icinga2-common-2.12.1-lp152.3.3.3 4>$  Ap_K/=„M ;Dn-0,59B%;(9_ `"{rN幚nyrJ9TF쟚}oȈ~So|%/6G6hD؏Eʜ{LץHw羊#1RyPe:s5]"  d& yrJ3ג>\h|^^\O ycJ~0|w/{ 4b%=d-Wgj\ZUla*Za晁m2 3c0060172085660345c639a5a39227c7bdae7af065a5c3c853fba372c0f9d765bd76144229bffbd3390aa24b8ea9fa2869bc207f{$_K/=„)vœ2]jVs SK<[RzZ@pmlϕBUTa\H:wI_Z)ƭ$4Y .uO/~R]znW\y`ހT-QuYH8 >ך RN=IOYM\ >ڙz}Jݦϰ,VPa!'GN.W ^yҳ74d3+ Ik>IZHu$bȕU!sۻNտ}f >pDl?ld $ B  4:AN.l. . $. . J. x.0..$.0 d ' (L7S8O9O:O=b>bCbFbGb.Hc.Id`.XdYd\d.]e.^h bjcjdk:ek?fkBlkDukX.vlzl|lllllllCicinga2-common2.12.1lp152.3.3.3Common Icinga 2 configurationThis subpackage provides common directories, and the UID and GUID definitions among Icinga 2 related packages._Jlamb54 ߃openSUSE Leap 15.2openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxx86_64getent group icinga >/dev/null || /usr/sbin/groupadd -r icinga getent group icingacmd >/dev/null || /usr/sbin/groupadd -r icingacmd getent passwd icinga >/dev/null || /usr/sbin/useradd -c "icinga" -s /sbin/nologin -r -d /var/spool/icinga2 -G icingacmd -g icinga icinga if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /run/icinga2/cmd fi!&TzBx"(6{ R v KxmV k | WV\[XFA큤AA큤AA큤A큤A聤A큤A큤__J_____________J____________J__________________J_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-2.12.1-lp152.3.3.3.src.rpmgroup(icinga)group(icingacmd)icinga2-commonicinga2-common(x86-64)user(icinga)!     /bin/sh/bin/sh/bin/shcoreutilscoreutilsmonitoring-plugins-commonpermissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadow3.0.4-14.6.0-14.0-15.2-14.14.1 /usr/bin/chkstat -n --warn --system -e /run/icinga2/cmd 1>&2__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/sh/bin/shlamb54 1603619583  !"#$%&'()*+,-.2.12.1-lp152.3.3.32.12.1-lp152.3.3.3 icinga2icinga2-commonAUTHORSCHANGELOG.mdNEWSREADME.mdsyntaxnanoicinga2.nanorcvimftdetecticinga2.vimsyntaxicinga2.vimincludecommand-icinga.confcommand-nscp-local.confcommand-plugins-manubulon.confcommand-plugins-windows.confcommand-plugins.confhangmanitlmanubulonnscppluginsplugins-contribplugins-contrib.dbig-data.confdatabases.confhardware.conficingacli.confipmi.conflogmanagement.confmetrics.confnetwork-components.confnetwork-services.confoperating-system.confraid-controller.confsmart-attributes.confstorage.confvirtualization.confvmware.confweb.confwindows-pluginsicinga2-commonCOPYING/etc/bash_completion.d//usr/share/doc/packages//usr/share/doc/packages/icinga2-common//usr/share/doc/packages/icinga2-common/syntax//usr/share/doc/packages/icinga2-common/syntax/nano//usr/share/doc/packages/icinga2-common/syntax/vim//usr/share/doc/packages/icinga2-common/syntax/vim/ftdetect//usr/share/doc/packages/icinga2-common/syntax/vim/syntax//usr/share/icinga2//usr/share/icinga2/include//usr/share/icinga2/include/plugins-contrib.d//usr/share/licenses//usr/share/licenses/icinga2-common/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:14643/openSUSE_Leap_15.2_Update/7bfee0f0c77c3059d144b645a81fb051-icinga2.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxASCII textdirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII text-'gpnrj']Wu8PS pbk\Ox2ps*TroJǯM{&&!mϚH*3G )rq1J 5=yԞ$x͹j@< ah3PoEr Z/0n ȯ{y뜹&_ᷜ"MV,I6B]!8(?6~N dE㹃$HVžDrƛM.֎l;RD6]©L,Yuʢ{!x wy\PPtv-3u|beysJN"J&.ʴeu~T@8Kđ:^0Iak_e窾3$emvuC^5qZ7Oۮ]A^[LV]}rM{[YV!p yu %>ίt( /UWOXFa2P+i&Y qig>HAug1XxѮd׸B(bEVA^qC+ቸ'Ck-ɵ<+Fh`HUj^\薟QM:;ЦD4=5$a&cT,F}Csfθq::erkÊWN ˨5z'ùhjvv]ꊘL+cdz[r(@g99f0MO]Hm)QVPwe(߂XJHCJ,3JI$Y d6 |+ kAy)dԡ>eiN%tCAS߷F^R/Nֵj$߃pzx ebnU2NZLWrMPW|~CxD@:Fam9I4Æ14项MפP\ʈ$-J[@dv.8wR"+Xj4"  b i݅ymI"1&q2F)+"nRF&H/d=ĠjPP6}مH}bxw $X)Ս1w2~|j]?]3M=s@KIzZ浕,n#QvD^Y7 EV)Ҏ4J69BŮM=9S &*{\6꿰33N2yz#z @ߨ g^!o&Y-%U4)ℐrw|ƿ5*6&mCŏklQ<ۉLYx^ok+cl 5!wsDb&Qg倽>^qW4;g)i/MM-mLd~/r$YP~#:xs۷yuar,5 r_~jDy;mBL T?PONU% cV릿`"{hH*| #wG愫Yh׺ ϻ)l?BB09[1]FQ><@O/ >2~2="S=7 '?4%F|.x<*}t[C &md [@aVs Zܸepp#B)XjZ|"pvprGlm q{ρ͈:w ogtiag = Zw%R3@1ʨXAY 3+ =$g/i`n7r~\68 _?4=vTzb?tDs)FFC6"ä}Ud"S6gVg;+KvAYŹw"3'0{&p^6>vA#i.GN0!֫k9H1@=]/Z"B}{D[O s7yҎ7hiY `C.>V}?\ 胭qb~k~ɽk+P b kn r!@"?drk!HLK5~o&'ЭNful49V&ޫBԒ_UNj;B]WAS3u2Ͼڐ!h #aG/0< E4|"Fu-GiOlw3+/)چDɠI!aUHa|H "Nl)@&ɹ?-q1Syԫ7fNN=UuQS--8th/2摷*]5|NzuL},ب_A3G8Sʾ cDMgF棹 K=u+0@H8W2ܯCzӤ<5 ÷uDUK8`Za}ܡ a*8Kt|AͻmDcFXGBrx:%|<?*pWrQZdvյ!Y/]pG+˅^bT-$쓑CQ?7v{$i DjC>|sytY7n; $Sg?WlK/h[ᇶ-\Lr`XSD6;aPBi/`{Q%3_̬%#;4 نŸ.V1z"a}{/|5X64ҷwmɷ=2k*SF2n.Wi?TZ5dJ+ӕ1pr(*Fkķ8%t|&]YxTl7T[w[1 R%M? ~$#dOU]f!ņz!,pX;_$!|(ٻY{#9_f'Ȑ(hr*!IJe{ξEb_5TBfc)l^k/{!.i n h" TgnsC7$b;b\<[:C'wA yI*KPJvLUS9L oyʬ%|i*ov:ԯ6,+qȤh{z1RܘݪCJ04_*j` 62=y1a..q3Yp<˽#Ҙ-VB$Ȅ[͵/S!ֺm"B/S9"g&z-n7K]'jáK,6jJoc׺1a " Uj kIl `}?cM*o*@Dǟ߄sHYn3o'寅f|hVIh-a}s X{+*=gVpl0_@kJz 9' XsXJZ!XKE)M^,u6`CĖ3X&-krsQ1ӷbz*(!0Ǝ6 qm{wQGTFsp\3Jut-5~ۆ!AYۧt|*g'Lhd`J P4xn1<".e0it' Oq $yc;xqH!]L[y$C/A7HPT!V *dG2OE/|T}Il.@yuTW*#Re" ҇赟\ku#g ppЁΰOR"8 ',$ P,MwQqzg@bW@C[媽WKou ̃POYfg nSى*kޓz//E֔r/ W3+\u}JܻePʡ'x~L\"[[*4VS0t~ˌ֦{Ъp~i {]H6pa{m|W2ϡܼ˨۠/v驷JAdzڙ;N@BIzBmF/CO~ wEZ (kE/!nޘ^{1O%fU4 =2OO/_f<7'ALgK4nH&Z֧'C% 1m EmYl't3XȬX̸9x N9Hunޅ2{ oYז} .h*4nCBj'>l4Q1op$MØ^ݱ'_k`ur!FZ(-2kPmCèaW ZIu&STK1F!^H7jlF}⸌ q")ML x17h<~Sm]t2='aRRA[+%/D BT:DDJ]ԇ$!bF۴f5vKyĞHL )ĠT$ xR|\\B}lCifpO(FM:Ԅ3gv9 Tl [s:get|d,6` >ekߜc7Kr/W,O<;߸B|lY-vMU^ڙ\ESK,̻-~~e" Ivy ]C5ϱj=>Ib%BǣvrI@3i:,hv3f =F;b23txKJG+b0H#ѧT "5ZRvGYL$_ZJmN)ʹ<&/Yr EG^++rR)!UmVw z?-IRϞJ7b A;LFbgOU."񘤪8qt ]x<1U՝D8 9I/v_Ÿ~kp7h}JBQ3|w}+$hSQ<݈[AO+<@'ڂ~S5!C,#A.FG^]k=BܚxsHg*䔫Cޢ$&bv(>/F`(Lۓ0nYv_C60*3c" Q(&SqH7us:59vM(I 2/0xdS7 Ƅʰ1uXA7p0I#wk xѡҰ0#1^}sc1A=Ac爈.t(M yo^rP6%fT3;Iw0*%Z)dxԉ u@AF!sQ21_$Gۺ.%*E0%Ö,GW%&YeDQ=XO7X *.{_*]~Lh?j0e=X4!oW#)2w:-?h_Ij 7 _J. @< ,2Rrƹ"\_$Yy\"VSx"K24T/%?_=1 N__9W.hA=Funf_ly<dz ֧tb5"KZny(:|V \؋ ĵ9 _ȩRwvu<9[F;A['ڨ1`B%#T+ H`7\u_Շ$a\8֎>`{Z%TZ6*4r.AWa _El(<֩rz٬Jb΢kN4aeH0*`'> R*ƓOY?8NPVTVm++)飍Po1҆I\x`]sj:rM ,Ei\TGӨ!6ʋ-dg5ϑhޥJ}45*d9EA4'UQ7 ȹQcXTOQ& H_m\VV=e>zG׉[h-F-(ؾ qGOB<=YjX18!<'NX#A:Fj6q eSۓׁ=gLnݟUπW+֞O2S1u-O3{B%xυ}>jߡ M^bך$ T%yĩ*%:FúLNYExzS7+} nr<+|>F5GW^uS M"D(yD..IR(3sa ^ݽ܋H~`1]xĸ38M_{dYz]7 (L5<}МAVX{"[(ghS%®t (c%5:UN>hkA1t83-Xk}ᵇe8X5jy][zzr 3nHwx6E-`4wx@^%4\4񨂽!T@U$BvSHzda5o bJU@}>ʀJ>Tzkpތ|%nBL6[:='kE#N ]7}HY?X'0W!@l 4j-/d`sYs&m=7&m|e Uq i!A}Q'mBM5kU0 hp3l dnR=wᐐF嵌}:zKGw1^"]J6-[' KG Wʴ(U*Xʭ EP,&A| .udY/˼`$~a ]?nr/7BF`@Lrc(&\ȁ^<$KkK (-NQUo@ߤ$\Ḡ# ehi!>0K}7WoZa,|N`DcjE6Rv#^V'\x'pzk%~З%#XvR_6yīӡ=ocvwknaŒkZ=γ.g)?ڦ.|Qɝ*y CC0@ߖnR>P1K2u i<9S#NɑI^=q|3| @M @jpB7_7%i~rHHKFl#aUl3dQnFf)ҜmeU@B]dߎbS%0xȳ~+cm~N7mqmVZD%=z6l0ƚY\q[Wp  +'Ȳ/o /#XCftĎ5x?e_*fͬEhj_C;l¼̵4YR9{;F X%Ƕ53]|]FU< *̌Qp|8mK,~)iBd#R}}Ҵo@-|-ef҇V KR/"}.fX+^A8\G}}FzI uC 8/J|Bn`FdNyNkǕ\Qͳ}+F#`C?{,*@ E{T>ȋ!,dܔĢQ8[0tb~8Bv=3x\QUj A;͇-mEn) ninX0\: <4&Ft/:KxnG48?}qi`ARo2. ̄CӝwHʖX1ͥMd0J܎6'Q&Kmhx\72L\:+F3CH8mg¼|Έ4+?ls<1xszn* iCeϙḧ́)ě3 8:vVHUҞ|8_=wNLŇ;{"cBX:a$VdJ;w$↜vL8MC.I@:Be`f1r,s\51BGro&S*!CO\xrz!xʼWJ޽7etz *ěpo@k ˬ3ezH#taIeg35쐫8ûIwP_ldq?)43ؖ!+3(/5u912 bE+K ^輌WfNo)^O{˩7h9]z 7o;;zi @^i96TRDAQ rTADdQl\WFQC2A gb%73s oyϳ2 ˳/,w\`nv *yz+c0$;\kF)g~|ūp~xʋH ;jl>g+JuuP1_ Hd;~iEx1[o[#(-wFAK्"#eZIϡNɆ}&{J5买}da6уYFdiRih?jJů|<#m",:3 qΞ3AHG1hUnDX\C)3|} % Ff[\ۋgFsvJ>yð1>{u#crT78`߄qg_IrnۦTPTVt)䭊1ūuO2 Ek$t;"]u4CLHz;5Bʕ΁(]}{L@\rpiA$GҗMy#Mj4TefRwׄMs+`?5S:RM &VQk ~(ݫ Y]i.? GM]2'68ϊp[V2/vi\ :gcVAN9jVG{}\krR w=GԛuL@D*!'ѫfiݫ?I?4}45`n9\b<-M28I¡Y6=Du=[ZےկrT :J4pسԪZ6dj@+>3߀DVq EdbpfNV3B"rQ-XPIm[b {C@=VwΛP}$+$wbv &jŭw&ḏހ1ތC Dʖ)Zw4x6F&G~x67(ql7@{4 pQLFRMT}uW>0Jy1吚f™j.g=^={ J<e}֪E.jN^SJn1g9u;t<)N!x_50jUStI  sGH~G>~UaSA+-rp*Z|L5nTNl+NUi +B{+PB]|}6W4,݆^CLǝJ[5(OAUC:^(.,, M6r%a8G,Ҹ2r3!t sI 7 SI x p#~S('NRUyTkA6QF=‘^Z  y)DH }5e%VY^ab*:"$`'s7 `b ʙxC^0i=DvI;J/+~NC#F,Vi|ޚ29A G,p(evKþo@_$Y=KGRĖHy<\oPŵ.CZȠeo(28!3!X )u:^\T~41c=[]aA#N4uSy $ eo 59Ll>Sy|RxkJR!&-{_!.kHwB$yߣ `L 8%D3O&\5b!(NO a9y9+KqΝG~gcM]rVOl7!Ny$Ȣ{*v<'* PDXqE`IÆvѠTs9(X}9#H5:σRzX9b)RKYSD\9甎nJ^onUFa>(]h dS+?n91.NNW HWeYbٍr=p`@-$"}|Iҥ^{5OQr4[ZNWDƥSRo l sێ5n쵍pPĮ{~4#KEC'K_KM*n18!ςKy R 1y> Nm/ۅLg7p1\k]i] Ұ(3AgL yzz>Q8U\Qg 6b67[*@bSG9[oV8 Q]:BY7 9Ov5g D:ʠDDsHg4BAPgf < Iues]+K{Y< W&!$:93p.,cIU]E?ИCfO8\7e;x 4.UH @_g.M9LYN&CO޵9n59ŚXTd~wMug^Vxa;-jiَ սyB5&1./G5aUqhߓ QFXjВUH9qDLLYt_7U# r^=F[Ddlb󻡮5F`iE!Yify8=‡:GPzNٛW 8B6ph=c<3R"V&iwq@Tn"`?X?S&zQ (G5/cEAj'~Vʺ4,3>綧o;-Ԉ,bd?څa_ %Ƃ~@ua/277̊pӡh6mGkTC[_Q"ً&3n(05ɥ5h̡%I ʟߢ}ݒAѿ. 5!%rhWlѭ.$/<)hO}X&_R C23[ٜ'ꘔ O=ab64.lW"~/Czg&GR4-J򛐓•\cD,<-0<+rKMmo=s(by9d}]Uu/ےZ҃M{o<[XTmŊ3~9N,+۹X}(c̶C$G;^NxfKfɊ?- qdG*-Ef@guMTֆu&{jJǑ\9L&Iҽ_!$u0^;us5/:fHƾʗm[)_d2 Dy7ES "J?S$3wMgcr$Q1S Aw$?tWM<(U6)I\'ݕE㻹X@EJڱ zClݳ2_=V#A! PLrj ˁWV=07S3nJuFqN4$odWC%{@Z.R=3JɨtMG FS9Ѿs])ogլ)NH@__.4[MSyyG9)^'" ~H;ꑭ|'RJa q:r ߤ& U0gf~c,`?DoWH 7rs?`X9ح!KG8qisXc9Ԧ2"UH='R9J;C\Zabq~=A6.%o(v~icqmK&B-XdW%>Mi`f~FD61y!R9 )IBmÈ_m7:!S+Dbh;Sc Ln57,oN6k' 2z(_[WGeĤ7* e#a =l׸IsFc%\Oyщ̉#|mos: ՛yNj|rN.APLb5;<ܤ,+}UlSAu;_+ f:akC$Q*BF%; 0A㖯++t|'#[S ٷѡO=0'0“F:=՘rg ЅS1Q4e`iQgK*.vݢ0G,[Z6 p G"u#_sK OgTo@.NTUQJ &}FQoܱ: c ؝xm;HB}lt|kiF'~E`PaP LcCao7Άb߃%Xj0H4S ㄠjn&|PSM; 1fg@S.iv2| oCvA1-6"NHudƯo:@ 3BS~&l1T #ԾE7".M'7PȄ[5Ͼ8xz+W_}͑9q=̠]75͊U3s+=ʖ"ptZ=T*ִx/9=]z=yf>IhhptA+}xрΝ-}ү.ҋnROYSCٚ*g"l|$u!l0 pzTWJT O#bM_I%- UMY&5~0`--ۚ"V&z- e '2sF-A, ƌ~ӺL zD_ȁRUpTHgPډ|v;BoX[DF>caYX C7j =7d&h\zQdW`(4 6wVçBMV+OjUd5qPhB;>O>a rcɞt"tÇ࿤G3z $W qzSS1}masY&cX Vʊ ]fQҊmDaX_-~ yv])_5 |DJW XcEײc0-H׃"RRU -,6f,ltFKji{S8y{[@Q14m |2 pRﰾ.q♹Μ,ҥ7=þ. X{î~V)LdN*yɔGPȈL@k=[D[Ǧ,u5Fd`É%(r= /RP_/eU)Ӊ"D7ԂWFHL!7!ꞎ@|xyJ_ wC ;@1⮑Wm #':s׌` /oF(s]䃦PF ' PuIE)\dM`*nԇzZbrC!J:84tf)u<@#Seh+Ljo }F.@ElO?ש_$@g_ɀ1A^\Уh,jleC*}wO~֠w6KBeȱYU/r":֠Bv__zg9-r^#p'ֶ"5=%:POb~CpՍk۝r! ݣŏsۋ5}QOH[nV%~{16b@-_x[x4tUG)?=S n7B.cQ Ԏ~жz(tmDkiR*V3Z{E,dTb%ɔ@W|A]_L4wU D(VX2%a$nI"q|umOJgNdK7Uy\ q= SZ0 ;"gx#3`51 PDHC\nJϮLҷf봛۱N%AGQ L XH-)u H6}N/b\9|zCKx-[N}Nb1~+M|DI۶1o29kY9DVwV7A΢I @ nks<mܘ~XաGSďDһAOg]INn}>^ydԐ ~7g7w 3N XIHǍ)|39Wg*8tDsOY&F^ $SVeAL/w.!ݿ _$u P7'fiw䙉V,7ghU_Y3G)ݧkв%`cV? [H!5XiOUD[!*MD @!3bwD們TPjeeP s)myL̿3ڙy#_Abۈj'dDLm`frU#0=/q)ޠӰ`3#ribFBuD .4y!?(zXE~{c>&+ӷywˊgreQcU?ݏtJ6E>&dϬ)UiQ PdRU B$ފ{voĐ^VPiDԯIx⾓3VגI H>i4˽Lq Z4/r^k ]5 ˈEb:wXm Th-R(wG9V4k}q+,^#wx(&s^"ulBڟ;@I#R|&[D4wCho9g5I+zXot][XGYO6Dp jb#u$򔚝 dI7M]y?L<+Nӄ8ix@e 9P,cWBAܙ;ѱan09('Fg=1j5 a2MSN|tE3EjvjMWZ"ˆ\ʸ؇% 9y>Acc1فz9C [WXtoWqFungf?G@"@5D)[* Q\j8U .ܞZMn}~?dYM(p;V"XdZV- -tɕ:y;W2Hr\. bd䬰B˺m0p}2h2==YP"qR4~?WuY'FC71)to/QJpEt k'űBs23ƹf wCňF=ɘaW`zy7mbGeyQτ љ'8_RxCidzzJ8ﳯivu>xmN^1;QԝO:CNpQSTwo=BoJ=ct's?i_ڷ#$<70Ņ1USN9[lpg7h3ihlB8X'ǝd%8i tL⨼T N]Ǘiy(EP/"q3[&|/ cf!ҬJC7NWw7񫈺暎BD }Pm9-x=WkZr993ДaԲd/a>&OnMwT}L&f(wmvEֺYAM9#އրUOE`h:ME F_}gK'>a*" f-{޸;QEQPAFoFٿA<396ݏELDWA5@Tcd%C;JjSj̲;a.[cWGxa' Ua5($=>k9_ޡ.Lc&~ʊVP4Z7\̟=|vʆң10ȺTZ[&m夼v8C~JdFʉ7Z/cy7?{4gw^riB UpȰJcC+f,'W8Q5n#^lVorkаUu^Q;0ئW62*{|"l<14"Dv/ C'a%uQ T^/b)`+,rQy1EA 9GN'F+*_߫DĹm=|ujvALP}ݏ3> mSgfO3مHc':S+> JlS8̪A+M6H@\GR78kG߬:+8c?dOuVþ{wIL[eAzhq0PgٷwփZ\~;T~z'cG;z+{,qj+ECmڲ38w?hEy\h"t%;ymc"A(&&إZ1EZ}'^4L4#TfbRhl3ڜ!RYETBUeG>I OM^̻+6hQO=)@[ȲL(8j{=ίƭԈRqD i˩ MnP3x+Ъ=r8Gy*8EiV˭op$[~^S2*ፁ,\ɓ:ðdžv7aGJў*%j;JaBJ b3I2ЈFrCas RZ=x|lOaDD&tI?6 9N&e@6AjL_]?m8Up"އB 7/p#5)쓉)zcO]8B4PWpljG-|wě ]7\r A^ 5i?׀V 81![.cYyΎC`,w_\̪ ֳB6C˦_!T \Ә1?kzaf&!B)]U!K ;xBLSmՏM|+h"AT~8jqr9->O2D3% xO7E5^#_^H^{CE|bD%ytz8S`#Ȉ/^IpQgWpZ~/3r[%Wdeb. $mPQ;yD$ҰFE^O$Np7)LԴ s,AO 5p&ƣX|,2lPlWz)ʲG-m3do!ELo}ӧO@bk1kuirC%)>z>-(h4Ƅ, ~|)Gsb'[)E']Q o>)0Zтjpn#s(Hƒ)w-*;)s֋(ܥ93 S Y 0kkf&ѫZcМ_2>5޴Flt%KewZ(GqY(5_QSMHbpwdH6iPڂ5ڗJq@Voӵ-erg%@>\BFK'N@V-YJX{k|K\8'7#̺I=>]_YQѕ3 ? 2 ĥy~$J6JVs0Qɇ ;隄GVly:&vڀ<ͯm@mUU>'1YUiy7>EOuCljJİz}Z7&R].NvZ&j*''Cž,!ǻEC =,79t3| AWhִiM' U6lF>/M67̅B˺n5b;aP\3SI6kU76 (|1 Q?I27Bcȗ.7eZӸI"#Ssk~,RP4ҹv߀t)Z˝z'h1f#f7xp\}l` 1Ek`ib%@dZ ";:R<ۦŏG/Vxǫ[B6Ri0/%+B54lQԄvD1do8+=7\x/6"'^M|gVCߑt5,2d~>Sď8gAuTb̃[:hh8D%W,:D\@-1# Xܳ@`SMz*^lÀӄ҄F2@]E5(3i]JPu6@&`%Xg/;YgEP&x^˺.6Wo,> _8yk/2BB>6K>0ػ$;1HWq`fE?]ì#l)Vntd?*U 1opmOaـ' i<:#4{` u'UpSe .'sWʇ1 1&0f@N.u`Bb9,~@]mQ4X U<999?VH.x{4Uw81o*BsZ`~t%/yv!ƀlG}3(PӐ$hWPgլ)=R\*-|4\!p*0VLFU wY̥7O(=7DvZ+ݴH= a;D=F!a$)6mW`+ӂeXD%H=H@kw

`P㋠U*PW $kȽ@99^Uv8Nd{5zǯXkdUJ%#r&}x ȎLHNP]z+fTFcZ><5,B $U)t{˰>-|ô+6tWh5ҒXvt؆|ϻ5 a׸1gs|5*b\i֢U7~J$EL3)~bc7*ݦ_GZ-k/l eG \>.KTODdP$?#8f˦K,Ьg"70_m `˥c@TH;w5qr3jCȗ/<}'ْ!+ԒwK)jd>e/h.ż:fK83H{&-%_*>ǟ e oc݃p{2󛈟k=lKG\5ۓl%$v^"9̨>iDZf衼CuTӰVpo& kVS$oA8R A5 &uۄF;Aċv% /YY^C$Q 6_ʜF!{:S'np2)3wS*B$y?u`T{xtSOcɥy<#VtqE{WNeSod\Sr>`+?  |bT ;`xiXDYL*V;XE ʪM߶d sUx_|S>4WVi\_=́ʥyw \Ꙩ " k8dཀྵpr,Sh^<3sNՊaJGԈ7\0"Zu9^=4} WV+E\nXƊJ[/(HW?'µ.[k̐6 r%i3 UMSNy$CUeU+eB}oJ=8k~Ѥ2XO_&`nr$9`:_6tw2us.&BRnKH: a:I\!vڪ8Ec{×F,AzHQW 3>oyO#08S@+xneq"cfiʟc{z[{un B ۧ)̈~(n"OTW=y= ؒrtìVWDVa˂!4 ˱g+;J]t Z1ZL!eޒNS2QIz93g19?t vVl[H0\iY6h: =q@Iݠ C"V+Oξu8$ rl\=ro@ m)ËE4HyR9Nl+=s0dmZ1k~ufQC1Kok7s>ʹW! t9⌚$ O-Zi GM%9cBz^E0 8XCiLJ08ZWc Qz L?ҀG4՞h(@%HwOo|atPzJ'ہM-oqxdvgSf 8i8<5`-_ap[ryKW 27D憵*I:)٤!KOs˾s.XtV@ha^SN|-#6m78B]Hj.]e75E#2Oq.˿ > g`-G'zv:ү,eS@u^: YZx"LaCB܏}C #9Ǎ RZf2oZ9n fe5RdR+J 9sۻ+>.pvUȑR27k,#4'̫!>J.QiHbLU*BC3s4:.2q;})"~IB!Wnw &klRvqĩ{;MRzGB8G&$D O I/+urS.K!j=3겻[ΘtwBs>aXۼZ"`z=aQge+v,;EoC~d Kڒ5<> BCFNJ;2ݪm6pRo=.񂦅A> K'e dGvB;5[OA~ qXW=ZAMٔΦrd.|ԓ۱8upР;glwcrC# ўݞ?S_s\J$aF:a)K$Hf*P%)}g= W9!7 ٜv8j r똫kuv;MM꿈[e%TmrrYX#\jnYc5ĊNY,spb-ӡ avCt灑-"E qZ~qɔs+䒢cZ~dNc8lՠ]|{+s74AJfPw'hS4!yO9I?5˟5Ӹ=>!L"`彉Z^YۿqK@33hޘ{o7'KӟkE+~!v#V_{9Ak7*Q~YPgJ s36an(3+ͯanLJe6';3eXn2o.l*P1>- CwJZGE8qZx$ѓ'кyW7/؞d |~%_vZ%}F !H"#m-e:Nd8/ HY- Nr>`@fi~0r m-SYt({ <*[kDTqGtAW|v~xڣ hN%Bcy(*3a54t;+HYIȨ n׼50 %{-i[c3):nD<9K4.c*w@pb)$0n6 dt9;+Ss:Lυ= +58L˲{gU2pئW@Ǜ<6SNבn#Z [}O&:R!T*SӅi,LOyycʢmNzVPlHٶTy4;M @ 8rCaƅ v2X`&~7:jqK`xt7x!x"\nrshRܕUu@LG.[`89jT]%SB/QԳ%Ao9M6R_[si`@e0>(9zk܆ஜ#΄y PlG܎)axw6'"XOdFs.!WK??ZeyK~6xyҙMq?򳟒ۼU.r~/OT&B7TւuqT eb)Dm_ 画xJzeat=Ok0G8 2+r(]~Z@1o9/⌷ZJ#v:bPfڒ`+X3TGO``#[X/$XY] ]Qxu3fG?x9cțvh FKz(;G2j uSs/;1mz=?GA.(?ŪN vy_?و()&@'߭d XaZt6R, ?S[wM<㦴Ln -bxAtҦjT/ޟ8hHG*hRi]Њ76AeeFac bPh p6{R_ư=t6_Uf~s6kӈCEkkG$w[ؘtx-v/9RB8\$fD['8Qէ$ No)}s_΁)Xh"y {}> {t.c&I̟w@B-V4';;k0|󦭶I-+o𓇮Y,Kp#mqwp>U^[|^l6tqp)":@wQ|E qތ0n\0tLd%`L7qG86`2|4:N:n"-.9CSEOqXPCn "ژ<yq!d-љ AzA ]u?]:bNǝGz*#;n-ӑc؉/s8-vDs^`@-vpQဿɚ[a8mm[" &V6W'zxD(y"vLgfmx}9nٖ#`"Fʧ*6ȋ$ܒ|f0n3~x8V]m&m8"`KDVogJ<^; [1߃Bm6ֹ =̡k" ۈ|T1K@ ˴DKH*80yu m}Jl)xh{o@^@nWiDK ;VZm!j{M;Nsar)I;n&ck 2JnQ !2_):,T\yAJ Q/̋2ԗ]kQ Z2D^ͬt$Xe-+6N<QR!4;>c8VcDW?&Io9Dn^j了9r$t(}*2_jG"s 녫JÐ\UG-SꐍF o"kTU`Z=Og7xٙ;2DĻr2؍0gӞ8a<`fb,f|Dh */̀4Uy|UaMU0FH9gw:R=횈^xXbG@\2šE.b gy/߅iMg[)ݏN":i B"ӷNs$[mg`ð!N@n,GֱEkk6 S02EŦPlO^c I_k'U-KBp_\^WXV}Y&VLNUy+boU*z'a7Q J gtMK+*V;p.'oQJ`|Gsh |QlļYigNM}?YAKwPXa?~ fi:!hX k-9)Pw=`4&_^,q|E0Ep<e5fѷrre+Y \ bhQ VeM mAC>)#M4%Zf;(𶏅V C \1r}uQKMxP.V#7T||0ޣ Pb'hKݴܜhXނgҢ]OǢt '%wCIRtR4sx6Ϟ,Ŷ?/!9sb3FҪ>OB?]3lU(>8ZjKCIpoCp"B}?XB(XO:Q H-a?,9P1ro?9o&~J!0 )/Fz?jݓ6{\NqgG1Axi(t. eN;m;Y hA[$vQ*]ӛ?3O9EsvA.+Jwk^>~9Law%ϮlO3&v\}6o-k4*7|s U=EG8k+_^l= `n?4i/hcc[-N!WB"Jilė#:hnR¢(w 8~Kpzfy*‰X3uwk4\~2BەQ4T# A,T9͓$ǯLI4y UK5'ԃk%A2ܨ 0{m1Q-x6A 98g6k9 3N D2IVbV:f6y(+ + 36i>-ҺeBՉgq㨳֯EC{>b ~;r R HDԒ O*C]>jVsYSsqW*/ &HO5e Q@SK:f!+'ABǜ^?y0|%=ᗡҊӎzv9鵋:'\7e< fw tvyx*-3VT[6D3I` 6XrGdPuY;m\ !/9j+5p>kX@>,Ib:h)I6ziT6ؒն Κꯊ{W9 0#FHC8@>Hԃ&N:Ӷ!> ʁ nGH9RrOqhd κl;o>qV 8#!,r\\-sЙ,1,`wZidT=^oPkzUF^Eݦnf򟆓J R5WOt&߯W5saaX{csk49||ZB)_g%w`jkM Z!NջՐq9Pmq!O7D1|Q?,3%V2-^?&JlPsGVYD;Eat PP߭u?l s:||| qa A/-:dj3=ln9==29G$9ӂNd`M=ripk?M+zMVzfׂQNO<`K!OBMR?;ZG+Ƴu+ݬAak!;2Xlu梙,fA7` ?at{<<Llho~\2hᵽE+cK$S p^WpD'Oh[^[#t2;  +іzl <)\#.鶔E;Tp! 䌠?#V̹r|x HcԐ]2| -|`B<>"@V\=hݠ2<7ry4leE% ~j:n ܋ ruH.\EzozɔIq[Bc1uFt&əy> ו( )}Påg?M|]AZȫw_ܫ7JYs#)u*$ډ(l WE6Hּ&*ZƉ#ܶ+AhɊPw%F(d NĀXA.U*,Vʪ{J5up,blVfFSua+f'|;Chڋ^xfkRQpv3U)GkldS6)'j;w*._:r4f's `U-jr1mIi# QarwlTN!*L rT@M˭ga3kdGiB'kCoܝJVh½5[e <\Q p֔x=$%&,Ვ8:K+?2Q=/8N۫z AUoJөnsRӄWD5e[ 3>_`!Z .2 IX?Y($9{7hw'Qwئ]u_x5}"(: '9}wɔGA17!P,W(J:h/X㌻Hؓlÿ9;3 h\o8 p*/oD Tst^dP<3pe1"Bm:~׊P9( GѪNձ\w._|Xz[}Rc,ST!OhkO`#!J.qr1*z[ְBƁruL!s`=/w6*{編%K_ˬH!MolAȍp0/+Zj`hG[, MRɸeB4}Vn:1BjgT :X[|]Cz*Ad[DHqQUCCA B8^SPT}gcʝc5&єbo1Z\yf-۝SBoh隤"lBSJN\](E;ӡ|@gMsbYdE6lD_BJT+^=\p}slä;fjb49趫C8ݯ-UM:Zt_.V{T)g]]z] Q4;v|9yݒ2TW9iu* WZܢ4ДzS /c6Nf B^#H&' -@:ݍn.~rKjri] ˊ- fqvѠu6[t`.:6Ҹo`ĂN Mˑ'!p/?)sܾTnn^:ohzACZ'{.k1 D5Zʕ:.J]Őchw8Y%M~HY?L1j@3W \FP'e(fSC aR $B J{ۊ?a7&`$bλQ}^EQ ռcE]{bb-8^73vt bG]gyd_GZHJ6ψT7e9 |.o]+C>3VxlŻꏥGq\N f>*Иe 2L\ ]QA<[ۗfeQi~] PpՇ>,.B1!`ٽc~=?=V%G ˂,*8_rQE5ؽ&̗`@} rWcShZbt20'0J Ҡ^t]_{-/лJ~Y#-% iY=}UuN4M_+$%9¹#Rk+Z2|O yC(\͋J?1K.H-ę ͦ^%I^pЍJ'I\m!E&QmHmgy>=O.O?d\sZz½8#&WKxAFy{ <Тqxq2hXEwl' %,LJ)n}H]t^~Bf@Kg4ΐBkM<"s:Jwشu~N3mժPl(e`MnN(JƯ=^% ~ũbZbSiHC&Xrlt =2YmKc1C6 ,55|a(=$WJOoGH0 ;m~g\Tczͽf&g 3"z.7C~X]ma" FhpbҰs)uyI)7$%}>W{,>d[mW,!0 hZ7pnpQ@gVePCyJRYl9PeXs`HypY"[|OE+%gL۸#n=>שtt5_OL±J1NSrLԧCڀ'q %ZyZxjJQ*3,cQɄnUt_e~:fͽK)_ #}Qs9Ù?ǏIorC(վw9 Л).콭ƀt妡cd* (9gs1vLȖɀjWemV르̥܍,-K^ !ܻg@آl<K7@/sa1$l ;7iZn2Dƭfp9@"b&v[h&!DC{`B; IAGʐn)X[dY-(XЈHuc( - C-1g zy}vt7):hlj *KIfjJH-׼>)hqtE1l~AstRO%r󜱉ϙT MҐ:ᓄxKzسRMs%:梔$VDZhI쪸iE"|==u0ٗDXy9<FlE*lZv *_%lɸ [S.JF:wxGp*z`p':a۲{_E^HY: 6kZw[,pn_Vc1a7DW<[oԗbQn+c@E,/}tŠd9m!c 9jXSCABv)' 5 h*kWd+Y{^e0խLOvg[zhr9O*q[)MC]pz%LC+jVԞrj[Ot:BQOBy_%o5^pB-eQwd_zlm$EU[;jvӸ< tC{RWYn@7Cֿdw>: YZHOrb2cN_wdHGXvXn(G7'o@!Ɉr7`X6D͗77Aa(G&906aՀΒ9—4 Ns֞)xO5'⨈S5+)Izvn_bB.w&椹@tb*?d˻!U4SeXcz|R:3ՃA™B{L|M RUcί&ہʆӉjS:ޖrh[;N Dӈ'\鬴c7p05K 24yż$}):9t{u?F.ޫL9\7e!̀I`'x9hR^ѐ=˻0jvxJ/v.y/?m|j{H)5ާl\U7ۗe3 da7l*Ӷ10L P^U{+B2 -ũKǡBzn>+tQ̧o(NfcyfV2;إhRJAKsZ}t adIZ2J?Uzbo|5 Q"nfE2U~M{7Kve }g.vܳaZN|)V#O3IǬy:Tt3Ε /AF.AZ࠼a(RmNA+0z%ɍ8_^=7*\OY)~3-|h6BM;s&AL )*@tKUKfd縞afȹ0ϬK-== 0鮟^9kFsײR?_XCsj֖D詹 M@P i>CW G/$"7+ c̛8~⯱j"ऋ:­vriF8Nﳅby|+,LҾꦤt7%Db+Qe `RjlXt*7&SFdjOgaB1Ϩ|ѥM8xԤHHTq [|r$܁_c,`$uspΠxCj<8]cI7D7z ",فTU;M_*.*iWulЭ Wήo3w-*Xy!#1  8ܾwt> l (bxSU#MCf\WZrc/ aC1qMMah1"(Sf }CQ6xSTsEG/-%سH 3>L#Kr\jj&X:uhGurFQ.,[uxj_f x`rѳΨkdj} Fɲn`E3\]AP@3(nP F?uQG$}Q`SCuQ-lB61Xˊ%V}x]o9+95:_֩C>#/f ٕٓm-= 7|2Q<S(Igh# =°r e5f >d̨sa@ͫ&u`Q;!2`2b2k Q;& nc=:$=0‘țLvq O >ۡ[6cuU :0Tޤ[ꏋE~8e?hNځD3|[|Te|8N# }O@v'p0U ́& W=ǘJ=W>%@! k?$ðSb~?jx 6f+eOƫB >)8Y†YNn=z\Bͩr̃«XIngzQ7јz?FuM!R< ưlTPzNU+ѯp!),z{\;H#ܭUfaS m@ch|^z XsVŞ",SB{ !=%`2z槨@YNҮO jIx usS=4B\z^0/&! GZ$k [帰gpa(F09մM쌁73yc͐n]#yr L~V_[m`GC9)ݣ|6n_H{C{#?3()}I+HJF;hP֟0#E ШL]yo:QÛ{`>㉎nY( ff`nS`qeeĚr!5rW_Or)%vFh;߹g=[iu@uIIlZt tpO8H/U8R%f N{9U$,mpgF(A>S<у5: e#@XN὜ @Qw8vg+N7n>lS( bup-΅^zk6a=*eV Yx7l'a>2,nͫδ^UVWnv( ?'^]̚ms|LUXvP9y咪U3f]Ҧk -KV2džf> k`pk'A.IogK-nLoZ./K-$gHw351r<'\o sNě:,;2A@ֲRk` Idaky[oSGZDskw%լ, ,n^PE_h)/Ӧu 5)V*͏51=QS3gRDc W3/XB5o=_Rڎ+h+ׇ~ДϙcVc=W M:}aMki}IJRoSdcDH6,1h+g! >0868RU*·n5bd}|+ӎaK& 0z$B<̫匈c9׳~Hj֘d}A@4Xqe=gnJSo!:PN˕H2ͺ i|IūԎʹ3rWb1VlL/rI;FM2tF:up75CE B/-ZՁ̰倒=:| e"MSɣ`C8b o?sߩ}NO#Xw*w΂+jŭsv4$^ת״c.J~ܘrd G-e 94Ȩn(v:㒹jB԰z ]Bxo'mBD(,TTuT7l譅,4/bqqF(bP8 /@$6عQZI˿mxw-VT*/b錎'Q"A-t<*ds.pfC#Be <wQG G$XᯰB3`Y5!-f5!F+W(IfP`  ݇'uvQk>syy@{gRH:I0 +aKn;!q:EأcVX\iEtkZ`,Lc6SeP}r UCtmF>(NkN^uG/I4ڦ{IyC*Ok_`84;p|-Q@'N:T4R- && a,q~~Yj4/&f":-yHbyξ݀yi הw*x=/Wj" 7~L }-cu{zԂ淨jr/Ezl)E`}.$j&bh%Ujg$}u E)*=]~ $Iֈ3`@2qQx8P ion걽*N#ǵKB>VQys;C;,{tǩ@'"=qnvJe)ic/~0<,YlA Gظf3¶_$boqVXlʂܴfX_4v\51fBȽЌ6 v$Ƹ{jc:?{V!t% '{};D,X3P*6uE9rܪO#۱{~mF*,|҂ 4p͵(\'C5vjMx}J=c}XF@Y-:.{vu;5; m['5\@FG>zKu.ɰM 4a9ˁBN꘏ r,KRԚ*_lb(كֳiBKً"Z:?ܦA9z^LJ?irb`7Hy[>[a4T}*I Ks34B뼙dn9'~ÙIK@=rmWGXHA`Yt-Un2hOMuw>CPR9eJ]]eVMOj2%6}&gĵ[4ԙ| 5<]f̮䝴PsO)ϡ!%}./DIPzr';c\Ȧų؎'ŒmRWSH912tet.,: \]_;QQ*L˿`pObEϘ 2Ub_eȔl.TΛb(8)'#4DL.H\Plq.Ұ[yt VU2@IGK42DCĢgQ;bzx?gD@ѭ_7a+߰/*Q gR3fqwHLt(Q 8Τa4f'$ E˽.HWJt̛}O4h3Om{Vc9 p]ܓJ<8l(9^Nȿ{ Y*weg";1@lvW^bĆG&Zw0g~oCզ~1D<2y3BJ;8Sc'VL4sœk$7b6Q@]9a&32k:w)z˖ڳȞoN~=\ ޛ`=vA&D쮊[UѹΗ'|Qv.ZS[Q㠦hFnrLT|Z`=_: )eǶݾ89|O?S"եB3,͎I !>98b3NdKCzb_p[ސQŷRWgxR-$h~{u7u%^Zbh"DFe_])>L"ǨL-GTH~7N*uưˑzw+H- :pIw`<Ws!Nu P۶];%/8|n]%r~l%GщeTT 8~ڧz/\<\a7  *Il|2'aV}&DV@t.K(H`zϪ|gw~Z˟%V M1F\t}YG^5 uoI$m8[Vn>-xE轥b*[v4`XA" : \\\WgbʤS6|ST\JRbJemQ&&r%_3sIKJp`Gf<)m!\ =h34S``Y*aNߎY /) TU8 v7tb!XJd&EHs=A"a^KR3D ,n?{ĝװpZ(!w&0h{j\Ղ9ri0E4>]I>2hM:Xh;M78Jc <;j<" Zn(\DZgju)A>?bЙR1f^fDP& t!FvP?.Fj*^.H!BLTM wQ%Al0aTndsK17kd cͅ|U6<lIy9V%ivP[vqG6vP/U} iޜk~G k~ߘ.<Q]`J$ :̶O }?;Jńc5yP[fFj֗K-Rxg$pHkMRI_u E8F Ms#' |*JKRBRDTeb;͒/?()PdvYdZ]ZHaթhԳg>0'nl4xʝ7J8Z{dgG_V=QjbHvHUc+,7 tx^ `"\'ek*K/Gi~VQsY4xΔNA Kb krcAWsckMFTn $^{𖧊"1|9!{T.]UMuh񏈅p%<篓̭ɼ:C1nm) owRtimȿvub7Y Ry8ǿy`HS]ċS!h tȟ`'XSW7m闏|KH\%}RC2@-@К!UCj60Z:2 њ>zf)~ lhĨB\"gB'm(gmy}Jlk(";wM ;J?q#$>=M/u-TMp; ˟TCQRl1 x]vw>#9%X h=sG"+j€_Vo~_hEc_EZ.tΧ>#{frG5/7>@ @4Pb bTm,[,e2Scr/cLyR1٨0m׾:$H `/ͯzox4g[⼈ 4)|5f:.~#=[#XBn㆞mC0{}=JJm$(ˈ;leE8.EיhQGAYc5s|T:Iov*b4O2"W4"^=3pqu,أߣY=гqisdS] n rnLeiCmHj)_v5C̶[<3s!۽Jn,\wS33yR#'r; 3L<$!'kE`^Uɩ4ۉ Rפ،©Z{SrV vTY8 r,!SwZzWoe7D~km910Qڽ6p4C mw`2EvxlbwsxG zWm>If#ML p=jߵhDܖkqM`@s(< 9@(y_T9ssBW/}A'1srw AOqˈ}ώ/-x@_T1P'ֻ4[M 4}[mq#|['"JӦb T#U25li5d wSׄxTjQo`1HG ޘXm܈*YyخpVH,"Kc_:9ƿY83֘MIp"%Lu/`= U8IVMjV'q,@_&2 }/Q[?]ІkHtS>EOw"4b쪭Fr}0#>HIB|G䝃*S TPgs|m%hA(^ s731":–[ɳܺQMD˾bdI`P. vݺE_6 崧wضCSX2KGJ]sȶߺ)/GFbjas:y@\3a:w_I!9EQ}A,3AmY_o ~gmL*8GCDMoJ,{rK9|d)>l=gpa1nC:3ٻp[k<L3Waؿv2?ǩ*jarۣKT:VxoF䭳]PU5 [<>YZcU[ :d0*M5!h":¢~&awFxwHMcq&Kֆ!e2V2#B`g3AD`j}BPD En>A55S#u>HamQå,f*]P ZÆjD"i6:gihMЩ#vF|TI cԼ{-0JUq>O[^|9N-Ox}*̦TB9^E3#?&[xݐӃ0f;}QyFB-wqo彨sDQϓO -7^41f#\'\7Ґ)Ⱥ)C&eJW6k-H_X-Uc.\ Z^*u\v7*DǼE8n!8hdGc'-u+~AGYi4DTZHMȎeɒ]`ma}! iiH^Rgy{n{ꖰ 81$ڔIl!kCoWCƝ%.4s @:90D}JiDʉxO{= iV?.pt O& XP:?t".g&#trk9JUbQJw!"'f%4(B? XW~e3ВƵjeL[mc.!*\9Y0ZIǰ7])&, J2t>:eez#Ѫ_81ڐlJA{H؊  sdX̊(TTsK.dѥxpx0te"G1*b헤Ÿ"nM9v޼ֹkU2 (tyҼ8{X C->p2~T7tO9j[p,2KoO>k}g>8Tqh?3܅$.9cRFm6Ztф Nݍ1e~c =* e}k.5}~U6?em=;}.DӁ.a 0kYbIe0^,^W'S}_ &? }U9:nOtRlV,ƈПp݉|\@y5s17ڴ[Fs6%XmŮ\ l;R\* +ߑ:#0cF MZ-a QX'-׊'):{x` DxUK+=ʈNit[;LJE#cɡYyC:\ǭ&~5Q8(PIFc{!RӚ9dNIW,i˅'GNl.j",3!|@{I'i.Ac,"|Ny&d* IJ aW+\I'^Z\Vf] WE"U!s_iҲ[t2" QP8orw=%-p7!66H%DWdr7lT\ ٿ|"L:h!ʃɫ62F ZjGcCV\h'hy} JwCx(+yf͔Vت&dt^# T=?pg,lĺJKg73LzSK9$7OvmrJYu&:Ԭ'$jc]nB#xKxH1\+7ù3|cpK%uv`%NYqU>_ve4p5&GaHpp/cEWA VHJ"6%!`HYqD\> ~2<mLG<"*FEKM*1߬>W1 JBs3+Bݝ&MX}WtY&ϥ Z"ƅr=o zdf#xL2o+ ]:"8Vw!a]@\B:s\^4" nxH.fͿ[f3 vWžQ_J7A UCj7^tS\{/Pc>?/XOqb#c̝#W VшF07IR"(jj2ZmCj;a)aB)jH@@ `0n_121bZOv۪d{]j yb;.XrM=#~wֳhpQ4"Huw6-M[S*,G9@h 'sn4W|!L''YOD[CuNbl :P }SXw|{꾰t~y;ug6gظ7SKV[UL%Ț4=>.F,w}pu¾`Lh, 9[SC)E$o)/jlRM0>-l;td l"G'0#Tp%-RB}/Ǻ:Sn}C_䱘o/icNͿD^ bZ5,$8/ AsTfZ yq=6rm{uL>DTJ)Ԧ"ao~lRlXCE.$="t I)jgε_3sy DŽ$}N=^;Fqv)t8xżLZƋp[,_$H=r4hnXHzG5`B)r 'epی-HFЭyǎ4H#Ǚ Hó ȥXR*]B,(]`ݼ:#FBTҷzVthK.VUCH4Q˾4򧭋U}6.;Y@}H ٶA]@5g 9'ʇ kjɾ$݂H$]ĜŋIDPWIJKJQe@jHyo"q Tt͠A8[I? ph?7{:YL{Ru50`F1@@d S|Vkb~lb.m$#q襇b1h|'pl"b ϗ*CfL9 И¨Z8z#C7Jt'iCNB3 SCjUl ѭDd W**pk &Ɏ󻚌T]jLU~m}H ^nCT"z0ӆ6?Eɚ d)=2wh1D\ rfΧ>eKB?IhS,%lqF7H"Zy;6Vr%Ž\p֒Y;F[Mp \̪o;ٮJi^.sNQ.R"R`ߩ_K[}\Ywj3AW>)s*hmx"!:)dӛ__HA>*]񵇋))BM`Fݚ9{;3iF-"xAL"y2&ynoo{?c=N ߍ2ba KyU_ 6]z=^6&8#!waƖQbA7cLtԄB->gf[hECF >pq z:=j*.UT@0h+sfUQg'{lڑ ؽ$}"jmN4e Qi 6#uJBbv*tZ "l7?F6q)^, pyoA [[Zql*򻦸gho&=aw{w, HC<""< Bli\Xsr+Ȫ Ec{QzNJ#/(5{jR:AO׵S:Cޞ9j% '8UE%[HL}L+b,l&ؤk $ATV܈}/FTj5ӊ 5cjQBОG`VپGGlY&hɥϐXd$MRj޻Q!GSϣ[̄J{J9+JWvg㸍+mش\Hi+Q@HlY~QZRL*bPm$^?T$[G[]Ulb'$K㒉4n*6Zo#ۊA]"%/@ܧ8,uk̍YoI4] mB̹Dn܂ އm |OΊ;7N~c 0~>ZR-u pA-{C|?|ϭA`U8qfj',U|]= /s#rl<ij,\Mq+MhJ)uChUa[.@)B<$_.o:ݔi90=!LkZD|eXufG%QG/1k,uDسթȟ=J8Ĉa9>-nNA.JIv[e/*TtFĥ$ |L2 EC;g=+J\>:@ć7'ڟ%y}E$=kb`>,3JWM<sƒƺRLlMd` $VۻHU'7jReu]YA,ZI)(T ;6)`g15V& pOlZxl%grmp 8.Kœ'=`BPv}ݣXI$Mqb|LӁE33bfY(4yY?*Etk;Pfee_om/5fIh 3J,nѾLFv$4NP*ý -O+g2z-{_/ZFi!|Y'.7qʋC!sS^xRQ$s*}Xz`:ℰ9H40\Q"?EI_=l$I[F툞%We ##3W]V@b$p]L`0K#+;awW̙+@_sQrVQ!ja"+! f!2%GLmyl 6x 3jf!S(qa9_Yn $B_su)ƨy ]ٻF] %ub[-iDB9S@8@S4˥H iSOdlXa&Ⴔ6"U2I)ju('5/&ZfȔPT.,\2Ogcיz3}r~/K5CO#YIQ$y=Sz\i~g +KQn!kIbK)ע܎rFdBY& Y-R]F |43VE,N 2n EKK3^2"(= y"I0 lN\.m~[)7( >g7w7䰕o_2t:l{K:cA>qDqf mUiX~1d0~ Do:Rb߀N}023NÔBj!'<ۣQ/Z 瘓wFEyK% lEB?['Tm]oZ8v)ڰn5V-I8/=C-6u930},wͶ B %X\Y[*ܲ6eIMy)^RYs1̚ZY' "KOLE+DIl\xȋsAI>oPן+wGRj.-ݻ[>+){ȨPeo;y f>w$~$wLC}5~?}#75'v_tp/%SE{Uz1I=5/8 ܻAk߿p@?6r_պ2G\j qan>O=d tӟncYct2KaQ؜,b1]Iƶ/?HC?(\;p?rBxZ@(畚z3+ba^Վ2caճ̤G[As_]Ҭ]^FxOTE #PIXKB|mQ$J1bS !6a|-2,6%UȳI\/~aOCvV{{U/PyᕉviXl~m7twKlنܳ*޷sq&qSӾ&"Q`'4K3PMM\h;ӁU>g+c/ Փ\Ag^wEH nr.< ѲF }&~ayIRL> Ǡv`9Fi^N] E[һhhd>m+iC=2DeoB <0l}!śڎyR+5%mږ3%+1:k[DXZ1C٦𑃹/l~,9e-sEv<vz)ԴO!n4IN} !h5d e'a`/;2@rIޭ\"[]鼍bLUcAZwmHRр!|TSC~wgU1'+<?[mzC~p@G- ߻<_SCq9^%p[cW7>JXB bFk"&?+9%YMMٕm rY] ԫ\ggW&ܾ7dAeg2܌`͵BJ7%P`IdZ82}Z̊y#b3T&0ps ٳQG/fcO1j3+Oa XSǹ(!6]NUP=F?4Tv5RD>L쪤_n涸5v, H) ݔJA+oWt8G^jÐ=] as =U271Fv/8V?5s.y:Fun X]OуUFIшo|Ԃ L&bȫ&G [/ 6Elm%e{0ø~Ls||5'aϫ9@4$1r6 U (G]8^f^yc.qȏb(HlI THgˌ{ⳕ$>T{Yu^D\AV$`zTuCR|۾"O\qٰάxdAFS{rw2]`4$o˄Eʸ)ҭu-jWKQr H^0 ]拓# QC:n{OohV{5hT0G<-l e`lάD[>%EKҫym#RWuX1+D7|n&u{;Z6^5f |؛A|ؘ|ΈVOQ$d2<peHtoM6eѡu~I w;&J(留x>LJ* DDsn>o$RyRjREպ$a-}D;n-,PPIQ>vp0lC'/m@VbUBY9pxų#?mXqv-l=O!;(u 9³ tTg%;et&ƃGTJ7)RF P1z}Q(,lE45{K`R2l{!}oU|=/9(1{bZqGE~c:K8Ԩ$urrӀZ-Ta⎅H!i&GF#Nt8_ܧ5 -&Y$j}JTګO}i :@K|&寴 Vn8 ?rsXU+4\mjSS+p\xY3RKmpzG|,;䯽#%z$81#8uαg,RՉǎKnk;ǞU_ $5m}0W@gAyE+(nͶU~3Te G I_|!٢nYiIpฆӧr7/e3Vx@RK9Rƨ)]cCI o5!KoOMd:ݗ,w ?Y:[GxOXS@‘o=DB?6JH2:g9xDq:i;=uWݒ˦Y+yU?TGݯ}`ebSJCbDݡ»\ž-||پCGf0n lvD`*4x 5K$YF!k PMе8cnP]^Yl=sI8. W\5葖p>I604,\`Zl'o2RMp< w&Z-iJ0$'"5 2lFRh;d43!oY~dl=rl ;#ApسYN;TEk7fۏc^n)sM@Hl[cc`Wic.AsW%!1;k#D4FMJ 4L9U~$dg:o;{kl]dHKW"P`ta1B\4&%P,Ra%9%k/O^S4˻\wS͖@Ah?5? p䭍uwn?or oxUG F@|c)u x֖cC:A؍:/UھܫyRhO`[@5f BcpO|;? j}dEcBs`a_oQ2P/7dnc߸Α"}p:o/?FaTY…wn3X :`HaWmj AA'w{p8~^N2uU^P䋽 -ضsAVxJ%x[`!O|t/JZ޲p5|U E'uy^m?_~n(k~Z~iJ߯5D(o A_Ǧph &YtBc*~b6TJڨ#NfԖb#p0@ګϫ6 I?8[$dshL_UǰT悄aubF%0xu868NEEƗUn £*7My4Tq߯U.fjRh|>jU RgRAY_< /YҊNtt7),x75M6voTK~2!ݩڨTW. ֬L W>+~@$t/FaBiێ rطɐ`B%,f/Y њ׎48@,UMOZi\_ju杝QC",*RHBݮ1|W4Ɇf~=ߎB]\Vi$':se%%F>OcO˚tO֣RH3I.H*zj _7ߞ,n ӤɆO'ArRFl')VRD5k$|Z lA3av{ZVɍEepD^e^E7pM(1<Ч\{7ءC.׉d6ȖaԴ^_6aTwjVgh8rN {0Ѕi1O'-RԍQ!^H=4uꭧSyTUέg>06{eA[=ZtkBjBda&쨕9Jv/ȕĐ9y g0HxZD+=8D7UG "rx\k=NL{Nw5"Bd"26_Wm1סNAx]QLrSdj@J_Ey|L=o%Cq G%TG #.vvۦ'ͮ_ %T #U\Bycz])'&k-vGm /?lngPjD781ɫ滌YU>M\;.ıQ;~?\d! ǞBB\];ys^6:e;9t+ZFZljcjB6Q4远8w~op&q3O] ǘ,m_8_R:kB[T0]Wt@wY |ꪙP)3[ɋ0"pjʉ}yZ;rh\PY G ~H/̄Ay7UO Obs^ŒI~b!)Rr%hP 9/ hU8zK5@uNZfHGmԦ'noq 3rLEBxTímKx"lNSo-!CJQ|+qT`;2A>PB<wxcP&0m0+cA2EF_Dۃrl+G$뗳l΂뗃t -&_3K8m0#Ъ޷"$LfdcoFqXSTS[kON]'Ns9|GN>i?Y#DN^:XyȺ I>@FiHPe[̾%~ !Lx\kp3pLҶ_G3.욼/pvFt/Y@/aю:V.8(vfߣ--#]?gM0:CMChוּ:\",9GQW:Ljhp<;GqN㚙ipc7OCi +3ÛAiC!,}aB+ͱv[hEXPW/z\ 2@=B#* PU͇&#bljǂ*Z+fDŽ ZBwq*`\HYuh!a}Xۀ^t<8=-T> `lfx-/>k{lKkđVY6? 5ГV>S !zS/$9Otْܰ+mfE+_~l/ciṁnWlL:<oz5Hm4%ÑτɰS(_zBj0s$FPYxX2[ b[蛔c<߽7"bw66D$3%1\ ^I<۵\^"Ȫ{ÿC{B*D6PX]:y)0ee[Ȭ.:JX+p׀S CDUR"' ,aJ\nT"ŲUd@L [ |$C^K*mA^LT=S7&ǡscU z2Β7h}+Gø/t>ތ1O>`UN6~5-Y Oڱ-Ke,9Ex5MTӅ10|.ퟱ`ifCdRZ8gps5-3ᲢDnq":Ts ^jSaDXMdTt 5? EI@hc_$g1'=I2׀?G=u5E[ρS\{'I[T{>5)1<@x* )R;'Ҵ>b tɒ'MB0yW&HU(Wo1sJ=4K'/D׸^>VƵvNۨȲ`t;!/1usPH]M4=5,$Oub+2{{indѣPS&rۀ[wk.VGݰ|zyT=]2}S*{"*>pjL-L˿ݰ0ۇ' M1[j(dq8 +Qv\.NߌmmEԻj .C\⫅0sՅ+L!JlZ&"d|rKMk=k[zrx屨#t,sNί$qvռ ׭b_NB:¨p YuB}o^Q!h=́n`AiHy])ުR(m) 9_fb#!U aC=,U71w }G(q+G[া˺xKgD˥" w}N0 f|zhbz~6d1nE; ʀ`%Wo,neE@p["7;UKA M6yM󴣡̛b5D_ˈ,_Xɔ;(I&ɨ##/K/J*ѳ~h 7|?^VL ʏ%12[!ur#..%(CY{Bg?|n aC#Vi2G4Kp ϵgswOlF֮1jX%06Z&~oeWUvR؉su N[-BM>){p+o4rs*$r(7}^]6 G#[*HY >p i ,jHE$:%9 dzG=sz]4n_[d5j3 *BK.1qF 5'0_GHL$K똙WJڪuę.;TIHcF^#&x{d|.PރA6SQ93B͌\5Ex*1m|<Lpb8^eq&ĉ{{QYHicp@*³˪>XGn6 ;ҌmāHR!'Ik6fn;9,˪}g[P4Aje#:pqzJT5ܥ,8/vn AK9|+-i( v7k;Tr&Z8vyݐ1|Xҵ[dc)Oq׸ {;<8W[z8 1V籢~9si4*DpCJ#\Lia6F`6ߣ;!t [T4&ʣ.KHAE:&tYe0%0qO"W|L`s SZHy(8{ZlìgIZ>Qxc|aK`;D=;_^h! @({7*1Mzn>rt { K8 :`B?9#OKvu6{0+<^ Xd*z+iy"1A?e?FW8$n-M4F&ƛ ڦSp+cyÏ4/ HTkn&_2ӂ^AH6[%L=T˜nM(Nٲ_n8h-ˁ@P.¨~diӥ$1U=(=%. .e}Ypak-H>*lawM{1db'j\XAW,asr|]_4j iʬ%_RQ@V`AKD15e=#tyFVjt>PRՂ"ݵmlOSH^FSQi6V÷lȤfMD ;:GDŽGCϳO9!%AKN@C5;<)5jNI,C*֪#ԵͷӥR?D 3,][xccA* Z$iڴ1ֿե .'PȚ}Z`^QrބJƋ l46IC Eޫ\@ \ fS9yv#u4<;PYIMQ䐈W@>ӈXG*Z۵ckXf!jGW#l^Yc,>FÏ+WVmf+苇\˓n7iR ,+o K]ϐǘ@ҽ1[^fJ:vB8uI͔QWR%+q| ~E| =zډ:Kbx:hǦ lҍw9a2) +/l,rNzL2%ā*nJzP& $4x %5_9ώ^e1 s>ߥ$G`<['e x`R߷`Cw0Lƙe#cՊi b|i}H,WsJ9r!InUB}(XqFSe_cˆL1pGam7\9Kjo7^R$~QJ'tBm r>j`SZq$Sγ4שc et$MAM9% %Mw&]7ן\V_Ξ? N|+\X9IAr\\q>(w hնqZ ¬1hNXW` ( =7ճ'LcRnXlNq0`S佰 Dji Hdh5gzo:|Ƿs~5lv@xܖ 6LHxR`b-VhfG?ugدt0,KRr;؎_ѽYI.xGF _SD;ot I,rq ij94l0(|DHӫWk)L%3DZB7AeDowovqƤw@іdpySӧ/灦x%up1Xʰ Yc=^׹J39N_H;dJs}u]ZZȆN zE% "∑ h_(RO3rdtt$fQ&z̈́?Vz(ɨk=wm#Ⱥ!9'RqrPqZǞNAw'(#>tfp#T/3X{n9Zi\/j'*ƍ83bV'|dsl `˭9d2w]ZyYBE3ڴڟ>M&oH 96κ\Pӗ?S"d>Rl z{hZDRq-)ܟuoi QU? b˥wwO]tupp0Yj9;'mlyv4bo, qir{Z)GRKe-m`"*Zϙ| UeוZ0zzl4 `q~Z~ !#D ll-% '"Y=&`'d Hn`4'e۞~SOzz*r92cHB ݂sZ.[f:J16ُK54Ɉ@H/'. koײ9 y3>_w)MDS W)k)Պ ODIJD~7mh9o;";i[tԢtDhVSg4#4bAKi;ļ@) O֜;E%( Ytʐ«߈9VEhmyB`o DƎP$d5SʪziuV8xglYLbǡ8O 9􅓧~.Ȅ{{)p{O]0rN Cn'`;#d u"Bˋ\{q8cQ/>`s^O9*HVe>4>_4|t%ƐSܱo1ˆˡ_"]ݮBc"Bbv X}rW 9ޚ-`(` *̐^wPGyi\gV3t"U,HK N2jTŃ9[."@_wEHLkU:I(=Ȯ ;X|z2.gY',JH;J]rb5#\:~u [k~pοZUjs~*[(qkfcGTqxC^X'{|+ltt9B i4jQoV3A|VM'o | 1" r Ő3yJ'B;<K8 \v~Pn3dpƚI~ĆPʼnIUl] CMIrս[뒌1˱FXʄpҒ*fdVĒQKҾoͷ><5bzLtNk."S>uz'֍OUҗC 部$f|x)*|ᨔK$B] +rmjD<sS3 l~޲HpTƤg5ˁt%vL<&twa)UJ5u))|eH8[*5zDN, 5@ylMĀRU\)Z9٫3J\uCY dW>\b2: KB )m)X 1*gr dEFxR614:{!S I{q)A. W 3A򑺗}|Os*4k/Xz򎻲 $ѝp>g.p(t$nj1atٻ 5oYR"*Y*h@vYug 9-Oo]D"Ox&EВriC (V>΁pSnq3]g@Wom6^ gT`n__1U>D ((X=ٗ2bhӕFuy'#OKSJ>yet8$1*k鄀?jnF0kG\Dv*?N0)_.Vdw.iXt5qA~HF Lvpo4#[|Bb6HuS؎lKuO5aPR&ʝn9_T6N2Wr.cMF_Zˍ&Va]1/ѪKHPU'"*\M?DbJdZơ"Ef@w'GUr<}Ƶ[Alf>#T:* !qNzD"8EccvM`f{zov5 ФXq|763栌m*XG$կ\U<;6;-M+b佰5*gzJu~|Ln+ 2 duu;}|$һ} ٵܲS_Ϋz0׉LY*Haܦm+cO~av/em\ d7TqeId2eޤX*TB>-ԟ TXRa˨l'HkNiZ4Fߙ;{n&7$W0Hdh$L%'hWhcNܧ\p$qLtSL;nyiO&Ahq&ބ4]/s1󜄦%Z\I 60 Ev"ߵ%QΦe]eb$JV,Ņjlau#E7SIL@ARk'hD4Z)g ~&p#q%*sJAK`Pe]b3,=ujB Rm>Q Vūb;Z^1TP|* ~SONB'Wӎۓ JU>{+9t= C~.Ka5Bw7[5vrW8p *?+g1P̬׀_+Z֗i${@4VΟl5Hn0P8S D;fzJv!Q48٤]sm8 ba7ee1Y Rl4~<Z\SG:gGms#,o^spN3siifKܗ|:%m[SO>fƛל,d#q~7AoH~\rs~i-~6 @H ۬1=i㼥pTgIt@ |1pnjc]> <*h]Rv5A!3 SH$$R нe郠Kߘ-rEи ?_m_Q_l# k_d-,"V/԰"#n[fVfZv%?FaQ] ˗ľL\Y7qzQ_, !3DBL%|X`z5E?|X9϶"\4 Se4z҇WQ,T m` ,6͛=H(\/ddR!(h>7\9"(ՎiDRֆ3wL\ BqWK7not9hk$\wAu fw{{poh׭Buލ G]M5,52V`.n+}Q?Dà%UF77TZV4c$jĩɡN˹VF)uo6_ / Ǡ} x薒8iD]ד{Desl=heoܠ_01 ^!|" u锌 ο9E9r]mϡ}*|sȘDV?yLT֮@<DJ |+M wV2t0Zxʵc  hd)fp!0KC V߭7s kRs!ti&<81qzR;ɷ]e=ɟ8ovȪɒY}g~#5-yEBO n ÄIno\*_fnR/&pC. k? 4&ssR")gŏnLvs4ViQ#+>Մeځ~lϗFp%w/߷2@ Җ[%Vㅫ \T1esW_%&ChyS;T8 Z[2!ԣkq Bd'Xak&aH3o9(i5Rhâ[b6LӅ-p+#wn }7kF؄%Ѐ0Z׹&$8NHUҚ.EA'Ҭ\򬛂LZFbfZ1z2ۇ% 7̝+Nz/ԣ# F;y9,<ÕjRp h=QG?Fb5D67eF/hˊa u7X_gK6XU/fyq_LvK)mnٚw6Z! c%RjR`]Fׇ 2ODX UuȏÂ̇ԮyELiEصIgtl򛛪W)q٥\ UV7+-mJ8)5~ #9 _<vb9S,WvI{.ͥ{+|)"V]eѹ)!=NI[:};%(Nwäw;,"~_3A}])5WoU-\i9!xcx,6w˝_K{%)(756DG|QyE*\?k18̛k=g.Q-I(:"CJIdCBEAzS9v8r~ iů 2,Db/?k bCz@Qhv* 7(wD+Ǣɋ4KXO1JNl/O VitбohH[n!cG~¬h 㤙}f8/k_Q`聶͠J1YJf+ ~R ΊSNΐ;=8Ov@"A#7^"zR;j@vV8D9C>orrj<#R6kϳ9]{7uLc~$E16,?z%m7)zSDC`G57ߍy 1PW}tfuW Y(KR))qlb$B=xktf;QUr{Nt&hkJ~ nja\1pӡiE!̹3~mĔKܖ}$+ӨN]SuEFe܍ټ _ 5u/QbN`}Q&@5 io^$O7א(>Y.\00?vg@V4OB֫IeA~uF5Ugk}ERi{rRkaQ?wB33Ot]uI/MBdlKc{ bH^2t&bZqyPJ& YI7lf>vR]+.\)[)A8>n؁6.!Qv'jv;adÏ (~ߙz% 㸼2{W;PT'ƻ̲͐n)҂EӴewНWxzK^K{UHS2)}%/)y&gn1׎T8sUؒ3V3n _*œCN5n:J"Il!ggӯ1lцcWfGxxn{1۵j3(&L|dXyRz߃b1V=F|۰eöbA4y0[:( Tܨ^ [oa+S|<V!+dK ]M Add )[Bfcϐ˓-[#6 %Ѩ >NGrltSb"&a  +ɒ212P}<;_gRJQol\X0t =]Lg~Jds;hVll$opp޺'}K<{< >5[dhPF]P4]m)vYxd//>&n? |b*%ȈRǧK -n/[|?ؿQzQPslWJ@ '//2/7Da&09'yBWrG(tk i6+dй3?uAC2YUƈoMiS|yk@'BvjAڊin> 3MIܛp)/IMl總W}cv ܸBfT#T}-(Jޔp^/MΖ6{ciA^p)]4oC+|KXK5a,N-S(QʕhD3?ϵ w_2?h.3V xuMFE'vU'蘮ЈjReU! <1R3Ջ3TߞkƯ '6|$wX$#Zsx;ؕ4g?:ߦp(IML *Ӓpbӽ ȕ+U սYg3s iT!1;xD7pv6=97*Qڃ:=QI]}АAm@U29(~O X eR8\6$`w[v+ݧ ߃abEԠ%t"n'6 eqD (am_DΝ"yKE?&]X|\P>rόK-ү+ ;;[pRt#NXqVKWV!>_ac}jڪLwr!ɕlŀ. 3wzqFw-gRᦄ2"Akø71q3Ρ+.F^< 8].c39>K2ǰ:ÿ"r zf3?WjS#>mn!YPEBd2Obj^r 'ןdWDL2֛ns8*z }q.*QKfigYV3D &RtYzGc= B{yfQ55݀0,8g|""C^x zjAȈžj3  5D݌J S /$uWF>K³蘭{P('96qdy 8s1 ~5*DJA PNcqf}C"^82^Ä́9KɱqY^:px,:+Prڈ'MNHj?K*Xpon݊Vm9"vN0!6#y (w͑Emw rEVqŒrU~PttB =?viQhWGGsa_v.'uK.C#nhhӨDB;_ Q:)V,S|*(e"qhBipAڀLdf0aw%<%x06X,bx=aBLW&YI5j N*q$R_Z\TnZņ34"Cq}1B02œZn&}8B%I_(,3K^f/S%vu+pR>uUPZګ6n3fAkf*ꭧ+>(a!mE K&f D2pӨwo"ahƃ 0xjJQOԔҳVSL^ٰAaC5-3G$8AcKBST3" W.)x4KGeqofcCQ*?NA(DKX 7lq99b{EE-Ϛ@@?֞v/ؙ}liQ7JɅyxo?0;Zt9s|ÌU2 5- ,1I*sç=lCO+k1bG(/Λك|AO礯ӵJ >kf7*W%rmURO*'c} iht-onG fek1yE][h"ķ>Ը | oD-мw^||$OϢIqby=~ 4gǥ3K7 Mjt4zB SEű|0K[15d&woR EoN%ڱUyN "2a["BȯHuDj~JR?>Aڷ{5!w$˶*9[EMd0NqD8agZClfkIыA~|/vdA5h?֏?1>*mrś 5+k3X D&K1ķ|: /7$'>=ۤ8b ]b1s/H\yO!LWl1ԱEJ|D C c2F 1ʮr֐ercSG-YX#,[B=yNuܷ:g@QXftޛ hŀpp,Ȃ ـĮxJ4)=MQݗ\/ͱ/ ۛ|1,i!HUդ6RoZ6vUO Wy $v=&eά`FI?[%Uewm n͌ebpx:ϢMϋPxy(-:癅4+fB [΃?{d;)AȐx4'|Ic 8GĄiN[EĻܢs^,&V$DO"+=C/X`kcIӆJ;EJ\ 3wy&Va@Pe@E1m1SO[hj*h,ٵ/RܺG‡HׯM'Wٳ  AYt;zt+bwr9th 9[<PA9lZU*&Ď3iy4ְ:|a&GHg0ȹ.ʿ_Зp (#8(r=w03y sw>l'B x.p`_$_ $4Si wB7QdɃy`=rg}DL3n:Hdblz5Eoa6ͱfu\*99Rz%mz:Pbh&L^3N$-Ň ,4ĆAVi!7E߶)ldBu%9,{F{ uO>0WVqMzk\j 'aX5$d0Ćqt~lHֳ:}_'?Z-k: `_fMNF+7*-ͶQ箱*&g[HI]}SgC xrv{}""xO;uzxkHgl2%'2ޭę xl|`,n)S =gCHz=|ڥ&KtD+W/pxG!Oi,T,)g arI=Mh'?N{:Jnt:8wr]>ϵ$lƘڭg_q,L! $m,`ƒy/S _Ws~BvjɰJ흵Dm"gC3 R=u$b,s1SA?EWY9vv/mx~1WDY߸#`P'-:0^LxxҺSb8)0x=_Q2u2fI{Q`_%8tR |oC:2 N1 %s8nU1םa %v:؋|vztwdӏt6ġd땬t+bA|dlb RqH-ݲ}SWqQkR_! kvb;-(җ@Ȕ GڢC9L76LhhC -6گdzMH9Lgo2! oǚ%.p}1u?4;XDXz xÏ׮Y]Mk0&yx!:0)jJ{Q6>޺W/g:XDo/5C0? *2W 2 `{l G݄㫃A^%gY)!( yow"_ĺ^kDtmK7v oJ"@;݈̓͟W&lK 8'7HPUhvH! N׆؛-Zf_q5[W3*,J7vރىѸZhyRT' l%#ROjĎ:npqQ n[;;fL}[#{g^6Y5\I>2`ײfUa-PYi?r@%-(PK^\Ce܎i ,+,R!da!WK:ns;Q"RW0,@qqRمX v%?@zxOr[ھT9!!񾷟:BL%G31}p =ASS;IX:B!{_D7f6]+1vpY=1y%4dWB"\@/|[s X'Hq@7+N/%}Em4 /ojGu(7m#Tj"N%j,4Qp64byZUzE{š{9gb-ƪxKB$1.RiQǗQ|2h>\'RHS\1GY7ei%Ny =7Eʦ]we{PYEaה):[$!b@/9sQ6c휃x2oC6&,g:/ n*qIs4.A3;M3CfO$Rv ws)FWYax..ݜ6T9}\PFox w'D2s2F dKa%83>.QHQ&Rq%+1T#㦰 fw%s NX tsh|u"cS1ݝs9ܪ// #SR?q I)HKN~s_o6V6M-J:ŷXڊ|(_P4,X"^VO@Q8yGc[?X!ɼrkPXTelJ$Q}A$w&x $CJo5 Rsq ZE5h5j,1ʲIfby{îКxeޤ7tZI3뼵E4YqNS܊S`[ _8 !bΡ;o'p[]߽,_ւp\`b[%m,> K'T 6ydD:.?VWq!ƸR`kJ\S8=3;i7Uq}J\N\MIU_C,[Ĝt埵{+i,7Upc=ZK!=y2*판^'D-hƵژS:ھ䦐vwm+Ɠo#"iAJf ߚ# ߢR =>tJ0kܭve+kPs}YQ܅f1J?yhm*y̼A+=`%SGUBQM[R}>H#In{*ĺcÇYNZGxi24< m+oMh $RvAss !.W^Hs8Fk.Wͼ `ÁE-La巓n$l.7H\ `l\ `r+@a9BFFz;AC?bsFK8٪z~o@xNQn#E1̹E؃Vnz6+8!|Qors!D:Mo)eDqv s"bX)H'^mNKHȍs< hqDcE̗quf">Tg*FUK ,ih3@|Lϵ"ƫ͉a#';^0=RA f*繽`!HKkJ FZWcK#vd53nW/u< \9]y9h,Ӈ,)lLCAW5S_yOZ7%EN(l]X"R j R6(ո2szj]C_ /zO:<H²@_j%e%Th 2ʧluKv6g( 3Ӱt!5 z'~M/%/$K10zm&#5kco2&t]oE?OQJd;QƜʼn3'bsIrcAz {tbey_9LtXٕN= MM3*< +O]Vlq =.os?nX՘;&vt9vRT-+\ʻF0'еǟӘ˜%AcuVY mg|ⅴ砼`8]J&XxMgLTT $n,2wUtCm-wg(gGً? 69U"te}Qv壛>h;ɾP)ݪeU';LE7C)ʝH8ǕUw@>5"*<ޑz!['48}ϺE&QpJEq,/bEi]<Zu m^038aM1U^d- swޢӍJ{[qҿȆDgRaMϿSʪ+jOEC r2Q*(Q@swDiI$K<[X#~לG̠H-jU2C |ȼT<',%g+I8ʴHLh2z;% b!uA՝opm*ki8 !{ױ KHOKۂ{〜訙TÐ*㹷q#}e5I!7!买ˆPX|վIz6Ji$E6e%BacF*@6.gЄtB{G+(  , e Y 8>7;cu'<<уwHyD bLQkl3Zs'X*&z_yJH@ioL1*'5s%K+L>/Wɗ߅vP)k'6|8m~%ES;]I*n<"Ʋn5A/ %l63㼑U;{LA[ãE7ٱcH `yoN[ -s%5"UȚ{8)vV-Vrr!<À 9'?Ʃ IO;^yyd=_aqy2*} $sB? w]\L Y#AP[6S$jls\l;<+U3kn9*Eؤ&|{%7nL7Pά9l-]Y8)ـ8 t${\$.Hdo[ecRdoFfJCiίq_*7ei+>6f Z'ToKDHjA֎`1!DH6)>\ 4%S2b+; 'Xw ^lCr]bH8;`Bfwjሀp#rgXDݖxj4wjmi}*qpŶ02 BwcywRM:(St"ں\{+}P\a/2縦v3ԅ#L:KͧTsŠg͹~έO4`sCC:LcɢII~?LHyt]sd~g5_Yq`l&]En;~nT<ߺɋN >Xr1/ COj"V"(,MctfTRpOD=ݬ^TWMuŊ8pf?-Lbrb`uuhk&~u8aE` /= ˖K=o=+Z!&>u; xH'xD;1'PSٓ6<ݟ>>ٵ(N~/_o +`T6xV{(T!1,| J<+/ %@N񤅪 2aql (kDIq@þ,a@BR}1eƯcz# Nx"4#v٘?. >\[1qK@yŜzxOpǏՊ}O|V3e$]MID_Ll nY">-B?yFDQfdF3B"CgiA;9T4:,sV8?@~֬.^'QrWy_%u E/!ɼ{rd㗝[\R\60v@kxB0\T@?  ชk+vژdʸvͫRښ,0S^(KL֘@083$m 1 ;aK"앣20sbiy)%SZS@T咰thρSWZݡYe$+Ͷ,#Җ-ITQx'0')t>>FE8tSQM/Xt:D-B+ cz mQsZ"ԦpLmyKk-Zj(~U,m@Ɓ"\WۅFa31m&-P lȾ#A+!Jɖo Fv bB .,A| U4a"mt妔N O28>~)[ʖ}c#,Hi, oI9FLy1 )PU_coy,V/Y^߬[|B2W}A4}(·B^q '<~ ͚"f~sz(iВS{Yz-U|G+h=X"mERs\nߐ-92FʷM6q^8+]-iǗtaNI$еR 1=Qx[p0>fp̊|(R`TAq>oC4?xsSi A [,/V7fGHT|{kiKV'*:Cc&;ڂBwX DݟUPB痊k.)1Oѱj4WdH $h1Hh]0z(˺jI*pc ɜδN:9+כ3p\!(fǼ 8}Xgڻ)VJJ9$M hwOd!?̔krW5. 0nOq88b^D0)ETt{[y-ٹ)R]p*2^;u)]Gq]0LZgdbBvb^o̗Ln P@st{V߱˖ x xʘNq`zn+Ych.;PTm /e_/-Y ݑ"1=)2rWrU4>{qԽzEY*^dۏwD lCʯ?Hjcs'ڍ'<>Ʈ }G2aKC <>W^g.*nTGp^3Anj_* >h'hlH},F|5hDR )Wk#LU H֍ύֶʮJ,qv7+OJF}{V㳹c̍x1x5%~EnYu;YS99.@{5(dKQR{3Kmʝs*%nM(A}KPakFxʉ7B}ۜ;]h PB(~"}!0W06nHMBZ%F*P+vxˏuN#SOޠ>#Cӷ}6S3kzn f4UgM9oI]ߌ +Uj E+BEjeVDz"vRpSr"{!7'qU ,<6U팓tm6sJ;Lt}3"fvT<1t؆JAFTA`P".M(G|)VHEܔ?;Ѝ\{xzCy87rM!>y\;__:x*! NN#$)|kzF M q|M{>|Ӄ=a[4TTJGyXP)![QϤ* t&ꕗ츨QN+J:E[6}ݧ7>zqlR~;O@D%'S{g>'d#5"2I3J-4m PÂEtzu FMҳ-P@as6E8B 'r-l(~&ğCNFHy /t MlmY;T5Ȍ Ε83bߡ`Np 4sҮ@He"F%>X8HCl& &zGCٿyVzBs;:fqaʀ&18h=#*Ґ΋*/ul{Rr&%mH x nj !o+I̴͛ J@$;l0F D}<+8}K5XqLN|xw7 ,ul*LP![h :"3 p;R8ZE \p@m$L.nv^c8$C?j9 ҷp+Y \ZcG310O% 0QނP7 < xrJuEqn#% 4,;ahE fk̉/NF'|bG;з@U>AN(Ԫ 4oN@LئRS[8kh{j=t|Zfrh>GIx8s{U뭾QʘqN ,Av?`'oW2#^|bP.-AΥKV4 oO{F=VZd5R mG_vʽN]@2$ŔG*Qol<46 Qf;#aHX/f@솚6)k5Qt ji9FA؇N @|Tu84l뷈ؙMJSV ffnU(9TBT#?2m9:BYqUi[{EFGf=3+"5^[#c4Z>kQ~\,9M"_p@:D(UT,LFWgl|By!Op04eʊx0bP.u8Xh~VGi+ oZ+;"̥ӱ|~QAAs]7|ӕ2P'X[;L' UO!Q2+9^ÿ'Ϩzo\a tLJ"<6C3 my? #HSDuU%;Zoyksg?7_&gw‹XUI׹/'XR=[^$qG"j]axʐZL#R˙ktLH0b= GCS]UuD}L,9﬌ti ~RSBq53O#E9O{ӿ-=OiE9 ΐ7"SƱpjn#Qô.FY\ 1c]oH7nzOr*ey0 .bWE曎4fbdN$y~V+<.ků{q+JmNeKl^s+\̊TQ[)?<&fCJx*j_u+#v/\:3Y m մftv/qi[b"Ɲb5~8W㗈8~὆>3k;ٷ@xS*df=rz.lәd[+. :qo?0n.'a4JJDhUqT9Y.\fw୯weaR{p!>EH+e*29Pxڮ߆Tǒc_9Wә]korI԰uCŝު/j,;CF`4mIY}D9Slۗ\!9>#m:|-?QYLv늍i#(=EYsD3_ %g\` w&ւo^;oTAIf$]BM2y?y (8)ʝ+Vo %j+گPӍQ"Ӡm>JfE &y_I|3pgG?/LrG1(=`W?QA~V,MY W.w@ &`K[?w)_*^ )Zj0dwOm %8Q{0m2FRMI5ԩD97Fސ~ŧa\bsSQ W4[eL.TZI} .'~م0)jљz Əa޾<'%QۃKԲm'3^O0oxh`{E%DP5vI"^g#X7Ǥ4csg]3+H`!\:nٮIl"?E[S܊qV׳D&- @͊h$̴٘!ad ؀=l;jsͶ{.Ifd7w\6)%-DeW"Ѿ{R2MKHY"? j 8 ufX Zި`-5k+m)ۗ #!V/s#2hQ|Ah@'#\.P}Y~ Q2/*"Ev,"!О3 R dW~|j|]͗'gAq45x;<9Xڬ=G"KD&`5$\}orɉje7O'=pl'VY6/'X ]4{-b=~b;mNNJ%HuYQ(Mmd GaL}2CB_ ,ՕʮoE4u;"6؊Y닿8ˣCNp4 <{SA0T<t(Dp"xpꕨYzvv^5Z;zFj#kĜe ۀ7g%&Yx=k-O ,A'tX_Up?wTFOVJ?^7.wm_ʹﶲӣ]_ͺɡꎔ^}> 얏8ilq/q8q|'&KؘkE0ٕAlncES cƁyu (d p8ŹsbKEPXmHy& ۼJ]"pA?Xms+`Nip] \e3ICv,ѪËpA?E7%md{aePQ!096tۓԍKeKj$93>J4oChԨ T bi&ztdUgd7(7L eM3zclR&i=96,fڠo]oC7b!e~'*җ8X.ԙV'o_ J5,T2W`)ÿ\ U}W_E/(As-s).$pwA] Ŗ V+mDhYȤVNu;H gU &]@ב.>*?(#[&GG^wuIϺx;"d[q jF5.SCJS.izve˶aޮ&pq[n"\6BTFVjFl?[@<|مqE.+f,dr63]%A=e4q3AfcLYq\s͛ڤB7x[їI 7CinZJhVb7,#V+ode5}~mLYCnc!E'p7&%lل @X[|cĆN>/:Pc `Xf} 0DPtf|hAg:!)i9!\NE,PhS1uߧ%ɁY殤a4RK 'Y,D:@rH|i\{SeEO!IL%pޓ)v}ݦ|u)EOO d[߱CFap!1].ba3W%Wr$VI 0Lh Wy8tR91@)l&o`(wdx /iqu1ğ#{L(jĒ'ҋ~Or Md&r+kccsF`r1\2-(Ot W b\J1!u62 * ue]lhLvtD仍̽,tx#$+V:1tp8(>x,Q${aOI8FbW/rP RgV#dqj8AGW 3) Dɻdk:$v} i26]-XC8i]N- LIM pkDXikښZN< lx~$#'x]y5Y_xD' r"g#c=ÂA kI^@ԣλ Vȃv59LY#eEݻ}D<U >Vozc!]R9+]H3 ci>'V|dZMk5`4 :9-~oӴa u7bn|oM5e]yole٦r_,O?OZ_g Pywuu` rpԕA-Є yʦڱʒy"MBC "9/ojb@Ϳލ:&J@3Uku(©Wd6RQ1wQ(:B-o)KH<oˊ VxVj"lW!HAa=jCpg*fq4aYի,/ը+f ܩBb6ͨwv+ KG2>- N& 4sOirDv zrAc1E3a9+k׆M*OxM9˗㧦mZ]+Q=W0 R+Sr2Epju|0%ZijIb;:#=8 s7Ȟ`!S?OQu>ߡĄ{Xn! r_6X'nXY(6;SZk}yѶ!ī\^7 I Dv<7 gj~ ;%%HfvHSJUa?o&\%YVxڎ> (o8%J~Ș~(ѥPROl,VQך{i@tEcmsg:qʄwW"|, 9T%Q*4z]'Uk@Y=,2;J_M6‹ :$ 4sQ^oVkY#406 3uXv:H ~ﭔIlBJy~ZX 哟4?s,nob#ukqpߌg.Fg*N/',n9.9'_'drr`yE6>e:6F\zMpj@~ =URh6Y-k`vWA%_5B[wry2pd /–~4mѠy6ӳ(~'o(~f9} / S!7hf+\2Q/>sCxn<;fx I~ӢK^M] ̛TkQ6ϐR"D swx!RDc O8{׈::ʱ9_o2y^niI+ct-m [,f)Z􊤓9HpidtIߎk %34A@F Snh$>JZFbRN_z( o{y 3bp0ŦVRVQ)Szʀ&GCE"h1)oDɎ¿r Sx'PVXw UtL4` ]>r3qkusu2&ޙpW I76p#6?pROj.^h^,z,m/u>h:?h2kpF&#e|ٹ~X^n{qU<1= ]VzDRG=ttIUuyY):Sٳf5Vè(ҾR(0fvdn1"RkGx||f˭|44:dHK.S5s/vY@#wUز_m+!;s|VNGWջ)ͧjhGe}82B_ 3ᚹט~힃j ]4nu[_(*EfrueaU>{q :Z_NK{Π"~Hg*0n`Quy(..Oȯ>1Ţb݉5`t^hPSҩnZJr0m't<#kl;R$P_`ݒF"Cƾ ,| :-<~cLZvb7mNtDCbűj~1u'Rfx"L;lЮЇw[Ed/, zwY{ e6S =]AD%v#KW/ET^RM9b>ٙ({=<&[S=_1`a#%i;;JTS:wi"R,dWcIN3bc)sR$t;_>`BLqGG2 a P<+%0H@E 1x@Ʈh@^ot*S՗|M# Z<] ] w=xKg!լ~z~]i#35ZxKkqV}{7F `L5$=1[ ym`e.mjtY'Âz-a@Wu!B>xw>}H[3Ь-2VXk$/}I 3u!lmhޕj%'3y5AD3:I[ {beZjN6H!J zz{;سk-JmT_uJϭ&u8k4Eց o$25D} ib%Mb~'0B49P #kz(@ߵCZd 4=Ga~*5ޏ:ɨ{Xl, q {ѳ%#Y>$ ЮHOpLbNVͻBNNs9>fơ7ك].&R֔95V6fW}4NWfv^D`Q7gn)$ZVF:ĥ mGf ;dYqVQe7PpN O`Dwˠ e9fS[g_䫲q0҄VdxǾ&V'{_~R}vV-'C<V-\4m}Es4꨿nƋA~@M$x+xvaK -϶[{_Hb j/gO߄CbܼIY>2b}YZXCs؊Y9D b=b%|EߦBM.*)(Rk^ {! ;>=6 d i9 n!\ɔ#;yP#zƸ#b]ht,Am^E\Hq̭xϨ<Α=-ݝp>|yVEt-To0I„z뛄H+)qZ.v6ltD g睎(:wёF}O5d?/;3)pyjͨW#&-մi Q?{﯂/z5I .)C>JXm>O+_s[1'|r&QFן>7ߚ{o/h #1OW/W+l6C-#I#kPjB=t@mBӅ"dIRmSt hC-B y|sb6ӜgfN*o1!_EJ_ٿv+`f;}nc*`,yu~&4HA[ù lRvP{RITOBUAVӭ/V!Ut׀W]tԄVgl>Ju pGφ[ T'gaG:M҂2EZ09 p~Y)VU+T<';UၫiMlq8[}gH#*`;ZWW 2u g(Y2=F|pOܙ ZW:|ӳ.uek[tѢ@(1b8\U7Vv8S"UK (u"Ew:DIb0G,c^l5{o"r|yd"+o^bniRnUvwA%I LOS65?-_g*rrr薄׍o  )?mrZh7ZI&?GՓ4vX`1[͈#4\CᴭYȓNVB}0ᄜ5ӁG5|.1$xQ()$ANIw:8,ZrGh`Hԭ~Oԟ7et|埡wFZs{ӫ7Ooǥ2*PImݏ)BJv呷{^Eِ9/$Ve֭ OP엊~L/K`:@B@XB陲`l:swUԨ%`'Arƈȅ 䜨[ .Hr}^>evBl@R`>cw(T! ېt|\~4;ro<\i yt|b*-EV|tbe7́JFV_2d:gGJ| 16ٞ`}Y7¾!E!ZS+pF3/b^y3jyVbS}vj"-ojX$B<,o  "_x#PǻXY&SG_Bu)ܢOα'wy(+1ZJ ȗÄ*Yҿ?P,F,&hzvXFaO2: q-bwd]\QBNV9@#Ay9wJLTG,>43|ƛ<+e1E`\Va|iv !<FRG%GV|!~fN-rbZ3qVH ӭYQg:CmmEEܚI~RtRyAFc_ǥ;bް9q;FbHwU_"Sqؖ[J NQt~<^G(Ri2b=9S#8ܛGgLt8kbV/ !\: W C 3Pi}ܽ/]8%wj+ `8$O^,j#~X;IѕV5Qp \~ lܼ!WjU~܌AYHtr  n̽inWl6lp~c#;Gsύ[ _"*]0省\Di-,:;nwܚv͛$ZHA+3Y#/QzxS௳TkzEe|`YW)*%13XI 6E6D6.eqTFB{[B^bPTɗeS`=5RXeW"fa\W19UdQvnX#rj=bt| _lk/!ft BzKayY:^(&hv 9K`gpb:;8BKu/"5%*y'~@ [[].=>@w,svN;s%H>cj'p7rk!˲s >E_WPfm1؃\ov=U;Q:H,%QڟTĠG],S] dlՙMG^?i.$s: w7: .ccM|=2ݺw"\2zG{-SXz+ V_d:]ф_7$n[\M_ Tr,X^W=Q8~ì ^"/Kę}E'n| {,sDBii(~+rGհ66.hi3eՋ)4wE6*,"y̐([07U-BWd]Tlll.X-GIho,XzBpVI2vWF2z9\(H/E)kIpLVWs$z޺ojFbXjc #Oꢲ$0jUŭ]D^;{{N$%w]Aq.;edIw?cFC7^M`xDke)#`/z͈|?T/OZ= Vtv*CiyP1_]a~(ܫ=X[o bR@,ϰ2 ![@%B8^c [QëJ`ewMXh+-'8 K_% ,fORS7FLbM&ެ4<N3*ߝan=u( }iG + PNN Kfh:[8E狼>Tޡicva\2:^-ă%)c'5$8Eʣ*Ya1aMB5a MV3fƬ˵ud6vMY_S8)I+.0+( 4v =MCG;ku5i _NV#md\eeըH];5?wAVWFONl SWہ9JkQE:غܚh'V%!7Q?'D HضF'Ayiusfgc'WgE7#+s ڡ&D|eREC/yᐵAt+&pτ" ӋBo>8چgd5«G.$Qnd^QTVx!XEX?J tqqN'TWc/S67kM"^1 =እlC^?1VRm-=3]!ڌ%ŠsՎQCZfʳw=x[ωCJ$б}`ys˝1 E8Eѻѡ'HBJj6jXş'\UCg.van0ZZaAd@+#D߈&qy[4KVD# vFЂR)>ǐԆSml "]7\T z@64yꚶvJbYUR8" ]!Xf(֒$ęL䦳K ܔsLG5{75j qqfئʠ{"t՛:纭țk9dYL1{'it;;]yy0NH,#0tx)&Y&L$a=/3f1Pi|{_ߙϥ &h,E~ fҟ1y$akm{7 8kK`^w)K.g=$\:n40G?mhZEIFS5Lcؔv ʬ,B{J^kCi[b|+Nqe/gZW#I6!qjlʴ@§#L:g߹scRg"=m\|m x/1{<ߓQ0`^(䐒E5a7sΙ[m }\(Il꽵yfYd/6Φ9{IfUf؃Z^y'Gf' Xkc:2nT5 "6yrM!x#*ދ費W;@ ǔnp˗2)3Zj#PF 4~,9v_ ܥ1P' 3Qz`UX9#"4 Fs,3`XtpihӉyܯ;B%`iYlafVJyP|ԇR퍻(n]nv&k(KO4~$˯DN &I me᯴3 q$gټo+ѩy:%%MZJ.fX%E{GЁk[Er=yO 6< yzDa6P@I\ +8*>\KQ~JU(? 􇷍:ͦ-V^*6nDv웧t/(ү_JGWh^"o}l7 !Mb;MZgBE;A[MBb(Di9c~7_Bi6́EA&r-g"ђB;;JΗ|VLKPgQ&u)=EmP; uOr>}8{ ӕ1d`γf{Z0,膔p @Fɒ*r3ΝMR4 SּܲhSsB~ߐGX*.{-|@w{)4 WUVBʲZۘwCv)AUL+Fri۹¿h9^Oym7 I03WK AGulI!Y6CW kB*v#Ϗz4{FN,K|*4w0#F}V |O>t?TE' qvvIk[Jtt%g/.;ܻw`1jV } 𑼍&CW]m7$*-]ԟvZN:bB]nTXH܋OU{V"ٸRbcriR4ͬ04#ső|i]8E\IR퉳!ҚC|dcn(=EDFBġAS=dHW=/1䌇* ;8Œ|FXZnЅ/QO”~%M5>Փuq.Sg?Y\kK2i+!ok X20oC#dR(Lz! n$ Ӛlp;Xu8TZo5,I/\YXu~n&Y O+P:Lۡ;nۓ}wZCmpN^_#K=xэ뇓&}إU#>uSN l}O ^$3BRNZꕴ{yM\eBkBVvq6̕!h< %9>9P C C,vcwGXKn%vԒvufYQ?/lS~p}[R5f,ңy' ~+(Ŭ$D7s3k jOc߂8ab_'K: |+:g݃6fmPn \0g6Z h26-PAO[HAk}D:O3IQm4YdEVԱg]Ϝ~ #{^ Wgуơ‘0( t̙,{5v `|3leU MIm:ESe@h/g"fpt ]2 M6oo@>6]H7++)uF@wfP?ޔC1FEVi3"hPyJ DߡUiO-1rDtl۲;V\ީNYZ#OSʗ.4Q7@wm%؁_r֒n7Z8A0R~k#6xn`./OkG3i-ըS/4*K+#]hIz4eZ:tG6oYk!%zۣkN,t+|9יìRQ^D+7qq-V4YBH"&`NXѻ|nR~4kbv_>b(~<`oWS1gm^Ч:g;Ӽ}u,'w3s ()-w3fݑrՔx\چǃz0+=4r=4b4Zh)57>` B IBhvO;ٲZM] ^vk$pHrV%aIjXo}CJJ6WS)sXHIH-,M~v Μ4+[IeP̕ IVL5,2Pͯ89谱-%Щ*'oJ<ϰ YZu!B!vzr7k@e|Zz|kyj;*мLq^\:OޑL1Ne7&'A*W nL{Դ+gr&qa]4j1u%}j2sUEGE@eHpKe &" Kܤ'6axzC;5kbLFݬ`+uϒs'6WUѷVlYiئל&|׬*`9#U4GmG+9E3?*Mwrj]Mu-ۀV#*Zaj&X+,Y܄cMJ^@-p0/'Óಘ%-䀇$4hvZ4-R+&Kʺ#x`D%ECLf2Ro>ΜS- 9#a⇀5eDPe*^'mgd5F*>ZmO .K-@v~&^[a%tWḽ;m%A!V$1>},6J%uϖ#[+I  m৵13 ?YhWߒ]CRR:%q ͳlqk:à~uhVbS'E?vVץISL 7ezj`zqD D9VkևT;EӚ4_tl21(h*vo;WB3Yx%=:័SHZQШ#39قߥ,>p[(A ,-ck|aoI~Hxxb+~k&MnG*c J(=V1aIG[wġ[˔.cL_VwkQ{k 4DeS)[h*~ip[ M6džZw,V`6;3Fug .l5T߷]򓡋ĜE!k!}<4W锒oqfo"x3GnL[fZU&] BXbq=o6=r/((V}PlvNªa =$E隠2b]1}[-;%RH+D->wǏ/(U9JH@iijOVMoϾ|ȉ}_@$OЙ| ^@hUM?BhOM`ߦ7s܅? d{OV T`jRJR@y~ ?LkkD䨃Ng-EO+Ezdkq@J3h7]n+[>\,D+=?UW@`#({ϱX)6ǭ[ |yyTLdzj"W-{8;YWϧGHDU +AR@ PJ~k~Ņ|ǣJזH h#  J> 4!)i aY2$ af`޺S ]FTĸ?& HiGŨXYjpǒh/AU|`բJjrE;G*彌]4M}VSr#o5(&Q\qF-R0XR+ z=z 79cҳDeL[#db<;p7[SD40Nҿ`n4xq0Ʒ,kP%lU6{@*@'0vl,'_sFhsupJ( D"QPPٳ#E k6A<:2n(tfԳ[ AH`Q8-TفzA2%+JVYV[7G[A7 1Pk lrEm^n}CNAz5ٌ*}{/0=Ńz)(ݑQPJC=Lrk08}?UZL>.ILHC]ckh;P2d:|^h#rćuɒx;Rw<#ߣjBFN9֌^2Argqq;#x%/ې7— l-܉sq՜-Agq璉SE/T2)Hqj$?e(R`Ql'JDEZ{rٕ} 6\HހOsޫU~xb ǻIMr>A۷j\EJrkqےcgt"5UC3Wyz;ʬ`͓ 40&%O s}~mhFu-y-(\E=U7I$2|#<#0BK#f'0>?sLf7 K 5& 4j4F2#"sՍO[x JL&* ]iBP|P}BlK˛ZQu𛋿6W#IyRȌ0da%9Sb̨2%r8 'ᰎ޲]Եˌ!f%M uB| T|!r0 R0h#Ip}&Ea,n+;9dnZgOr~?jA$ vQ}EAϑd$>UFQQvn5sJY`d괵U](=<3 6OO* kk %ї }8& 4?R3?q"?=c<Q9y}>f2y\i H_Y9ä 2<qi5t ܬRMcub)xYD3̹euL^@eZ奌2_(lm`"dŃ nR"&,Z<)u ԱOEMC V{rn͌ f]X}oxnL<.)}N3@-|d)RՄz>!ռw.\ cː:դޕ#EW1 Q1 ^[LHˈo[ v8e}N滫!Q6|_ r: ᕎ5A*юv*yjV|Ҏyf,`@G;w wɝ<2:ޭ U\q!5ڻy!0YZa@Qx`A| jU.kPpVo0`i*MY20SoaE@bR8Pt}[H CT[ OV|9Bہ+S?)*VCՋI,e~e5]'i ^v K6[˜n+gTl ؁ ܙWL K|Δ Z 8{vSybS\}e{x?KP!/%~˷-W=uUۏؼnd79qZ5Ez!0YnQ6]0Y$6Guе7s.Ww-oNf[{wV6/2ГcOPW`RT}a,Fgr=sژZ3ޙ/=ƹ  O=|@%f_H>]CyQiUEf*aF"c)J%wU30mD+|d OjoZ| 4>**@.0v&;&˟ϕSܜ/AQ)_w~æv`?Y>ʣ!-8[s'͹Nܞ+7߸e53JD%V)QJIv4=ruxTZ` Muq?k|YuzbU8Ux oh8Cw֋Oo{'hTc (cOvFnw 1{MJwHgaNhmm0ʒNj| s9?"p|2(7ͼ!/c[8M0jТz/GԕۈDHdA0fj`T$.@6X#%db >Uim,/S15zP}7Ъhr 4n}Z o=sD?\ҩ8(鏬e"ctFZ)p#{Z21>jѐ$p$h7`*uezmՠ>v9gIM2u>\M&b$\I {s%CQm .6 3l:Rdڐ5(;b*`!E ,qIJY i~JcQv)pj!!:S5&Ğ׉Jyۄi_đsgOaؘX ט,rs:ΖEXwOɑU9ZJLHeC`&ssGGiB P])VoqQ8vh+2v*SuD%NTf pN>9vyj5i4t&mt-Df)}ƹq[(JțT{'T^}XE.kAkG~o#rfkf)0ú*dm: z?=UMiQAif|cGy6c?@G/' yOϳz)p(Ɍ`F4R?(KeMGֱDiC(v[0@AC l"ah|5K}D߆<.}ĺuҦlyZ8f[hv ȳ6=?rHp%7JzЮɤvv`D2 Wŭ 9|=&BͿ7g?UMq9M^~j@A>h[ڹt%Xæ1b 1ElHK8+WTw%CҎްb 3:Lb32Q>wo:Q2mrF%m~P͎QlmߕjA\k WXG٢O+J=חBscoShLR.-D Pm"9 >x KڦdL#Dax ̨Øm8X 'D4 2WϹQx.=_ا5la咔ZV ص~9)d^ؽ-)yS]i'y)gy/6)#Iؽj@ k.^}OuqW# @3ϲ&5n~}[6' XV>_ŸG_yur&&npr_vs6:b% nM"7M ވDbVSV#6ֱjylaDѽw8s\Pw{tX(Q @ YI U)MwVSKZWoh&R#9BÂX7U'}!,IBSY+LP`g5 "z7}Dg dKt|s>QV{ i3C=1 |e+ȴ#EJ)/./K;x+ZcsH>onֵ8agaʨ۔{g~k03lJ}1zw&|qnj_`ICBS{]?.9*\QCA^Xeݒ2agh,XɓAK1"`XV|G v0nJl*Ƚx8[J4MNiL) côGE>!eKqiT*g~{#_ ]=İ u80L]j] aQp!rkP+z.Gu4Hz=ޝg{?~FY56~"jqzoa.p7@me^ P=^Rf4BG:)B`%d Ғם=E3_WwS0HgDBv~_Q9kY`2߆1Y]R*OBhJX+Z'܀xS(Or.G '*N#ˆC}xLJb[\L0u^끠n$N ~*-">y{Ge{Vؐ\v1(U{8,6"R"}LhVIeCV)#[|6bYt1"|sܗih?3#BIGfӅ7!1{\v"sdvB+8/: 8@Vלa uOplsS"6fAV;V /jɞk[Oq|+ %s'oBG&^LYkh}Fpۊ,-A`T]X(46L`瞷gB\M2X FиmbBxX5U%RtTO~ k_w-R?:@)I+sne{\TNaF' Lk|rzGyKΨ2Ȟ: Sc|6a)+W .P{u'>Lh:jUe)!_S윏1d.pnKSϢUlii_KEHɯg4rh[WY*B1X8DDpeDO3VMc>N;9/(dn,ǘ6G6)H?pBOk#Չ>T{,rVR Hcא{FK2MSڃ.ʍ^po^BYD|.Ku0dw`񖤋 ]R'RgJR9qz!2e|]Jf ؾC%ASWFq\Ʌ:6}YwoK0|*:9a;3!tkxZ.i sZV)C#õ?/CF11:9P&U=|QCDL8# Bg?*UkF^& *XiukB:|tqV^z\&{0ufV>`qSgyBGv~/G/D%MZ@s1JmV*mFLEM D%L)֗niEMpwN-?kjP\:vCS<7+,hzxmurD#/oo(p3/ڸޔb< =3k#ϯwOtE*u'2,ڴRZGi֘*a^gK&;vWa{@uXS/]3A%sg- ]n26M~w?>4xN`~pY|ӻ8&SږHE+rݩ%:Xf%73>o9Ε\oT ^}BF耉/]f]j?EnXެ\W M[A:uR%4hyСRSC > ׺֤BS@Wfn:/;S\ayI.4m )H)Oxy/hNQ0ucMpMAH5{򩑹dLsncl_62K^ h;t[rBvULlck$ bFp<{XqT#àWMO߀ KYv y o dw,KM8&ebd7j3~}ᇅ,L3K8Vϥ)j`'zmuݐ`G7KP1o%+P YZ