icinga2-common-2.12.5-bp154.1.138 >  A b|^!M@eee2>vޘOqƥQsQ7֞#ȪnՅS0!2q]  2V&rʟvw[6?xR Lx !oG237V K'`\ z++yËt-Rf!(xiCTwS. q=ZˏUFEpOf'j۲踔Ӻ 8_pΡ =]Ҳ-l53f13b57ef5b6a944502f8235ca487b239b492f2f3930edced0fdddf859624d8a7ccec30f1de8b613232d1d820e0b21eb4243d47(b|^!M@eee9^qG0%$^]!@ʳ&q)Ne3Qݎpk}t@1f ]OM%::RQr R! K҇!m!#Qn.2Qp,ZgpD{P?{@d $ B '?ELY.t. . ,. . R. .8. .,.8 l / (T7[8T9T:T=q@>qHCqPFqXGql.Hr$.Ir.Xs Ys \sL.]t.^v bx|cy%dyeyfylyuy.vzdzzzzzzzz{<Cicinga2-common2.12.5bp154.1.138Common Icinga 2 configurationThis subpackage provides common directories, and the UID and GUID definitions among Icinga 2 related packages.b|^3sheep86 SUSE Linux Enterprise 15 SP4openSUSEGPL-2.0-or-laterhttps://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxx86_64getent group icinga >/dev/null || /usr/sbin/groupadd -r icinga getent group icingacmd >/dev/null || /usr/sbin/groupadd -r icingacmd getent passwd icinga >/dev/null || /usr/sbin/useradd -c "icinga" -s /sbin/nologin -r -d /var/spool/icinga2 -G icingacmd -g icinga icinga if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /run/icinga2/cmd fi!&;TzBx"(6{ R v KxmV k | WV\[XFA큤AA큤AA큤A큤A聤A큤A큤`Yb|^1`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Yb|^ `Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Yb|^ `Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Y`Yb|^1`Yecb15525fe1bb7d9895d24341d94e89b54c106dded11f7002425480750acdffdb5e0ee43473df46857b4a2f7d984ed01a668034fbc44683afd800c2ce64d199a4fd08c56a65e8665f3d01cc64820c13fd97159b2ba3969ececfd0ca353e6dccdea40f1b8a89b252343b7490759dec1239835384c1971d4dded47fa24c5e23b2ea9623e5b05d270ba79ffe7e08dd9291b5958e89866a9453cb4da9f0803f51fc9e14cee7d72b35ae62cb78cfa902e70f4f202a4ef1e299d2f5582b4e1525103cd3c90116aca20ffc434951c5a81388c93549dce8cf2faffcacd247f237c35d9712ca3d218245051a6f0bd50a104018fe26ba51c6e12ce0257ceea4e2a1a29b0d1dec7e4d57a2a048f23d3f076325eb52aa8a923c054888a43b626b2f898ad96c56314b4d7d70b109722cf56a1af0933c33f12698340cc174e112adc96f3296ea13a9014a59bf7af24e2d13a0b25205baa45fbe3a1400bff1a3f3c4ec183b6073815b99098562479813f84f7566480fe225536b09adad0c0190b6592b46d70c70e65c8507b64b1f44d9066b6218c375ed7a6ce119c98a6eb2dd50bd1aa700d8c8f7a909f7c70fb25bdc3665aabf1d81bb3073706a8abbadda5b26540835b25ce64dcc000adcac1bcb041eb71663a4e7501a97573d26b82daf8a19c6af7ccac210af1af0b080b54395616774843a1abdcc404726bed7dd5115c5e3acd61e16a53ebd95386ffe05d00cd5b2d648b5b8b597c6ba438813e740f2681bb9e5cffe8ed0b3d58acbc70c705d450f4d2addf2dbabbfad207a6159996c59dcb81310f2e231e21d36dbb4af1f3a2f3ac19a3096153cbefa43f83add4627ce6b6479ce919debb9b4867aa7b77855a8d8fc51719e5a27debaf181d3f5b6af1edace4dca2c4afc211a6b46427a1b8733f859a288051b3af634d5a252cfdd0a75e23e3e7b75b1afb6bbf90cb61941e2eaf1cd86bec333c709b8b9ee579e8c728ee0638bfa0c267ce92ca0fab10505507b6263c3bd954d9e6ccf52f437e4cb7b3a7527d04c74b97eceddfe02a3665fe6d0a6d21d4f46c654bea6c5c5438770219df2695ed71aca564d79cbcafa6702b9cf8abc0af14d2742bc25ea01224049f95c9e18c7263155f6403bbc2f488f25e9cd3bc32b59e3377a41aa885895f38f984279baefc4a228f6d68fb32bb7f5839a13360d1b10b573b32ed72c3bc39ed3e06f1e11296f0152f8e74e1e6498553e7092b273a77e8e4ade82f180c10681f3ab87fe9eb6f43b584e0d75dd3ddfa26642ff0cbc3a65520d2c6074f2d318c791d6eef4f0525da2ecddebfaf644fb9448d6db3cddcdc06672dfca2a349f7d3ce350f0a0dcbcbb8b986feb2d9e3576b15d916072aae3304450d45e5b07f8c5c336a678fd1cf38db21acf5af126e1be1a03d2705a7bb1c7262a92ddb58aa9b3b433bc6351d39cc68198f200a6206c492744c7e0bfc9867fe14a7ca307f130901176bbef2f54fbb2fd3aa9106a26b5638e60591c67e700aeb16802d81af1a2c053988023cd197cf222acf3e0a08173f6614ec26a6386beebb8e9838964de4a826b50f03923a973dd7fee3906f3dbe66a5cf6b4beb9d470508fdd8cb914b9d48c443aea81f464b157c97c6358177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643rootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticinga2-2.12.5-bp154.1.138.src.rpmgroup(icinga)group(icingacmd)icinga2-commonicinga2-common(x86-64)user(icinga)!     /bin/sh/bin/sh/bin/shcoreutilscoreutilsmonitoring-plugins-commonpermissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadow3.0.4-14.6.0-14.0-15.2-14.14.3 /usr/bin/chkstat -n --warn --system -e /run/icinga2/cmd 1>&2`#@`_إ@_0@_@__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos ecsos Guillaume GARDET ecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Update to 2.12.5 Version 2.12.5 fixes two security vulnerabilities that may lead to privilege escalation for authenticated API users. Other improvements include several bugfixes related to downtimes, downtime notifications, and more reliable connection handling. * Security - Don't expose the PKI ticket salt via the API. This may lead to privilege escalation for authenticated API users by them being able to request certificates for other identities (CVE-2021-32739) - Don't expose IdoMysqlConnection, IdoPgsqlConnection, and ElasticsearchWriter passwords via the API (CVE-2021-32743) - Windows: Update bundled OpenSSL to version 1.1.1k #8888 Depending on your setup, manual intervention beyond installing the new versions may be required, so please read the more detailed information in the release blog post carefully. * Bugfixes - Don't send downtime end notification if downtime hasn't started #8878 - Don't let a failed downtime creation block the others #8871 - Support downtimes and comments for checkables with long names [#8870] - Trigger fixed downtimes immediately if the current time matches (instead of waiting for the timer) #8891 - Add configurable timeout for full connection handshake #8872 * Enhancements - Replace existing downtimes on ScheduledDowntime change #8880 - Improve crashlog #8869- Update to 2.12.4 * Bugfixes - Fix a crash when notification objects are deleted using the API #8782 - Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785 - Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775 - Don't send reminder notification if the notification is still suppressed by a time period #8808 - Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8787 - IDO: prioritize program status updates #8809 - Improve exceptions handling, including a fix for an uncaught exception on Windows #8777 - Retry file rename operations on Windows to avoid intermittent locking issues #8771 * Enhancements - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792 - Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch and icinga2-boost-8185-8191.patch because now in upstream.- Update to 2.12.3 * Security - Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (Advisory / CVE-2020-29663) * Bugfixes - Improve config sync locking - resolves high load issues on Windows #8511 - Fix runtime config updates being ignored for objects without zone #8549 - Use proper buffer size for OpenSSL error messages #8542 * Enhancements - On checkable recovery: re-check children that have a problem [#8506]- Update to 2.12.2 * Bugfixes - Fix a connection leak with misconfigured agents #8483 - Properly sync changes of config objects in global zones done via the API #8474 #8470 - Prevent other clients from being disconnected when replaying the cluster log takes very long #8496 - Avoid duplicate connections between endpoints #8465 - Ignore incoming config object updates for unknown zones #8461 - Check timestamps before removing files in config sync #8495 * Enhancements - Include HTTP status codes in log #8467- Update _constraints to current requirements to avoid OOM seen in aarch64 Tumbleweed- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/sh/bin/shsheep86 1652317747  !"#$%&'()*+,-.2.12.5-bp154.1.1382.12.5-bp154.1.138 icinga2icinga2-commonAUTHORSCHANGELOG.mdNEWSREADME.mdsyntaxnanoicinga2.nanorcvimftdetecticinga2.vimsyntaxicinga2.vimincludecommand-icinga.confcommand-nscp-local.confcommand-plugins-manubulon.confcommand-plugins-windows.confcommand-plugins.confhangmanitlmanubulonnscppluginsplugins-contribplugins-contrib.dbig-data.confdatabases.confhardware.conficingacli.confipmi.conflogmanagement.confmetrics.confnetwork-components.confnetwork-services.confoperating-system.confraid-controller.confsmart-attributes.confstorage.confvirtualization.confvmware.confweb.confwindows-pluginsicinga2-commonCOPYING/etc/bash_completion.d//usr/share/doc/packages//usr/share/doc/packages/icinga2-common//usr/share/doc/packages/icinga2-common/syntax//usr/share/doc/packages/icinga2-common/syntax/nano//usr/share/doc/packages/icinga2-common/syntax/vim//usr/share/doc/packages/icinga2-common/syntax/vim/ftdetect//usr/share/doc/packages/icinga2-common/syntax/vim/syntax//usr/share/icinga2//usr/share/icinga2/include//usr/share/icinga2/include/plugins-contrib.d//usr/share/licenses//usr/share/licenses/icinga2-common/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP4/standard/787d24cbf494092dfc1ebea35c70aadd-icinga2cpioxz5x86_64-suse-linuxASCII textdirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textdzVLElogrotateutf-845abfa1b4cb94d157d5eb0ba93d0633149c5c2e253811d439630d12249fe36cc?7zXZ !t/] crv(vX0<^j3uݗZB~㴸%/Ԍk:mdȯb]]¶7jY€er\dơW4H[znMVlط5.N M]{l,j׳7+[x)O~ FK}=,ܮnA1QܓTDZ,bV\ddž;SOPs[ ;:mS;tbih7wG6% MAoEu+gNٻBXfLEei4$NV. k< Vc{wpe7Hׁ.P8O x5M1j!KP!&^s%5@^!/T{Ӑ v_Oi>*qUTƖi5pSCi\_~*\\$R}%է$>-gĵyF)MInstىiu"kY .Wyӡ$ v=.+)?"k2*Wg3OJw7)9atn7P^Lp9ht2|ď um/iUI)ʇr#͑W&m}QBur&ZC|5^#3BV;QW 0s&)INu(h(* '͝bG-ɆzJ6"K/UOxc2qYv9Iz8d]%!nzKLkd.WMr3Q `9gkЪ |ylܠNpfš))}+zұn lNim󠩈9"9^?I(fe/hs.ko픋~=d{ ? Vji;ge_IL4Xmy t0&_X1zP¶LTӏK{w99T^"*o0i $Icoɬ~x%LTyބBQ0>!NT`?GߘW?h# $r܊z;.|uAzhόJMWWjI 8V1\) A 7w3(ef`CPJ)F\m1oYIh@3n+rlp/dJ{h/#m,MQQp[*E5AOwŪ:bUr;yBT0iJC>` )-֯?>c@2@Y6, #]ݵN kh nY5?\L#^7o+d]un{/&/C8bFN˅'PG\ ".JgY 5ᦩ[ ݲ [{0$Ύ΀.l W"*Z}Æit 9̇PqNoA2mFvi5kbXTPjCgooYmelQhm 0BzT_l4sg\:IVwCϸM_% c\]8ND.!Z/܄›O'bZ\wn~v_W-l7#ޔԬutNNɄs9޻1ړfzM C|>b~'Avk#Yu8F5a]8vLAo1CA*9j+ $MTg=H.]%P,>UjaK䬑8l" ᑝB3pjm.\!_PT큜DϤ >u!ّT8nBax7*I;!>AZ?;oR;"݆T6TU4 p`,0Խ^L LB4|xA_q$-ihy}1߱j2cPn+h,Ӕ "K-u% c DBPicYSY}hS #/]{}1 1{)ʄϪ寯}H[tޞ50hZ$bɲ Q~\L֕99f+ +K}~,Qe?nR"cxeqX lUWwXॾ2y1"w1W'L_ z  Kd.s'a%tf~njR [CԷ Ѡ[s$n;t.Ry[w-ٳD~?dy~+|ªTGOue_YUr U"'oWƫQa-G8Cha%Z2r`N;K60$y4) }R$fV7:<\ 6b4%Y;G+ }xNoQ2@`MO=i!3pl. HBE|l3go2$y%^m^YY<dTK*e1-y#Fҵ_Vr,D H9b)ر- JIc^#A%D`P#pׁ|ғ ߭ Mi>%:AC&{I` o rGl^]YFP')q=G+>t:&o9_ǖ!0P_ʷ3^8U6T(oU_#Q!qAkv ;H %)a`>u{[1DzڟfzC~\ |tkMYoėT[Scq U3MBǫo#/tv 2y4I(`ozEmtab*4cUFN(ϟO?pSZH{\a,TN ,xsA %w$av`z=mWpОU i5 /?C\EF?".x3 hp@{T/[LvML w+e{)?.kTEp꩒Wn$IRdBVzP?@eJΫy<8) s.Ĭ+߮f --(Ɓo>\?~:hp.b^ñ,tټD=ž#VV-GXE5r7ҡ?kPNM{*$LΦCz 8i()uB YnK&CsR+"`RSy*;8gA/hhC/OH‡`.ᪿa>ƌb΅^,-"S?r[*{fKhORjxT'WLQ(8yJ\ WuPϚ#tWn')?tGN"I:p )iq"ԛm@#6U.,KN9" aQ$3IuqL |bj5I]&K)ڲ JΧ:]QH/d@˺l툀ЂSN쮢yod?v7ݪUZVA0pϼjA,P/2|G&#0$_X<7 -:O_j|+$׀flBwJ[I Z|enR^;Q!m~__Aodx(S? )S8WFYJJ>AyU!DH4K n@*DI?8} $$3:k $ƲfrXC穮U?iץ҂ /LibJlfJ:T(izC "bˊ6keR܈FD8\,mݫ<š>}f^G9R3E20SOg~x蓔[f_rh58BA& ]™4yz袮<2f/!{pG9JhoaI/O4QIDR0kNAD,̸>7CbQغh{^̰B_x@H'yn)2bcx;B+ȥO 3{>{1"i8 .@cV=M (1*>2.Kl~ҖЖ= @,Xp;Yc*ȶR'_蟸I*#Kҙ!t1=Ľ*| opeÿdӯxy:$Sn8-j!Fg3kʀ GtU EkG'JghxY}flIG οMFVX5- [7V,yl)/,}0Y( E@Amc8:[ c}L%l:y%fjF@5Rv}#d4BEN~XW!&D]Nr2lUS!Ti-2uC~ನAy "3&0U 'G3#3=dC%$U,pSVnEMK>ՙ)GfN$)bٌ{>[y\,32\Χ+a9Y1bPBլ4QZᱚ:=.Q E67ziRn:`6^iÃ^sdTa8bF;9|5aqFOL7EW;?ͭAw lw՞a/W3/ŷw1͞+|]صz[mN=()@F9Ǵ.jsƿ B^n-՟<|$s%l&.ײҿ3m:YwՌ4`ݒ V<3dd5iƖ=;g wm!eQq;232%}}_7# 9Vnu.8kKWW?41Mh-9[dU'Ś]R2v" ; UtsT*m--MJ˨aT=iZDVQ-%sdvȋXp[1D8.젖=7^,%_VPmLS1KWGWp?#Hu=` f0^'fJe" ًPnNB20դc炬e7<Ѐ0nus|t4W pqB.Y-`s"yoɆ# ~A6(AsfB&#]JcuIa}(3epb*~8'~S7^ͷfl-cwsÊ9sD^m~­4c(WI,Uy&ÝUqw a|LR0Zq`9Xf,Ia]]$19_5VJ-Zx/%(#+dK%') kb o1]< 0w7o.cּQr`T݅& ld:$#-ZE5㞒j6"n`Zș9!6fa:ziO%*ZM4/b-724n?6O. _Laq0V?gQR,3KTbU+NBZO̡6Sm"\XY r!sD%jkx Qj=n#nV!,+F.LRu9leC{h/ݰ@݇ 3k%ſq }3|FjQcÀЩ"TK 'SS %؞⧯0Ltl 0֠#fJ塽3o?GU[ǔRAX'0vЬ`~h,=1]w$1PB΢^7*y׾V.mW6s6 @YRr1 fp^Mۄ[Fʐ=pZԞ/Ϛ6 ^Sijh>)\;[f54&c Q :'iQ::z(l-DL-&py2bPh~nXˡfCg a68B؝џG@T6EČϟH:b ~kσX,&ЫBvgA1 H F/څYZA47M0apm"l1g,Ҟ]$83 z\ ue mC*RF3G^;5Yy-+~#̠ DO X6c$vҳvi]6lw|}q*x.lQ_^O*owsZ HA<qJҜ!xu5xG۸$!ؑXqvvGCL&^~ R؁M=DZ08y~MÕ&|]ΔCZWlLs>)`=ֶ`߭ODŽԦ t)\iwd" RrEazlH)®D@1CSiH_0mDD$_}fI&&C9m͉̆c˹Rwp:`Nyt5$F_ڲ&?o!_%G -\gLas!qpOG1Dc!=ݵl2-^|,Ae{j~fRx,9d)qDmʓ^N b#f7Aui䠏h.ߙE/ ECHfVwC_phJ`A2l6-,LQq.MVΠ"J <{dԌ`D^E]_Yx͏sEj FjV[0UFfN>;ɠ@Xƌu-VQ~X6{dK$2U"G y䴜ׄ?͔"-Qߩ{XϸW+u0wf}\>'O,OfPe(6=؁W;ήZ-vY9+GK ؓBoL KaǽPk txyVaQWB}qӋZ}id)q/fQۂl/$!@f$-]3 4/-AW!lMb, 3gyݴݒ'1'O˨v[Wa@#(a;Џ yQ<Vi=\lDm0 Ԏx9SPc1=g%r%iA1ڍ=hp2,6Y;@)iUR6`-kdI iLx6]BT/(n[cs+R6o,M٪ S1v8¥gN0>^9hU9DߝRC4]su%~ * c[U g71mD<7(JtBؿ:쳍\yßn!cS?oJF.i;xƿ o GTR?Z&=h..W/v05Yj0 /'.nR6Vp d(pQo\IOY8:ݎhr 'mǔק & zE Nւ6;I\_`$:N)ǂ1Di}j F386@~s˃fA}DEK˗'AhA˾^H?"? ȁ =FDr ֔:E5 dr=3I}qR&!c0bKw|Až %%WM4ivG8 Ȟ(W/l'ധ9m"ޔ2"57a;` gpHR|40  ]*DxKGcڐS!~_myIsr$Zwԕ Ԇ҅DѯjPF<0]O͟~lѝ_UNi"Ҥ$eؗ r6{ P5$H q}Xan}+޾eԨ? X=1\HT|GI@#Ni8^wAA/U`᭭w/#E:>Aҹʻ$hSSw=י+}PyQ*}cP AݡK]XbcE7b֬>1=0Svw =`{ڻ?pus1S:~ W;ڠ$>ق yiV"4"!g`X얘Ǻ^&wcxS/_ͥ6_Bs/rL~VF6Sa&s&> d(K~,ʫb䄍o"043Knl-v3p0 1&CJ K]dxd8aW=]eϷܻ:R/wk͢!xEZF3Bk8?SǶG&+bGl,QɃqG,o9:|9nsNFGm$C-ZbN~&\gڹ9 $@tg5K&Ua*Kǐ6+ t!wKbiz"GؼT%As=&یKDK~@\5f J6vT]w80gGfw*=L{DG{yR{e vPFeծ )byw2qK})>i؞'J]CM^M;62ڟ,N"T y[쩽# X菟;:It!}7;f,pD<m9RO7bt;7(6i4`"\<)={hr)t!)?9vDg )p">i 'gc=4)h%LdqoRVO"]_ ,- k/X 7`,(ӌԧ/[/"\h ֎v;y,_ zy`StDg&ddec G.bOE0mK-9;4 |R|j8{gĶw2>N!+¹ÿf}-NȮD Pt\|d"9T[-[N|K龐t[5hgq!#K"\VH wmh?TM2W oy:qadfow vCLr%\FHe G5%)( ,C=d$ D{g9L AJhDIyAHTg-KM #AD"T'Mq*$/,4̶Aԯ(biLP*1ϥYɤХ5‹*c#*`^ 'IˠY32 O-̞tOto/:sH?NCkk&w#-ˏDoG]x7Iu*]kv_E3 .62ZxgE:,Lǂ/ EbwZ+)P^̢//̣7o6W.H&>@llfaEbG Oh|_YYHHyڱ{SΪ x:c Q,W7iūCn74Ŝ.Qu7cC(L6Ide(t12;5Ҵ'MԳtU_R:j3ɹwGp9Ap7o9-5DS)J&#WP fݥ@/uU z؎1`MmMY*w n!.*m_.`9r "|K20UNT"J}8QRx>&Q0pY8 +*}I`FI]Qh_+g}JzpWv޸Lti{1ķ>DoNқi'w@4ReHTd0эn)Ot.Z}J[瑁^ܓ$#o[@9\ ʹO[;ذR$ٌ8|16NW=蝐M,'p@jfv\tf!NOeq =)@Z$X&ٿ' +rBMtH0lثlO@ĭ[Pk< 7aؽCQτlԫCE^Cor#N}fXyr@|?|Y>aL-[/Tr_nu%A'pY:4 ?w죣S72,M|nIE3~ lMV e$4K.\2/#AzGxCC֥hh|Nd9%oˮO9T˲L7c @ed, h}2`BFQ;少 '([HOvW =QȄSV/@RZ'czDO|R8yN1n O;9*+RKF7|@5fs.p iW aCDH_*4x%4 EF1u$J]{%[a)HLJ R!Pk-j=k+/ﭭ]Dī41VAgOzn=:Ъ'OyxJ5{46+Ke $hzq8Lg*e^öpƔ!-JIA[6t vrʆ[YtQ5w#+K"q{(K.չt.Fω:$M.!WfHϛBg̴3rC:dhj-ڱⴄKV ]^sPnj2r zx4|\C$pxhrX]I !ֵ}9$&[1Y']q[WމmTZy~^!i=kܙ$b̚uYCX ˂ ,ܲ FLuNF(^bBXsacayBAFMʷM+e>_cq}%+D ^(.!"4x2tlDpWQއc]LEIw>2L-5N\ mE֚^ :Q1\پ"#ݍ2}M>\^/KlA9ٶcvG5_w6|J B̀S]K&t9%X_.'m'UAJ̄喏j :1ǂPuS(МJ#N;U,v$(R&DL043hSu^VÜ>`^X:/z!cD B?գ>^vB_Ώ!h4@S\ t1#R2ۋՋ̌whjn9CXWKnwshe cqԝh7R߬xE{(o|TY=D}H)^l4k}îʙO+yw" yM(TÓ:{5&WɁks~Fh ."FĚ6ɂ5UO}ܹn;-%2_ɜقԪ}(M(VͼR.l˜@]ű, |q‹ٯiŸX7HP.I Cbz4pQwEtuUK>' *?ILN͚WbYWQb^t(\C"JoEqoT28 y+wQ ?Hhb.VqɾЛQsc A0GN )ẗ3jEPUM92D6Jjorz뙬Wx HALuY&O@8sDwwbBEG;ē'Bpek|)>WaZ"oi90ۇC($PUݠkfxpWGSG2q U3cp/1=WAf *o&wZ¼Lx\:)i1]=YVD}!P!5tlG^@"FHh5xVW/&^MEgy:F$WtX͵f_Q4wX4JtV vߏ@7ɿs}ʹ@y7Z d)٥'I:af3R=T ЄћO;|W3v:jdG:̆  |>.)?wǙF-$0"3g4ŠDaM3N=,Kd#DN;k4|j$'SJ%{j]LV4M_vN|Ioum$N B~NfW[V#Ua;G}G:by UIIs~nh%$͖^r{Tn8{/1xM/Qѽ<?7>σDXZ73ro좦{W9\A/9Is_I7 {xʌkxMi_Ǣ_YB*kL]_qSs&G?2r*۞)BbQy]/YR;Iu'}@,xE$F-zw%r)]u $"gͺAx'kIm>#V7t>3=]gz<.jh?%'pe"OOoJJ.IsmZo"lJpLS/JoOC$5 tWG%.P(yWtsfZ.i ȋ0D+1be%0g}ڇ>|ۡ=s櫉`c  NL5 ČOOO`O`?+D WJ܇V>:a$=V[l1NKpB/o;`]ڗfqL_Y/<_T \ 1}'1%p-ϕ%'ddt4A%~^ӑmJnG(@>A=-7>/ǠιMQ4ćRTew(j;< QoDSNcDDĀCءqW զ I3!>n Ci9]:bSx(6̖ru95qB)G Eec85It[z}LwM(:W>v&fhO'Z'=hH)TM$m{vVyt/p,jʭ  FH=~1ۙP>1TM.n 0zɒg}/g&Q5zIfn^?3|6\kJԖ1F2ipfu+Ȥ8F. "fk>WYta5(n)E;HWje4mJq׶nJI#GPn7t93-9C>3ZTOЌw܅Zޅ|XՉ՜}"ڼ,W$|qWj];;SԠmj.4[V 9B}"b{J 2׃6쁗_ bݏ=b B*R/0歸6Y AބveROY.Q _v#_j`F2J DTT1Ȁ4Ž_Fp_ Ho%1{/@"/kphfC!3qa=mӶh-3@U7&u^"e1'۹Q=AJY4!_-~I?d;8'DtGff ȍe]w24^igQh)|B wz8k1,q A@dc0 mX35jWĠlZN켆K bїN BuBVPWz0N0hf(Fp{ʪ? [$Ɩ[ J8Tsnr Hɒ‚-wi jEV5UWY<Gx3[j&%( q~W&7,ЦgJ1T-+_dw"²/M ml2+~_6ˣ9aN'Y(-4{? *I2Ũ# 8^A)U@6SO z2oҼꮞ*x㉄EĜʑF@G84106kc nH:IhY!:$4aԇJ$l yFg!Sy ܗU ~g׍'fT5r' % iJ |#|{YcY.ߒ I_ "?hlw.cºoXGjg$_< wĖc 4؏T3^1E=> }}:$;Ax>Zj}8!9 ے|c K-B.զz_%OTnrxJ6⁊mhJ㌩s) ͎Z ԑuԹ`lDbd~5nq3ُ[uZ~+ (rռ{gu*Wsb,&3b6۳܊'CP-+n;Oe hLiJm'ak&e.!*{9TEW:~ J㡎:g~<:Bs>e^YNW g3w3V{Ux}1︲Sy^U l8ل;vpˎ ^&N,XqZ|qB[dܱttG N G]k0'C[<]pq>3@i83B;VLQU̮/لD3Eܥ c+b0Wg7R@?zR )$c!`?%5Y{Ia ˜ xK6_Exy1\\ɕpGy ;%) ij;'e|zgU4)@8_\yթF8?3[*nKv JcgO(EO1x;-͒!l/Z5~3ƘcjKKH!.PoR/Gyrvb:7IĭmXR=^V#-~[ ZGBEjafV0I&kD IvդDa梀꡴HbL#ޝ( :B/"Ѩ^.ǹ./Jl*.:8P.-?{S=;1-G?6 GFzrs8[S_"2KWE8S1om "U BL g1$R,t{4tnm.~xo !mq,ΡukTvTڪ;qbinCm4ۣHj@+Pr.;Lȵ.^,M{ L?۞?4D=™v>#TÆW!{O7RjSq?`Oկ!:SCB%u7 8^$m'M(nY{׊ov!^,Qs½QTmјy|-&掴| np @)+fQE/ɡ<8NN1g稺 qgv~eW7LJP!j}" IPm\wi'lByVSdWO(6ŵWoFy` o~%|]~O6Uv|bdPqKX|?Zzp-KkQEnmZN}}Σw W|eܳͅK--gP⑒j/m窣¬QYVrZf_x́^1nDր%1_c9Szǁѣ;:E^RFf_y3neuGܺ9nڕ̪w'v2'k~3 '}ܔd 7;6hiChafB yE6b4C٠"F}Ti4D!hc&$ͱ{R_ҳWX:z6G^yXDzg&hZZhKј@BM?QچjGWt=qM$_*Oah}r8%IwtLGx,ܱp56'5 ȵcvV*8>l v'!'S$0ld*P1?c36^r(KN<pU{{o&3~ؠtzXNW lal޽p"̈́R*iS}yah}3H+>ozCvH3W'jL3w8D1AEe}Y8'Ҏ0p$a*~BU*!ah}lJ*v|Y*Djbٗ!tg%>]opV.dki6כҞ\T.p;'n"1hCJKu-(M}x@Jk^V݋˔33JLJ*<6vyZ+&dqδVL#!eݣ-d?X}Z+!P2iwz} Lյ(hxS 1b^)&Ņ ')lٞ$|$lOD`m"@KSo%{ݽ$_Twp*gQA/}bօyjò6wuG}Ҕ#=z=IFyH<'$1SzC!r/Jĭ8Uνý'?\=WK!E 6?b'(Jj-K#|z#:qXSc.JNJB qrӇ١aDtSEVtNiP t&SL;Ůy0(*LJWA20J_B|yk+`GIwyVr=_ⅢcэEKэR(vƚ,(%ڦ5*ږLj$)I?D353 ٤ƺYT$J_P/a=J囯JdJ!Eh<#zHF2M:Mens5ߘ~aJ 4d{%}c&`Xxߎ93/8)ݣMC(4BY, 2/[qaLzkpY}$ (e|4(DJ--\W1,cY] S4)xٺok }FtĴ&>n}(C.䝄d(m4?v>x_w869_pg6;2u2+Ni˅›6mz{h\d)jyi@:jw.NOwG6a3Adc)4(u Df ?BL h% +/A|RBQ[ ^\V6@ay2 s;U1| B.;~MT!e#M:k^YxHלMYf4 qZC&D0vTfQ C؃lƭDQWE >pՍELX>j_̇Ɯeˮ"1[!oBN o2I$t fYeޡv\]TfƮ['0~"'4~iWK[?q OHRXp4|W¨$eI;{ܲ¡NkA dp/#Lnw ޷O2,ͥ@}8#DZ"ʎ')q5ǮS7dqoSU\S`ƷhYWg9B*v J.0!#f_y+Fǂ=#iq1#,6 0ᘲ".ghsvYV2,oO ?7Ci(Bѵ?q89VƅKFمD/)Fd[UUC50ӿwZ3(f8~wڞ|AcIK˾A!Ap;&ͧ`&#h) ivJ]$yLedk<6T",%]dwig:TyDaOmdw :lShl*d5ퟣB*Vc:_s>;:gh™ \(䳃,5; , =ꂇm?y`βnEZxfA0^`%!qke.iCBn@\辫}3`S7 .țE <$q3r.Ӻ ̀B1 ENJt%L3oNH %{4  cI Shm<}hWglcoA8p=SYð [;;.&ܪA}dë%Zdy'*k]UC*)ro جAL|wʨEmva'FQvmTVkU P8]PQiE푱'ذb SOfz '5ЄJqFsz@6*=,T*;(btQy /cZj.$†.QU,q ,4@XeɲbBU%'[Hj%Ele1}4-Fl 8+.b 6q- lOL -93˰h~רCnj4M(h`-:CˆG5Y)HΗ+ >DzxzO\d2{azIzx(by3`ag|hyy&mMᮊ-2"}GHs*>.pUJks2% $o[|or($āAxXSQhIbEץͩ&bRgɕĘH{K80T'HEá!㵭 } 12Hm| nfÎlwk=up5ҝ0vu9ت),pyS7.L$&Eq'RhVO^IO`i;cHZ$[ om RԶGOw4C;-6P"z(fB˥' [cn<LxJc~ K*+HoG7^hs/H򠽠KvW!|` 5b2vۼ&?%1W$&:S18HQ/L wGf (tw/R^G `o3 ]Q?YtbMwsm?;6j^wU$A}M0 'XPEwIc8&7Rc@5OQ -ǀӳJřv+JL**8$2K#L)1l&ӓFFvʉc xU> ^6g.W[K`ٲC^uAښ#|Q禤oY<9eJ.%$=?&S;+럅@ک?+,lQ? f |wXAhǟs'ʃS+$&L ZJԄess"m!f' -TUc tlN;nPEb-3q;5?ׂ3jkdEr@Yɶ,c#xxg$v5^}_D\F~gc4oc;uWZЧ`|2[x~ a"[hsm6&W gy>Z\] q/FT,SKRΔU%&듩=Ae>ǂK9 mSSL'x*c'p?1ǚOf^64w_20,C{^Nx>}4%/,^fL ю"(/,d}& W\E(  &bwd.!\H=O-ԆD>Ĉ`'2('Yߍh k=H:Ru!r7Y^L65=Ci ?N>KsaꅺٌXRP"h]@=}~6/|iH>n["Zùb MY;+p*=e.>^(v!|3\E5n2?<2gDp!n/ws!rE5آ%rvf9kxW{=+8)36HI gƂ)$#(>.5 u0znyO?l Aca^bED\V|#Ku4F1ݰRT)Ѿ %|`kެLT'0jzC0pML QWPy*ksYYr4kD= !X_X@K/XUr WZ̍s辰d9bϰu~ ?7!&yU$rK`y $W79ɾH"Ɯb"c1`"Rvxx,ӻhֱX}V[?iĆ!"7ΧAߔo>owݍEIڛwx yV51 :UB4a\=6\aGȀd܀qt6W0rZ=ys="tk[TaS2C}=)(V6~QKyjP[%`}1̲(DIqN+)'d9F$Ka޹ F\ YdܲzsR!i\>xn}@B4g;!fmQ YFRime޷"/\ra݋w=ag#_]8d`IvWq.ɪUXaSMـ29Ad$cb8w%:+㉖T0`g}EhXW l nX9bS#Dc& kkU?o[90K7˯=O> 5 part֡AG}dZ9)2oȦp1]][Z0o/(-of;rxY8A(&ewlQ aC CDyeg[I3zWZMyZsM/ f}:$g &QKD ܖ1L٭0p,Gߞ%̞=^c$\e=ns3Sٟ pmIݰ@6_F~'MD̐gV6c$]'Y 9;/+=b`0߃4zqf3Q# }@ω<_*mG d>Gvفta_ &G)@ ^OH,_3iFW3lJyӽ$ܕ r2GN"dTK٪-hWscI@&I~n,-ijҝ9Rz>>`6)a}*W`{AoCL~ k6HDC,b|SU]+vW?n*/D[aO /iەE*>g7+Fiˢc)!@5[|x 5[M#݄O!(F CDyS㕻`ܕHy jr>Zج;A,6xBڪȪ|ϝnNShIln|r8j<]'E 243OMxҺU1#48JBS&.G{F2_CW~4#a.)Hxq*9{e ;d⃲b)!tl >E?k H7&>@@m*B7zۊr #p %i(sa ZK ȻDx2z")O̷c%҅-M`O#r³OAQLH':X9mekcJ.XT$_*pq~C,=Ҹf;{ЉZG[9ӯAنc?m8$"Q<_]6r[@K$p^L&dZp v\iukr m SE^nH! h-jPY'&^X~rhp`1x+}6yX7-6^cAIΔeK+.f,\6n:L[ɕϵٜ0Mpop3-E?"XVxѶeb٩dg\.rz,( -%GhY\S^3t"zaX)dtϲioΧ<h%e`Әx41cf$=l]K0, 3(Ee>%/}ŎX%V m߆M/IXǓ|EiZ:pKȿ(xGA54$ӱ3HugRY pW3t&eEm#W%6`x%na,2CFO.9}4`XmEt3pk2KF|oܓ6ZS hb_-9W|{$>R[\TEUS1_c;5G&q~w U+R[Ĥs{ 1R)'FT3w(ZV5_ugu#\sJ@X6NXv(dSױLQO%l|g|>$O I`Sg_RJ}9IͰļVCPT:3)F:(7ˍCn Bx@& lXVP' ReBpptvЪ"Qeszam?Q9sYSrCW3)@N`XȸRh|7!|\JVp)`,(`+Þ/mPqYH^2 jq*I֍sO}`x?wG'җշnQ/uDṔ,wAOl wpsYo]б]RcY*=}#@`:qvY `~`{C3MP/v\ ODPV.{Qmai=w+fν7 ԅ3)yYB_+{xYZRi?wGa9&΃Qɉ;\ c>6MԄ=Q45 yYwd*2 {zWwo(2z69I6!ckbNiBx }R heojWO&1]Qz$ .cYݼ3=[\WtCbCC]%1bNk[uo[_'T6^[D)"+Qܝz#8Wيns?$5]S V&L>)F>iۉNA?BZ"y"#A>N0 v ÝLg*܋ Wy5_Ii29u:¬\7Fy9hs1R3 ǕYiD덑`Uhol\@T$\ Q v$T,4Ͻi5 MDd~k8vބ_ IC?+*+!^l<>p%gH&7}u!VѮBd? xEY5j>SAf!Śj2}JPV[Nl*'ϷMUam 7<&Ay%+1sVC}Y5pWꜚGd. >F݌SЬ{pUg^ P{ʉa9x ۊ8lQu &BMi[_9<ϵWT"k$/Ol!׳ڕLNR'pȿC4XvkԦEB[u!Ұ wnBD-ĎRCjÖ>>O~arwJN`6p]^57qcvNҫ{EpQA[GnPX3h7"B $!iUA2 ̴>^p(*:|U%[Z\vZ%eSS ЛjvK B+-4Y\nU: c%{>0)@c|siߨ{wJ%`)&ե~uYN yc{k_7%m̶-GHuZ"5Y CnERUk=?%,}I3ZlYҏkL(] Zek^!7 $+d/c-7S^(EflCC4p.|rr%& MgA*ܢ{S^Hw1&3ݔN={kﯜmaPwv%c]r{ta׽˫x"NӸ@ui/߀y{eɃ^T Qm>@1F`x} M50CWtmdjkÅ<~y +Sky[-V.KO(=!+g7NLVj)>1~)>ʹ{:x#WE\|a!RE:uOIaV6/l FU92oiMEWMWy~gÄg/}jZ{.ިU;!=~}^)ǻoTɶ8\R3^,=V@@|EjoO2O=A(K5 diQZ볖ZjKlmO135!繒N=Z8վvMIgAv^&K 1ry Ewjl,A&3?NXwγaDKj:̬qU 9ܬMONr9u*,1 /ϝ锜࿧ #1[v;!%RNΐ+n>i4Sì!qCgF^ orc>/xa8ZzQy˳L4n5)q3YsR휐=>]aƎKm =X*~A춄uݭ-F 2 ?=1_ J9<+Gwơjpf&)^~О(ߋ!0V~uqG;g/d'˘np)1f8+ ?l>'XGҧ m^SԃLFih汄tWRf؇@B%oK`:9|"`6;QPY.{e^Yih`+R^#߬k)alx6 t>.7̔NZ Ks7fk\h# Jm$3S`'(8G(8zR1m!z,,;'"阗8H+֐p)q2tz.鄵)D`yO9 هyؑ"JQvC{nR'Ɯdf!yyQUZtI@fNyMr'?StTׁe Ar u;#Te1s$`< 8S})$[*mHn.m^L|9r!E=niZ[ '<}RqO_6;u|yޑf9,-(Xמ[]vCj?MOYG_+!L$k==? 1L(nfj!fzWi7!9jK 'G)a4%5A 2-Bk4 ڻ|f|p?#i`~IˤkKDeEvpbb?;b9H}{sZ{k"h6 VZ3t@~;aw1lRqzEj^'~mw],%|z谢z BD[wE3.pvgguVa@C#qD`X>,C88=, gCтV懼5O2'cY{Xw03l\2٢ClI*I ;™ʾqw.F P6 23:ZﲽpAfհ 84+CGtCIng< J:G98)02Ub` !b?BG?#6eoeF,'Pb֘*W| lWod(Cfq`=J!)4ڽs8m|K"#c ^9.EHyᢽzQhQ` Ǐk:`4<4~͍ ݯV)6TC}!u ^dfY ImZ[PZ!*|W=Apk6TshY#b.48K9]=ж(ǿd* `;u\[Tl`Mz*+;i@Z_`*4 no@<ۺ'Bm…ޢ@1,^2ccTdh)!t;nOME̮A+b)@pM|??zIoWn cvz{rKU{¯yl(/ Ke>]1\gYHfPv\0̓w&diǥ4[?z=JlIsHK}2>\4bPr;%HuA @& #8?kh—9N?dv9Tr1|q4Ǹ-uFeZ~ z`-TQȞW뛓L~ٶNŰRB]{Q9MicdB]] D*Kgr$p2,R #1/S%Q7>DI r3L8p9U ɡ $0UiWL\F`>zw:3$@oER\rO4Xl { QON^ ~z68?zNxI4T`DmeJ[jm:4&aό<t ]Tu8o _Kq L =ЇsjMhzUc9WȤE#[ `-MOc9zU4mgC"w`m2'b>hZ0c 3||V_&Yu 6B-x'\[]z6K I''dYG-&buciև_|~_UAmRJ"1&]>.R-J7]ygd[R+7@ Ff̿\! niG\Ae+Hp/ uL"^Q>0LJ0'~)];9]0qS8%$yB3a_3aQ}TY~ۉ'A@0^e1+rx3P"WԬeFW]a.{8-k gq*ZmX6Byl)o u֜rFbp{ڿ>ĸub?Fiqxriވ*L 7o s2J}51x (Uj,"f}/\ "]7說ҊںCPk+wO;*^REz15n߿R~JwtyVZ|oHL enM U.佩AY[P"8M3|`ؓi\cڮƴyT³)B(d$VKθM{;LUlclcR8]\=drA 1}E_pl kyp%ǎ`#C:,_Wgˏq0U/d|g^ފF,9Ȟ,Yw[d5կ B9׉Ma9~a'*@F:*4$;W:yKISQvw*Qf4( K-fw'OW 'H l .HYw Uy(P\RDyl-\v\R{Ժq4&Z8Y}l (d!a~PRI)v>@+uΥK+ mN^YLI5]ȶPT>DkS6K4@^tZxYfGfS@|@@OOU ww i2a91Mۚ&*'LEKk_3(te=ec%Hf3Hԩs򠲹(Be>6_ԅo4$jRN9P4n8Hmp ̂ӎr/b+}L_$bf~:_("Z V<`-9ݕuB!h W!) $(g}e >h7~)Ru%NvWARac Y7r(jN\a5?X[7qBx T#LN˂ڻ=1n;&&w ϨNכJ;%ca*8֘r?^D;醜&,PֵVgOq1$<12{돨Иcsb(a"jd{q+#ciL|Ó}.M%3i`=4wPkׄ>d! k"{α7Zd5x@A%bg^]- ''2^ pMgA @[P rU ete)ۏ%8;*\?a]zYD,1u+` p2mP>umY֠mxEN1tgYc0y.,MU i>Pb5| s.`j-6e`m uc~1|~+0ZΣv{p*G9EVacg ڸ b:|f̈AreV*EWt :o7%N֯`7}یgz2 PۊcuRgHd5:,]oRypJ,(8\̶#6T3eaJmE\e?Ţ#Urzz2㨢>If Ftʕv>YTvdcsu Tӵ$ի "O@wKreB~k\I: #.2#(BRg.@_mp z숫bԣ A5aX2l ,j(l}5X5솴qJבnTR UsvY A3CvG5kx6T]IpRpt[Lo]fȆmP-i.>>{ HM[" *?,4 ?Xp4K<210>Z/ JB4b:Zӌrg=52OloKP? Y~5b1i}7}A)Q3M̒}vK?wds;-(ύm-'~ mYd-sвT6dqA*e5l8G{:e`i:SLz,*N9F FM*ʏjq`Z-(#`#NjtE1)SwF30!Mv8As]0`w1<'xYRn3~iyk&oGC~Xy'lu`;\nHˢ}cP?fv}Jm!±E|{ՋB3I+䯢tR&ŴKV[θOWc* yyMGUl~A,"HVlch_E/wAc5-"%IUǶ5UҤ.vt.Y}Ab2?"x\| ;QuOO1 a)/7zryPO}TY#vdU1e"rc^3ajwϝ^,G*[6jZd-$V!jضy GpIXUg<݇F+O 'R{H"қFgK,אahw,2o8_<sfƪkƱ?uCo{hM ڜ7qX"0m[I>}:Qds?-<@G# UiIxG#Ū^9A" XyLЌC@ 23āO %vNؾ| h*ayZټ)6\x*u!! N,~o{!r!U[<'~; ЂN~ZfGh I j3 8^Tuрlsup kz_٫2#PxIbȏy޸-_QHYNYU 4.T#-c]KK߂2'[G0bTC)DWy*uNv23heY}A/&' xG⵷jgԛg &d}Fϱy{α?5m 8t(|`'" .ք~źXDՑ5nK<0 UDBW- vyVğc`sڄ7Ev!YEa=MjAzNjiɾ=L'0S>9}$UagB!Mk-nנ@N 8Hnd}tc{3W#Bwh`iggO܉oYy!8 A-~..B|["Έx0,# F*>灪W^WT‘<K0ɮ׵9CGPxmzD4Ә($8q I'(zLPHE!.7B gSJ\SE\b f{Pc8N #u y=^"Fc# QSRyATf1|)= I^S}ӛ.wȞiMߕ( ٪UpVd̥НCv?nx~SmweCrdVq:CǬH"ySuV$=*^~UQ+oW>],&촴=Ӄ|w Vw=q1#Gh.FgO:y3> VM٘Z^`!(+:Հ|K"Kb3Rh1LXֲ\/mp|eU+$Ze .N#)GBsPֻ"Q)M.QT]|5MJOeIQIi sz@nuf`MTKb0xEP@i>N+ )zD-v?l_G,ct" 5~hn:5)6v@tkЎZ(HMjEؐhh'9K JC9&n{ ]t,X5^k$}@p߻|x3:@]~$<8Cn'9e3>i׊^.j UˣԄCFuZp{hP8Iym$yN9b-FOtz- 1@:Ͼ:"~Exc^˫@BSj;_-ßAM LFǂn qG8BhT%V2U*@,d d V A^蝘%,FkKi(ݝ*Ҫ׫bJJل. pL0<B_4?VǾ3|^~֫eLSpPLv]dr;A^{d!sM#G\IӶj]7LlqC2d@ 꿊"'T#L8H.W?9pS]H 5͡%5Dn~_!Votn%Ӫ]$gГ%ܮC'!kGFa;dqɚRkl1~B]և "Jlp%MA[ tycWe2}5ZJbBsXZXx.->=`KvJOTbR\q)C!tW,LܳfLKNz %/ѡ X<]$F#(AUat5VmHxEKMPzY+~G+z|e|}=„h`+D lH>ˆi J/Q35g[WcddqWcJ,; BjrEþib=pmQ ;kTv#9HU\Qf(5G"Rt5 ӌ i䷟ðXO}#@圝4<8XX˧jVJpꌼD5qte0?O8ByϋAO3Ԧ/}“`;sάߦ~{GFGE *o%5 =JtBpio%˧2y`\Fau'̓ޙ(t>o "7.#n]P< ½ɿG{.R@qI&ZC`q6IݩWC̷R̅3pһ64n"]nf%) O &ƲG,iI,%xzy7P&J|AMD7/zi%8[΅ܨQL J 2[-KK&2ÿA|8?{j~)>b-]g2l">>HߙE/ptUP<~%#g(S$ZZ(&t֪ <_>z/䉀F$tiM}<680\Yey9dA[* ٦h DBnTJD+4u)XV }RB6"bu#'ZuoLB:_/a15x=L|7h??YV7 . ~|5J5Ag>S=v,zgY @7pa%#$aЀ\/bFB[H9/șn{:P=;!l&Y4B1P[Kj)]KސUKm;!/(VmO#sHحB b9qD`ؤ9p:`Zdv-g۲p DgM Q]؝Oh"({o+3E?KO_LQzU2JbJ+GuB}P)"3|%z?֦\f,cZ1Ժ ʵl7z6t-*&Fu>W櫚@ mug@R(ՍԍB?UOl /et}:F͖UAVz@*&*%b9]6 BK;̊4YLGf*OV J^|O})9+F6 |Bu8caqv/ÒWͪ\kw#@`D^^xms/&08KZ7 9K}Q1hvj޼FIM+>),q%$Ϛdn9Z_YJG~w$u%N3oI|ƏeԄhP/.U)N|Oxeh+5,wPi*l*C^;ȑTnM;f;~=h.CIu.m9Ʉߍݸ(|¥g#(*qԬbk(5//q,Qj  !1Oy"c"Y%r'gzj56I&=](uITO<tʣld4 L3e HDce7U]W[>$oH_r)0Rݑe'?Oŭ}=)Wv-f7'udv/֓>H5틟l;)v'5z)t0+5B:_]o=x-̲NL-cZv iƓ=>S)SL9%Qؘn}b lxnc(AoUȴ4w8D/u~`׎k*zz(W _$4?;Pο+6ːv_'qyyDnb9h0a0=e/z)Z|JgSZr.r96,SmK9Q@ĉpAv>\,9׫/<ƻ}Gm[(T{D,U2 8?_Q([ϏA.G*6&ǡ]ZggX9FMɠgPK ^6oP3!l-E0'pϯFpy |3Crw2'yb# ڞdH|N?uxyLa9{MYpb+ OjIHEYr| \ueiQ?OX!Ӄ7qWCna(SWSeϰ2PWϞix -&~~g|0ohNq,!=_nh:9n;Y#~_~0yFP6t;xjNl~#zsK "h޼ )pnm|6gQ\AJn^a(:#<φ Ϗ@+P/O֛5m FPx}:[j0 xj&Ynj:v?$Y 6q_0PZEtO TAW@=YbgLz%/)3~[cqt󸜻cg$斬k^B,wWvmekk/fjRe?`*tظ+|jTSv$0* Xނb6?zhqcT X=ajϓȿiڹJ_)}9C@"|$u^SͿ Vud7(n"q!;kɍ,X j|pWQ րN~m?dXܒph9@FT.u U4[i، z :P"0I.h|OT67"\ j*et/#PQy"l d'2p>[[nB˯)϶rm6I 9dJ?tqfJO} f5^2 ,nbRzկcprIÙtTűp1OYb HZ{g덱@[JUǬ{`J`7kW@3$"G"z;#?{57vBt_*۷cfNy`y}ZE=_U|_m'K>>`5Lqn [,B ޅdQɠw;3=R3~q?~U:Ax61َf$u鯼!g/DG3;0m8Gf9yaϤt}z]+#ߚ|iυL&M^ao"zhinq}x$LxteoY*R/ vsa-C&u)Ԍ *3a Ԧs9 2D&^Sɍu&=!QW/`bY1=$yu4G(I?:O ^,1Z ~KP"dW!~y^\xR*Gs'3Rtg"4\}$t/~ĘwiCs&b_j>tzSqJy1:GPVOmk32!?xEHXE@jz 7P(!;[oxm~⭷]a|k-. K xU‡q ۯQ?JX}kY`rp%( ۉ@"톖L2;|^yGC/'K[.y1jEx^S2|#/0%Um x]WΆpdP7!#5nX-oËExp֢i? wkc"qR*_Fķ} 7ڻPA}fIy< !W5XD`UQc٩B{Jŝ;d[?LƮ4L7I8;Ⱥ Ό{2(oa  #u1ڻf 5k-Pw^P}[͕>߈n|9E̍jb!?OE\AlԮTe t+̯?$d% Rx̀Ȭ/̭4椸+wyșk[_:q$1Sv4;|_wӠps1TZr/i`S}yz ͸3s(C*~Kv4Ny$l{gv`'z1W u2.{,])>,lh Wia$9 \J.S@D'u=a?530q*#t1A3]F@\H3r!VjsQe}t=\jH_F(66 QolO)oN^)=]ʣd~91Or >#]cXvUJY)cW5b Cmz~ъ5bJDR5Z1G`CY0fi~)ȩuӉ`0z~Xd#-SOa].`)D{<3UMDZn ͗]%7g -8B*zI46bbS1 ̷7eQL?l㢊0U:xIv DrQ en&Kڴɋ1RL)Hii8b1AhPT:dwJG^ܵc/2a,TgK<JK xΐ!|f*|؊JyMgi=E,Ǿd^Q $&+8$TϵC;Bu:gWߑt /-!Ԛ,* .w hte (tt5hԡ 8,#ݖ^Kr~2hi*ܙf]M&yUFpl≞ :F14TK^Olko *l/L ~(=M֣'CKy$K}rm2U)9nD+]ʼ a{!}uFtbҦ$]elK(|1Xpi}O)clʫ#`‚+"S/Қ+FK̈a?9dG&bB?PSz%{&52/=NCpaW>߼H>i I@ы@BLZa#MboTenVN&l%bEȹNY{n?ӒiKoXym` \LJmxLΛE)̵>L 3@1*;r'n`ˢ;i5㹍!P#C1\:ze]҆˖A .ŜųEOu`\7SY1Ly/X)_IOӞcMU&57EUYY91o1klKA'^W)FUIT^egFnVAt~ᅖ[6&7QII WeHNC+%;U`g8MX~ Y-URD: TdjeW "}EY$:n{|MEL?D & 4-# p'&[RGLնF1d8_꽧&JHGb/ w0Jџ'`#on "ɬF5U74ge!2 P̹~/~\p@eMQwUU,d24W4Q:+6=a'tn(ը]ߝ g틯 k WlhnjOڨ 󐃤J^:Zw6"$,+&"+lB_ ;J~*m߶%c#d@)=KQTbWKcpO=+Bk1$Y 7Tdցv=?s6dSJ Dx z:ɲ&^$$gׅM:sΤBd]Y>EARtF# 4k,M8ZEosXL"0y*f3|F|,(W0e~/fT8>Z]M-tAM ց _8Gy!mƔ[VDP$.`QMYrB &S^O\i.,iM .ڼao!B~@Qǻ0{Z`Ќ840a]&JU }0zrEqs[H V)2|^.L{'unHAn>6?ht="GPЛݱTeXmw,5hH3wPeIa4{+ګSCK1pt0ee>$M1<< QC˲&{d;Bnjig4H'%xto z)05oyTsPZM .rxS}|}"'YY3(eW>k4Giqz=H{u{s'Ht(Nmm:K?(bHM84 sV"$[A8^zrj ^, ,YNJ8sώ4kh˜3 >fA@$Ef[Om\>mR˕ڽiȘ@L0I2٬eM,kmz+_ajO;an6 Qrݰl1bwNՉҊaw7>u'>HB,br|ڧx"kG =AO-V@>#g>"D.{d ubQĘtN GIbq@@چw0F '%ص.DBQxShMʀu4$ K!BTE!5MHtP8m$Ҿ%^ai0}fJ[˶٤vF#7y>tyyҸ+{W Q6 5Z}}ӱtζL0+M0F5`[%,'ڏze̳?3RΌuFZkUѴ_!c9׉4ۗ`eY~ҷ&q Ad+-(7Fԍ)q,27MgG1ܕ[{LBDn4M<(h Qgzb]XֈMqϘ䉱t(A#.Ojfag p2^I4ҳ %=;84'ү%bV{lHldvqѿ,g&2vVՕTL3/C4DG;LkP~wh:'QgC4u0HR4B @,' ڳ7,)K;Êxv?3)%0Vh?4SuU}gG#w9w =Rk)#\u{"37%F-5hļۿ\Qw/v wsknps0~T#8_P2aCs "3_YsD 0)SIemSxb_ Ӧ)sCC,o>gL>_jBK@xejwf S; NOFbf@dA13xm@DL:sjUQB^YIiwՊ:ǫ&BdiwT%9Xc$ yAQx+iSyȧNԀ}A{H2v)`Kk o}ġXF]F#"Jp-Jed&nGO[#~<nXO ^xz߶#_$gpO$* X=hٌsK1*ʦ-X(hTT&TDuWRM-A //= ʆԿ0&kv@ўb Qih PnwqL'v݋3'Tg+D5E\Tɑ /Wbȧч8{~TƁMnI CB}MQ} 3$G 8aUWQ e6}ث{=;.$vp}c璥B\w9[ÚGjBS3/k?2[,op 6 Zxw!/Ί MYaUX?-֏W9h8 zt;ϦeRMl- G~ڑztV>qqڟ4& u?&7hKZW;Qč21c06"@D6p6,x~T(2Ytũs@H4 /h{S>C yKt~P+$T-ՄӖM޵ktn+ =@>ILTΈ&"pogڿf+yPok;2ݬ&^|5mt+!Y9n&I.TCyݠ9$6p>b[d&V503Epe)JHyP ZniP0VuXcV2AGִƒe;vxSo, cY!0V S^ϛ(z&w:!+/.'ߐ77JH]Iz8&ң A/үc%~ Rpl5vI5RZe! G5,.ߋ¬:S(&zVi_OYK]͎!z gϊ~PD)H$=ϗ X/;cxRg{Ƕ}.WǸk V6TVoaِޒ6|'gO3/+ߟ })x+,|mI6M1D2_x7cDOar4A6f8%PM6kہ7 FIpMǛeˉpFY@਷ $a r\C {ɈN1- lֵ~$ ~^*#5랊5/pMXH6ܕ|Ѳ_kYN1)]ڢ4["bE[u12?0ҵig7Yz5J؜|ړzDq* T͗{DBUJjҙ/ H؞hOE2`euEjL ssirǍwr)}2Jŝ՝?ŰЍ^^KVu 'vY$Vᑤx]gbp|"#ck\&>s9/嵶ZP-- kKscU}"M0-4Ϙe৓lumQUH4‚_Y<)NaU64kɠ!2hy#s[qG=_/z\5Zln]\ dTF+7>nQ6dݷIWtվUA?jT谸~ e|.{>C'3y$SIFwǁ8oPV#d*Zs+2?";L^Wo|K\ŠI~>!-xϤbr'$fM$;| =%N,S]}rh*Z",zېNzs @w#6ps/KvVoNx2D=pA ԥGA䓤gQ˘5)t<La.24\qh[* ;ϾuTYҚ5'739\p.x!0DvBP3 '/fω2XQ޻Sώsbhjb톹@>FRăggSۥZ{cEǵN*Dc11KE#JeKbf00k"]Z6lMܼJ? )/Dm[2r^5|U%GV'rD ƚ ;|PcpMOAp,B D޺ob|a@mЮ5'!Ibc#*ssr4OW9:f(ѥ):I)BJ25L$adGDlVt_Y˲\[L,SF͂ԙT*?{Zsz7I,ȥ˦?Xٞ;/Jf2%:>~}hlXXO92%&Z5jUp<:z~,~i/l2Enw+KQku%YDQG|G}uۿs]a&{T.^-ybh'ߐEZLk硄#Z\}[?pbƮ4Bʴ4+xբw U GkA^q(6{X yCT' Nfۋoe._XIaF}wvRsxR2B6UR/*5t-Tp.:+2ya}+?>+ Oc+GFjb [7 ,DG5#WJ%f+eq& 9W !~xwNo5AS_F7j+01]S"w!IG}Y#BX6Qfh>-}Y610g'IlɆD . >49+WfD Gg@z).7ɖ=3b < )^ׇJe8smW|Nu } t‡zbV KEda6qC5e=\ֹNdc mVTar4J)c\eH\v"p |~v(?Ȩo } r6c2tȰ)na/>w~0Vy >-<% (xUȚ2GZD f􀰀6@8Z]ИE0-tfZk,l˯52`+涢j%" Fb{Д4`z su?sdf[l, tR,۝42 fi6"G`%U=N1h& * 셧d18pK(YL}QZwhFI˼@OlzG@ڦ¼X|s\nd|q+:Kձ9eyeW⮗Rހ cD'+kZӨdec2. an|Ϣ~q/?Vq? D,NiKSij̃C<_,@e~TgT1x=(f[<+o\|Ģ8wb@8ZCζ1+z郃)? HB َ 4@nyكoFG<’OTG;<4ctqG_0 JI43Z~_,.sPV 2geb)~UI?Z̲ 8 fB T$pm kCщZA}Y lé.~]Nx}N*fGVBkP JByeцZ-_po}(l*Go׆%vL["kM%v怨e& V9lq>dR $Kx|}72+{,tK`eZB[464( + +aeZ(8dpCru.TjHg:S0gBɆ0n0eT3 54)CA Bj`*Ưy?9{@{m},2np)YP49' 7z; ݸ_ 4,!%=Hzn xPy5pZa?#tmǫy9i푢۫yCyfV4)=áSB=(@L #6(OŏM{[Z$'Lm$hb\=/&kF oNtmr~d$etemu7˧;ݙ7H3H6آ[L&@\cuxa\DoyvVU4 03nBo!.C矯7cCcR@;M{0&y Czdniz][JdjVwֱeU1Mщ]o}EMޝ% |b N:~ 8=ӭGeRqh5~Ƶc!M3Ĺ |„xOmHI -غ2ry՚L,0MsS/孏\U\cccm<b|G1 u/@z\9GZ[].`ܴ,7]\Vδ>BKLJDz MK(ɘ ybY1c+/؉0+GS(,"NNJ7Fqھ8k9d{IAOwia+#[H-艎3m¸ys*d0;H=D%}*\:$- G~j>`yoWGփ$0?b8J#a`da- >-_9@ % ]:tvjlF|pSp|f >v3/nݔΞϸms 5JNLZ\`UuEO 1gvr?/I\S)0wlX[;׍V*4m8axg]||W~o9>D9UhHLq{!=2]{*'6dc[7X%POu߽qrg zrr= J8dWCMf3w[P٣P=i pXuXpQ ڻtH |T9P.byQc IÌ}?ΆZB0M-I7V"Ҩh\ݹw3\3|=n4_y$ ""0̵nNP5j .%L1ebד!=պ;?qWY覯)dAM'4J aҹ9wZUԳX?a9ۀYdu:YsA_I=ŋCZ!w@K;IvkJb^$ Y=doNNЗO,9?Ij՞Zt.A9Lol> (4W"mf5: >#%B157z4B8(( `+:jޥTL[@ϲ@ǿM7ŮwH4VPd]d!S䢞#?G2c'%OXQU7m1\Kw^LĔ+dN6\-;փŇʼ{މm<39˼Q|s'gCBX1 H!}?=6p;>$WPr.QkZH-GM;K܌6x#yDΗ)lu/)O劊a$XM4+ȕSŝV/" E$twȨn@ty4MGjNheu fmL3"SL_(CTs?UoSVk/hU*uHfBEc=Y$'o*ٽ[V-,Y߬'?vQeRA>b# -ԄF5bpWe n4J -5խ٭ֵ>dsfms!#mǼcb%3Q"L|_)dS״j뿤>')OQRZkAn>I5VPx*c.\bd ֐nVŧ6Cfү5ZsvDUy7_߳=sl\/ $S[f 0!"B)CɅ;h!B%֢(l֊ʪa4#v+ގ@rO>Nj!04ݴıMvl+"C~4H#e󳩑KOg p̨EQE*s=\D9|_q >RØfU#Ց!ծ|NXc +_PcrD!د3 (yrZmPxl~zOXU9(ƎO qŕCV~Fc[m'>lT-t#@YRu<ѧ=3X:dʩHrZvͯ}37;ne™Q\ a\CpH c;2c+4$6i>G×HVI weN-t#pr KQl4MJM6~Ʋp#㮁 ]/F|xIloɂ8Le>OeGNSfSOӑbQ8ei|YJ \0&0d@a:g< Л U-"ҕQ̫ͫVF#$$ +|#>G\r(*foI[{]r25`mnJ"e%xBĹ7"Ppdn FŬe?+I8w>w7a,F6vvbB-?/? )sXT)BG!- -yNξUWbk%Z#^cvf()ҔE"^}H)Ƅ6J,VPۄ ]ҹ°I*iWm RW WzA/EzlӝBT8$OU ,eDimm_A京{d:IpGy U8Es3מpz_)|qW8V|;܅]9Wpa72k{ce].J5MVe+ l5L3& kCiubϘaƅ.1Q`:JGbr\*}WLl1"E{⻫2>bBxHiSevX$\9F}<%kj-=-! CNk]ZK&"{-x΂F ;ȳMm88TLLvV`& wTm!xa/Pl O u"I%`"uF*RFpi\ daMW{o(ms;\?%dF_+Wb-yNA"Ja2#iA\9<$e^4 Օoݳ2VpxJ!by&*on7gsrvIT K&`Ȍћ81hp*ɗ=mu %#2,I}Dc-kgd:z7r|[w ڻ^ˬKDKw"}^s&{{'W17hNEeyMR0uq5&.-2!|ʹމPou8A?|Ui"F }GYO\ CU ]UDh>F9OG%mH$`1|*c~VVYyE)/TNBBkD%(& BR7g FAM-N\LRmI:y&@\kEG,ue{w R)zqם3LܰN:lqfD"_-p|iP6tau=B9Z &xA W%+?Pn5Ŏ0}Uͅhemt/n׺,Q0 Qkڰ wy@b[kcCwxHa-*QeEBg Iƛmt@ ^/nM#'{[d6Wn@Δ FG8apU*=hb#I.vs&^pD'/Ud`l{^6{@V؞Q|$C2hyGHF >^{Ȅ}MH%S[T%`?S*Gl/Ւ~n(FWT&91i4b#M_m.m:?E'"2bQǻ79zFX,8Cw6 o4s4׈wVs`^zZQ"ZRJpC XLjf grQ@2NeVJddkEGTfrNSGVy M!s_49`E-(4٪ཚ*b)ES>zr۾َ[/Au3%F( gUݓr΃ ޻V:ŚɯGVQ87ERqwFf$w</c22 ĘdL-[f40 *iN8fr;h׃sZnp+݊2DW~4~rΔςK+HNmy !TRӑo92yEmsUYoZʩ b,eɸx ^\Hǜz~}Aݦ'WϬ8,(?RIT E_ yש<#k?sڐuJ^,5ܱzqB[b3{~ѳjb_h,jP`>q2U8 HN$61pQl.PFvF NgY]5o6%@ľw[K>U/t - 7Es+–-(Eb$pׅ+%Y;&I~OF8y 6ziV:O?ٺhͭ֞Q IƱuLUMky>TpoZb&r E`|Q k3wvĦCE^0T&@E#+/^$Ƌ2gKhCVțt.*=/QruU8Ef1yF eR:vTuDh^dIzd 8]mb\aYnα8Y_!~|;f!y\e,Z9Uҫ W%UD}tq3#ݐ,K(,]~38kR2*0H剻){a]&6<͚,YXgȨ&+h ԁ_"Zzr9*b(J |Lߖǃ|"Pc鶥#j:f/#0X}#M#6"xc1XWڻvnBֽ g͝9* 4s!&:#k$~񠋒و C2V{ E9>k4o6a;WAq[$oE ISrEiazI3hsӝ  Φ/2jS7RP'%˅‰yxIqR,1/"5(BPڵjs` E_+zi;XAq&@Ǖ5CnFX8BYrPm*ӋKIn `y7z*j9k4a)@¹TaƌNN0cͻdy#'?C5՟:\)oW-$_@XDnXf @׿XN.O36(?PV6gOUr;:t;H=;PKŀXy.vUSΑ0p)@nhbhtpo܏3TGCa9ʈ'"E;)6iOPah88`pGijG4g D&HSq +'h= %$"зÆ:l>@tA%́J>9$WUdv4e Ly(U0B +]M`!RtC r^كVc|R> Zǝ>d*W=E O$p'2x]h%tM ?j~"vr(= Ԧud0N[vLViU'eCU̱"iʬ߶,_-bXƵ˹: h\yЉB}L?,7{D>nH|[gٵ DDb(5wy+zmo5ָt \SqdLInE v s %Mh %BW>OLSK[J7Z/*ú8yyE²d$aOl\tN}OurqHV$%|8˲3;{Ljcb4Aj`YW4 $M k?/9G5( W| A- aI kfDt 8qW|umb4@ލxN#v3#@+@nn-V /Šf/ /L#oY7Ľ|u{T'\9 Ț*.~hn|#~b2 ;\=2#yD)GaWPu</CnQϮlpIz7" -Hݧaֿfi1|P"E_wbą]rxPci)מؕ^Rm܍$@171b9D('%xΣtPn($#gu $O 5ٲPO7;k <$Ul#^pPFQƦl!ߗy_ |뇴ܧ܆/a&νgWΈ_.9 ӑ &Έh059D&ð.W I(%Sր.T&ul s7tgI!b)}{<Y6O pZr6j[->XmLnC"q;Nl+Ze?9ٚ s- , U3gI*38b5 .}~(Adj,CbNqgk3q۞Ž=?ڪƲ<+enav8DEDVySb'Svcx&L4K$f$tNc|"'S{cm)kzwNI$LLamE*+;)L>֌{;g CeAbkrzjwMO><^! 2mXQÝ 1rJpxAVUzWL Evo ɲ/j%OV,o&jSJگyT ni}rݝnEmv>:hXދ"[]3]]ì+jBb3e#,}E<ؒ8b[T ^!"YyN`=|dib_j-ý6G8~їx1ҿ9M§ J@[zDߚ|tG=MEs4? Dټ_5hld(]]#I2lyWaƜ_#`b  wArNlS%0-"(XƵ.F0‡e%BCk($͇MH~L}XL.T[ENn}G{;8O'2UŅ95$a|~ꆋTiL͂[cp&x3Hр>^L ] <dNpq_=j~jJ!;}!cAؼ{;?9WIRbRE DO^B2)oF.%w-UH $*HQ$]$}(8BGP,W eGnRg'Ke.cLvãpk&Ⱉ0*LU`*௑B˩:: '],l\a4ɤw>܉|:m$\tTX/A dӊ:qpR'Bd &* ɶbL͔wZ]4\}M3>1`B$(`Q.1 KYʶ6Ip)ϑҰԲH̫u3 ʪwȚAH[-k+H# l0}_W$TEdS¶cGȜ K{aA(ûv )HU%٢텖<I nxPZ 1.zi#R 3?x;)CW4rφIG<ϥ`60^F@DyEgvvKllet({w~ϱGܼUA$[ 0 ;|LRʕ)1Зl-qSHun4~9:^B.O룖WP7he2Ww"v<,&K'b(aqtNx ˸P.9{< <=-#.) &ih' S[FEЍe^<hfTçUp#s:(@W+eJJk|i*\@n̩Gv-s1S\ HD C2[ rxЎ/38En<Vշ `jD4BiGPLbIc8~=1?_g XwSC2W?0Ÿz4aKဍxTy|DӱCNM*]9b95G'~|dN@9Fi<*.\WE޿u1+W,w!w>EtW*jx!;I8b? M XnO;kY  a5 rȋgEd_ ]0ޟFuP9V\/3g礲eHu%(l0d xTg=-[H 󸟏?@V|H;H0+ 4PU|*[̀-!ڶм{ J]cߒd zާչ)IU SGĄiX>6[jHuLwLC%JV_-<f28(|z|S$=nz )r PGFϔ _BQ8Ys[u0x#ѽsQ!|dDɮr)oGCu3ɶ{亳.ٲ&-N1ib%sF~֠۳r9kq Y-3 \QxwݻIIlXۺ3Xo̠#:%`x5:E =_Ѕ%#MF{itV1FZ 'LEɌ<֏#nAC>}dIB"9jT>tF Ό!ii8wf7ݭ> k;9f*;GB)h^鶍Ц}~HA_jڏЍ7??%H¼k~pr1'S/'#pT1P`4n抠=d ( ,1 o2z1Cj{{KX9I8?A>B~%I`{d)ȅW ,'#)q]LH):X@'.*?YQ_2>+_<[vO h1‹r01 xt6 U:q;K&w~2ę)є ,n:z aA_~͑sh{o/qxN6#)L0z]c-Зv;]>a$^*J֘DBEbb* wn9zO67C15_R5E,YY)xvbp_*4_fE>t[Ă&ٌ(L%>T,'wHcuM8j+9JaejdO(=QayϢNՍivXb5\:KNzibfK- ?(ͯ&e@J'߮"7J%}PV" ;}/C(p{:i4qcX*`׃-YB:W`%\XÇPx3CUπ}o,NS,OxCJU96Hgs;gr!\qNOl/W JhbY TGuLSbnK!Ѕ@b1P\B/g,1vQNPӗPLM \ nRZ,G|`~xE_/K4lVE2ZasGdvWgLKa#_`4@̎$4d`Z$dx6POpjbA;s.sԚ;Kߡ(di9@0ʹj0pڊkoN $Ѵۺ9|Ic5;H bz8+`Hy5@bQ T:),9?>Df$Ť/= ŇܡPv~ Zᨳ'-K*˚-gFWNFe98 [Fw@?Ks~Ad ow<fcaj-xʩ VN__Wb*ۍI"/U ^poW -]SUd߫9 q!4\c S:]yDIH'~:>690((D.jE>'U Zf}lW| `qD#L7gIpxy5!b[ ్$3 ꐎUnwm]:CZ厕g:^(i=QDIwzqcn~Զ)+_lu&VQVWwNZpbe`fPrh_߷i+>'QGRKZ݅wwݒr՟Y~?B [ ,>PYœYGCͿX\+ԕLvO& qb"xEbl^ܒ : *Ƥi~u"!uLuxM寨r--ǺXdA QtNg@Ju/C頔c~̶* yMzY9o%MɼN`P; ݎM nc_&E)r|Ӂw*Z=2Xnyhlh lTrӶDfiL> <<Ϊ\*}x#2o;Z8(C?̐}A+L'&2K£:`.؛BNSgs"~HRPۋ=6[>bBomte^OaM8n]" #~3t6_9B'^0N-E˺8P6,Oȷ}/9Έy\!цms#PrH#frb8nIԻb@-nlDij#_n Hᗿ|wB:ϭ b3_/B"ӝodGyZ*A7ReAk.xH6LJKĿK}uYXj%dEd}o?_bL^+JgmP@bٍ -foߌ$UҫM=TSbRҺ=L J#MJHb־"]_|3&wu [p"g@E Mgյ"_ŁzCBgD,"/g&i_ Q9T/a1z0 S csD/sSs^%' 8Z.4/V{nVcVl.Vhxݑ~0t#>v7 'v g,$H]sc֯M&(O* f@Q-a?|\>CWT[:'bλWs#U,EtZmiyF!nmpW0C8Nua1M@/\Zq,'GYGVLl˜A "û؞e}۠![fu##-0C u<pg l kh`1,Ŗlv3Șzz!(`#o8}k'"#g">*)i)F8ǫnWM^s,$H֏EGTIq lLDCZe9^glqz>٢W/|c2|'q28@mh MCKSJ1lĿu"D{ ]Rw]jUhZ]صOYDYRx5Hu~")etFy#B:T(NAj{N X!MPup2һ)Uo?wJx>̄%F[&S _7ܩOF=v3,ڷ$gHB_uEˎL+OL}Ȁ1<;:0O5ծ-:+3;t-Uj^ !zz1Ӎwy+xU[rYIuK>zk8è}Qk'yu J 7$ ȫsIxY. jZ(ce9Oj|=FNj/tJC =%:)ʯ|IJFcj2VJQedљx@loğ(e8R7A6kfivs#΀]Td,|!5IO,k<oC=n-/6z#OzZظ_vߺ{v} 振d'%KȓrlЙ&侮Xuri&nOifo#>e^ :ZNlo0=?ȍ@et̎%n!r{} X(wNvP)I*`h5*x'CfQ.RgO8INv:p_G R^!j :tz"5k|.r]Po^ |pq&Zf1ް[fX1>B~ulVkpDo7Zl xŒME{)74P:xB8"#kCg.{+0;ݤ-ND@P\S' R KBH0ReO%Bm Hp@*CT]snL3aqPK+LHʤPqIº,.̈́e`DyHZ`> _֘Cxp)4{@0e5 ֋@𤞜%({ؿ/[P<~tiC+o)I^A{Ϥ5}-⮍7\JDqqS7ݦGhv&U[YmuJ]=4uX I4+K6/H&IXf3inrWm><ArɒP WGOLA`Cm*V`iv`vkB3JU3Px@Ys'*(^$.6~K)i"KDZ+M+WJ,q}+zDy]pHeUbf{s )|1(gngq\0ڈ)pnz ҳ9a ˗@|BХkEPv'LoP9W\ﶌn/J^J`Ҏ )IצR 1ʹlQ<`{\<ǂw+sQ079>h.gj2}F;WڳgK:M 6OC,?8ci 4@x^gVi~1K[? c+:)LvjD*q/Ôlmz&k VAKt,/H7{)HR+)faR$  >|Ci{ً>ë٦b Pu, $@QIĦRT ҃sq`m&L'PR%3F{k 9p(r=6ͭ{g*Q{ٚ\o_n$D^`2¥4b8b} H°@r+em cz =TA!Ǡgep}CIdnr5opH؜:]|ȝG$y{6#kvSJ2 #~D\qal#3'~ciB\<Σm"w aBB"6rf ˦ỉ\k3\@(8Փn C~PK^cMh]Oox9F$*]j8&xB㴛ҵG~ٯ8pexlՏLv.>O#h|W[\'(ۙ{}զSԤzF87!_ f`ƢeCBY;Xsӥ gR#Ϲ7gY*˯*gp0._+%Fb\gZ[Nurop>KChH$^ "`!z~r'^ٮ=:lPHѿ3>:iR̊OBu48IRrplp]C:2zUq ~6wd"zC6EYiI8sǼֶY}4'BE[1 yTcCJdTGVHҡSXHʲp v 3R&"x}nM<MW~~q9[&}n/1 >q:Bqڷ:`FtJ!x|MŢ+~B#H4u5(˼,! ]RD_erK->`7ȧY_>S=+| r4J1#63dy*Uy^S.mBQX zaoc,s*8:6t?jx^L<=lXj ^ji|&?[ho~18P&F޶e^=q *C0VM7X c@fxam Bu#JTADZiBj=0U5+ uy`˽@K)ٰk/RNǯ*ƚtr 0Nc.i-1шYLTq eN'4oiivEJыO`c!*FL!ed@VC]~URn,~ZՇ[񨵫_t-w¯Q6^%"Dbԓg)X"%zMXDz(4|?{] y|*1=6v(csZx.J'e5p$4b-sQ]Kٜ;nmVk[R*?~WC7&A|?0Ay/,q?E;C&ם۩~Fr\! sdbnRJ~E饏8T,Z &9GT^cT*Ǡ)&80FxD"끢 YbN *FR'*^L<~<,*ԅЖv1K!VEƘ ރͷ0,cffNAy)FÒ[ge1W5\ ە{o Wa(8f/hZ@t?-uB@a+s%ou1A׿i?eGߜNc!9P:bVb1A@Êh"V%[G/}gG; 'iKA} j_]1dvV>rT&Dy{7i '*Z{x'%2sN)5g0aND^ʇI&D /F"- \>fB\V<óT qsLVp]k| uvm#2'b3n|8Sc:[zqJP9D"r砥L2ߔ)i޻䧅$U[ \'3[Vfҽ[.Sͱwx!=l 8 tcZ{,؉ZNЫVB%SɟSsH~ytW~X鵪̑Ȃd*Eph;sQIVYDk+yw*0#D =ϴ峝sۘ&NV}j|-C벱 :*X#uk߶F>g.nzu9\SxC/IZE¬&i#$-;' ĥZk !\<d'jlb;m?l ߘeƪ6q.<QZjH. 49_4h[Åq!0e.wmI$\@gs?Gʳ?_潝 *ՠK7]O To;2eN޴(BkpCViJ#ۥ{Tghix?C>D,h%ꀦ̵RghtbܓuMS`onnrgdpl3~gz a}P]U#îwW3N.^=5iCo98< Tr⪳I -LkT'rZ5[nwTnWz\JW!:W#у9Ԗ:ef8 j5' )5`N[?G ޼kxjG.+'t.2qA`y>:8>Kp})v; 4nSMVsGf݌$'tǧBsbWQF4FK+ 6 m: nMmNG@>tI)5┿e& f# S^[3ȃ<-AFć˿-f8GkfϮ.@z6d0qc"FErEZоEK֨[5¼ӊv"+I}sAriC.ѣ{ni k  Brqi1'Sl~_λGR!z z z>Gc ,j q~GXBǢU]x_ g(? 3C?zEiߴi\(nؐ]cU3|gEAhS;o%ǩD 99ڧlbzxm4F'x@<.ct$`"_x`׫eFʜMd^^)Ƣ%1vp`u޲Ń7.sg,Vs!ᯑ -xԄ03-g*+S_A4LG%W><[Ӗ;?T9c9Kẕ5 a L5uP)l )>[.Kgm 40TҫZZʫ HQ !m"]*O 0wFBifU!؏_ݱH~\f dPB[>U>x˕#[޼Lmi_1H%GRat+]Ayg_UJA-_]j?}-0l@T8EDriE`葼~{ ˪);sGp IݘIF8d\'%[,,pQۢD(U#;{dNi/Yjqdrѳe"Seӿ+GCcty[2Hj'nwvmKLdE8#UA!߷W61,h*Vu嫎>X"U #w+0 q0(4~(~g=e37D!2ju|)FSfV,$}SCh_՞.r*s@ 6EbdnB9SSzk` lglc1 { vqH`0Rw)E$!{a5A`KjjE66e9}CF͗ eCmI2Oa,4 tNBnvqiE$/݂h62:3Ge;qԀ+;ජހ/Eb#:D VDq%5fmQFʐ/.1q|Og$PW|, bPMQ,E`jƑ0!QY꜏# 68Y=z4)JXjQaAuɟ%dV*ykh֩w|vr/S- xg:lﺆd4(%氢Bft-l洺ޞT\"Y *a=*Fi6Q׶.RϷʼn 4iʦ U_eV{s.S <|'~Q"00C Wc8#+SLlAqR&{rHIahO:/qk7!WbCIdi/A#ՙBO0R* QXQKj*$D۷#{?XϝڈQ֕[-@K R^KY;%Qo=Ͷ JTXPag9L;OfGW޾]>8C,_!>Aï1f` *1MT*tL+ߝ]ƬTnƷCWm^NoSw IP fv#tA15JmLJZ]^݃'ۿ3 %qXt%AtذD %]bI=QL8gDWR[jwє ƽEN*y@}zP*hKh@[T u!E.1"D1U2?e!|0Dr*BOW=Rؘ!ݯ])X 69oimld]wQL7s UVK`7M.HO&c$>=Z=T9$^MQjzx/b_sbVH4]V gACbVǜCCr$l5Iղv1C6ppTl-Rk3ڌ,WhN1ssgKF9;AΫ~D]<J5;Uh۲ފAʫtWsL'h\8d j_؊f5~O5^PsW$ kk렗^uN-jɜjh"gT ЉV'E25CEO(RAb򬠉r 9 Ev U{]C"T`/e}yb| *.PhznIv]LW/U*/SO8 Ώ"b]s$ZB,pxxC^B })+Qd\taKpn_aj.Va0ᝩ0P4`(xWTR?;;l u%ɟsĥ@b+Q/2@2>c@MOulB =Ϻ&4h2emE<#t]pF =3Ȏ6T$sf)[h̝WD혡`wjJ>M@ eUaUq{CM^%) UѓEPȫE,d.#Nt:p*zQaK7_{Ջ'8 PA%QpQ&@?32G-S4,9xIqga5[#B<rߧ^,=^~,ӌ wQlr\L~3)lخP ƒoGNoEM&^hkLT)mxi:UHCJޒB}/KѕϿF&2-+Gw܏/=Yo$S멄ͦʡ5kic]ɧCa}-‚\܌B_iv2YA4EhAx_*g(tOe*?'Ye#xH;:D*,aA>&n @$%& Ǯ^ b%ne1ÏZI/u?Rp Q0W'uuXTΑݰ Y/9ց}̏l`!/I x:wa2k+4PAhaM#b̯kFiw7{ t$oK0B Uw.£h4ya P |TDaO%WpsŽpwٴCmGi`3;>17qz CŇP< ՊA4mȞck,r,P)@J&m҅)P)^‡^Dp|e;}$x:eAofʸjpCOEz)9f k77їOq!;Cw?4+ CN;jڕtxcBs8m_䪍c4E{L.FW>?j#8毜qZfEz[5D@֚ukG*հbH`,Qg\%9 :֮_Z *K< .m|"6Z7'"r?Ơ1qvL@٠ K *߄*Hs ~4Ib8im|VrZ}΋s%&̠ d=Kn,&'6Hkr|(5RIMAe`aXo\D .^ThCr 1Yvń8pShCIP%7n(J C7?<T\ "o L\9]"&шt&6HTei^Mi"Sn#8LۉX/ d0#aPrDa4h2n-shևY4uzƵ&5TH8wmU O<HIIQ=2["̽EdR%GJ(t N+%EғU%ƥt7h@*R:aWA~;. & ž4Gst|&iKl`&x^X^V p@U=[ S^e~ Fmo~|9 ,q-mݏxG–ܵG8d#=\{ŋ9gy'x=x8,.P[~6< fG(,S<5/F qa%2]'.8ʰY '7LHjD=0ֲM^4y'\f\n4Doʤi_-n_;5ۉ15HjgMf nJ7%,b0Z 3n5scG}#'jGg Q NjɧֿA5QjU4z?q<>+\3``eG%sx{bPd}w˚$hZ>5&X2/-Ǭ<~{ U"}NӀiyfk8_ҖDՉb-8XJ3 ajhSIwd(}0hT`?cw}F^w(CT>J~S6 +-bH>PqbdT8 z[F d,(r$ ͣ8}&_. CT&+=ٸ'@dY8p3FϨv4P(̽X)6ъHOmO{t%L%!veWk9M~Cm?c+l7nAӊ!,4s`%)bm^/8@!6&#wpp> ڊTς>GԹ\.E(Օʹ_ԕM5Vh!vTڀ{DLJ2k|R'^lPy4&366<b@A}xҒ%w}5zԀOdh}B_K|jrë08`Xoto٬}l]Gq-Ȫc/-ioMjU_8&⚝EG(\Eg*Z 1m&9|/a/ng*OaUދotJdb?Ykv.v3y]b8;9!R.z(+rqR&Ei"v㘈뚄i}"&ffGciaA*vR 4 97}_edbL EV4 D /B;+=W$B-(  Ób<͈?T`BaZ][l6MjSUrzW3ڲ^`?hRsҫTTdvH+% ޾4d~VTR0?!4Tfn+ 6$_I KBؙ 9ÜsVCaۏO+ˠf˘¶x*K~_e`ؓ\3B E=ͲI)߃_Mm{JCP ҁy9W~UZlr;yPp 3UM(lù=ꉽ6R _ddEдq,K2\iVY[vţC' 4RZ* YG\ɯ4BgK[P>9~qUeЩRJ}fv<R9}y$э~dog_xhټFۼ2NOj!S%E/"-3h?CrC1&f(0XBB I =@_6vh2ҭ p;,C\&)YM("5z#5֭c4KR1Bf5&µ>AAsHQ&jHb Ol"Ʃ<1]'Sqߏ۶n*u1F7gOv0k+r u&O"3!ZnN:> "8ј:bHxMQS$ -@f"Crgn32Q"7 iecRw}F7T h[;ڌ
@u͐aqДY]MS9_VsԪ ͺ?7؅FHک7"1{n-._ٲ<89&U_mͮ BIa,t~8?!9瓍W[l˘~irw4P6݋PzA#>OMKQX)J$Ijڸ==a  yʹZ_WR h `k\cj_od]^Ѩ*"s wHEbٓc"n0DEP{PwL8=b,3Y{טdU\KIXgC$͔OڱP4"lvTHR8g ;cwm3mh,t|l}yZ‡P]2/jvn] S,L5Z|/ uٯ] yxPEBiMfWh$,:mRar-P0]kDzƉ#0Cg܁A8m_,Za({sYŬY,pM-Ȃv5Xsʽ޴#ೂL1\yzZzqk^U3~E[Pg\L[_6+p5 ؕo"sZs'F4>Փ%S $35 'Cc[d&w#4_Mb anu!9 Oգ ebr`&ku},/UKKA􃳞Q]Ov68RmclJЙΐ tRv*KLU+[?0xG#UaFr!o`DbzĒb7  u3.n7Q,rT# `(\TmG=vE@;?U˂)~suœie:D䒙^\&^u1M?}Ӵ6j}>;[mȠuxWMFW`s#qQ>Hf2OZclfzM%*Bv/3GÉDZOJ+drα.XLAһC2Q6="K^R'RTe9{HEhQ 83*u}םG_hz֖!IPO$zW5L)o!J OХ <;К_Bb  p&gV pKBމ{No$-Cc6fqh~We1FvD=GqWe&R|nɽI+ /?'Z3ąB5d4KJuo*QG1 O#2~'qaWl5O~S9}_-|Vu "}KWRDNoF@d!IP]͠7>:WRQBL3\z0}{/ݟ4p <āj!=YzO7F^h%&Sfxvԝ,sJoF&Mş故8Zi1JCѮ1'@{{بue®Pn 2Yt1eGDLIC s!WPI6kM)5&Q꧙*sVP:7:m`p'v4 Hk֫YYNh&d\^6,{<6 GTf/ X`́""91i\&9XZ7,d\UuL=@'7tmvH⳶%(C9 ?V+*nj9{ [q҉Om6ҥchځe⧙W,rcѻCm&kml)72Y1}Y}c= "`q:JJ6(6ik)Mk׷ŮTzU``gdE0>'F8gLQAPdF-Mkպ,9}ώܢP b77gʘLGѾl{{F +Iʂcnf1̲w0@l  ȴBX,_,]ԓN'0B2Bm`%5͓;\یRha:r@!{6y{臰<3YKzeNvt,<\νO5s BqL1:v׿EyѤb]94(f.0N*5X)v}ɜƟ%@}2j|}V*@Q#brMi'=g ;J˩(ÁU*so-6\w6ɻ+\`2Xy&#fWZ6 |-dw }+F:_!݋$ѣD&[Wj=x"sejh'\ʕV &s&d"GDT)/:Up4rRE· B=ȴ4V̰Ez/_;8CR,B69 |/YOzx b?]OFݽODt|S"_ԟ@t?[8ѢPTBDIeGʦ8w%9]O۵ܪ-<^鈖O9|H(DsDݕp5<:|S#?Qx(QjU,n"?R򾂎W:F_N.H(M]<fsqa31Vfw?Z5:60@!![.?uNC{Fry떴?_b5$CfK[8P;D+B@D6@.꒡.Vl>k;l͉yY>lA^)DjJA!en} Y0;]؝y+Am֪G=.IgѪ;ZPc9T\zH:qtk <'&hLzY@GJWOc2QkKQ$ je9572J":CPLID*ȤQ+/(%t8sX;{h&NT۞Qˌ 1>km긻ON Ѿ2abyk@B4L17S[XH=ZC,HzcU4 <\o7shf1Э`hq@%]BC 'E~o@˞+KKXƼ.fZ$oKz I*rJz}:m^F("Ǔq.ԝW!FA/ZhL#&K&=11$cD'~=F͓ƏeJ N&\FX58} wjX}"[5i|GA'X=hU\I-HbF##*1(_VՋd|`N՘= 4WBTnpc) ;P"& vX@Tz5qr#2܀n#5x< ҄]eZ!;b~&}ښ_ '} Tc2 z{R °UCST$xJaǚU:dLbߚAf7LIDחaƔcxu&<;`٦$ Gp8Y1t*+'2.ffᜉ8oN"X.C#{~E]/5S6I@XܡOsL{BV?8՞nswM@6(F;@S{Dxiô(E8iI 1RF|OGhrc6E2 S 9So3t>!UV+H]7ro;_H pq2&oi|u4PD.'XsM-N=dWOn^̿"*\vsPKShHJh`#dWRbrG$G7ca&{s, ^Ax cj+Gkzh\}q>ia[ fq~E9l$B`݂?=~LŝBX2 0-`@)| ;LG|5dMg#qy_uS=rM&¡|sm6s .D`/mˎo?DD~>Az( J%Nk=xWeƚ !F~?C&\Bp m5F|Ym /c I, hN=Uw.3AB/ucvc GHx$c1+(Sr/$ja$p K1B7{HXMaLbUlA/j-I}Mm7טŴ#,%G9N6j(`cEҮ8;dqb@CLdzeTj'ݖ Eu~0+ ;$.XMcԆ>(k Fl7_=o0 )}3?3.q4ksX9~*,\8|A98;#K'X唪*3uQ$S=D F&G,^]+ N^:/ȩhsE7:i҄v#&Q zSgS'?|Qdد+_%Т9!&Nw@Kөaxc125jrbyAl`y4vw2!HɁupyIoM]024G*N% F4\~na[:WS# P"@K'I[E#t~z-xX~lsYaMz]TOFtz0Kkȯr+ܣ£xv%2TJx \8YMє t)`unJٓ1\C/,ceMG5f{QRTʱP-pӬn@ሑμL~3 VW~ogЌH@is5Chӟ͈<r Be+KdukTw õ|ƣ  [*)Nk#d8׹RFPVUah ͝ "BğQ a:;?G"(3D1DK$NYWP"A_tb://7&åDK l6Ax?_۶1V}R#u=,L(||9pvcU;L`bjc (%X ;0 +=Y@Rb(FTkm*~C: 3.L\EFZM014Jqx"ߞeY@ PťW1ȳKAhχDf{D9.%eڈlJn/Fq+:fg\(9xYL| z2qF 8msՅsqk`6Bdҏ`I>@TBe?&=~^c ߭tu3xU7 ӠedJfQ4> *{Ul\.D;<}q/v6q֭o;N8lWO*wmd1(|WHe}-X }6v' 3}Q$} uLflmuπַF6(?2<-lxRb Gy-YOKIzGOP0c!;}pR#ַ`ř(_*h>'TT/VU4Z澝'6TR-[!/8"!سFpg Jw{1܃׉bҜ>\!3meEY#N6$z*fR}37nEGOϊDUԑ˲h/+ =X=HOn@& ̺R73ǼAtP[QT0Ms:dOD#zW,BbB!AcA೯6$Ǻu,H 4)Nx!ʐYr8'v%a~uMѮV=[|/)"Q29DlLmH=B(t.7>{}#|8[|QDa .H.}_;\8OCDMuPo A8v~7J_w_̒1H'_ܩ= [p` KӅF%ӟ .i9Dub82a~M*7>HS.҅,-Y/X۠IB;E6HvFmghn%HnMc8Yڟ:bl!vaYP`Oq: '6E)i$\fEfF5&M7=V$ua|2͝799S<'?c|Ό<)@ Vљm*w_r?60^OYD#p!]zu[y^8ŕ|Q)|Cu &d(GKO >15/M+ng4g2]btPDnݬO*`.]HEK?)񒩢>)Q>TZ9FYyin8y6]uڸ_u)>T2mqi F3s?9OeRdB~+҆B.@m|yT@!o!4%JMgvx ZsVxlZ K܃e%ig"NֿmcjHoQCk#^-H=nI8HYѦF1M \(NˍU %r7SꙔBjl=@r}k0707 +m+(C3n- t4U_ jЏ᧕);֩D!@yBp (hTm1#ճtڦRXL:],1|+Kn-o.=9urc:Czڶ0ݷc/8 T'8*Yg X}1gA'o䚨o;t|7@w5\Hi*#.DHlʄ&B;Y.n!cDv]`"%w 9%d*Y2_JqpmA9Yrzq&5F(KN}ӱ<4h% p((}R $zBꙄuO"R5z o*0w,5x]Q5Zj'(1ӂ͇5N|\3@%)a iLRRoOZ jrU1N/f̼wf'w|}SeA==!BDe~P%̣&](Ҁ 4([)YP遛6Ig:fD0JRXq.2pSݭvmŸtx2Q̠>~`ŷu\[I![|M Q'ԅ2xXӕ>S(Lpw oN32:D5~ҭa\P~ fmQyz*|KJ- 2A2Ƀɫ]̜4gL,߯ghyӗ@V$:!KSi9 KVKIʸВ܈ 3xmYQ--Q{ʒ)`x?\R\jÍN`K"]#G]U~MC'p7Ja 'Ob6wH(T1C.IADtH ʷR'@t|_$(u.y⽾v@B&T24^P>=a8f Կ/:''Ι)ؕ^SBmUۃoiI| 7UbV1ۯlQ,^̍C1ȚeAFw ȿZ v-1zU `lf?Tø)۶Pe HJÀg!=fZ Ŀ#l +hoV_ h CuZϜM,Oٜ8I,UUፅC4L},BBJ։Z# ;#=e%&7BʘfgSJᵀљ,ftF8,uD@^h0u(EӖ;B:$zb]hl־0& U wpB4_nkzkepx@;bFQG"}9d/mlĮK/ll1#Imp҃&m nmA$7{9$X=V+dULMԙ"A>0RBz 1VHfg[Ϯ"u K`6H+e'mIqޘ)2Z)q p'NTu*gH!q+1. wjʴ٭Tlw;fpibqtFPy(8cVb37$| G>,pDd%wJ-͒0ܨk$6G7Ehmګ>ܫxĘӨojKSS=KݠI~4˨ớ謃pۈUwwWQ&5)Q}൑BidLO8  ٶ"d&V0 TDDVYn CtgQU*Ulzcf)Z4l`͞\.DbDdTlI8[(z8hR`ͺ޵]ykI5ӇBL$t*ф/Gͅ: riO;ZOA1f6PWK]o|d9 Ivv{5;;`mPtip9 ?ÿE#]0AaK >A=LxUtQ=)=-`nUANgHIdc(Ƽ@U@t*$c᪞|p&d3(g8k8|m%MӈT/>RzcM`ȷ>cóh8UTenݸd.SXdܑ@߆?R|5le-F|%yM3d Wl8~gc 4:(bU_ )'ABzq 0|RD~_&!' !q6B}Ɣd^k9.z֙}nZL9q$%i4k2#"6}In/ J4מ6siZSȻ1a>Rn)|,C7Ds?. 0@; KŷK슻ե.9HL+ρ'bSƸx\$PfgIikzT[(1{ccwFw 9xK?ZU\ ==-je$H7we3^0[e[ێ"Iܲ]S N抧7Nuz鯦`{tClބN/2$#r^ *eaCllE>xU\C{Lϛl5F ;!7'fq>%7C)=Fv$-k{i,c+y#gw-V x:>QP벏"S!sU]B(+)dbY t}Lhr@ Ъ"PVzFJma'#֘BZvE}ᑈBcP#À=мVFuFS'ۥ&j`l4t+SٗqyAƒN DyM(Bo~HUUd 9R>S]L6opa- !\$p3gњ{\?pțVZg3*;K[F*gפŴLe{͖;x!׶{7ӿL8\%B(f\BE~a&i;i!}ure1LYtYKW= %O2^ſ]al*t6l >e$·+2bT^QP{?&OHnj3Y{SPgΝ}t~oMe3|hbDpL)TLp31$--Uv5Å1e9/fiǮ\%اTZ(TQ%0?"|*\&[lV=ph0l<.VecM{)؏ '\ nR"6z6J" Lꐗc)^։MKqX ώ||d0Q؅;~PL'_OI.muɎyvQEfz]X(_ft8IްzO螵_؞v1`eyS2ppr(t@EDqÂΜcEup dYO94?P1 Y'ŋ % c)t$QuHӬqBwi͵ BSVBԑ!\\_c@ jH .-Mx-Rȍ75u}paz7GrqiI}#~Dv}rmz|8?툄%e}UIGQt$\)cSn)#G N!Z1'\=Ҏt;meut7 J7{2 vA2Oٙwzפs^QSg9W9Mb4˩u#-ta)讀˵^F ԍ uRu\)7iG[SwG˙ulVKa;08Xph7SڅAz|LlH۴OL#`/m5IT޽MQ ]MmKAS>tBx鶕}K<[hc$WP1S6W҅@gפo$ۣpZ%VQ r4Kqn>:2P@/E17gσrKft 85ܤhwhM;B}M66na+V~XB C;t?*x)ۍ~q(Wo zW'pDaZ8"Y0(Ѭy$D"}Dz.G͗$Q3@|FA,|6Q@_yB hB8| _ z^lB)pr'aBs<7*{]+p Llts|o9ɆUP(R<Aea w~pMEZ$7̊ Rp4lMSv;ں*s'KYd,$ /1(sl>2m$3аhGfB/fRj6 hlXz6NF/w= 9&.m#0fI&\#@zd#/GC_uP 'ܥoȨlz)Q5Ƣmxxx5 Ɛ8jA0RXɁWѪ|a=F{ك+xZjwa J&iT9 U56#<He1;, %߸aR++fhv$gO{)R |2RR.|&AuTkzOld;Bhۏ;>qFobQѺ">r k֙'diKr%0k:,boBޝM )g,9QoHqWaꚑ֨yWg֌Γΰ5qfeY5^vPmOr p\si|gHf|g K#. rp8FʯnMNe2 ]!,aURόMu, (퉮?xF0-j(ք y&|&t ďlp}§\۟ }SJrvθ=ᬩ~"9-֘8ByzG*o* X?D} h9\bR}@ߪ7Izw*8=,4WK,2_g9&q? +#p;rB1mqacjB7idnqq&;|djFLSU8y0bM0}iҭ:Ƅ&&@OPWq(qrL"N`BZl5WR&¤+Ӈ<6E'7>t>OC9+XQ|k^B-Şq/\("# x|u!ȕU wxq+"7b3xF6޶,&Ik{o4SJE7ꮩL/\ Ȑ7ŦvdHq}:#KAOH(Q@wl%5P{gLҭ{Ѝ!E R$zb?]h:\BFd7Qwb 1Rsl+1CoD 0'_,]?6Y5~)U*@N@X3Snj #h ]< bԲ2D|rP+b `KںA:$ٿ3fSNN#3OM;~M֧QJK47tQȊ\*d|;;a} b]i+45v,?w{Hwv>!ʂke&Hzn~cP..>{h TwN*O_ԟ^Q?0"ⱊǻP|:hZ_m\@撡& sݗ%c?ǻ)x"]@ȀQkҤ¿݊2Tqj&d/ ]ŨquP̡ F]~eή(R=d&P&42zH?:J۸Kݫ)'vVd,^P<6E,lTMDW(Rw4e"܊^U~ڗP`E˨z,n*(a1Y_љ(TP—5˫ ΗtܑlQ%}/R5a 8S*~t9[ iZ/e帗] dLUu|e׮eLW8o̯hF^gR솠h6=8 wS6bfb\Ց1jm"D ;Y(7LY^ibyqBȘFJ DO!sG(=}Y>W]i /̢K'j-B6 *Ho[ о5@r*=)i7]4$U7ҍS&Ẃ@!) Zo_qUx'2;f׮Vm2T-Iy/o9J87xEj)gbPM%/qcYPK۶;6|X g_f*mdV  KsTX:-ANa,xS}>W<@?XC*mxhs,_ !jm1[:]X,MI^f(oXݣ0 vku.TD:=Daf:a%8\fĭ)Z_-cnA@3C3lыx iAi\$2*e+k/JR7l:>`񩔯fYW7zT:bְgնWۥW\ӯ[ txZY,!%3Y=e( CM\ƃqtk.2l}]LGb?yFL-p/0w~&7I:Hu:xmǓ'߶UY]SNTs{\馏d:Y_sd;kȴ8w(@W0:R7R 5CLc0&U_Nd' -hǫ)-#U*+4m69u6*Ȫ5]q[$/h!5g̳ϐhčmެ]۞M\j rbXI1ƺ&gMˤWߞ2c:E/IbI)&M J=X~%?=C:c%?̦js5_uXx\.N^J8thJu31Kg!OP+ E% +&tUɢp  RB-" ۨ5R·ܭ=!>\m U=0VOr4$뇟3ٽ` [ccͱ,MkP.9CB0C<)q{ퟅNd1XݲHTڹwkT276īg?.>{#XVX#Td^IzNw}h33Sİ#k@57"KP(Te6Gm>7y)oU%kTܰX؁}g7r< `f|oCe4$-G^3|@JW#%uC -*A~}'#Ϟf[`j =OFtmrRmVtnH b0CL N/a1#v߅ uY]an9L 8DӨ._/h~eok䖿 ~νjg2D2}h/!*E6]@ڋNVu}Q ,S^ iʤW.WDsʹӿT}6k8̗y 7*2GVXa/k"?:(֕N5Zfp(1Gb 8c04 pT͖U I{AE+7'ͱDὧ>K13x[sEojf.@yhm $&}fB= wlۤP,Ξ.5F6CI̔)5!M`OmgPh֢ZpM"nmpp1xJQ|rhhFt,AȘ.絇=[fB]&I_cxa8>4\)IR=ßa@L]=WG,-Cv:&ɩH68×VgHLR ػF25 ZMKַqt^$e%]:>)0 *z+]RCYw˃xY٪tإ JMe-c ыڽ&O:4|5dNĹzyn2q: `Bzwm}:D U S 鰿L(|-@Edz9翆#Ŝ}|y,C aQZBgƒm^4[}:Z'?dW9>w3'o  | +dI*i|JX3yt{ Jɱ/.|9IpJg:9ڌXua\αɪ~I$ɅfaE(T#jMnoґ[· ^hh?X:=ɅpCuѧ2 g/ŚSzDi!Իa}n|(<ꯖ[s|ף h;p '@,֋dFf}WсrJnBmҩwIEaJx|f4v .i<!8f:g_Wwt(~bQJ)=!2EHMAa|}zc 98E˅eTrj1SRVu>1(ZH-` )5Q+faĚ|'[^'^=-ЦP+~UvB a4$bP!*⨘@BKrV+0: X1L-;2| ճnw7]C.,|eٽQ#j8tSȹffjj4Wl'Dk2Eʡ F FO/P÷z;ò(u_8FidGbn?hΤxJ Q; dҀӍ;"FRHrNaT\oE}J J"kl7\Vi tq6 VD.}d4 dap O!H癅֠Gwbj/^'&&.U!p*Am'젖*c9d7M{&ޮTDxjs?㰰h;riKdweSiwׄ&8Y.$Wg7=6" 6# e]2KVEH3Ҳvxʲ/vJ ńkfwi X=ġs=S<eo~Y[z9:8#ܟ&;`?83Q'h3$&?Ne{Aǃ,y&MWd ?_l4KBBp06:ՐLľhtCo4WC DrEIpρ$;wŖC2f }La$>݊ LW!jfp`p?A]-<6C;f*ZF.m%N'"2ybbKsF xNS$x2?$Pd# \}WY'h9d tNtv>RjN\}ӣ*kqI! w@]-2JugmNS})J54~]sgZ 4\gG\n̄L?ȷEfichÈS`1?`E$WDA{jf; CmuಅMPAsČ+wump\(֡b:p81GT]" MHP ]Kq4T)nef~3/(%?ʽڈdHĤ§)|1%| h_/H1%qeNY<0M,1K,Um],%[( ZaF*>̖:QPl_ A-RNM3WVp_x0l&4 bm%64y X|a,5;Arw&D=3#Zq DZeAg?2$ `Vm7di±.q0)y̰lWƍ.GY#̇U o&]."8)fbG~k El/Z!l>- WU븈٧C\MTFP 'cY{">X-c:5'WCG4d/jF|Lj7,1Tpݭf 4K|v*A25QvC=iӘk]׎YQ !oSQX ّocas P5xx&y?KQ< xGA,o6{vGdE1D*BVt<DU"Yi|A@K{*Zߩ7sCmiWyP؎j{fxnKԨEh?ƌIR\5;$#)d=B Sr0`!&w4Xe< Pāl 8*O dP\tqpz*t{6 w a.1_'ʆILZ/BM%`%&dXN0o8t 7;é/N#IKbkeBy[bMB25T襫ҕz2l=?fdtjU9">W5\JL=YlЌ+g۰h]p\7D :׼QGuCFtyג[zn oU骀9y6G bq?B-R#7ռl#9⾚R~KDW}ʫ teWpʋ/ė5~)#n[520D=O&4oHkcB ,F5kΖ4;``l_`8y$?Ncx̆Yoj@o3 lY&̀03}5ֽ%BvװwMK9b@ir2aj<"|M.3}vDS-\ ZH%9kDAx6(Zsa@JGfOKb}HPNqNÞF|!iޟ3^NKF޺>ÏfdN-*7"1}YG-V֍?%QO ksR_ۧpN'n@][i4e;!_b$ c -yfTX~:$,CI]o9Oli${2B3FT49/Lyf) "'.ف̙~)&T^NVx%;0ЀӉU4<{;'kj?վP@8zp=KxXuR٦hQ{w+͛sf9nwul!%D-~S)|kiTCtx){:4li%C)|2oԼغb& aMU}|0Y}Ӻ,. i@H(izïp؄x8 !||SQt.V "zޞ*}P q1@ُ%M'xVL cGyLBE)Sub$-Y!dC pQ(.ÀIK VRsvipQ =9Ƙu}CBA)0=IuvBJNݗ8GЋL"PhLkuVx_i11V;Fl>jlCt_~F( 5P>JP=Wn~y2=iu>2*Jq„p4;voM)=f+|Wl j|p]gRZ>E̤PQ"\ӵX(2($ZFmFkB/wtPT y}Ҭd7HJt_j7aԡϥpe/V[nPڦ i0:%@βc 0gi yZD{OB£˓Kwf. [noOBg|ƑB4&gcx}.FDmTCt')e OTLŶ w kA}z p&A 6*bܖq:=x*aԙf”߾`Ec!X;6NrSS2g&=[{u(hp⶯eS.yٵp_}0瞋 ٣> ,6y>Ԉ%yIun %BK!f44{DD~ozKAu#$ XxsQRc90.$Se ?Rs=Nb^!C&DꌰL=ÜCbԴ#2g A<@=Ľ*iHuS1"ܒF"tVfw4Z}w,P#P[eЭF:RY֓m0٠DˆHyؽ8+Αߙٰ1F˸|L+t֡"VˮF/~.>®(V̱q'tQXiNyGns@ݸghQRvS|ȘPH6+K99p%+M{aS Ml!JYtf [ j4j`aiÿ '_v^PBcU˭1ݯp[NW+:1A'B0Nz++rmF=)V;tjJBX<[5>s+m"Px);i˄ z\V9se"st^5@P,1f$fϱGEB:n=eob9Wn%e9[Ug4RZp_h{%ϾE6`PN;ݻ5׋=V@hq HnU*WkUT$~`s•A7TMdǞJ,Şy>;|t@΋㼉)>iْNvFvh\i =z[ZW]vYt8jC7Q>ச ]EoRC /{W{JӮv֨w-!cu$*Dq1AUۚB ,}~p-@FE7 $s7:Q ΫֿF̮Ec3?_cVpHVc#U=90ԖƱ^ 5RD0 gb,HTdõ;x8!%8~]5Y T{ɕ3| -ǧ^8}b'Z9 /XW)IᬋrRs K3S&^jlF<|L I8QxX2b:SGQ#o_ Iwki+x,&%2]&gaس۳j ,WK]8z_ӸSdzSfqv"ɾ)˜y|'Nt>n]R 7[4pIڮ27k~;hUP=AfW1h]V7:.Km\yA:Q_߽(iCQ]_fmXtHB+E ayfY;g7@=-/yүD nT;FZ5F.1Yf˷+jٶ!TT*iYU)d7ЊbJ헡^h@.9<}$l ]d΍Oh@ԍ\jE FIbVOE,(hylSOp_i_s9m QJͨgNimm|G/:DPXL=0${b{wF_${."B(jZ:D/TD&}B=챌iᨴ40p+ifm95S_ۡ? `FHԩST}MV|CU-#L[7O^y,ã1s.x$}%#TЙjU6i+fnGo)؅unku/@8BPf )АRtk;tI]&1'5P Hmߔz",bZяO>n t@dHC%qkgcA,UDR2?NSÅ !? A-0ӃN]*0.ᱶXd;/eջ`w#9C.9 hiL#m*Av_9#nxh0* Rm ล ؒD~7m:ne5OQT9u?" x݈Ǣ'?fjۨ%f;(e[qf~ װH˵!<$HiFF.ouoʎoSh-f"Y'AqP`fة𵐨bhWξV=G--c GGgAXxvR& 7PC񎾆R;[CY<L`r' \ S`pHW:cAp!f׋.TTV۳c9sGyކO ĶcLŖ6r飂iH![??DyWˎBi(ꏷ a6y^d]/V&ܡ/29訌X