g㑏"ο[<մRW!>z-4}TqRz3m#޿Co/,Cܭs< cSrwGs|RUN."uíѪSܶ&WH2SVmc!p KN {o$|UED}eI !{o8i4A? y-f?Y$dn@ţ2F,
^Z=º7o&6ZCv (>=N>t7Ð49>$q%8T#Cw?p@?rjjgYOdԓAc ncC|VxIMՅbΥ쬋=۳0ډ41~^N}NpfՂ p}N}J2p>g0j%-*D+jThJ=U#|Л).ź&L5G6n޶xũ5BoU$ _Zj'FVZl<1G=tLG'7o0LHdjDUCsEQ/ 8!6.X?q1l/SQF"90ܧI{ qcu'tSyiEՐ+-iEI7_oynO nX`,BcLyy9رGg\H0e2*;#(V zL & 3G1GnyJq-7\'_0Qݩ-= cf% 羺} śv`/݌W4&>.[+YUd gqjH9 mΏ lQEвG|lPwd KppY>lWA˵"Ӡ ]'fx3 q}8YKPҼ֮B wZe|/0mGwM0_>x&3tts뱻{u눅7!m 2@>폽 >ИsYtfj~2U^jV'cQ{ucrYЁd"7sy|]7lBT6TF @H"s @;XE^rk"kS+eQq\߃.z3Mnbȯ=ru[~ 1c?Ov@n}^?ؘ(QHZNdFp a䍀dTm]$,KpqA>1i1 `t9i.ԼJ9YX'F lZTh2,ue1Caˆ|έ>P awҮ˓95i&mTſS Ug Ki:Y: "Hw-) >v8*/c엇+HZGV>I}t<*8C G?lj-Jz'*vtŇt'm5P0-Ziх8:$SDq>8>6՜#]0p&,bdu ΣAד_r&,I#|cIj[Wcf&h) ."Jy3rTq| E27rLR#.ꄍ}tm[@ ŃQH}mdP(a h~{0҂Ɍ6 p/c-O|c-=U F̸)}ZE%(ˁXWֆFV!&h$\(`tg< .{j'30 ^k+8OvF O<9ع0@>L(hvSMMۛ.뇀v8{#I'haA\?=%ޯ bmI6  )٪մ Jsj(͐YE|QF' xeǨ߂lZYK|9ԑڤȜ~x־qn.%nO5:#T$>!<%2orB}M7ML&S$ܠ-xJڰ]yhR9bڛ3r[wR { e-bʸ kRPyb4O$ G[TJ{d<*#Rz/R `:&¼& "vJ;Q{G8s]ωs bem47r*É@ldU\ڄ\^RكCފt]B<$l 6KzJ_Ra_8z;w|݄E?W+qM?W4s!{!dx t +wIT'I|-FNjr鷜z'M2fsɐhu"yS0昬!GQ[\^;pa?Q'M4ku/J=}Dw9ǰw<ê^QAJ)%aSNU  >v-b>+t=D%;A^b`'1F"q34v,*>G^l2S,XƼ.vdij8j0<}}vG+ i7UMЏc2Mk8l/(O~BmFYEUrb c ) "$q`}2ƆgNFC7[Q( l%[ReKV)icpToÍRpt! =3ܶ?GZjvHh+< Xw pdX3h#sWc}LW{ MzjoUcW;fT=+q_zr,v7-e<Ȟ q+A&s8qh ɷLIN&549֪g΋7n!'[HzpCbz/ٍbшυZߌ2Yk h&Ui|8M4ƴ/Ujj~ɢs qj>KvGkU{^΂\Qm2*e&J,<XVX n;C^U29XL!T=QkQ Ⱦ>U9)MǕ:̶U$}\ں\P p!.Oc "L vpPV t }yG\ēlؘ:/G|;DCt"y9$FIߡ|'f; %@&R͎ލ9a'j-g ߳oZ+y=,X-djU䓡aI锢*%qx5M7 n|VTa7 H*@+T(]uZYE~ _n6-gwiJhz-RDp2tyDiZ^ՒK{\?ޫ>[њmvRBt.ӎ4ҵW>N;B}VRb0ZD0b?Z%OhH.` E$UoFX\aXKl@6HB;d+y5:#yvEF>tBTkI* X]&It[ t_4U|x 6/0(FBY ?A s0.YƵis|} Hׯ|Pvl << >x_nJ8)ʲegn'2I]Y.I;̝B{CyG~R<%"T=`DqM)[{ċXޅ2Oa$|WfZPyj."(H;Goq1ANu$@FsNoiM%cb#7v"io~ogy`J3?2,AS: &8lSL>)4:҈Xbm".g%]}2nd:M_̠R:5BX^]I!P{bs),s4Z9gLst4?ׇ@?^f`2dOK6e>Us4{y:њvW"a"k|XɨAoݤ;ʝaMmi:Pcj-%t@ 5 % O\gftB5[ ܀'K=aB'wUKzQ4;AHQw# }BX $tR%hf 8 =`a֏ _~@j(Jﯜ2,2nu|%M|3u!~eQ夡Y@roPT'rsBppx$iĈ"0dgLR@w[ [Eii}ub388Ş+,҄vP=GpX=_TkoRN4HFIZiX A[bLu6I7a0eW8 Ϸꮿsn'` ^ .-k]Wnw,!hg byJCZ~M.%w hHqʲ^ S31& I{hg !Y16=lw[_ :W[? KoD>˄87W"RY,~HT#Z`n+7u]̀2VظJY@BӘm/f2/gȕpy;i@Ev8O/hv5U6}jܤ=Hs:]3z^tuggRF%]꧃緀_IjJP2;M{*^3j+ZAʔ~/{~:c݄sHT3߉s[}ll\"I<+XHp$O>![7mS((޴Syȝ)0D63[EMM#|!5LUL%k0}ds *.m,ldTuZ:g38 \(uC1Z|UǾ>ºsK938?N<;!4Δ<(a`@=)KoB-6rG`Wp2}O3C~BCnKZ Ѹ]˽#ӝgU1pGaFh֚Qg ŬEZf|.2_X#PL"І/uP(6e߰pWzm#0Hq$z3I)$GνQ!‘<@sXZBqbk c]']hD"Zg?Em.>v-Дl%U<}Ƌ5%n\l`e #hSbk> h#I\jNO&Oս o]W~,O&T<{Ya3zdL(SyuK$ᣌx>r^q2M? qI,HmL޴/ nmHٕhm|Mz>uƫ8hK߰ ݒ5i r8%zB3go.{&B]9  33],}0I3jʺ5)K'\{:.QzdVNONDor17BZhٴe `Mp S)#80t鳎m_Y!\k2s֚'Q)тR=,6a é*kY<*Uz!#Lg>Vx0JD&X5Tև"ͬG;˷#7w9S+#G_0}=x E?[j}YG6Wt} zPVȬֈd"D(\q$?RJoS їR~iZGe.da|eE_R#\sg( P*pDjd-@|Ǭ;r?\=S?OƼXD!Oص bNn= #% 369B<7OT~n?K9#@j.ȼ?3^" 8:(4ND8*+9.2F*_xg+ {CVjImIۇvNSBP&_ʰCs$ aRKm ߯\zҺNF+4 obH4!pc9$z[DASL.N"(Mudl2!|t`{b0MblLU #z^ŪEh5[n q vxDpA\ETE>"HY~&_qy€zp8E{ٽS{"%]Y|E&1i޽ VCq5PjKy1=;)2l} „kNG0SA/,;]K, :n > [˦~@@C(c:ypoBn fx [&P -(0TeBl^%R3Q@trzyCs&:w&è QPey4؈Aj!ZgEjm.3ڤ>pL6LQ׾f͊TǸ1sRڹ]8x0E`GfǎB=)t/LwҒgǭ?eti$،Rb( 0HA޶+%.%۱5IPUfPnAg؝f]V5<(aH:,;4;pkgPe5AU?,-7McyIf|$(.@Ex0jp?s[C맊~H >r*%!H{\Uh3W{ xa/q|6Ped< ]-T%;|kی-<-<|Ob’<955I\iL5}hIT?@i0]KDrB}ÈcЃ$V/xqPp~ZBwX-"fiH y K0mCLAթ^o~`\Ed3cihSV3'߉l6ͮ@Fg{XCļ w)Fq5A#4Of :P)HJ3W_8+D/0Ag5N(Q]޹|< ,h"Fq3m$N2A ."HE;(LrW\!Ƚ>`Ip˗ݏlGKO`.UE-C-2әTby}); Ӂfכ@!]/b}'rE(&HTku= 1WMEߪj]9&JUH,͵ty?X 61s|Gq$K#9V=p ORur!(ڢ$U2I[dr=;cUu+/.q/D9mbYq8SWtróv ȩFfZPF[~4 ڦVmf7[ö6ʑ@TZұ=\D;Q}9vJn?`P{L}1ʋi@z,g-D\HMjOr"RLM Γ6#?JEׁB!d1Iavau°nm*xK R_ԫl2z,PZtHERK1V*KƟx]_1I#QG-WtgbSOB3xTuuCTֈPΆQ_0n? <)i&q 9ᕙ[h(P#Uv3$K#(!C~CZ w06I)cT ]%|,r^ Ҝ.Y8nyv+"Mx ETW%OKO⡁?!,zNv-Cq=C4SaPؘB4*'= )~ШpN[;MC[7s|f$C=C6E*+y:) 5vHo%S{#"Jx '6ۤp܄wP8˓ 'D/?fXoyEsC#W v=y_HĦ ۩kQ֙eBлO|;&O8<ѮL@ߥ%(ymf A88C7.65r=[]ߚm;'  Cyq` D\gxNG%vn2k< VD㲷\2+so8%M>'#?*xD2 #/O`4 CA*yd1)jnsٳEQ|u^VH6}a@<~]dO)+GA)BIIc쩘%?a)vCEYV$h쇌>X˂5?I,µ5*ʈr'Q huS}_:yVaF(y5b2Xac1{~;dS.4մ4"E2m:>8W*σNŠ/UtROs(/8 P*ҏ&kOl[0‹^jUb2v*"O붽 L6̣SSq8hiF ;΁29mZCZ^qORsJL}Q/:;}.+ipi[;y8|K'" &Оĵ'e0<0l&oǻbRoksݾfY*/46{@&i]l}s39{ - ՈCvoS}4UC&&/ ot^q2M̧Iq ׹_!9©@ozf=\\bjMZ#(q%9AQH :FIh`û+-h^PwE«ؙ}/ }1ww?Gʱ!V9;+S1a(GA\֑e?$ǫ v[X[Z=;'ڦtHZ&24Mڔ~:"`>]{(WuizUʈȜt[ \1,Z|_[zzǐذ5`rZڝWi+>qVqjiJRw#}5<vM 6o M8) V<{ 9.2q-ؔ@y&ia*آ} ;8d7 9撦u.5C> &_;|܁u~ ء,l6ӏl¤B˃d&J "wuR(AjX'e bHSe0)Sn"lMS c&'~젎rk>V\&Pawpol}1a 9I,k܋Yelݦb9o.Ipnۥi8M0U%EL9Ѯ"bu^- uݟh+'V0+ sj)}&?/9ȟVAϤ'*W5nXQ]! p0BnSQôMKn{jc 1A+mp8ٹRfx~4ynTX A/ؽ-  z/j[s߾D(ɚ K_gGu#]s,F%y#FŽ,¡ {Z+6!EPW5^s{N&.-zty u{۝ӘebD&JT(X(i~ f_Ve_4xCRlMg<2vtO|Tٶ`C H">=X|8Rک.>wu]#cTg$H3ĕ۩[NuJ{uLf9WL!Zjg <62Z}.N%YWyIMuD`-/9Ȉv:'6p*^PIkF%6b;YXe+Pj{[gaj_vzmڕ|7$흧w},&D(uf< =KP -10'ynsd'N`M  'Q蒈j@B1~$Uf⌼>8N\ nP|H?+u^4m$v#UOIH=",Dk Z.uqB2Ҋ}n~q0C+>zɊS)]yװ@( s`oQ-,ЂtoOsx^t:}^"mo^9ao~9B<_XD!Тl'R6:N7Oۺ77_4B}7EjHz1f0يjp~[/hB; mR@4EBKcIh3rLjU=mP䲱 +kBQl !) J.*-^pn"O?+^ \] {WevAtBזO"e~?_]߾KI&xq' d*9E׶ \e ѳUF p7L`" 8XEgsH\8ouUW-r{%DHPPvRsS;:j\_6)ͤ5+:;.Ǎzk?!;1C;n*[dhy7!M]9[ _5WV+=`5F;d_C.Nש}&2\Uֿ4{겄M~~_P$mV`1a#S@n} 7\g^%'@ #LwK jYJL e3)](aV`IbK",T&o4I'U{Ka*@PNy :W˥"h Y(8. Ͻ *UoBxY%)8&RGޜ2;%dV(7W/3WWΟ:*t0UAKoC:l[=SYG$>]fإ/e!rL?/An\%R\=8 E9ùiPLE3+o|.^5(@h NO􂵋r|Obi;HI*Jfgm} peGeQaoGXV@\=mY=`O8|ECb:f3jmH3#~3j sȷ6)&81 [kQ(KF!pIy}bx ۑۢ)>I 7O9^+T#a+cgXC_x"`RNc5l\7#X°v$A>3XPT LV~F}:@RLnӝd!j|JEjgs.lb7yxU:^"Rg(v )#ٓkc$=@|U5xUaaa67j76YBH~1և:5p), Ѥ!5|*LS`>&vcjX0}\)(? $|/YZ {PG ip$9춄>zU[Eo./$OJXb"僧fR1sH]*4kQ5^^<ҝ=Qf2 2\gtcyf7wFZ'H2z~WNAȘb5&=aab/3FrvJFq.;M8c<%aDl1?S,tgu^n4tVP7vpXZiK`( M4Ÿ CC e-7Nt-Ǽ ߰쾝3YмjuKUzo6˰Ls!GH?G Tb?291]X),$Dս6,F {owP U>k&I &29S! `/5}p4b2[4'5!XʙTfس&6s j8y\H!Osc["ӫfvpPuL] k{NKN-ݡU_z&|&I H4ϰNR~$t#!SoiKmʻe>\(wo`1{H3E&ɜZskd2\33\|WoYtD!3\E`+lJ,+jb Y+C'LH%e?ȸO 3)ՊIZD"'M.0[oE,Og}F2fx;r.ъx.T-\0MM!"vG5 Y FLXT 1'FVOS6/0g_{C󣗁Uc]ţDI;4cM t uwTrt|sHu b[#Wb=W]oyQ-k%A}nH(uc3a)Dyxky!b\ 7<&e9ۊ qYOu)X/ enBiAn3ƥ\w| 2i%ɺ|(AaQ<u|k δg"YqUX,,+l!q1{LIcvXP7uTQmq:γ+6g$!Ѻzw$rLT zFˊ,ۮ8o^g}&v)|gw.M͐4B[̾'Uf"hx"L(ͭQY~Xͥ.SY oJ]7"Փoe $H_e7|BZxK횁=av`V"_ePsuӝGMExPU0*O?J DvpyD'hkhfD0y!D1=p{YRoݲ)MG73o&HY`"s:j>k.Hg*aFt%h ud-iـ;^\iNac :!4pta彚(F:%2Z}t >]3$xs :^Z$_V){gv:=:~\jT)6+#IXАMtԭ0Υ\lC,UmBxF%!;@JP;U@,m]U._&S^g{Cջ&xmK䧃8]*kئ~ChpH:;CMVNĊ4hлCڌX¬ǂ;ƤoH`OuoZͤKXY A˲Y>6JVN$ O]0H'Zl|:sw_bjdSCD(j#Ҷ6P}7rLNcWU4l7Jnhɞ5mT .xNo:8=h|1ĶD?xi&Fn '/m8u1'7i#A_wIa͋p W_j|5uwHl>& 7Z[0#wL fw2^'*jgZeO炠C- 1_6&xhEIb؊DQ$o="jvdAK|Z@`if'śu1"T[%kG{`-9A>S21qWOgӁ S |z?7R# ?;hG`3ӲeJZ/,qw.`",\;Vzjz\;6z}]$$5u4./FogU 5hA.d*˃E **d^ě:cg(bR^Gbd#hrgVKQ, q3?WYsE+xñ5 :g[H?+hp7Ov.dFJ@Gea _~}巼7vw@R.l_b9>cQje$~7fPWGJJAL2$]Xrպ1;&Ѧ2y9&'r)wF}EgoRZv[]b74*A%Ph,T0!ΉR_d\;*eKnlBUDQCۗfL8 $%E1q &+ZV%0ҮVZ>$vDw.Su)`SL 6?8&c_>:Dv@]ӹAYfN:s]+ 2I;bSu]tw}W6]MO4{ӅtT魒ԧ+˭H#.JjV[#^NkE'5&l$RY;)6/wG&?D 3X5s!t6g8XhS3߄}a*S=arIr 6%!gcg;_BʩOx)qN J:r ?fuH oOӉ*J:&5NS5e/YyfuwxAY}GAaY ̤*SV\&-hMO\&!_޽ʰ+oS`m3ܷw<@^3KN*Y @|4:3Y<5zC8`;ASraKݵ3aJjbQp>8 e"hEQJes uwoo'<W }'5q :+\vpҼ! veXX] YS쾀W{\4bS\n*ݨ#1 f~}]DK C50;M:G/ۃo5֚cj>W u Åڨ:?mS* \B,ՍM q9x36I9^&r´C C&QZ:A 3NKkP.2LG u`c ߈;8}RBX)8:yt+JJ,L0u̒w2婔ڞI}T ~_iO.vs5:+jوtX P:Yf<La!cZjHL$@$]n)4}irD)F/׼=}*t)j{D{Pz]`~OnxGGMΪvS^FyYȌr3ݠgm33.d`Kh6]&RF{Q|JYIfwg'1:0=CDtKJn>De"R~d@8N j\*Vcn .㢾P\ Y? ^J R[{t$C?n&+Лmr]ǿU- pӗj+cfB57z.!WMuŜmĕs9D5zZa|yJT^l$h֞g36펞p|spēQHΦ Q´soIO^̮;#nQ|Hy}uhmѾW;n*'_ۅGlڼz}"%@E 鸉6&<{7 ڎ0oSMg5[*xm]:[^4ž\SMT&,}3,lx7UӞ1c\gg6&0~kCmNx_D/눲6g_kJ9Y5~Z39L> |YLtȇ<dyV+ 7{@>LF':.ۏ4;Lg(deE8 $h,($GU-chtL):ob t+tnxt3i3٢( Yt! ЕZlzqgc0>lBZI~YK'SA7ApG쌼6TĔB jn`u/]nLhVk NSOqqRAAimHiʦp](q)soY!j[9HE7ˣJvW,oKï Ɏl~LAH=lP}{>6<|#s\N[Ŷ w(ٵ.Y`,i- \m(b8|/=z7&Xx;r [7{$9B,X#xw0w;AOGʄ cX/%/pjl_CB{OMԛ#:dRB{!_=܍ۊ'-[ӽJ9ns_3=wc.45'uI[a[`ZT=u *P0K㻇?."`'a+T'!&I nذe6mQJ)|NRDI^K7/w|Qr nùG_l!fA9:5h52Nԓ'E/r ]YÂ͖mBO&fS]i}* 6/VRzjbvokXh`VAtzӠxz;P#_Кr@'S9w2TggVN(LN!lIEݛt="B /P Wk yzB&snODC O ~.jpbo5Alwxxٗt3wffuCFr9"Sȼ癤gͭ>t@JIh}~E _T%INͱJnDK6@/ڜ$o>WI rʱY()͗Ɵ`))0IɦI8(m6vC} Z O)!Lk؝~SCi6e@ZJ &䂍/nO)perZۺuA`4+B2v"/]a-2nIUc9/UdYej,Zcu6]F{yO>?gl2=.bog^3+mǝWVH//?y 2oψ<1'a-&U|՞fĔC_C]#lX >;%:CuP~@U,CADIױG5(8ٿbJW>oJau m~qfsIjlb6 N)+.`x6k <ĈگLuXm1v eJ %j@I8>D 1„XNܹ `k'233HZI$ #żf?`y:OR[%[#YgK`vx3e4ƃOE,p(2n;u<]竸!AR`4gz׺5i1VFQ)}&KSǭ6E*=O_b|IT0[F݊^)H cy틽$p{7o 7%&ha!\6F'4dp;C8}~AL'ToK;\w9%\IBӶޕ2PDvl+h pEGFE ø LMPA:Nb%F Iɫ.aauΔe@bjwY"G /B ?9"1},Wu)R ׏U!Kf>! n[b)f];nZ'{Dyu+ˀhp| Xhږ] RQ2_qI FDش^ٸ3=jg"` 3]vL ѧ$\m~b-\3E)HSƞ\SĨɭz |%-zinѽ" lj,w v ifTBztd>41q-o6{/c*[֦_ڀ3$<9sԯFW®B'i8EP?_&$qX*ZQ〺LmZfj `k(D{_4wv؞_  T$&jm}Z-9]Utu"_Q>.t]QW' L֛O׸#W1ҏz$16!ePXPZQP¹k' 6fb[A |Ia f>*nIK]⧛JJj6x-uS:;q ֯K&4`!,%Ĉczی"bH%'}!הGS$Kh2+_JF> 2x 5ЌmܹD*j8i+X9*g0j[_dd"oORۢVo ŐL"iGj3G:AU8Xq1TѯQ=:r&O(6Xitm^f$⇳5jd$4vs:$_iJZHb?: Wná /n &I< X-L><!A3|yz{Ǿn7YO; ;CY\_ftt ӢCJCdP|?]ꖔ0Tɶ>-Bu~.e'* B߳CԈ"-_Nz~# YPn K'ѓ><,Sk98b_6*tuL)GtΞdA OB{윯Mg@j*஀#b(rCw+jUݦ~a1!I>x.-C|ڷʖQm> hqӨm϶-&vĸv'GYެds\o@H5Ԉy!˥RיY.%-!Ó+M~lI÷u?k~xT|OAb"uV2GLt)8Ј˖-.}ղ8z4枸YT%Lr+(nC>8-5Ml^0/*Zj&5N[37)J^f ┃"]%bIG.T b[Xxu^K Kd4@vyn&>Dmg)MɄ3\.Dfׯ./ ",v>*tZW c( ^wPZX>n#'QѴb3 Ӹkx2+wK: "g+0kum=rNvТG낑$O_'?,.Y5XGP$Lgy5)N њKGBft j<Gۨ&;)+"r20 W^7s JSJQ+&+"ou"C¤$èɖDZ&H :2d4&iF;/FH1}ijI.쫝TVhy SO~'#P,zz#ҡ,Q©vyc?Qc `-`,Smrߏ YYU-uTI2cӗ .etU _1՟ F 7DN wlktm+q$Rl4F'ѼꂥKe>I}0Hiu cȈ:y5,-*6/L6#/ XyLlb~+S/#Rc (HvA0NY=Ŗ3_̏Vu\Qv(qsj]J40`p5A. | ueXeҐXvfjp`mK&z(Z=U]Qn搌Dz?/"&IʱV 98&$ 1 B(>(;pA)^ouor!-ᗧq~)>,uK/IC:Io;4!08{*N\/]AY{ǩg]VG%C0m' m8zkBY#0iār ?hlؑu, ^+<{0b"e6x`"OeDr%pFܪ/:;ʣ{.]C m/v_W: N>_9"s"|N-Ef)yۄߙ^do-0,Xy}R~'wx [¯g 6nߒų.~XZDOsZa1>,)]FZ]k>VL)'0azm6XCk}kvl~K0ҭgiաp3IB!7ss6ZD>.HPAO1635,/~egWn{ZPn==ɲ*5>G&U##1׫Ţr{uѿ {]8lEWղʱ֞YDH@q4ӁqiAsNNZ*ڳ;Qn+ +5̥)_1J+]4]Љyv<Sݢafg,k} r'ˢ SXX-M6mjyr ק9AjWHxDe1cJ5(G<{nn !}LW9l,KpCdR~Uoa|`L'|ioIdx2"h=Rݜk<){L~պiG^Lҍ1N7AK{ev] ޞ+1U/B"I4QG}Dd WVsJD:3 ItQUgY I |Ԡt7h_rE~xZ;.8s"v65׀٧Aemf/t."9ѩJ 5w3S 71urp@00CIutq򮷞BcN k[]o,ov 1jN[rQ<Rj:dt ✸Qws[Ҝe(-|6Gbłw X].#R2_[lB1O(2w?5'/qNԖ S',e!q[;[%̷glE!sg|7sR ;WDm%M a5YZifk9%'&Hܩ)c yph_JjgP@N+bs5WN϶tqq=*k)\ڳc R6b5K_eE8i.;˂H}9k0mUvE9Q8]13?T)y7Â/u(~z c4N!=5(;Q03-{a:$e7oڌ݌)KNcHB@;}Lދ;,IOqpw@.C"4,7.Ϫz!SЃ9`eĚP|h|NpYfWu" C 6b&~ݏ˔zt>İ9 yCƑ/\\iL\%>۲ ҡޕ{T-yK c4Ef&6gբᄎ[٩h[mccgaFq+qa;\F)[ݐl Yo{M׌wxeR|)Uo@Uxˮޫ9wavۍ@nw~<# TGNel4*d9ؗG)[ #*s]`=3Hux'zI1r#[7"QV΋}HU=OmF c;)rlYn +g +,I tqTFgٱ:S p`/{I7=VDʻ;+C;Rsb2i@S6Ww/KCN8zrD?z| "R-e~hD5 {pX /_[Y89%j;xx"V:lF9"l܍-J<>waRCAHX ĉm!ĥ10ڌ%.EqA4[k[W(XQDu`b8V:vF Z),nuJ]Of'GlݙS:V!pr${$e>D3#'PyG)bW_i ~x`Hq8&K9>گ1Gm%-BUas &mbS|-72R.C醬U$6EW>F+@M J'B.e5*I=fƠc>}C'lw 7BJua4ig xG6gI M\`퇌O d3x~:-%_p}.?캏Tdg*tB7?~ŧ`;XEr;- ɉV|D9+rF~#jA=~[5HOD"^o/7獅uHkhɥ5il)x{4 Kq7ޑ7[ߪ{y֓︂ĨQN !4#j gi?;;aNLų6_wzr߿`*Ӓ=km hyㆲ\"/ǁ.Yy'Kn$|޲6\-JKgx=(D֢:N7pu#4(:F ԙߩOH"/$/A,IיFuJhQAWB/VL >I ^jh|F~ɽ|'2íkH W0ipkaSrqR_܏ 5.п@ߊ\O.O@4w>Ϲ_@{;BicCu8"Jn> ſ.zFpf,y[akTbJ Gp⺇LV7NYkV*7 QRӫ&h MeS:~Ԣ~̷;UlDUoY(Uv%t)"HG86g|Imj >:Zs-^SA6H[fŕ6"VBN[[.G;үĉ@d4t n bS'exRQO} ic4lUlr p&XRo`л^;U A@6$.ϦIkds<,4`_5ʀӵI`TMR/c"Љjݜ G/clfW xR- Es[ 9nX^; !ɩ+Ҝx6 3>5n'Ȃ0NGٝG=Mqup20Ck #}1VYlvO=؝g(`s+ ҽOo^]%lT_{K.X@$`>|3]ϥj5Jpj_K N$^~62Ăвx6p#Kխ{C1<|ݕSYj3"IJg3Lꍴ[jj\N$ǙEAoe-3J11NjRwhwsϋZa4zqV̰Z67 uw <4shă:ucmwU]ey2V@$,f PyW\XI=V_JĄ^ ~JRrOnyrw*)X*J5wS}5kcySƦpUO΄z3n,Gk+7Gy-g_]D`fW6G0},֩D,od=yW'qЂFcnu6՛'[ (k[ |uBë]),x^#%~u6[:(gʁ,_v~i]YEU^8nՂ.]\duq~$cK=ǛR@YK=Gw /_HxZMRI *g=5TNq["yG8R`]hB +&x(Ta]5F=XvQREl Înos9j01S{> U#S褽!gbv.sZ9#B<3aU0a2U@q[# r*A2&|^mCa4&.汥wMZ/W_'|5 kGTih*n9wViP  GJA ƾs\`۱70jX0}a^ vJ'i-ǀ-찪Lmci0/$%;|珼LC[&pG@hhm~C N Xf᝘}|Gqxp2LBC&Upv/ эa ,'aKp|S ޑ>ڀCµ*lBQHkyڗ`.`Im_м+=-0@$[wCƠfcL"S钑]A;n1L!0ōF6V{tRմ=/&vn럯 ]&Br su9ӏaρ+i {Pudɛ=Kxx.gvkdD#PJ!34oKFv1K|ٟ7L!&;%Q>a:Y}/ QT0}~M8 +6S;wbV1 ]כ,uMܺ 6xiYnm<1o811}D5@fQXݱ DPFU*@ _c#Eް+"H+>>9p=S!yRg;lԣ^!i[4Y7 hFk}ѕ`+Ԯ'GګOgb>c_g ֓7ས%ArǗ@&z堻! tVǐwbE\NҢoZMʰ>ƫsg^B+[n SbV,! о5}4Ex.<飥08I}V R6b0koϜYzV6|rj-E Oz,'c #=DNxȀf͜xoCL_ uEQ,h*/ D5xwWw2h"MD:Ks4Z[/ ?5lI+GW"(NP%^6kq=N8kpQ iU4۞6?_٭kjbFeV>0t+,Mc;GybMMPlDɘɡM4Lx{'BP8yB^,aָcxb÷grZyWzVz]@.~/wH/D}w4j|ؐYBF,^iYh:uu"ϻeŚ40UeP5l3%z,ɾy{K;9]s{&'o2zsK~5W eESnD-{i#6.ji%=cOH~\$˕1 bxgc 'aD1[WI yq=[coeV3ʍ"PDx{g GY:(K<_BX2,Sя^h DW"~GbY!r@!Z"С'|%xݖye&q&b"qE~ʦW͟>_tCŸ>mʖYtTSAK$#(RVy' j ㇽslP{@x$&{9V5Z*[]JҖqs]&D2;_cN Mz{MX&I%H~8'cy9A[ Dm~V_m,53&?k[4:PxNw+ڿ*JT)@O|$Wզ9oz7.ni| Ng!ը'ֆx{]pzb>^nrdRWkڕga;C̄m :ĀGSRN1)aw68]3雠n PF CCMf+|3[A Vm`T'6nrԺf,Bs/-7ӝfBO"&QCX&턠-S? dYb#-R: l" S¿ } g*3Y&vע%PP2^\{O4bs /=JS2.lˎt~ F1K{M.r2 Vw0[ `*wo-.5M;aS⽳J?@8kvhM1iP[┗BA &vTzڈ "^ ew;̓ ˈQ&$86Y>Vǧb{Z|_Z6_o( oUp,e0T_@[F_|: rb N9MX\wА@-O[<9hVYr/*oуВ[_h\57#_ǫG*Jgݫ@ʀ~۹Gx|4ª<2C6.Aہ¾COeE$l\`Wv ='eF4pyŐP*.E$%@5TmCOJ_›U^G572[R0 GK y%DkӸ )?wk[$1TX6U,8myυ:V/c~\9 pzHgȮEhFJlqJ >J]joN«9 %e]$!щį{DGC%4y2~*O ͛bPQ 0&) =;7Ԙ_P5z:]\ Rp@(,莅͒,6AM|m."0ڟuC.|(t f%Q5FXGm8#G偡|C ۮu% k{[~ 4ݚrL63*D *RY 5X[fSJtsҞ,H$Lʭ@% @q{IG [q'.ʥtDzqH:Xz`1jPN lD{<{MFsdY(5c_ R Ϫ V9+uc w wY#YKr S- isu @~I g-Ɓ\20^e26wr13!uql;If3뭧j 2{HF_1I+3njp: gSz AN%,s짢dMG?B7x XW㼗8EȗI5uRqFN Y}e4,qiBAM')aΥB`/fxەԞDžz6CBI#[wm3X+VSЫk훿_ I?7$7ՙԔXfP:CQC<LwP =1f$M 7F0%L}67ELb0Xx(8!_'5'Q,Rb]a"P$n~>I( X V\~X;P( @c 4>NQ6\T(=nTarm \舓>-o<7XCP㑜|Ps2ZtHm[r!j4/M/^_.>Xkv-dC}r/ƾ_u)F$j]e]s =NjO1ʸr+:$tZ+Bap^ވ{1Č[q Gx9)rS3ښ MOlao邬/ 4`zOL ( kQ7$+FXA _JIJʕHKh0G)`n޻)ud-N L(zN,ޡx'ЍgH+I"A JFrZo v\]2{Ej)#&(+F;YT .|Cіj|lڤF2vsU^$3)> B>l\K\9"Ԅ>5H{U,m"b`6;Ta {Su/㳧g=_覯uQ(&եfBbx 9J靸:b2# {g%[;[.sxkV:5+?l 0} -4@[-owhu)nӧL>zF{(D @+wUM%俻"cHR(:vwd/K#D[9Db@aҦ/(B#kH?x%exg ?-\5sƒg sxd'0cFө*[CRKk< 6?\EL2kM>NލkA^_k,G"7%}luRy#-GOw{K{ ĸ؃,8#}HEMň.lqi&b51RB-kgAͨom4Crc=0£>V[ `4ЅD& KDGcGi,M{V!P߂A|B5Sm(?(2xL$d][ IcPBjJdg#ȉRW~zK2 lXq8,\f`ƗE|'LLI>zw/"s> 4)Ѱ;*]FJ{L>Pѧ⏟p8g4bc!d8^wALgFXygE(-/WIOH%A0讯3F:lCc›\JEjFڵ =`'/v3 7NEY:PFҮG e8ۈ`9SnK.gjZܪ\(;B4F=u>vi{Zlp9۸iu])t{9뛐6S27SAdYG7%'\VUh;Q'MӺ9{h}(aآ=4߽,Y ' Zn=-Yu:$A2,=K'*bR;QXp2AD^HѪr2=uWʈkT3g*k;D@BA^۠j\9 k{2dNGR,Dzp,R3;Vxd [,ܟS}) '_Yb[BUM7śag0",T9B<A5ۗA*b PaEWR{t0uT+@%yȬ؁HKK\׻)s8OK|SN _;T ^a"fZA5N3dejZS·𒼕룞P@KրNqN^ପ4>٠:B 'emuIARG-SV3FJ\1G/2g<@(cd~YfFe::`dw$+u boʳK|j]@5e'sQ2ʏ[M GIy~ۜw_-0&ϐE`?"-f5o@N|[$`T8 (Ke(,<(.96uhefMcF{e6<<~ܥW{6|xw1i8yy֯Ŋo%c204+g~F$Czo6ڵ(m'eHMnWaְa YFNƸf`2EA Aߟ\aq=|dAjP5|Sҹѵ|49jT 0Z-&OD6 7Kˆ/zOf~- Ak@Jߟs*:޼)&02خ60% r\Vq_ !7)PRA*;Z^X9I'Y4308-Bx +6:(mL}i7*L[&Oe%WpJ<iKF\qK:]K3˴]&aYM(3R-90F$i!wzD&$Р43$3o?4y\c$u/Ӈo@8WIu\P -@ or~> H U}J@@y,LH!-Ͻ݉G俭a} FɮzA6w 5p_U[+"V{T3ʇ_X=6蟟J/*LGR }[:ˢ8;'HzqTX!pnRc=#)&pv̳0ÏC; =[Hꪌh%ڴ),۝(tL42 pЫNjI7ޗվZthh F=ʘSȟM,TY)/]9soT0 A-$vK *%p\`hEW=' nlG3m1r˟*j9)C9g$ѕ{8>-NtLlJUh)XRf)Xo? dNCZ\]1.DF(,LmaGg`M G\3YjWSBG&tFH56ȂH;nE'x[ál#RѦ.$ž@=I= ᝁkt*]^+nOr0,6M:hwG}WNʋjLh\ OQtȣ A|e0ʸ/ }']H,М,ݢ;`2Ƞxg ߜr'B-\Yzj$+r*n |զHy2mR\>ɛ]WW*D{sa:i&:>~eLl$3\ ~K2Wu,ȇV@xxdPJЙHf\ D@=A@yrlbz-XIp' sZvɘ,ϧ!*f)qC~iy7q-wl4 cϣx=;n{cB[ZݨWglhlAsAe#u9 4n'xc*$73'XLRfw J^<*R0CtH[ 7q=Ǝ4Gxsa%>fo}׉R;x& ]f01x ~oW (h NZm:иZU< ~ 6<{l2aM?e0 ^aS$I `YpS;Oy:6 %']{"=iG4^B 6~&T&舳Kd~#\OϖnYn ofd]!jċ sK.k 콣r($ T4d;ףD"鿬|X/fQ!k{B9I6f P[W1 bDY@gTYdo\2:mA8+R_\Mf^,,vGskZ`ra]DJ:{؜7%ܛ?f#];(I4f|zoF"p;8U&YG#4WJnxz'x21 ױz!a#Wo0F,Ue5^=F|(p$S&R+ڡ['x8zT &m=09ǣO>&^__riA ou]Lh 70 вmu'"+n?\$V;\m-d?fjeÍ1JÅ%8ۥg @?t-&|~PcdWm̴3 JTk5~6S+a M~Z_05r_)d'KlO5OoȮT\#D/Jf3a :QC~e*Tl8yat1sT80ĿOa34pdV(T;C2IFqV=[vH)qI iNAA}?I$^~*;Oybz-Y8S(=F*PH-},G,%";qԃ#Atê( %KQvܺNPEKOClB%oƼPrSK0-d~qBI8xp=%ypy8N ?W~zmNglܛr2's{gWn,9Vs 2bK^-\ٛ9P-STb驮AgSzW6F S]tƜ]R3TRRGO~yۚ|g&4ӜšHN pT%0͊ jxx;馽ΝT\ym{(El"HbWc&O{Ꭵʗ.U z[B2l3u)Fě%K"P*#&v Ӹ:.NMVnT4GtC( )I <4k'Y?ya `6 3 eF(+^?||=kCHd&Aσ8]o`j˧wYѲ$pXsP5ScPl`w7__; cY!^=Ct)h}sI: O|?C!U5ɸp}8t#rM&;yf{+# ZMNwcջQI1D#Kg>؃ Ƥpk;ؤ;bnEirc 9v_# @ 1Gh0fPz~gxzW.1lm ̰׍JaokwGp{8;AG/x鿾 -^{Th$5rTK bH5\;zX+%& jƝ0%}⛬3soco|0>U~$ 5 /7NIr4U1u٪ftmQM7FBH|*bqYZB!2^`Y{(6k1w,oM^oػnpl\*ݦ=tAsubS(|~3)h6ZJS?jI{#%1f7NS*2\][ y b $t-̆Jd*%ȭ,[@=J6fr^RbMQhI8;tFf;ެ8.IŲ˙QWjzIe᫣jx(4rN7ЫN΅~}/<6>!9,)@\i!ʳ_кTEd,:N/L}B?n軬(P$܆ Jׅ+eY\g8z6eꫂB-bQ! ?lҏK bD-9m"qw`cY=!OL!h"ˣSU/u%ဤZczY oε]܊^3$c0) ݏYz3ޥz_ 6+-7g2q#qL*OCfe>NBLlV)Iљ|၂D PߋUO:F+`MŽ:ybdY-pV%%Plg +{3Wc91MlkI̟hFyCQ8hLM*}Yi NRan.hw [Q"{|@k,}  9J$ V$Zb |:"}bՍо9bW:i!+sPلO *4Ѥ|ԗujjy/^Z|շer/gD Q){ڻgI;ypMFJ*+Z6Vds#eRGprRDܳ S,TYѭGLa(Wg1b Rd;BwlNDצfgHE0M`"ğY$c3{ץO~?3Ֆ*gRuf3pWZ2́ƣ.vR 8tyg**ɝMXBQQ+؍lϪx-x%09I;,HrmkNhNloZl:.Ndֶ͌ u$uJQc +zk9nn΢ľk]^*L5M@`ӷ iIcȯ&.#])wU oɬꛆ.L~rqJ[(fTʳGk 332iE T.HK&CULy^z)IB̲ Gս_FO6RCް8y27J7}5ڭi ~:޸.|-/DŽwgNܕxpM-='mΛ[UYF^`؇YɌs":sxOAݵ2(%4E!\$ɡ$V6O];)6MCeXJ?9n슮3sЬOHփgXxNsm1?GT9j]Z^jLs[[V`!DDl<̭waM" U)PT'^ϴ?Y*Ma$=?b2=vy2ǝ{xLot븢f1qAZǵuɢ@zY?Z`n@m%k>WvgbљGdFL[9;doSh}6vf@mӡL=RSI{8miaeOѫlmJF俛:YJ;DTP:rY7SҒ*6<ށ.R.rs!~ M~E6/_,L1t,e#Vr"A?wƨȬ3j.y9`\T:ڰZE[NhB⎀=_5E#]jR=K:јz騞ty64h)*_]iv˙3R ೙";P3<7Şi}mٶ/+*6|sSD^5HAwOn-1W9৞1 S9 HlPi6J7,3tJj>^Jf*Ϳbږc!w g Nq{# )dely'ſ|!e$A^E,\5z{T(vXX(:<;}Mpk}^O9vWu؂+nz@02\Zu]bF-S0`sk#~a]+ MItȒ |l1ȱo7lR彟 Bs?aX cX k||`^N\JП=?d](r xS_ZOgNN:qx0)NԠWW_?Wqur}TuS&y:BTTr :q PmSJ"q"YWH`M/ [=!@:W'Kp$Ruwiȣ|]IPePp.?Rɯ`[h3lNE< ?P_µ}9*Y~ХE\O>,?`@u^eXgv.M΁m0|5&"a.Ƿ-. MpܢjԘnMdcܫ q|;ꝵs}\˺ݒ4|-g 67NDTA'WI%w^5LvtkLIK(^,Cm2rBY%/qeWI$6쿶K^8Xj_ #TvU&lH걩?ئAsĖ/S"D (zkFɩ<?T|~WE<3!fpK}e4$d t=,Z7@֟y1!a}HJ;[ 5y3P`ok |JApo4?;W9)jź̵N) sI& :&8+2ؼv[IZn,z=m),mR ^*c+a+=v`i}{NkrG,ia{@9|auCG{Y 31LW R\j^Wf:R 66'IG7ᆛgk?24|}Ap?ggc'*#7~t uN2Kչ/91ڤQL@U ?L!>nN5D,㸁պE(ra1]ٽ$LR~<% #?'vnDQ6G  \hM2eocJ[I-Ok'^n^8Qt}5o&AGfun Ȝ\h r×.*-f7\b{L4ͳO.΃C=Q}@q Y@ƴ|# b'y=3!$p) 9}Vuݶ3/=!" =‰(얳'|~ם_x3?!\VO)fX.iuldC࿿6I"Q?NhnQ 7=8&?g [YG4ңPb’3 m8d/;keqLjNކA=-'ڙ$"u'`'4&,!h yT_ \j cMb1M(]X3V&++s{'2wˁ)r ŭƺle%VO&藟*#`/aJWnܜ;'. V6ؚ$h$u 00+m~%:Ch'L]B0E@Ȋ)"ǁ3"XK,Z ?vobZ xb]W?4T)OUt/*(u;'{_TXp0"q Fqߥlߍx"G Jdd 7_S -M卟R|,mRxjc#&֧ q3,^Eb LJ,Sj,sϙ!xg3u4YJ ^T.Fۼ,Ƞʽ?%[TjwMzFi6!j[~l"1?W9C{5"_,թZ_&Q`{8o"48L8ZSImHiC{"7uT@8=|u/|A('˗|%'8ūy:쾹ǭe\Js#(w CjT?aI☲w7mu2oqd+ NJ=#*&RU)LDIK6 6߱xGRyk1P93iݭ9Z]SצUwn#dW[ͮ湑é9qkDhãz-+I Љ&\Ul:k0`!*vv8Qn#l2oYN L|&x ڦr}~]V !JO1qWC&%`&z(oLX#7پIXzZzgL+<ᑷ-I rY%mmf:2RʂYz7g*:J\ki抯bl!qyI[@,7,}dxh}ПY #mq@7(s| +y|a˳_Tl\Zx_PmjsRv2WHG8v\;1/f&.[T[.=_t8:?Jl11m5cd+{JT—'i2D Ԯ4!2xz/$Hphʅ;KFaYͦ^PO'oHFEmcX(|o5'Ӻ?-"mz*wE2͗4_s&~8;"iF}g,L9L/<{aALpc/ 3jt])j>e 0K|LnY)l/&W0Pl9<67IQt>_LZ~Ů벂,J#sQ)% WC_rP|& rJGYPxn< I3uAn̥ro+r&oUL.'X#=DDDF{Nޢ𣞩X+ɧ~.^[MHBڵ eNEf)kq)ړ{) >d&K $\x*D1o?,ؕ#4& xCkT 1zw [^8_f|(,>Ր*M4=[ } !ɲ L#GPw8wvB׳q io8ըorri.#([9ro8ɹv{1JG$ e$r}$k-}vSoYWH1l߽QG*4 35´nRU%8ieskkXUہC䖥GvRԪ/`;;K5фۏT0Ԫ_f2&|ɿ7Ҽef8= (I.]} fhiVwcgp䄎񼭖%q/!FVy e޳:]<&MRm ipn>˧m[Jb ]`ҁ-{^ 0_'yJ+ cpg-щYS\OCv8c=^l]5Ou%Ve xv%$<ųq<~IYMJ. ۠[M?jcًՁ_.[IjRR}Pm]%31YtCz* 1!_\kպ+jŭ(VP\ dv(cF C؎ _SM&(W<)umRDTk R;ZjQ&"͕PlS@VĶͬg{&rG g֚eǚ>~}SsE3T)mF #\nT~ekA9*aַ[ݿCn=<)^@qxqW}_L B9Πq\J)dSU.ݑCFdɱ?Y4QHٯ5<ՒzZM'ފ" 4LzoZcխN;C3Osh!`Be((|R:},Bu'_K ,E1pߌxoleU,&{_*ŴQ8& q@J*'yB&4P-k]StlQ{,pK7qbϑ#1р \?+=7 |Iaܝ~䩋WJI 2P3Y'[,Uӱn OFfv e+gH+,kЇXRhN(ԃe̍v`VF,)}3ʄ#[%Bu8͒&P:!Ķ9MUGل?ԐΰYV{G"vL!mE>Mhuc˱ FPm-hXs BkqTIJAa=O\os{vY\ain. Rw\ $5?"Vsd`gDzd({Zt]1MKcIUpH sB6lUMMG%sB`F]"p&Y؈7B!8>FoS^FPNuJX]ԣ1hqΪY3j\Q$4K^ٛta۬I>[ӼrK%YB[LCKetKxK&D([О"M{~ եg0,(U!s4Ju]+[sAQVBhW1=pn+=RҞ]s~lGNb8il[>6&VJC`J8ZzJNco6#hmU@9[a'#6{ex\>,2!jCT"9Ķ.otr1nFM/,81&͞.}&5⽚>0 = /RmۂӪN'О`-pBpKTT"-<8ٜZ\1R&Ǿ6[(# s[ojΆ6=ok xh~@h0Gp$N˳*#+7^]z1j"vB[k![[^/Ӳ޼mT'!3R? oڦ+)v;r?9SGeU=j/-̀85KC pQOd\1`Ni7C2k|@X]&mOs@4̞h"MVw՘wjv6H^BK`BSlړET_j䪱g4>yvEU7Řq]+Oev=lgA݉Ғ *Ak}  sӔ&d?R{&ˢ*Ӿ`C%V;`7b==x+kffZv{u NE&}ߴmRi ;| L˞ytP?#\WK<.gK^7;N1#;_vNp ;5ލ iHcň aFV [Y-7X}H~~E.g~&$ӓ `Xb'ɧ`i2^Gl0W|}^wxE[K{"~51P/tM`*,/nd@mn%:М /1+S房woCCW!RE33G8ǣs6b)D bIc_v!Ih־Ϫ 3!zM+[S 'w7|b_m1g괙zkSg5ш͇ulh^opX^so^d>wI'cOP_U0AY`m {Z\b+T`Gd"%+"[֪D8"j·ğ|?I^FvBt+O-`yY:7ኇ௳Egւoc{)|':\0AۓpI`۩z  |&MBE] :O`JmXʁI!{oluW_ TQ%m?{Hrz7D՞Tfo#}#4RhDCLˠӆ7-FK vxXYљQIKKMUu[/$ڭBU]2, v#p[ (2g`a S6'}[猶 c᱙1{,XnZ4t sV-:yNܟ+jrjͫ@ 9Q=E=e.⟈s/t$b@0]ڱ:,u42I$°ELK,E;IBʳ(u{yĵSZ XcDjW`NS-y%fJl߫azÚ͠mmXPsOp]]?NefP@zXW(Ig:=9d̬ԇ ʄ)rv24rdq0g%&fTWXcCRh&i]"q|Կ1f cxlYէ1D'/!V؀g9'KYD6 nbV"~Z4yFH03 "B!/CE~PZNW*^N0 > s-ʕk ^v+J4Ce[4]`u7O۔0~[><\L=Lˬ =g +8h~}4+f.4hKҢV[ƫ 1}i:\6ov;K *<sqa)9ouCTu]p/Y?m{u$9O<B6{"/HSBz+1w.$vY%wm* Ld8{{[`u~8El PA#2&j|[C(-Y5wV2.\:QqOa:a}[vO*{q&,K Mz)ʫ&J4nq|R.pЪ|kh,ye^(E "@^mxf܈pHTS5K5\[ЁZZEti .% 6 չ &S8w^ OR&Ik 'J̶J)uԑ3jQY#2&f=zAnWɭ`E\]b7zg̽PV + }#ءs"ma&.]Yax5D^(9WX |\Jx|µH}AW0֬bXwgY5g͝%{wQFCi|ңx㙿1zq`;iJ+ɊS4UT.pWo[NjtA!*9f5%RsnզCXx#.-\,X8J Pkf3ZQ Us&Y:c]-c:,)`ɀ[smpR=xvHԆeUr-A[S#mo:3ݬcq7[7BwB!T-,/ڦYSw>/w>;!{ i7GA6ZǩXAS\)]qĊ,|o{-y7҅=ye*dm4C2(L_jQq- *$B\_`&[eWk>E ITeE)d;P;.jT ‡-oz}#<{dShKz:+9LՖ؉YA]Ţ,|."Dxaޡqړ?@.8l"bkpU77TU5H@8NKHd;Uz,t`>'Y’@&Z )"<.+2䆚bJ1 D2ZG tjp,𵽌?딲ww6u;Бڲʔ';bSRZ xY 8eҊ"dv×6<"pE#6_{Qxwl1R߆Z[m2azƲL Xeoud[jB0kGkΜ\2&\qpLt|H}vvJZj~k9N%Wvڄ:Hck8Ka'ta, wEPv#7Drq8OK |c\o)-J@H KJٟIzŠSce0: ypE]SZQօ*Ţ K 8nRQNd2S=&@҉czG҈mG0hl#>f~m26ҤtqHqoO”;iHf3GjϤGצuS;a*U/ ZPYm ?{왩|61RNyڽN1ȀY,GۖMKFQ"TPp\ "w̹kdW3ơpq-GzZRg)XxM);Fm„̭fWɃ[oϿ=̐"'6VHظi5eWNl3tO6!ĉ[Z+pC.A,UHpzZF3ovDHfK` 0M>}OeAΞ^hWMeRb,Mxy{3NcĚš|/JC*\㍣r8OW>Zj>Q )Fh#Lť88_HV20:]g30}ee-xw%Uϻ:DonWk *p&*^5%59owZ{6Ș)׌R˚nQ$J[^7$aK)+;mG<&9etzH5m9+uG#.T>PrK#a9/1ȎSLiގV{sPo!Dtyփ"LMhK`97 kL.F}6T //)?X+˼w3M|6} [ge&Gbn>_f쬨Ł+O }@3hֻ Y/$b\ u4`VVϚflC[ Zim0#0s;x\K[7mJ r5):0gUNyS'[> gP'G JzVGenĹ޸.j[ ˺𪓺p^?DcAKZ;/{Gp2E,z#,f8lʊvp튲f`y TS[ ϲ` W\ V_DKipAoD`PODEI{_a~5:e1~`)\OJE\m] &fwHz>sыlw/š?K;bl Ad{cFw\Vp-"%Le@礘&j㖙fL}GD%t.TN)z3aZd=K[j']w>־r\-u6oYeSfId A/Y%uƕ汶+#e?GV,?46Ǝ9>hgp蒤PmBŘ9$דxGat*ɌI)C;~4~]u'+xNF&Qel\Mb{X ()*#RyVFLGK@lc"Ĝ_Bbwfבcaw SEWsrwR' tw{mpޙA y+~aPWJ^MGHf@Z |$P;Za恲H;þI8_ ~r\;C6?ʧ4Uywؼ1΄/&1K)^ͬ`בv&*U=DcR7ΔJg$R TմRoVWb*}ix,zOCt8 !ĒVMd"vI@ j*;pX2?z AXAZw12Yǃf*ȁgbwf@[<#md@ #_Ÿ + .1xk/"zZ|I*p[㶣>S>89&nS8G`(! ?~8 b5]0GI dQSg4k F)=׺JbƓd#aOL7ӄ=fb]((r^D7Y**-m&Nr_ *!uCFZHCތג$L!IFELxj_l*g1r|e9VZԕ!zO2[su'yl Dq]sтxJu>~=W Dʼs/N_5-WuQ/oUA/~.x73~(',4fזC9C(3%e5`V{ĺESJ8e1 ["Ww~}ވ@@B1m"mkcBlR)MOq&.ÕűnePhENgf<+qr t!H8fuJ dMĿ|}m ,Ó1CCt=4tK-#I^F)B"DfK^9KUl ,w!0Vw EHbL,Q88΀6鎁?1R勅'HE>^qY}%dPw &}hT`K^~mxw" V`u k,JCY(抌ۢ2y )H>ˡR[y=Z8tP=:櫿cTu}ef:5v!,[$VP54MFa&~⫸9bqy[q?Y|3]9O-H&e0SN%aS4X?Bφ=ٻqjt6 +\ (n5yPr6WWem*p'JQBjJk5gCB%Y/jd?lxZh5x`HQvpg2 ;tʖܨyD||sB"URg]zq>ұf2<΢Ê'Qp@wB]zij,.j}D s «i݈}IQUC5"Xq?\\qi/'AuTGcW_p.{#ռ^aĐ,uy# Ku)"`(v01>d ;7 S`ɋ|)7O5@ElKL)As˥i2%qL. \2 q$9-]uI9ؒ91eBs }Q嫽/Sf&rHPx ;K݊g ZBF.EEc`֨7`Tsn'-9֍⑊NUܨ5yZ?K`d'`rg,@ ō ڭGȅ9# vF̛2 g iǏC?|)7\xRYQ`Y M#*t`#r>Uxe k VsVg|Jmpeq#RR)0u@q gF,PUkWϞ۶GBZlIސܫs_5V0y^I_cv22K>9{kFk^YufkZ;P[<Wt1PbaQݧz~-G Gd[ W"e#r|_IvKl;B!9Lx~z,OEP ,DlsBkB!R*]',eAOHZgS˦@%a(w 2Fck0qzŽT6Fߦ0O-2&3 㜲b͌I3KިTm>Ô v鋼ڨN<~$Qo_2K<6e& fKz`A3Z׿f̡ـlpڑ9*LrMJ^P)  p>ixu9F[³p"t6!\̊xjk$ mp.!-`y ܹ3(*]jZ MFu[.w<u{-YI8tj7]$9WƞWI-ܥ ͼl.a琟S7=S.>lZ$ɼa)Lc\ h+O|SV-K+s},oɎ`Qg\*}.O _R ҹVmϬJ~y$Z-#J܌iA~rBQyzvu8wzVUhN T \ hyߊ`Wʧwʸ+iXm(,:*YȖVV IOm[BO2w_-Vao5gj ,*O.Q"T$#@Q k}s\m @O%kMS2Ɛ+ZյZQJN8{_UJ%7+8/z:0)2 +x)/17i;&D]E9VTY?J @MgS*u!a pSZfqnw233?4z[|Cj:_l&B(ݪTSl29#@ɛ479b8i{D ( V;ga>%3 ZsVa`Ffh62?09]~n$?rSt@oc}@SKZ{.A~(p#dPbH\BD][̊0Aŵrmyw9a 3(N!(!%)t 4[)' uMq6b as!7)`'a8]Ur$o``ڸYep1iش5 ;Ĉv[3x~W{-gC{4雚=҇'eIaO'RIA >65!?w&}hHyd;\[F9 8"߇+K[@9]\i VO~@q;O x2P<$jܰvDZ0YS$Fc~ R%齄 }Z<)CMRpKQcXNXz3j QnxW;?Z*ΓXف^vu:Xq.̳|_ /Y2DGqKrd` ^$L8Pmz'L$v[X`?8&#dg$,;(yբ\=wͮUg?pJ{qoG8g `Y_rA]kmlE \XU\-T:8Aݵn'Bebo4&%V܀e6Oڢ 9B#ˎJ&u-B@AڏRJ/U1G<+:;N29?H;U#(JM{.(Oђĉ9Q- X`tej"U v_;>f?~0:dȦ;,;=&xa986b}^?F9A ]@$KpmR,v7T>%= $A; _fMW m[ix+᭍mLJhF,<I99,zMu7 鑍Cbjb[6 u.N{fmXfA%~Ni/'r&p))U/S? ${CrnPV"ʖ5b3U=l (-#"=ΰ 1ًBSn}oT68S-\25 *؇v]sz =T~&4]C R|[W)g׆tcȡdG&!]#8:Xs6Ө۽36EvZrHim߆D)ilBTězFXn&+>9h  Bٶ|5@=\er4 A٪^<-4T" ; [%浯6= q1N6fH-r9s>&b-(Cz7%FXԮ6SWɵg E˫>o/Φo`.lHnnԧ<9dU*En @'YҩY'B?UAe_R u:eUzʸyۻ W+p4=#RK+7/C>},LDzv 3{ݺⱒ=6Gѯ|kDnkVW-dvy2:y]mN cgEӣZe=}w_6Иw} E՗uܽm&"|{p+LXeBd5J$H,J!RL0wWN&Q!e\qB%cX`ڸ/жK$'0qgŜYy2Sǹ ?4v=0D4bh 'W΂'yZ/g@f>- ] $M'ŌrN(@Fd2U|W:޹e -㥋*XZg=# ̴BQ&ep"ҷ"i}xSZ $$'Mc.+n`W)gA,.iZd]pkJDLd;̀ ^r΂N{|shLN`~ճܣ׉A<]ɩۙKZr.7o2狇XE NשHRkFXE1{iC3_Ȅ`'mBο"4*VHӈ ߥ1VoUn8W4ΛÕߞ~0+{"by{ ^9RV?~U-*i;49 0`^越F<[OM&`釃hA̘O:C1&c!|$:pr7~!3ଲ X2npH'eR;O$׉*#: R;ro֏Qc":tǻ sܙG辱.ֶ籺k(1jz2<.'yܻnTI\j8m)")uKugD ]lftNAٛo F~ YY%y5,u )7BsއjS@.׌;[eT#gW>ZIF \*/2 ^x JuF .yxRFa(S#ڀ8h]F| s2e,6tJl$Tl]@ UXиNsJB7rnܨJV#l|>az<:3$__v}nRoW'g`TunJH'Áx.i \#WXCR2kVuF6}p\( zljֶ:u/ HƓ^f8`hבp_ۧVv4BcP$vBwr8x͉ӵUzF[{qu< `L{trs@no gM_ԌzEӇo'뷼6kC/SIT ܾ+}/8 ho(XJwR}i pLÔPYB' 1Rm]Kc)PM; 8꠵-;9*= 0`Gw>|)N͹ep,o{g5y!(G}{o֒4)S8 Ho }W.!|. ^f_Tm昋Y3%+L!$XK}4X۹L5 r r2w_ŁDW*aА hٍE@1Ga_6,Ֆ,C2tQX[#ѤQzu? й44 @)fKdق:+3oD;ʊLDXR21Oe р C 'bWy3iW~( Ic)cqvϴ22YiDu|jٜ%RJv r+n2EA]O1Uf[>{ <>[ `r Ǹ,)rWZKV%$:;}JB0:뜤0A:6]NxP'͞y8ڮ mA]eP-P$ƭCھ/]`b yZq\vp.Ϟ"Q(Wߏ(k[A\^8`噉NF(%0Ҋ'vN9ș 3T I*RV5: #hS_mʖ&iǯ޺s_KI7'X "Fhvn0,8jio7++]J`h(~ r>ג6叵 q!WkxHґtҥob:ceP$Gg9Vt$BXÂjk^ r2W40QQ6LK5Xk@"vh_Un㎪Vs鉮O<=G?%0X[bnWL*uٹ8:k?-ҪYӞ@GxP{%Ҏ:A=R4cqc Zkwu;oW 5$o~$X>7G_Eݶnq>fI|YS!j%#+Pf^/9m9f" d=ݧ2Lu5EY)4CWLCI郫[tAF;\nIұt\P'0^5.>ki?BC1. Axu?x 9lgAzc(Vˆ~Ӟ\we zÚ6 &HvUU( quϻ-p Cb+,_u: r_ ԈMfm ¸ÁvAݼ[f',P"jUV|@f$hD?+'w`j/IzP2si3@/#`h= 2=mA*Z˪FA٦o| -Kf5x4R\/ :КȧsY$;~ <%0q؜8ߖ7]_LJ AMJ52l^t%w5.+vzO*;$'R0J³GM)M~ʽftbV&$0$wzC4n@>ß h6' {Sv.5ȗA7YȌ/=jؑCI=]K`Q߭5\CW-tQG5?u|y U_; "}|cVm' To֣ &D+|fVX#nD4ѓ^b>GV@ a#U.B.m0E)0uo2=*[ 2iuqL ! 4U`Ŏk{"C!l2̓R !#f̷οTtv˛Ocsl:I.=XtI \88x+3P$܁3l: ٫$u\yEMwխqj١{gђ"rދ%639Ϣ?1PV$[V}S UJ`W.CXnZ:O$!t%>4S W^`(}y]g$4IUDLW6wFР?+Wm[kk veWj|;jg/R ێ3rÌʵv\[ѐ@Y֠Όzxm26^8%Yfn#X.^F7g U%A{^"K:$9yO⩋3;-~;$,&fAK/Xbqe /#? %(V[ͳλ]AQ~`я~]~P_1VKTeψ0BfSA˫4~Oiˎ0( ׶q4 <^yY P:|4{'d *#FkcR :y0@MV[RC!u/MT6+s{j8#,sss"gIXy?rNr-^vm=,7ƽ)CTm^gG&mݮ" U )UL5#7 PB "|XEC[}4-t]ZKi2C 2BC]ι1 #F "+ow8V_'dalBl^[>~_X4-dO2Rim}!hJdƉZIhwVPlH3GkA0M%1jsp &24Z 5[ ŏm>;$o)" CـR#=ڢ5mCgJQ}mry%YJwSƌ6;؛$ZKǼ@qw9 =?hP+[;er2+aBQj? dnZ1ቬ6pjInҾ>>[0Ln]pVh| &@t*e '!oKh^t,Rpլ^Fc:5j'y͹ 0S{6E 4Oڐk21~e_G>luM*_#2TQ?[HV\if`NVg:9lQ4 ^L`5 n/<ЏL*Rk*@upS @ κK3-vg08gJƑ䝬L5hǣ|[DYQ=m "#;/Us0[k% aEW AD+P1\3"@MG U~0:'scƯe,d'$'CU~Xf_TRd1 {-(qaq*YSdhH< Ol.Eola\Wk k`=iWИy ה}r@n .Ӹu81a|} }Yaš= J'p-yp.mv`"/4GqQ[]ꃇDZ7Οn"'D>^`.H^ܽa[TXӺ7yȻ"_k/qƀy?nܓT[^91jc>B!Ψ񗔴%SA {1w[PvT(hȆWr1`N^$!i@ +~.6?m}S'SnƁ0 u 04ɡ4;22EE{B5#ʁLA&Cy( w^L*@l%Lc'QQ7MI~'iW46+D6L:D8P_T++A0 -<2ԑ{2d0@Z$ѝ@xX}^SvD<  >XFBxTs`:X"WLY0X^kץFh45.T8^-r)zUS׾Q[Ў 6;F[oIz IC[vë<^=`&Dv@q>(t2BDdYصӠmtp$oj=DSds){_ d 0u8|?YJ)v >4 ݛ=Ӏò؎eavB î[oʎ,h5;=dO?LŎ W. o|xf>͍[vBxuWv]MfE"+$e:OEz>YGzEs8y7c(=iF]J4qOnC\;}f(h>Ǵo,E!u, t;k JG ݞVSPE;e2+S34 ,e`/w0өCqIҞ ֏R{qH-':VDǕD:hї^ړ 5WC'^ !9S\/׭0v㯠 CjsbE XݕEa&]t8F lW:3bOD4ҟ|ut\U>"Ad.ز )Ϊ|UcJvlh$ (=_\E-U@Oތa)4 S G/ǣ7A>50Șأez 5pُcs%&qQ9gW?T2r28?\5 b|غYOerzʨʎ=)<D, 3בB&|NGIZ)4]Wy姵*ǤQjmN ܅}1Em?Rw0EZ&_N少8haĆ]/Q uz|]Br8 J@$Ϯ?BPTc!`R%qeWx.)7:<9.}ՀI)[mw#QMzJ1Do6L'L؏p E3hރsD(~3TR:pwbš c M8RsоMW]qp);)g[C;qŠq 紪>d;l?u(z˥D_Q/O*)dTE) xDdA,?ӡmr넯Ww~x|In"I"4 " Ij;EїR.qeA?7w7L mT58ATEϘVR7LWbp/#,y )ޢР,vv}(hRxl$]GR1_mA,t._c 76'YA5{i|V܍V˟|ݼڷϩ.3͡NoI@#m}8u;R?Z㻩3ϐuB( S$SA=oZNO%]7Ȫԁ2l&D @{wYά|7,F!Wm ~!5׻U׭Đ6FHX ѩ_ZY/ڧpBk}E]s4?}Q0΍B=Ec"ccɰ?ϡp MLMASkE!jew'ٝ;zr)~Q9M44ꌗ [Yzwܠ烊[Qq47'0yFj?SWKI^_Br@.oOij(R^E}&[ONxo!I>W 7w>|s"EG-aBvyikeڎICEq3TA__u ﴼ^{\.#BAU]XHʓEz1P#0v%Aڒ iJ%&xIizFMaPD2ZEnITAs>~L÷> '- >28rIjS B)Ӽ:ez`=IKjdtɶirh.ϰ.&LOU@6վ>ҵ0m}17)2c}!NH$-hR1CKq꒛$)S)nC!-SxJޙ.^05MNza9ۦL G`{F8ybjm:;dRI#izY&e  ;B. {x = 4tk$Z'h(j2cgEx_X4꽦fIju4(^cy*)OVa%oS}L-%>rtF*9fZ{mQUM3*9Knϝzn-I`,*ln!|.yl<u0J0eR5eM.*V ϑ xZr 5M? Y CI잆gTzHGd`a(N^٘yb=o !zKq }XnG=Ýl+ l7eϰ(BPxx7I~蘂dG*0nCpģc#Y,=BX11ՍukVeoSk9ؑW6]xҚ4kn0uLjzh DE?JIa;37'#-' y30K҇ͬjT][]ȉ ^8cu4ƮCİEO NM :n7QM}cQJד]Gf>"m9 ?GeL;ؓDK8,bN6s,G0"mDAǢ4PFC\.sB|O#G\;N$F1*yxPGRoIZ5]X6|HhO s@d}经iW-(oCyVwdDK N9906KqCk8uvRfY7]UhX*?<71duπB.]*$`kGP+NfZcUI#r?:@Zhل(r "- 28Z\'ˮ:K)*`HY =d=ߋN7Fw >L M)8ˋeWc[HNsȬ%٬ Í2WNSi7zͫmjJt;R[酷GQn5+])e8KL6  zիp!$cGҎ8uFƱԎ$lV6pdRCLK<XH%9,`%uTlCp`N|*x(s]& 7BjeF&dxI -;(G+`'J"׾$4wE-z8Ew5{ŷtZh>_qѣu<.f^z 242Wvftu V!aj rC1eSSi{0代z≗Z]#Z6lqۡ& )32t=ah o!yW[y cr[͍/6z\6=C*һDJ8>\170wBF$7I6v;LU4@2'0Pix2e)Gkȥt^;VTP@,z)_~ {5}o0{+jfq 8i'ɷK,] jbF=wIR{~DN$<=ڱe+L7.oW7F{P㢪!VXa-أkQw~]}{`M%oz-*H7j#Ѝy+ laʖ6 ZXc;`0A)A }I p R0a5z\{XՍMZ z.\^̧5| Db_nٯlKqµmw'P+'R@XgZD]v5rdSt^c >xac۹icv7jo;dT^ $Ϙ|(v:, ]ZII+1uF!X[ +.V{اK𹸌ӿO &٠El5V04S|HuT~UrhuM(h)7A *7 |~6PMR芰8utHɌ"7]/f?ۣi0gFu^vED A|H0I}>D%_UCx}IH >&ap:@tI.Ÿxh!#" /G *x k∘ougòY\ /!&b/IL'IБ( l8.lbzC؛?B#g ?P3҄)_x][^kD$# XEH^Xb\ҷGt])$i"aqQJ5;LGfڼ8cj'd*s%A> NnG ut`$v g40 mőWCs`\7u|Ɂ NkqL˰]*9QzN{9O}깙G-JUЃU35EyUK8-u8tX?Xy:"|2eO{?JqefyIJITn4>E=5ewؚ!ذؐZ^Bfh#O)JYHpfF+-m1rY^) NhXYWȿ@G4&ƫg?h"zo+KZ˵¹r2J.'N#IJuZwlE1b|*:Zv8K|v99T+>F :Ke0i 겇 BѤdг>Nj]5%O/ة*6 Myh2;bUZoyDlQeS_T _$P:?'gOeZ1`wy)!LܡbGsI=iQB?tF&~3s-ˏwh+v!NIpOb)\Coơlfh:q0my4r2~7aS7/9nF#RHHp;z` 'GD 5qw(pZL67WL{Z64屠z |C& HPXd@p؊ΑkLaKRTѲßp(Ihւ#[JAD7]* "o{ٽo4g<*ɬvL23|;Jҷ#)nP; *1)sɩ}D 'H^zzlJx}[,u9JtG}5H͐T(Gx Myj-(ą'yJ)W U}Ghi>y{YrYP%|a r83VyP>|t} :[2vQSIQg3Kꫝ\T!ttZҪ[RyВK_FPiK vi,cC2{̍gSEt\_$ ?y9ϻ{BVM Cm#qUM,ܤ܈/u(i4i:-DL=@HUA7+PV~5\h_e[(0fغ/T@&uvg"?bR^{ofzW&P]',=*AQq;zJ_耝; 5*̥ng7e6P„s9/\V {Gt 2<?45 ] QbT笍 4YYQf^mtX5ce&l6G4PKpb'@ksD$KbmDoiaNQ)!&6>gt$-LEׂwcKH6'/% ,Ώg&>E[Rg+QSpoofGHǯ ltL6 (2w`y/,ԒAp^&_9mz0FLC2Tӻnfc2b©yjBŸf FœTuo>MZ$o#&YA2 gD8>]^ExhZ\P>W$mT`<7M(*g 9vͼ܏ُ{]Ke, O6Z?e 5W"QbIHI3895MNo8}1dU R/xq㵿 jKΧ/6?iA8v߳D2Wn(E H;&c}ZacQ6OtV&D"^|K>_`WZM'>mqi]th+ mUnm\nD &aaM5sٯ%^nz()?q7 7qJrͪG@`?ܙ]ƙMH,`mW|^Pdl"MhzkB\3@G/'g9U4tخWB؂ ̃M2Sz2|Ƃ #el邆kmdVrP*!v\J<(;l+7i9CΏ=.kڦ+r*TTa!D_dk}V'۸vp03]HSVh 2*Կ9MI*Ţ94[cZz=mYgB| *%%6*//L1$L`dרE:]"KOkռ4ݮ|UW1SOr>iܑE13$+h1F[aZǴy{'-i%"*i,=^h+.l!N2]WŒE5 :aCf=AYB5jf? PCaKVwyYQ"[%ߙwFrqH.Jnr<~ DW3{U@Zx^VvlO=?*<' Hir;6]-N?չ&le/ '-$>>(]"䪓uP 9Hl?,1p"d]!+4 #\>qLO{6o\'vk.4#w3jZBړ˺bvMTq 8 /⡶2sEH\$n6*`<_P:/лbB1ChzpɾVmLvĔF9g $ Sb[UUg(mS !*RBQ& ]eݿXҴUD+Gf>Q N[1`^gjptahoWҝBZx!3j?b~u4ϫ&TgQӚ[ASycɱ Ua|%(IM FrC3kIt6"Q{ј˚gz9V4"I8.桶u^{8z#mt=1?R%ޓ( c}En&s}X[xK1 yG 9n᧤ipLȡMlU`@z9'u+A! A:ԛ lHuvķQO1ѬgP:MS;WU*"+VM&O*LS2NK҈4Sbӂ1F9tm۵ďWa}R߁DZygۉ  4(t=<,G*d`"Z4X{u?w`3,.I2k!a~FwQ}47چEc<]k*/׹ԙ4;8U֮$3Wn}7RɃ9,6c+S7z~0vCHB!8.8|`s`$Z\02z˭0"ͭP!B sx,]ي}&׋/ۢ '6zl;Dr [ُl]a|,m=NӪ OPwZGA5 ;US}`fX N v<QdRT<(PdoӱeK6R~hIcJBIR{5*ݕ!n"ȄzaWD$S3<1e-+=&uz2ˣ,o#h9\чT <3Z3 puXECFeP;zA{ Io _Qי?wŘ)%D'9rSwM0sU0n v:[u-^ J i@ 2yGA6VTz& `6YKVJ]Ȗe5`қ&ŒNx%}OwY[%V` 7oJb@g5 (y75#Ƭ:/o 'ybr|Pn% 0O8,E wx+Eґ@chj75#_%ߕ! & Ί崸T9]:^KWTI8 p+/pev*n ej3NOՃp{|cE5ɔi oT#_n$ٛ 4H?4h/'ޟ?F{8N~4'.`${?h4jȫZo0$ZDiQ$?a,,qMAENӒ)Dfa11*o`GyIdsI8 C0']?(!M}cOG)^~]p# N=rْ_ko_FGs~B_ ֽVua"W"ȍ VPOd>1㴶c hXφu'5 > Sq[Ye [oM%oZw 1=tZea&3Vv^'$ʛ/3 H"пdeRTّ4iRfYolᥕ)RWΝd帵jk{3CHyX縖ӕўH?klFxf!9;ʿl ^܍Чʸpd&ZHO){z @|\U;g"Z2r<<.GD6V\>ޔ=N_k^<0+V.&#Vy[f;R[ˆ:Ό/]%!SXHƈ'}iLw {3҅YmCn$<`}7&m^[Tt1aԛH֪Qi@fܹp(rYٰy}nRFk/rמ<=WXZSmWn?z*C^k,D04V)=vT; O-knQbRQ4I@EU޽.ۏiې$2v{cG9\цGwN pC c5]cl}T&-)Vi(z9Jt'[C"`t2 [wrϧ4g']CnO Xήj v7V|B :H/*t LλuXj C?+Z)uO˸Ebg'0+ODގ rԞ[(=b>׆= p{m9oNNE btv~a)luB?_X~^为= u$|[('{-! KCeՠ r=spҥ^ɾbZ^:]lΑ Fckc%&DT~P<_yKmY*ʈ':3:HF⺭e(?T|st(Bf V.OP3R'+YE|3HX餶<ݦi0z734!D3F_~L{N;eiA=ʹ6w>J_ XV 23{Gd*j ([mY4YOE7jǓKؽ8S\pLrl#~$&t ay&4)cwiC_)ݗwL*׋b"eBA%t+/1,XM@^#Bib-dY !b$cmئ_g^;rOF>kDs|> AxB*gzK$qa @_,RX~4|`B 4ʨg GQńشع]~̽?C%\ x7Fo_U%c[b*scq]%!t.h M=P O@T\3 ;V߭5}Ƶo6l:Cn& -;#GR2r%Io3!_d9nȧCЩORk`B_Yyr} -X"$ YF%/IW(K1 KIlSFCH0)k%D':jwCQtڻ{j^BvWN-nkiLo]|[& Y]H ~p><^05j -ʻd^ylH8K“;|/d;,dG71Aaհ9iL9tbj(BMvT ER{j_~+kv\wwc ''nB}gpr 1H4FktRsnC` \ؔbnlׁhSy;*x81Jrq>6'H`J*By]s82ODH!8_6bzMk,o^.Vx65h?D﴾@ #X==I +I0aITBXAbǽqvZvۺcO׋8)d} 1%FJϜv9ux&ʗs偫I3U*˞YTmRkQO ^M@(inW/c~0& X)Z!P)m"쉣_Ft'2[񞅡:B~6%KDxHԨAqu%kEư昒keT)\ll˾kڬ ˤv5Yt1d`Fb`6tO]3Ǟ;%Z y;f]krkSpK(wQZZx xQ%c*[~.p%XɻPhbV tVN#}}=Asz: W^٨"xCv򊥴ŒI>Yt?rdlJrz-)aDU)1~ 5(%땯EhlZ\8R@;&!=ѯq2J Ԛ-7oނzoSjmƽE!P&t–O#%VK^ƅ}i#v@> r'7qɻM#tc jRXџs_w{ƒ*RhIg:9h/C#%`q,AWL*zow`9?`<|x4rt0#-X>0=YSYwR:68kn*Z鲤_AR#^ՠU|Kz1@7uuY)΁s X@% aabQbX!n{.i*.e21 F`!bv @r@gvm#vP)`Dy Yb(<`bt{~z?obdNYĸ10I"47!݊H^TZpnMpA}ш!h\6T3O|Ȩ­@:#S־XqBCY^>Y+Z#Kl;FSi\ӢMk!6╖Prޕ},:pVe?BuyCN.8vr->org+2;I"$ bʃٔK#삌Yiq25;ʑ!ȣ7N0@!'g]a'Řj-9Sa;lM.K~ GYQp7#L+?a;5E@_ Ar՛ɻb-!6u'<9\@p3L7Bm5)U{ ;-z7|X;NѪN0UD}suQKVMn|a81 aeʕTKjB\·e3݇Ε?.r<9*ۛ+ ^Lb{DQNsd 3UE-/ DG8E v=/&x(?fG(9MUs6LRWvuQE0B+ ҃{t[rTOǫQ\!<>MS *3rONE}cK Sؕޒn Nrv3?y iNK/Q*yȡ|zJ'>+9O9I״qE34HGKc#W\Ll5Ӡ_V=7Z@J{'#--Vz47XO}@7zLV^]VGbY]ST[pu:]1 q*i)t{cO#Y#J9cӾ=^(IA8K7|]cC +'66Ɓ]s%RZEEe$73jnZŌT5oNmzA舡Mtt3ftl_O$i}۹xL{U5&7^;Ey*5t?C1x_[uFqʷ5W &M9hԊXm¹E}E6o¬-A-&U.SI8B 4USdi>JR9~Y)Gq7.P1y1Bo"Wf}TŜE1/Y) V<&xuZ-JUfɌSՌ6IDhT~} (琡J\q a~conzSv_ISO4`0[±ACR"SSJ`wyR&VpV6|h j7+%ih7d+iRsi8w  D GjYF9_b5[H ZJb^)HfU11*۽RR]ى&+1xCAE/DF"rf( ?ۻH|Q~fa0#3`}xRI=aH (px5W#OPa229,Bpe 74|P$뷩B{7!b Us1!y%k&4h>O ?hq|j YcYQiO*Nl\S^f]9s`L T%`/t2.~D:K}~n?k'ڋZ2<ԓq~P{9.ZEmJ{1Az&+SAK:I FvԪŏJ\`r @mx}pnℱ̨|^ӥ]xօyxUs%LB?tP2F7ui;x0=cZPci6޸[: '=_ȉ$3 YZ