icinga2-common-2.12.4-lp152.3.6.1 4>$  Ap`J/=„K?S*C8qXUOk`>&sT*~YKLP C-e C^ؙ&|Fqcx%*5{Xdw[JE [erSGr+CkcJi !IZLtɆǛ^ _?MK`טOga4ٿSx1@'hϵ1"3bCw=TooQ:[Xl#ڀ?4dce9391936e57b859e7d2a65afc0fd09fbb4255d18e6ce8a996b213d993aad89cc860acc68bb72268f3681ee3851021b36f8f030`J/=„Rc3l?_b D솤kd}>j>KvžW:R0@b{ܑd I `%n " HIUa0L"?@5{|P8ƣZ[Wh+ldjw rSDfZ$Q~Z B[jn}R4XQoM'170'\S<)@nR Hg0fUWKVw{NOw;L I:τ!mDGؙl/ B#R >pDu?ud $ B  4:AN.l. . $. . J. x.0..$.0 d ' (L7S8S9S:}S=k>kCkFkGk.Hl.ImX.XmYm\m.]n.^p brcsdt2et7ft:lt<utP.vuzutuuuuuuuCicinga2-common2.12.4lp152.3.6.1Common Icinga 2 configurationThis subpackage provides common directories, and the UID and GUID definitions among Icinga 2 related packages.`JXlamb19 openSUSE Leap 15.2openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxx86_64getent group icinga >/dev/null || /usr/sbin/groupadd -r icinga getent group icingacmd >/dev/null || /usr/sbin/groupadd -r icingacmd getent passwd icinga >/dev/null || /usr/sbin/useradd -c "icinga" -s /sbin/nologin -r -d /var/spool/icinga2 -G icingacmd -g icinga icinga if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /run/icinga2/cmd fi!&1TzBx"(6{ R v KxmV k | WV\[XFA큤AA큤AA큤A큤A聤A큤A큤`I`JU`I`I`I`I`I`I`I`I`I`I`I`I`JA`I`I`I`I`I`I`I`I`I`I`I`JA`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`JU`Iecb15525fe1bb7d9895d24341d94e89b54c106dded11f7002425480750acdffdb5e0ee43473df46857b4a2f7d984ed01a668034fbc44683afd800c2ce64d199af412760efc06446abacfb5a4c0e61ccfdeac769460211f8b0839c723e334165aea40f1b8a89b252343b7490759dec1239835384c1971d4dded47fa24c5e23b2ea9623e5b05d270ba79ffe7e08dd9291b5958e89866a9453cb4da9f0803f51fc9e14cee7d72b35ae62cb78cfa902e70f4f202a4ef1e299d2f5582b4e1525103cd3c90116aca20ffc434951c5a81388c93549dce8cf2faffcacd247f237c35d9712ca3d218245051a6f0bd50a104018fe26ba51c6e12ce0257ceea4e2a1a29b0d1dec7e4d57a2a048f23d3f076325eb52aa8a923c054888a43b626b2f898ad96c56314b4d7d70b109722cf56a1af0933c33f12698340cc174e112adc96f3296ea13a9014a59bf7af24e2d13a0b25205baa45fbe3a1400bff1a3f3c4ec183b6073815b99098562479813f84f7566480fe225536b09adad0c0190b6592b46d70c70e65c8507b64b1f44d9066b6218c375ed7a6ce119c98a6eb2dd50bd1aa700d8c8f7a909f7c70fb25bdc3665aabf1d81bb3073706a8abbadda5b26540835b25ce64dcc000adcac1bcb041eb71663a4e7501a97573d26b82daf8a19c6af7ccac210af1af0b080b54395616774843a1abdcc404726bed7dd5115c5e3acd61e16a53ebd95386ffe05d00cd5b2d648b5b8b597c6ba438813e740f2681bb9e5cffe8ed0b3d58acbc70c705d450f4d2addf2dbabbfad207a6159996c59dcb81310f2e231e21d36dbb4af1f3a2f3ac19a3096153cbefa43f83add4627ce6b6479ce919debb9b4867aa7b77855a8d8fc51719e5a27debaf181d3f5b6af1edace4dca2c4afc211a6b46427a1b8733f859a288051b3af634d5a252cfdd0a75e23e3e7b75b1afb6bbf90cb61941e2eaf1cd86bec333c709b8b9ee579e8c728ee0638bfa0c267ce92ca0fab10505507b6263c3bd954d9e6ccf52f437e4cb7b3a7527d04c74b97eceddfe02a3665fe6d0a6d21d4f46c654bea6c5c5438770219df2695ed71aca564d79cbcafa6702b9cf8abc0af14d2742bc25ea01224049f95c9e18c7263155f6403bbc2f488f25e9cd3bc32b59e3377a41aa885895f38f984279baefc4a228f6d68fb32bb7f5839a13360d1b10b573b32ed72c3bc39ed3e06f1e11296f0152f8e74e1e6498553e7092b273a77e8e4ade82f180c10681f3ab87fe9eb6f43b584e0d75dd3ddfa26642ff0cbc3a65520d2c6074f2d318c791d6eef4f0525da2ecddebfaf644fb9448d6db3cddcdc06672dfca2a349f7d3ce350f0a0dcbcbb8b986feb2d9e3576b15d916072aae3304450d45e5b07f8c5c336a678fd1cf38db21acf5af126e1be1a03d2705a7bb1c7262a92ddb58aa9b3b433bc6351d39cc68198f200a6206c492744c7e0bfc9867fe14a7ca307f130901176bbef2f54fbb2fd3aa9106a26b5638e60591c67e700aeb16802d81af1a2c053988023cd197cf222acf3e0a08173f6614ec26a6386beebb8e9838964de4a826b50f03923a973dd7fee3906f3dbe66a5cf6b4beb9d470508fdd8cb914b9d48c443aea81f464b157c97c6358177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643rootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticinga2-2.12.4-lp152.3.6.1.src.rpmgroup(icinga)group(icingacmd)icinga2-commonicinga2-common(x86-64)user(icinga)!     /bin/sh/bin/sh/bin/shcoreutilscoreutilsmonitoring-plugins-commonpermissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadow3.0.4-14.6.0-14.0-15.2-14.14.1 /usr/bin/chkstat -n --warn --system -e /run/icinga2/cmd 1>&2`_إ@_0@_@__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Guillaume GARDET ecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Update to 2.12.4 * Bugfixes - Fix a crash when notification objects are deleted using the API #8782 - Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785 - Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775 - Don't send reminder notification if the notification is still suppressed by a time period #8808 - Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8787 - IDO: prioritize program status updates #8809 - Improve exceptions handling, including a fix for an uncaught exception on Windows #8777 - Retry file rename operations on Windows to avoid intermittent locking issues #8771 * Enhancements - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792 - Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch and icinga2-boost-8185-8191.patch because now in upstream.- Update to 2.12.3 * Security - Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (Advisory / CVE-2020-29663 - fixes bsc#1180147 ) * Bugfixes - Improve config sync locking - resolves high load issues on Windows #8511 - Fix runtime config updates being ignored for objects without zone #8549 - Use proper buffer size for OpenSSL error messages #8542 * Enhancements - On checkable recovery: re-check children that have a problem [#8506]- Update to 2.12.2 * Bugfixes - Fix a connection leak with misconfigured agents #8483 - Properly sync changes of config objects in global zones done via the API #8474 #8470 - Prevent other clients from being disconnected when replaying the cluster log takes very long #8496 - Avoid duplicate connections between endpoints #8465 - Ignore incoming config object updates for unknown zones #8461 - Check timestamps before removing files in config sync #8495 * Enhancements - Include HTTP status codes in log #8467- Update _constraints to current requirements to avoid OOM seen in aarch64 Tumbleweed- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/sh/bin/shlamb19 1625770584  !"#$%&'()*+,-.2.12.4-lp152.3.6.12.12.4-lp152.3.6.1 icinga2icinga2-commonAUTHORSCHANGELOG.mdNEWSREADME.mdsyntaxnanoicinga2.nanorcvimftdetecticinga2.vimsyntaxicinga2.vimincludecommand-icinga.confcommand-nscp-local.confcommand-plugins-manubulon.confcommand-plugins-windows.confcommand-plugins.confhangmanitlmanubulonnscppluginsplugins-contribplugins-contrib.dbig-data.confdatabases.confhardware.conficingacli.confipmi.conflogmanagement.confmetrics.confnetwork-components.confnetwork-services.confoperating-system.confraid-controller.confsmart-attributes.confstorage.confvirtualization.confvmware.confweb.confwindows-pluginsicinga2-commonCOPYING/etc/bash_completion.d//usr/share/doc/packages//usr/share/doc/packages/icinga2-common//usr/share/doc/packages/icinga2-common/syntax//usr/share/doc/packages/icinga2-common/syntax/nano//usr/share/doc/packages/icinga2-common/syntax/vim//usr/share/doc/packages/icinga2-common/syntax/vim/ftdetect//usr/share/doc/packages/icinga2-common/syntax/vim/syntax//usr/share/icinga2//usr/share/icinga2/include//usr/share/icinga2/include/plugins-contrib.d//usr/share/licenses//usr/share/licenses/icinga2-common/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16673/openSUSE_Leap_15.2_Update/3cd370202283e650b0abfe30e211809a-icinga2.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxASCII textdirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textϑB>xrlogrotateutf-87e838b0c38ea41b8b7c17039c93e9ca222a013e6937abdd82b850785e162d1c3?7zXZ !t/.] crv(vX0M}t ؆T(@ϛ1Z%zͯ9LD=rl6UaLsp &[*cbP*cQv:'C:1>B]tD0 b#IhC! ;KlI'!NW#CC[_Җ_»owڽjg) ^Or.)g*!2uOSٖ[MAvXH4:y~ _az'1Q~?#'dBED0bpT"p {˯#/q G=X52]W&^u-](焼jV݋uBAةT'Np$%Dr9:[Ȏ)/-Ln'MꩫMAF18tzM;E;H "?zĦ~3E ow?:_/~y7. 3$st8%yHq"85*=uOD3E)_'FnQoG qEC?琕l /$51Yq X>,Ѩ,3سޚ%eb;ڤZg-1% 뒋v:}۰}k|C[;)Qf~v]H fx5&…p%/wv$b(_`wZRȚrg`^'"6frz],eai C?di|wrjZwwa^{F*]#G W fLJ-k. ܆ +WK0TМ+Ts -1Ŵ8qdZ&1%9u7t- %&.8 z#][fu%hz=g Z U#Fʪ;H'ؒvͺ;u]-i҃2A:%/(0s.gRV`*gO rJڝ0KqCXܑzːE(D%9&c 1 IECb + v !םQ]J@A/$H++WtԮyrѱ"t>Q6Bb| P}#??Lۦ.`#w^3ۄ(בYG֐QUee݋Zz.^H"axĴ2x{&9B8%_Kmz$Q ڊ.Pv !i1 Y@K-3|) ζh2^91ޚHS7WChg)@kya&Ini|V82Wj&8<X<ճOޚ6Ï5QT ߣ(ʀ~$j!Ջb.XR3="T~.迢|Ļd:e3Oh)H%\In3n#*'[fKS;l #G-G4-@v,@5<( M8W ,o3K|ǚF1b￡E8 yMbcCR츠9֦@_>|``+ ( K# PS'!#PRJW7b;aFc\c$|iu6=mLxCI~²@abc旂3sÎ]I]u^^O}a.&Z˂tJ!۩G g/f)R:cIעjmA[˸s(./ɴ„p ˷ՠGwQh`=3;۝|!Rz:ImV}xɃ%*2(+d3r@0̐6y^۳ߎ_OpRJ~16yCDg!dJ#qfK Lܯ٧zeV#ZQT^o;+ ծ>OGQl3u+'Ʃ}RwSh%ݓ2PNlm_qL|5;2PT:{$T]?:?f t6i׎mPƒb-Hm|);-;5*h0 gSRyLO9ʫhH*W N- Z)Xd*ou\9,{e qvF8q{bA퉖R<^R K@z,?+pӻVS&՛ukŽ'Y]@MK0yShBјs}:D~!eRRW |ʺ 4_Ơ³LWLO@X+ERFpx}?ʔ]/-Bnk*>3Y~F?bCeoNPh(? x<{,ٝiZl}P ZyBU@Rgsݍ)9tP%fmm$ hu2{(EN -_4ȕwM|8X |2~ T&_є9ly|䰵~e9+X-;jmźaHk%Cn2GzQPt/z;qt86OǼf{]6*$*@V*|+F%"2fi1T."e>L\PrXGv\smE h̍Y8#/}tl0`;./?5e:$izN=rmM$Հ"vX60nc]M I1Qx粁I7w4FB㑽|_ *\Y[q :@Be>2uc !cQ"lZ=M3dQtt}jnZ?>xl9,bw}3@Gxl҉솠yi,ݦ&+2&H#j #"0C"\:^e@ذZ\YS(&>ǿ^} Ks~jjTqOݣCS*o@H!A.ʬfw>qM*in%:+n-6LK zml*vRYoU"BOL\ P(<]5aյc\`{Z4J>Գ%s*A aPޟ9ඨWb'$ddP&;X`$&vbRy?%o)lI$ӟ;Gyߟ_D+%7tf?嫒L-mN+T5y& vfsYʏ;IVkOdxIzsZW( M6X@ZtUK8񈵫Ck{>j(I\JuzsJ5q ~DIqU?~H޲<8"5pUWX7)'"qvwN@x_O|,Ȭ+(]4Y-'dG IQSwHƍvF~TT t-i;-a ?sa(vf+rex?p@ U͔?_0UBȤO%Rm+i~B1irHEaSn~Pb,&?[՝Qn a@; MC*4 KXWEl Xr8g,nW/1S7^A_?@Fb;@6O⼫~,vBpe=0eaxf aW bEL![x?s|:0o24',d*>g}\n} 9 4nSet>U;Cou]d5)Ͼ5z+A €q2}7|}` Sʇ2;(?-ƣHFڔR2n,ʔdtC0&H3$Z7hC9ZFz(]@hM(?Q7%ח'&8V#zG`DT%y$ I6 :˦#]KSD妝^te'D'NsSǑл5-zvm+uٚ8UxDOIb] dmaTvRrY-c,gbUcio7~ͽs&g$!z|Nb?=/? p BE?.v$וUP6u g_aza|] aob\rU.}: \<R:ӹ75^jW4.`eKuL/lymֆyZL >S]|l&sOWׄ-Bc9UoaW~ia575=?Ѹeg#Nr}QmmoaW?8k鈛FQcpo>}\%K+pWg~ݼBp D:KPs厤(=b.YүqZ$ qU)G>EbA5Q<ܓ9[<=]Au S}f(VT˂F/~dlp8^6^iTϑyIWͽC> +Htt!Fvhh`91C@m}ӊO/0$5>ЍW/|h2n9|чz bj$.:ٱN] E-g(jo剻 w'uHB++]>> yw6 +)3AcRPjhX95"UGg B~w__X*?z ƅDֳ|k1HZ5,*yȶx)P.xMnU_B|/>`A \nm80{_ޠ.;-뺷v؏rH+0 l) QթHovN`:|lW_e ^?t@P:2|_z f5YWLJZntF=z&pE#ĕǠhTu,4iv׻?S]7˘`l_4>M3ޒdas=`(9J  ,d gU0(i?ݤrW^gZ|p>f D.d !iH.Ȅr?E8*4 }+-秊>pPtO܀M+? Y%HbWTwJc/܂aN;Ɇ∩wS΍9? ~b υgtNR@HfH[s\RC|jU[\cvx5ttNh?3,sZ5`=!kx\@`U̲jcfLV il7W Wqq׎|KPNfK" ¬CdCYh':9Y9h~XOj=! ZOeeuڭ5EG O go' _Qd*F6g"ҳ~{tpk+ $/u0 ~[mz-|&;-rq&O$J`w]o{f^֤G!cN)X _2BJCȡl3'S'ΎkWx Ogam3MɸVÉ9w؂b-K\2E=!e7g@M׽^ ۋS:ΨbGՄ̩Qx(j3 mxs@c ?ŰlxLɫ4D"׊lUhOUtWpHa%w麊k\amiK1|Zi:>{M.z~(JsLf hKV! +|l*Vm̚ZmO(^m{gOTp5Xtl^9(Ax>O|^=T2iKc"0TegwqlɖE DžXM%0F{ 6W^3}N{=˄Jx+P޶/vpӄsG'mYMNY˯(2HIqUaj+QL>dȤqC5Lf|bs>3uNjMz*g|k:4e\шҏPz 2uec-Q5zЯ=|=gƑv#BB>hYQH8HzC.7E8*Q3u.cDw-W8'3gG6O24ӦLg` +;#zֿ&csRNJ܃񮴱RGٹ5ri6B<YJ'#.!33]J;ʩj.]BnFre$Cq?R)ٶ"ޕ}MRRlxE?&iܒdDEZO8 {hjNaSHQJYYyJQ~)!/dFCG+[iU$0ɭA?gʊmem[fOM.+{)藙U|3:ŏF?~i,5ؖ-M>=gDK(rw)sk9e>/J6 j$:ίȊq`1TO˩ 8fx6 h3M.eoٸ iCo-i}LERaa0Pv(34(^_{|0N{FȻmެQTr)u:Q-LĆQ7GJv˨?֩e:&~ jV)V^h[`6aG R퐰7u("B3Jg?_yne )kş=S i\SIXxukS7ק6ttlnڂo& $%{:k  R",!47o} kD9|.|P7Xٷ@،t~T?f{36'CLBjǵ|B˲]#-#N{)neFhyQ}.N#΁Pha4HW@v4؇GM`5zkfWDjmBtQڌ&(U."cYqLl&BFfHvͻaAX'n)I/ #M鱣ΎܴBfvYrc>mF^_NiL*}a }́HAȂ 1vR_{rmcM̈XE];gDA.9;)JZq났ft+ehࡀA3 +S)f@GEpתSCˆ7j,ls;أ { S mp"t^w.&0ǥx2hqؘs٦;9wti<bH%wB_2P۪Bui"R3\flac[VRL.4۴/`hBL".8Сۓs77U,c8F&:J.AFm=9f$Ȟ&u}W&J17G{Eƈ+x΅|VR_o UKM|Pmi57۾,8BrFJYrxq2޻GՊ:\&zbn\CR ת{i6.R(̢|#3WVdf<,aa]τWϊ?ߢ>Atݾ/ lĔH~Vnqu%z'?  JcbPGj>1R|4}ȅ0EzHT.ڱ~*"w`lȋ+ѕ_%EÏ蔾h1^maO\6#)WtW !HPUw%W0"|:a?1n%=$`eJ1( T:0/v应kc_'7 M>͊f x.7n.qRc?v7u*f/4C5&ȏF8@:GA3.r,~/ڏRy5#OԭqRڞRqYSz'L K>/~ 1~,xS6, g>0+&+!{[4 ZGvQ`6_Kw3Ev%cihp>G|ZݸX\]RmP&T@4g6X0ߜq],Qb>X-fݿnШT3/xVj&Z#CKhPUZ2`>L0=Q]#4kN` Pmi-)x͜5T=\Hl%_P1[DS2bٿp֦-*op)DWH3ȃS%ϑ*ϛl o%%?0“}c* F*~H B3уsem?Ͽ3LXf2p1NﭬB[ZYqˏ[t^S!9beq:}Y{[#2 $Uv5EW=>k-J5<6u˜BE9kJ ;畺S\m;mkUtLXE1_Ԥۗ]UXjR@)7Ǎ4kn Np¹1\MR,/"H#ll0YO/JQT'&_xSi 5?v]68k&bM'R5l>9"Tf)+XPK)?ۓLx% G$4W[%FzubEbW12~Txij`ld#>4߲%^Ad1YܡӎeT55 GF57] А)tnrA‘|܍6KJt˶6 `,xE%F`!Ql`>mWzЎJ(. tÛ*ԅh|( J-;VB^v;CV[aYjt [`cwijn"u~_Wz4~FdhXQxDzW{e!]nD^'9sc?H"\M 0PDW<=c-XUʯ',ujZb>L-;SZMO4yx&@ŀXqA#6nyS#Ks;LUW-f(%79m- A+wRbrPa^ׁn4vF\(q,୍g_cg p>[gxRKϘm62P::9cM'PD3̺GX3{ibUw@[YSڥ)Ū}id›},FO v~ VcKX#q-v3[[Pꏧ 4oO;Y$G;b´/g^2OD R \qv?558p'̎YxQ'Kw)W <4̅5/M ?]qsyIbp&\liabbٶڗ/_R1& |ޭ4!)X#Zem>S^HT֛OOw/ I17}>Z5)<`,;vO{Gb4<1@ﻏdJS)?Xs~bQ 52ˆo rCXΫh1{QnDq,):a}Qߢ0mNƓ ?D{ff[Cؾ鎷4)lt]g]ۆu=w$cNԀ+#~AotSݎڳ[.&#nV=ю7~[UKі '\lj9LdD!eJ}nV ʉ,FF8OX{ ga#lb8eʔSp8m8YV09]S`ᴖ+=+Q?.vsprBw3|dj $|?,cݼScZqX<K<nڢ8.ѡr0SX2jhQ-jA@U8VRaAeևZBxE\|&EAmD5K,`"7rW6@y [ky.'܉E o EIneBDۏm엳FF+ obt)t+xq&k>?rtWE 7u5Jw"ׂsM|ɟ fXæNc&N pK}eKhKmՉ;}:m|Y"mXWve)y`׃j-$(5OhMh?P;Y\w:hyx4Ux,@=b)/\ fZ=Fi aǭj{\m03chi+i˗=nFzu4Jg<]|@?TvqYl~QfanWk#ZՎ?dcyB}{<5ޏh F+ U$Z2‰0AZX'LeXTz]:'@>1YQϴHQYM}!yu)tp.m(SDy\vdaN?<ˆM*[g A=S 7dMڄQ jnAsOtk>@9$c-!AiIg?ϛD4L }'Che7sND  ɰ3Ȱ}? 'ݿ{88Kx Ӹ]i} G=d5437w‡l Oej 9IF*rI`" _KF5' >לpHCVűHճbwBaAT@{ˏN $&UVļ0: f2y/!:Apj@+`|>LeEbRbZ|o;O \UTȚS{P 8f<ȹ? |Ojv@gtʂ?"h ~it.7+t{FDω.cP|rK}f UWPB7{D,}o!B;q م(Q_gT: Jw?#L=/rMb_03󔤳5 /! ȟg7tG*:6rR#VGb :J/`FbꯄYʇs(} qy"xwM?fpЫn5+⚎dB%6D j9U!U8 be  ȠZyzVƻ1)>G 4> YZ8Lb#!%oT"нJ- Zrt@zTJ"@j&Tĸswjt{WH>IrV[,4^0'>iJf+gl;iNnM7=0T2դ}h C>-'Pz 2AS/fU>&'n]GHTXn{JJ7tp❔Ք(Fo~某``d=h2hpv }5ˋoY  զD!5Ni(2 Z }IOU X a[C LsL) |lTyC: :d_GGMy6/n}[z69N_?$ OJLO]~:-MF{'bs/ߡD͐8΢K0GiXh~7*uaM-w(^vAgEZDbP@h>zc1BpC# XlX$#CJ1;MPgګ-a,O !'[=;`M$A&uhr(\9v;{NgЗ9(5u~w#h /G8PX8vc|l-=W MSJpM +E }uȊF84EzfO+좴Ld0ف2}hc7Y=bABA5漷m@ԕU&# 9NMY~08Z. !$?A!hψprP.ꉪIʍoAK혈فT$.c8ϻ"^8qc n|U/1Xo.CmuG*J  24.D{!G+fw!elo4li=Ob+Iߺ)=…Ɩ]i *?Om-RENtґi@ C hz,6D*0v$(2VvyԹ[bDnn^ .*g/6\b-&1`gYp_PEU{t)xTTL,K[ø{]Eb86\ǝ'%uۡ9N{k @"|T]R)|tGa͜%;FT~Vu\ꪳڋQM`d Ӊj VL-@ʐ" 6RrsO]nA%) }*S _7#f@ZhM0bl1W7pV0Z~*D&~3dR([vcJ[*Q0"j\2^700%zVZ_ 'ۍʝeq.D;Ս2:4a3>C!4S& ƍ/sggMѦ+ Th˦A0U>"]kڢe`S{b&cP=<{6k6o"ӨzK^BـڱeaxЮ6}6DK-J,P>tfI<9_57'rQ끾Ar9 x#'3ӎX b=iU% rL0.Gf뚼HxHkd6c.G?h: k%":y%?!?dAV4]%D8{ { ,ó_xĶh>ڱ  r2_w3b֝ٗdsZ:\ ʵVi>#^ZcdW`r@ ~;Ψ.Rr#o3&ܾc .E&z8 [t{̳699f)Mg N \/_*G*#u?c (Ax͠loP#1 Em?cxv幟~4MqPNKlH{=ZHse+mn4ׇ)(:uֵX`~~89F\IM5Ӭ !pq4 GƅQas`*Ldlx`?mh^)TMȎo^}5! ;Jem![ #up[70kk26}6(DH%/f_!y'ʯjzP_ɡMcI՞'P{KVs1J}l:E#WEj&XB;1Py\p;  JϛȤP%A3oiܫ?HsO5ɓow\Zw앎::I^^p5>Ҡ8E~{Z^n!y&<e˩J׮xyI17OER`]ۍDŽ՘L& /VΊëHL}h!\‘"J]dyX9 yBKK=3 = ? O"2 F~WF$п6Dw8[SƣoR3VY|6@.PpYrӨ6A+דj! g(hZ%{)wuK0DVY\8v7$oR uT.ПA#Nq5SR6Bɥ01'=mxjR$G*u~;mp`gD@0TUHmP~] G謡fZT72>xC"$?󟯜'$ɺC!+w*ИXFFոyGHK̽S*k"Qg0f0uvN܏-nU| V%"xP(5 zM^s(K̲pBS9S m'Hl~nGC%"T{M',]1\Hoܒ:ġ%ٻM_H?R?A3n~j36N+D骥6յ4Oڹmɩ!KT殈w |@*K &eо ŵZiuӭKrRƦoS`U>=x֖kujNyGx|/ V̢Qtȿ׎΂c~ bP(߻(^#iԗlq5kNKd2,5fz pWo2lQT(5-7z ^z^/lRS"{\뗏@d.?J:ݹ+^Q+DӅŇ-:(A:HD06gV ` N9;) É ї Q0eϮS@?[ʅnpqpUq hs5AARږǕGE3)rI aM h͇=1;pN:EKF1}>WukV߹̱ҠcYO$?no*/u.U:ƥ _KOa%w0|! HАW;oG 'Ո5sZz_XOָ]'q:XF  >Aװ[Ⱥ jeB3lļJE>0fGN~kMI 7J*Y+爄 s^ýy{5_*5*'oHmFu[i'5G]JpQA˅{6SXd d/?|gԱ|1;D8I.V6Hލ>OO|ϗ͠\AwVaׂrg\߿Q& ԗ'rB-qmFLe,;Vv28d= "aSM橅 ,AJ>kƬh J5I17a놀zvBKkkNX8BYjk'WN .>aI5);ݹs_q"\2v]$''B6 DD\5>q('gK^>Un{`bTޝutgdp3`9D>89CtN>kpӛ~_EGR%LlU@ߋĶ,s,ZĦdm! tUr|Zl@C'Qbh]G+S'T6p/֐|`%ol7xKilTشRX͕}W@Rg4P[M6dOjn)Q$c>pUƋدJPx=nu;O%ߤ#izxIHp"LĎ4s-0w <$= u ~hK5@߹71} v̑ӣ <.RCP{E/=PE&߷&= y'R0InA ? kx$h]RG9VkEºۥ1 gJK\KDaa"m :&V"Pr~ NgLձt5CA{ jw@]R(ݷhi?ߦ9GCLߝc\^nݯ^טht(`NN\듢ݿ¡,5UzƿoFb:}R7MOVJXu869ّ%LG1t珣:w`GwBgIĘ' x'OJB=쉒p {u2QĞ5 {Qs<,>kMP}-u \dv;0! {g?˅a0^z+\MmdoXݍ_Ы|I~=΅r-׈-26P֝5[M3'iGDyښup䕟d M+{hT.JCڷSrr8eP2uT6BgsE޺  z5$upb:j^{ ̐&b6\!.:].#HL39Ln tYG}k2% Ho`eDc7>K8DGl,w@&FJYZ S@r+! N}ng)A4#\4pQ3YrF|2,tj!/lvJI2IBM̹Dj&UkO3#WelM`>te`~G+RJb(*W@6(7MELmbjP*^ ADJ+fbF~w;q[qyzlP4(,&SrV¸~M^4Z2wf)T߄B%aZRmڒBUe oD S>K9DC"~O4å覩qia!J.R»$SsBϵ#fh- 8D}\ AT,ģV|ϿȪQ[nI>\*IyݭKl3c3̈uaCwӋE,zw, '8x VN>?vMl]HSw#ǃSXkٌU_ǃC_/M.Ly㓶mS`~u֟"sAfQ̦y޵ڍ|]uPl1VRTi+\+5t#} dŒ黖RJ < BS҈v07 ]x6Zʈr SR2AgSs;o3P%7RZyq#)-(Z{qqySu'>=9=tz=ዩ>S$PJ+\8kTvҊz-"8- wgt!c."(AdǶl? m~5{ۘ9g)ZXD";ȘmϺnSٳbUe.ynw._Kjۘ5GK=M#;ȯHhŪңP>"eǨ@q5 6j 蟼i>E١fʏC/֬EQ" ]&RVrm ޱAE967eAMդTXעRqԸY1%RY}HQYu߶]Yx{{ߛm rpncd!մbV$g55#z4kM2R݉fq)eMN%pfU t.yT^kIMtWaY&V#:3]L58lнҹ"t#= P.+j6{`ݯE ?MBSѷD9*$?,6;[MK_=X;B'2.bRGWM0-y+ |UbP{.ȳ_wa pLJTU_aK.&\ssIC`cfgg筞usyM+RVڮ OI3Nid^8`M*RI9Klըx"W" h뮊E `|= Zشa qs.@ҵ`|(?nG|X$@߸ 7T#0Ix"m(7VG}r}B-d$i.1ي7K{vFwZttX Jm*.!>(Yd*tHIj <|dI9PLS ]ܲI2 ù*r*~ĺ`}>4An9L ʩ(%MJ ׅk'k%w Q$r=Sلey5&ļ v8"bXoo7Z[u'cp6ZeA-<=r(Y;!ggRĽ&Y, ApSw&} 3(* ;QMrږ"-FCpaC\ (Q0~c{6SYi;t8bY "hC6dnWEԯ6 4I3ƓH͒kU17C'H}Y;Id6a+48ƣ)O*σ"z]iv yI 'YuyzN{O̊YԚ!gq$lZY4Tԗ+\1puգ_~DpI^37T֪V*kaD8VG|Rjg58vH[LozZ"viv"0AnyW`ڒ!$`:}kMAٝ[XE384, Bh d>\c E7ӏÓz S:r0]J^\Z5{'#z‘Lg-u uXRq|m¯['-PMҭdàDzq q`vLےVet v$~/ [ueh|&xs2&YG7xKA3 ΛrL49K:#"x SNsK+5i "B#%[m/2'|r9$;}%A$*x2^m&8q~Li_fˊI|""}n'Sk;a19v#pbP1Gnart=ؐΩV0X|T: oߊIȯNB8wUΒ+XDHw |i^DpL|iWnvlfAJtt F_ ޑ=Z `gANh~ӿEji$q 4J[M[/%vU~,CBz2t@׻oqЯ=]v!vQ*rԥ>/kK nj? 6,/Y[1 -W ?ֲi=Es1hnRʥSx#d0>|}[$ gLq79i"6:^wORiJKѲPnlkU(b ~j {$l'* 3!<]'׈Es~B XDJezPDХ<i#~qP= վ$S}?䯾g﯁' S-dM.;*myсQU X"a1o4|'YLb6 ^D$z?lg5@,tHHz ŎpGdQSlMcQZEAą [K1Н@sηY^A˶)XV܋Ud: >#BmmC _|k0=SY͸Pq9c̪2/iEh2Qʼnc6/?9=b}yvm^wM|G%{tL8(FdJ!/CݩMA!DZ)4MR2+  IEc:H{:N5 äp|P-ީԗr{ .9Ν~+Y̱ڐu2c`oNiı͂\!?30)΅E*|JCg ;R6M^ϣ&zBz-²j0F?>‰փ7` ? s/xV\A9(2h?T<@NmVX|jj#1zzO4îTYوVAؘIDiaVl4FužFnH}jųL9bq3D1xh0q75'!ip# _k%r%~fUPaZCC 3~xKNxt kd *?!Mu~Q5XZm2$d2f׋g/%ﻄ0v ^rr [.OUvE=Lcq7X{[S *]]Z-:>M )Յ&. %):IՇ>Gɋ٭~R -q^rڻ&y/yDL/A(pR*Z\Q>`4yϾ/h^Fp)yw]tؤP\$yJXpHP*:`P*P ܚ?gPi+487!VbrU'YrA<)yO3R_pEkm)kHK[ \\B~s2«.z4c@P)ǎ)z tSKZ^_+l8;}?ujow'$+cFOd!4i~n/vSO6r۴$@1JG`{'`O d;Wv$|`̕% dz!5kag-ꏀE!9<[d8d3礰EkȍlX%k'=;e"[9fNwin' }v/ɰ[bc[[*@+.{i07>y-ԶsksPX5Bm!A2w ukMiԟM?N'0hOfOJtccƶiss_{E~)]tqh/-ooQ\D@査e5JdcoNf<,d JR81:\>CDKSa6W'pP8bN~2&INzgjoeR=U,qvkyXr q|X&.- GCw8G-AK-tMj'%Iuirȩ,]q0 z%b){9Ґ郺12T&Cc4:IKiC2 S.0 E+=\?*7PdS*Bm/G;p&~B0[;!qo.q\޵)idi]>1 .|y%TGSt$ ,&5D&l^WHZvM|IH@r:YA(7VtxY$dBbԃze$jV=P&o:4X_pTh.҄H{H*OW+|@(+u5'S3͙xi`2(^QwXHA~$^R=3G@]W-A]-4?;-SK"C|(,(0µ/ 4Cg1ZJx$z -91&5-,Wq:j }rX{aFPD{;'HeOW}ђ'U}Qp/m ׊X"ɹHg]N>8꡽b~*ߜZS/rQ@6Ni}&R٫8q8\hM0/Wē8MaA@ڢ-J][D)zmMdR$03f8` +=v)/t", ̙>*GQ@=sgJ$j-7ۧ 1'z 6&A)J,!poȷV4)t_? f׏{,r#uqG>qrArV ޣ ƘSRDI"ʓ9ʴ8j^ZmM6i~vHHPz{?yXO,&q|ʒ iz'5&,ߛq4q"$H6ǀcn*9+v!JB|$YT[ HDn@3/E|/@&,_Ɔ)moU8~j,NG=C$i+n(hho(UtjU|HO!C`<ρW3DAJ5ƚV ٯޘ+/st^F˕0]:01}fϨOI4rMeHA^!fHj(߻u[ͬ,> ׷Y3҉xb!^(6Q3z Ǩj0)Aݠ>Ʃ=CFNeA5<5YmyBŮFqoBu=1;ii"viX݇@yE Y;X9sP{6\,c4w9k3Pt OUHv[PHm$S}5{\%IѢl6~I㭘>gRfHƳ@06qk|iawZDfjV>[>yhJLީbX^9ӟ `h,rl㢁7)'vv˹ @İGԳ&dN$?Z+mq}] }wMr"^34 FMS:n~D9th#P/ E0 EbAӸ˒2L YfGNc S&5̇A ==tܓia!5aDnȬL0Ub[F\Jh`,7wE*29TG2t@8Ewږ9vֽ).\ &! h&V|a7arMd.{?j:ip 8 '5,+c ? %unS'$߈@ʼnmuQɴ鯼 +3s -aLb&H~BiNKGjfgyy-+b:wO{BO{f@/ۖ 63jIoǣ#KY%iT htUAk󃬨j;OٓN0SS,5Pr "8qfXqk}iq 3@;40=}c0bYDOyRr҄9:yqLi;ENb_=-=a. 5yjQ=bO5{BR-#Zzh,Έb #D \$8;+;d+=ZdV2Hݺ˳SDf)"ٔSąŨ{6uO C"IMlj ',2eZ_T(/lfeʏVf[qLkn@Qx|W{XyZكFPY &.ZW.+ƫOP:AFT9ΒZ2<m&OsVPGȯ7 } ͮ~U @75Z i}sa~qepFmy!Udde-rab"q66*<],PĽY 32iVJw8քoJ~u6;@uzcq8#=RMވ C?[Z/BvV]yv4aYe~`EZo^D3KvDtC2|p,93GUAhb7ХH\rZ]RMg5!6kϴúIUCQL!Ogx`qEC$*,(-߰[9s {`Z|D]8f8ɒ-zEp##U7)!§Lw(5T(zP܎|B/%E&ngeT AmJ EKf<.ȞoZb '~ AiVybxnHpvCn;^6s5 M79 {1q իt3os/;eR4"F^=6s1ISUF4YHԨaQJFNPAlw5}2A8չOU%'r5+0o}k[տf:.1" 1B@H9LN|&xуJ1 .'Vaʝ]Z륫 X!wC |(>v1E/vj]5it=wP8s[$W,TUsdU :6|u[a`ޔ<.XD@O g)}E ]x{bnWwN#xD7k_6vuՅY 5xӕLO{su}^izW8;݇^%oKY`,j[;(z-#+Z^|'ٔg"'u5߷U|hBUwV_;`LjQTWp11>Xb"vac/xGK5|~L 9z ut3"%@-E$է-w<)$4ʱivfʋ4;eȉW} _ôUTbܸ6}Y aa6 e4tZ^FUZyּ@G.iJv1pAN,)掁,!T`f1v8;_TeRd*-Ch5DqfsZ;;U:I!eH%~ٴMNAk$8/1)y+9'z]oZئpkOԽJXDYK~bBJuD0), 7]U"6䭔pb,wةޟ/5v+6r3_wnLk``RHss'BW"̒p<@`R@;q(sF8O~sYT-Ԁ#zJO@/ 3%wG $.MS"a_G5k-灨?<ؖM){CNj)Enwk]ia\Gc`clh"7vfP NlYdf~S"lH}O!'Y{F_tyM/Q[cҕMvyoWj$U.|% N dnm䄄j2`>4d,Д@`>&9[H;Z8 KsZXk +1!^T{|]\9YB޻doCez74ZAcL q{:'N RzVE7y)ؓ6yE JygSƻfx=sGTQjFO]ݏK_k0|7S jET͑ ǂG6a %ўY6_tPp;6>&(-x8!$4״0yS`e`C O(nWv8镬prE* ')ܸjbL`lZ>j&$l^=7`F }_:w.ǂJų8Ef?KJdf-KU|*ggo9KK;s$Eo.knfݐ o:x@~E[05dyg1ۼÂpsĒXx䷭)kC% 2 >.Imٳ 6rQjԌ\OYE(iv6;aatiDM 3} |Gn'`ב/0ֈ7 TޘrfOfrɴT}(/?ueO}tmtu6c'i%lIG,t|LMwC }DT9ykfQOKp %;a6@h, C]5c۝׆"N-{O:,D(oPBʼ eEHsᮒ74Sѳ28mF_`ˉOYu&k)$(t{z/G!Rnp s/$}\Fծtb$_=29ކphg iqlgٰMcw&C.p<=/vMa}Q!G!rn93h|?m7wHV[Ne`NɌZ& ;KLr]#.rlX[f\b~̾~\vG#O0K4u:`yA!#*(\XG- }c`4O@'p|@&j u."U 0gYիsJ&^#C /7#0/Ddc1rߔ{Ao*| ޻.oI#˟\nDzliN3il<ݤmz@a 9 W,oqh su$A {,T}k"u BYM! n='t%]y(g+z/_w>hWT uU'zYjiA^W׬.]*3+ExyyDyd OQm,Lf)y|!0G4lK;!̂xCXՈa7IG=檚FX#:e{5:bAf} Ϟ X+no1[ǐ 0Ze"q zR2;VR|z~檘AIUD?(X8Ւ$;S}j=B3L GN |rnMnڤaY$2A򘬴kCk:1pH2Y l B<;jS13>^R>@GI9ɭw)`~ߊ9)rKAkA{Xgm\^SRˋm!ԲlQ$?^y=+t fuҁu蛱/oK_G@[*9ӓZauT} icQo"傩'qj$<W;rz. K.MȖц@]p.PPk$<~cĺ!Q+O'7JU?!ϓ`fr#b|y%gQ`@su> $@2?i}F ȺrX S$45Ғ~}4Lb|h >Orf\u_7,/ 2I6A|2GpYǺL}veH,Ũ纋R$(z.Ԇ/!AsθP =6| sC֎##pr3, T TpiS+wQ6h8M~aC$ % hy7x9 eo{IQ`0x(Xv)Z0  &6Jz  rfLk%܍ĶJk-lG|p1>3]hPGb !_fh qZ:n$ѱk$oT 0 ڷ%$|z\e6]GNȾ:Qܽ%gh;pyڲk~喪]degqjGt2Q>z;OB3Ǭe59D%铏h= BjѶ3=Ҥsσ޼ c5gnS6*H KV*;fņwD: z Q3G|}>9DBbwe ֫rFIFDXVbV5P_m9 0A}MNX]`hFSx\2I@t>V[o>^3UocX% f&+[+{%aum8Jn%^qV2߂b錱HWB '=Z܀K{O4Tw;ЙǨ#!CN\<w{4R:C9(l1h6aL_ZnrW[R#,mHlPzé6-j{9"FiצdX0frߪsEv'MR2©CꙞ y=ɨ?l4:-g~wL?{U>]O0( s_`)AN_{D-5g >KJpOh [[ l凅;\@tV׳E-]]3uQ;Ba\"%3m ;-.wf٤ۖ= K x)wBV/ AL\&;eE0x">"xp̺n|f!_l066- | 0q1BC]8Tbp7h)0KI@Ϭ=*[,S57ZO>e\t:.{h3gjM]I5dIEv6?ۨ8fiYj%] A~5D'YɈ&[:Ӄ@$/=1jdFsS^pE5I0*>X̓NG=~#;No;Yt^?Vͳ2{m.MO_UlPTF_|S2/"ZJfr͈+~pw8:we#V[G%۽:N _ΘE}渣9L$& e]@#qFeaEQTP_9~nzT^ހ>0Ԉe*fQ*o/>Ǒ1 V@y}\Ewɨk2SeZꌜ*Wb^J^yTac=}(`\וDmڠ֧n2soō.k+s*!?1Ks@3-c K@EKrv Z;`3H\zHmvՈ/\IsckD@`x,3XۓGvaYw5ӣ?vua@O.>O+*?$%XWm5vDT<>T^9I9ٟRi(NIIY b#lXm@"nUzStOgΊW3Ri&ɔ#^!廫H= .g,}_ E^p]4iKcZu@?B;=$$x}ZuYڨ+>Cg? WVLY6@y? g^2} MY"2Bg"Iw Ń,y@xyȍS$@{|ejU z{3Q';ʍqzLf#[~؇Q"$UA|"+~m {{-ªL'߰~B0Eߤ2jXZj{y_I;/a͔#am@an&BRSKחӴcN#UMxmhZ=Ţ)灝}^xS}ȕ =\$U<k>@9@0VίSn\.H!myN/^3s6 jN)e \>)Ժ\vU4a0i{猅$kS yt"сN)O;2ޯ$re"@Όlyaix<皵:NH˷+ph:lw3~0 %I  D0XoK3R!d0}Cpdә$& ֨WmfЏUM9sי˾bٛ*6"UD̼jy,$ BD}*'! :X3ΐP\ɨ;./ѧ ]-AOFM\Z)ٱ3VGʔr4T(9V%Nn5Nb1b%;w|UE]{)Ƈ6TBORF $Pd8~3vaf3ulMo[|̕CtIl]5$Q}zH- 2ׯݥ='B JXYw!ӓ?NL: AVf&5u{ a35!3r/p^\5Xa(]ңmN5fi|@?  ]Uj/Xڍm*+ɇϧ Grc9 j :|>U}|'J5 D32&>.5N$7}2^df!M%+dp"U"7@B*r)Z,%gx^2Q[ڊjBVȱW9WԥjE@ $kv3![(0<9%FSc1gRu-*o"s.lȫlsaF AN:6P'f Yx8ѺND%gvwrp23]w/pNz_8CXO ,1^WĦ{. jVa3b~ H[ /bng Ez/ŮٝwͰ#>\O]UװhK`Qfn Y798LI*Т޽{ ߰Jc8L'b:.k=DO׈Ww@l54ȃ>L["> X =Ĺ}/%$;ڵ}zolGYq3 ”Ji"Y1BfC$L>XW "p=R|0aNb#̒:zcXRv]!;w^z`w@ I}ky];]s9P b(r)^;aƶjhuIك,N4+QD/p~6*f\}3*E+'~,Ŕ; |;җEtrIey;4].Y 4u Qf #-D=ARj$S*DOLѧ]QpWM7*}bGqxT0(ιK3г4ץ\@~`wk׌)Z횻gZcQ |mQVpK:'Ɖa"}θ-5XcD DZ}7nPFbdM,OR?u'njiuӌ0HġBbwY vP!Z P.ȍ˔8_:cu8!)d?3%=/1{F vrbf@9F,ںMtN91&~Rl}x"QB4gB4gQ+}Y4`}֢mKg鄱8-6n̊ Ӵ,tbËF熧Ƙ .3DΖԙc({!<,N5RŒ+ Gvz#LeFtD!0ҳlzR$j@eMd6Ra]\3|qٽ)' aEkTb(bkc4WxN  }%Z$-!)ąƬp2ChwN eZOM~cd/7(e{u`y ,S[\3) 'FXC v:=m egϧ44;+Ս^C~ U=9dZKr4#'iMlJ8ВK-(YaL*2m,*o:Mq~ +>[6}lCj&iK+ "'@e3|7Lyt/aI-.W`:#34UK3#@y׾EӠl.p#5ͭ=@O7'.  Mi &جVsZ㴆NT2^- .  Uk\ݿ>Y~6 T鬛T.|>qDM40qq\7V"&U +)o$[a).Y\n05=)'jј2W[_xX5([ _CK/js\lg(>Uܭ~gEցOq1h  !3l ŌzSͺn7UDƮN&lnnc֌EԘ1|^îbS x"PCG /3d|§ "盡(?3ܘŀ؇ W=T*\z)&ʺZ0KsPj03TfXWc ˅"2A\ .Q 9f`jlKA O-#쯁 4@%-=RJ=΂HF>r= _E! :6R%CI qRb,[[>?HKR'˻/xnf "siI_68lz(]T5eT;&SF t|]滱>=6d"kZ}aY6q쥱8 zlH\< keׇ ; op_9!u$4RdHjIA VQ:^GB=ۏHA]¼GS8ejO-m0o nZU 5z\bB^ wDsUK o/ޓDo[}9QYaZfȘ Tax)e@i;BlJ#o <4B@ͮ*K씸ɡɘ 1 $T e,yeƠ[Nއ:^ؙIfiYzPyd[c6;fwʛ*l'=tiICȀ3)u,s7ɦxxBn2\}땤# <\Y Pz"c^A@߫i]oۙ=a|ݎL]UlOdvtJU=OB$VUe=r9tausIRN*NsMT/C]1/+;yͺ>*}31X.#x %H^6a0{bqJ!YOn ,5Z"P@hh)ԟ3E4Xy;bM1""!=DP/{ A(WnJ~H9@  9[HUZMA5O1vuſyKzc|1f ٨&O^KIQ˥5E*zffh!O Xh3@2p|~I5&:0;x޳A-̦nΓ'nS@HBÌ`4hL$lM99)Q(d8$Iԥ'a58 t@ AH:S bw(7+-{L&(*^F%茻<0gd䵎]]ٝ滕3"4.X~MAH"P \} -k˶ޯ'[z201# R!8j8ຝX9iTUWZ}Un iqī[/pDd{$|&~0aE\ ]D+?%'[(idSzzEH> J ;;j1ɤE֮!z5.8'FANZ*'8--`2w+ad>KvNE<8sA3ڲwL_1*T^^v0R |1BY"YLH+1E'vau`ZD[W> u͋w==5U-4-vߥkeH0rǶq]R= : `fwf #aڒkjxj__c<&O4|-Ynob%<ݨE9Sy X)'PgO@E&tuB@?hK 2(=cŅ \{1a<_ N /nfhz$eq³m(gho "ǔ O91NfUF%N=?:MK7@#[B!2uUSM Y=J=h4X[ d1Mj"R{f5-"=El;0x7d!}NJ!p%z^.0XI7't z,YfLz0W9 g wJ'O 5.`|i簅jLUo{6bC'7_2c})otcVQn5j7y&6S)+@-Y`(; Imǽ-"Cv#Q 1AWΟ0^>$35J)w&h6f|{蛯Ir-IʌE*}wez`\۹R55'ʳCBB.E %O5N*@4]5/ORє/|^bδZiNbMJ^Њ,ȴD!\J/@9߯\ r WB61xRfM(aVZ緕TȘ/]j%pSfwґSSڔ*b`s{]V[NJuHYo}^e~C*Ivo}*5@>lӣ#4@j_%dB`vG_~OO;Woe 1 4*d+@1h:kRL:pD*PVTp׷ki@͌IxJ/K}\48$4,G5YV"NG1Ԁ]p ںʺN/'0xYE|=90w*C;AyAZP} \,:9E2⻮˺ Ag%E"J,"|`2,?έlv#VSw@gbGe`(B`Uv ?fv(W ,\dμt} ݰ$ }ҵk wǾ< MIw!"aċs!|q+no)2ӹH c^$Ź-;h;7!͜1 ?RSGFJZXWD TE(H4||&%,KblwB`slKd<.a3^"h6ԩQZ{8 kQk2J@9 Ԏ5XnCdʵ L8:6j%.`ɱ7/[ϸi۵FTWD:1Y;XU!CY$_1:K늫Enra~e*y?F|Qd9. UUuSf7wݙ xl[r~/!]*5|62M  JHw80z*4Rlv!Dҳ훁9 3΄rj zvk ,1<*aiNV%Po1{vō%O<+xQ9٥f*:vp½0-W}Fu؄NC #v̫)l-Y{o{aH F]U?y8k-\T~FMy3PGְ cn`*nl<`ޛj3k\`zۃ3o[uy_hq=$5RfM;<& r$\0BE{nb.n9?7噐Gf 1x<ٹ65'q@5#E~ęL$:D{7hݼzL1 kg)BD]g"Fᦡa~š{EBԉ&}'XfPW$*gL ͭ}<6 $U\:@k*4y硋u~գx;KgTP9#^:XD !5Ph[ڀZb&K{Un:9,LG䂯;d+TB4`f#b/ zGX/ml߀vdUE T}Tn>V=$$.1ƮRH@z9@ 6Fd4¡zRKbj$'ѯz-[V(̏UifazZ%5ټTIQFz:W3<[\li՗g=#åre0b~kչNHanbn0ز%(370g,f#bo1ǁ:"Cp(]`7y^x4F̌Tw֠Ӱ)jr'D 4ԕ.`诚F$Hg|SuWg" ݼͽYfh b+,wC{ ҽ y@IKd$$ I"!ZƐPG1IV8Za=8giE Fo ]ڞd xUPS^krUUkUDJ$:gO4ʄ?w>4_P-.сؠ+`h HQx#%&@חY42q&)U")sJYLC8mD*r/!4/rSXP1{ `N!")+# Q%_MhMa#Ex);Uw0 q=oiv$٭y.79pwĘt1"OOu>t,S1wb8#Ium3D|Xe1-il Q=5:aI+'4-hM'KdkX_Q2a`YWc- TS1҇DckPHЭ\V2eEYő#w¿\ XesBp8p4C{!1ѵ1Vv,Lz&A6(rbݧzdo66dʿfzAܵj] yhyZ7 )HBXN4]ik]{9;:(nD1BVܥ/+^A1}[)kL۲b P >^n :~h3tJ0l\ ,%{̎}ZkMu~Wo%{ pzeao,B8t8ʆasL{T+WNj ʧ5J"xq7|'Mws̶f'E(DScl)7ə;e1rע͇Iu 2xwةy(f#zU_}_@E{fQ(bP^֢9ah/k,  $`3FX^;Y{wZ}Qզrf!P!Wj5W+ʀ~lK[p*ئJ8vbRqwutiqPqd@zc/~]yg(V΍LtM}[7˛/!:z2S|kS  A*JUXt宄}&6vMZk jhO*+P_,, \ ̮6๘#/SfQ8tf!5\'f`?8[0l ae2Ώnm(iR TDv~JꎊD挃j-g"M3\-BɾfG{ˏt2͙cJO@>f9at28,/4d>%%_ #W(.~ `##C&ǮcB5JGu^ݣV&7 v(9 y:yVWM>Ԝj)f{y,ނ`FX(VŚЋ$UȯșbHlGSkٴhQ@nuD}H)>˞Uv~Prk_Q םF$_1M 4 ?I$[)>ǔWg>YV^BJ[4^bY˶NPUMR4ϋг0@Iɩ/aVFCn}cJ2;r0a9ܶGq7|frh+J}[{s_--uo;DOV8=g[4vin\s;ApG%OxK/\;x ?+`jܘdm$k: fO9И^wS&!ZMqJ1zm8DUH|xS4ւvڎJ1u,CPcǸX~ YKԢU.k gD~q>JT"pjn)FwXt. 6}xMi&Xr|Y Z24DEO\NX3.'v`̔jwA>-Pl$ X>jLC|Y >t2!ɠU&i:A*bC@.ۍ}s:gR͒(S CFHA:S-XN_ ! /v)N>Vm=8S '>qv)0ɃYGػ M:G(OǨ$=z22ᥰ D-E_WlRiϪM&Y3,Ϻk($PQxw؉ ׉ʔ1rS{;e875Z2ꕯ1.tc?\B}; =ZyOIw[_%X.n]Y<8FA1gʲ IWk h;oL7PvzyLYuC>64AM:]D {14oFΡ̳}EakvdntI/0?@Vd61"ѭ)UgvDImGԫQq<MdB8/x0|OE"y$VuvՅŻ,p-)*4( Tz Y+Z5M.=lEESOmZ4Bғ`5柲B+s'ĔnR(qsOrd7b&V2Fx0>JǹH QRiNZSM-O"!;t n爆 ϖ(퉍`O3`êq`R $k*ߝ_^ _qe~.>A?;BknB~-x雺UuezW%?KF.$yɬYQWeǚ ]⿫ wJҕ@ 8%0s/ŒN׾ڣɑ(HJtl V U bMK\1{54%Hk3D8.x't^we;5ACU0nXmouMc#v>!J!i f `(vUS5 <|T00fT 5~o: I%`!'M"}MrjWq/ R{vhG$RWL q!Ii%Vf3ֱ !8=`T73vZ6FunCt_P柕QKv:lPh<D_2{nPST953t:3u,0 ,1r :Z<`惗z݉AhS<()vJEQ@ub)kxLفԮxA5h! pFʀ[EF%n8$ ,A2>ۗhggbWMKi_$[Rj]xRtx^}[@ce$5N?ي"z f>u@RhRA\޼E܉ ɂil; ZcZA|t8d?> *d,Z._ֹ=DpYSI]û^=p'/A@G>2,;@?d.WT*R-@kiO.n*xS{tX@(<?0oaJ(pM$.%Δy@R:+QO n8>=ǥ'TާUYsE"K-&'Dbvs%Ux8dvÚ%JɩA1]7cqNv< USg3qp_fdҠ]{?1麣]K_ jb x{Z )|/O3q(,23aBs{/_30}7Z}2D[ X =[گ?uUYkc[)۵ĭWo4w5x<nɸxZHC&WU3tAakL @DL?zu;K'T;蹕Ŀ:ɖ muxtR޼GI-E~Iu<N]2QrI&@GTlg"rV̧TcTՅէEфF4 BgKIROF+-ʸcy[)zs=/WZ8F#Dn[}|Q2SteenfpkݼRM6c Gp\$rDg,{#ovJb(Y[^V߈ w~ӓ,2D£ iU&,Y|Ԛw ̏z`v M^W@y˜~|e] aUFh2\v$<<&\̴ZRJ$$0_Bfȵ9` ^y̎p M[2yaoUѽs %gߓpmWㄕ,%J%2MR=H^*-fVmya <\?KAj7n^y#0"__Y6o #fT1F$^[#HSbz>hmhW3?[6fM wɜ1}lLQ0}} Y9qoD%g]QIX0X7_{ך{W"Wd@/hh*koA%U0p7">* [YR|R ګg8zb#ȟݦ'<&Td08IL Qjϋhڟ&_#VJO;B 3av0PYV ]ql ?Uxzދ5EnEezksd_ g)2 j'tܫ4 doUY ͽ|5q!{iSI;} Z˹\u}UcP4Xw(ouci"c);5$\߬hi^?*<40Z^-t ly Mϛ\Ǚ@9u&+@L9oV27\ӕ9cu,ґ顫N~/KT6ݡh  &m/SAJBW)4$_6(?oMC LǪTK1B]0࣡olI mX-[䶇w890M:-3.ݝTR Z\ZD -rw 9/m3]eC9=}o/*Ӊ >!I[.ٹ|ǾP?[N]fN9VSaR^<-sEZT`}u86nMmY6_}WOڄ h{w6q.=кCK5S ":R,X.WTr/JuSlaQ&Q1(),fs3;fpx. ,[ RbM5_ ouI`q+_`@^x$QAڭ#عtyz;Y2i SWG8,r ImsC=O`jxF ~O; _۬1Jk( /.Nl> ոE ݷY 狲!~0*{>~I :EoS]ZCyMյ⦙T.ЫibWs|δXNe?F9ϯ ȷJ_u'_4~`6/[\鎯y_gϟ (!pD寮!x^t'26'T2%mY'ty{5;9tsx!^?1 T Q+ӟA AU$GYaGDL|;B@q?~GcL$s}VR4tN. .npފq&z[ kT *S?0 {@n8$ش6];=z{)}{?qc Lu2>zjspҷWњkrk}#;;͏MN2q<+]{]6 Eݲk6XIW?;Gdo bq@0eQ+0KEY7dW8+$1onݗN9246 x^0˖Ζ>Cr*<[|˥3,>"nVHU"w}L+!?;DB¶jӣdž"vql\g֓}{@rv+B)]lz^)]$#͆s~u[7;럅XF#eb&vibc?+I$"tU*!dx-nH!Zohr^!;J_XЍ@)I eZp f elin9F?}K+$RDܡ2)KFUN:KnN﷠Ea+Emlr0si9Ye`t˛ Gz@AcM !jʹ3L%Hh^Zhѣ07,w.e)<6"c* vR`ly,@#2Nњy'<𰸠4qփr2[t(+6ݘLn+{WS0[r`#x;^K-VH@` |_mZ}SE|\z!$XyKYA|ķ;ɟ$a~$Oq@@9} WWxif\QqX#1CmB3N7eI\Х 7'5 V+3rDZ /<~B֚z+˖$F;' +hSsh+^х+(HtblSzN3h;KBSj@HBW WS dObLI~ h^w˻4M:?@>]*+p,OE[RuJ>QNq9n?Ph14×N1r6gVibR"*cp$J0RO'V J4{71bgsH p7,4Tc-aU.aT%ؼAOu_J.E66cdJ{d(eY{5-nCi.J"\f.͇PTYEތR y+ m\X.({moeuFG=;/H= oCQД5, P.ȉif%*XHleMIzcpf5+y>XOdů, * P6`To3QkQJ<\WxNؾj4ZlaD!>Fzurs䢾>K[Z=_8د!IpɊ-ؔ{7[YHf'JϹ>q_ӂ;s+s~ʍ*^LsϕTyWvTh0=5ϛ4ЌiGW elS.}9tĕ@As&5 u۶QK΍ >G'XQǛg+rXC)fda]$sN-i`F#SywSQ8>E m?5-FIPySr|+ÀdĤ \,ej.3\4ލZM3Q;"DMCF)QhΉ nLO !{zSRS.xgxr{%綑I.2(0r)&9ݮ)3{pA1 nfDK2Ʈ奛6"j.}=lݞ.H lW/wplT<|06NG!k쇜ǙC8i6o֓ԉ4U8xA< G\z E~.RsSh =%2{e,PPeTw?}SΑ;H]$}Vy,_t ĸyj4 UNq|]/ "A'7<5fO=p2οE3.3SGLLr nmQ48$q-c}IXv=uI7bK[Q޻ہv so(JZOIudm۔0X2C,OԵK%UoL"Qwdp'W i"끓a]Slf=SR䪃А5N slk`Iu\UYcZO' hoI5WW.v8Vd׵~,`nN/B 1LxT^-+'kOW:7m+vM1uf kx i[ED70=B/chKIXO-i5'9ͨ\45;@a,B3p-)_p#d;g{ӰwCTZQ~IרiK5O"yrGSs\[)n˩/$V%|}cTO%ى\xAW8bq&bYMYʣ 0*ɤ)"s0Y92Q52vJBjr)!0 vyNs}kB. 3L2ބ7#47fo.W,<ˏ6N4ASH ZXy/Ԑ$R xyjoƐ`#}BEc>7"L{*r؅^^b[@s,`<~c7֋'. vw1Mwv8^<|ͥ3s #a4 um4ii[y򹲰4uym2tf#lq`%SXqHT ^rwh`lkDAB LqLvZtޅ椽8Tuzoc@jbKgɐz a(bzK$J[6U1 ƔAߑՀ0\!Bg4 y=P|{~oR5P (SLbޤSX5=-hXu1Ia h;s"+-Txäx}X)nW݆WMVhX󃐤o!ޛ)UDH^ ;$Ҟł'IȖ#Lj7a=I`sQVyA` eug: F҇&ӹrAw2rO H],uwDPL(Pu:XrtXQ2ox};Z)%g>n2 Sn(,Q"Sś4S7}lRآBfjhV|@rS]*JMӷ &zAH%`^~F G#(~cd =ͧM{Y&v;VĎ5;+qw`kR?Q$kS_t:0ZӟaT.:ò94Mi=a_ \r 2) P!!T h“6W?S? dci:&ѫ/_߉F'KYw_RW9: 79z6u6q.'k). >d=;p_[ ! XE0B `3h.QD'2׽`!n jL/#`)#cl\UK/u>Ib3M?{aH֡xӂ/S[fk߶rȔNڈ( loĄx?Qm:Ad9Os_B tڴzˠK.J>?<䮽ƣ+ݭv Tz:Efm siBkXIҠ.ptaXpJF9J< ;a*#TsGk4NVGN {Člu1IU16AxkqsI |."(D^Xd{/הB$#ȕeW9ؿB9Ű,s: X0+PXV"Mq8]CWvvy^2)FcJƗDzYA\L?&/Dd"t, I'X_$wU/,z 8_ `}MΟCls;؎S=Z v 脖egWuMH<:Y6ʧNp6,晍3?Jn Û 7և>~N堔)y;y^{NGpx- xE9De [ɇJhMe}ߠC"ݻ*nKš7qf?ձЉz'^Қt~6?z?`ʮb%h^꬞wXQeG e!D/*G&ȅBWjisGVPĸ<Puޯ~t_Q^Yb B&޳MxE˷F@،K}mNC_5 a{=~sD1UBVxASz胧봉 6ZgT(ItڄРR0e>W2܅k~_2ڕ+g' |5 e/&HSocRFB]mbEXB4|,\Qi#Qb@0R hRѧ f:kꍵk2Yz2͓S7xL"ysM0?J8;6nl# O8)"OY%vZ{:9/ vMh1#vc:!{'Ǟ0fR) G)e.X-37tλ[_,uO i"wP_&64LT#Y="ewBb^K*y?QE4_dMPPVSe] fX)J_ Umt5g% e п8mp6)rƝ$!ůCO3h)f-w*(Hh԰ډCraT@nU"KC[ޕG?/WiOv3"sO;m>KYD׮`=[1\cڅ\UTeL_q(qX m٩pM !%kKrw}mnAX:Mgo=?^Ľ |ъ5Ka KPi=R@uIUJ[D,G"I;'"'NDiU~0Z<0/6$G~["_"&u[G~APavQvΟKEL罈'V:]naG=L,u:, t~n"OyhJ_qL;=^iS&!0}؛`q9 0qK`)`y(vZjٸ:÷YC *~3#6M&AED"xCjK?k(miǗ>@9N@ 0F2#)ٍS"mBbuC7xk+QA?{H I7U t,Sf۷?@|JO;2Dua d5_-U'ZVX+EP;4qꅮ?N|dF y;H {R6gA?[A>Tz B6aMO['~dp&֧t/G:ӵk^z!xèܤ,,T<=\ ?u9 7Wy+y^U('Xξ\(?N$2.ZWk0Wx-|$b70էfv]mHTzhK:nCeiB@ _L/p^6έ>x"ppy8oY ~Ճ}v(! |S#?3נ GIG80ef;# )ޢ7e{Et(p Ñ1k༃@vLR?`W*FSvt✳b;#̜)m,`*$(zGOj*5azxe=@Āߑ,ZGDeUqj>kec=ب#Yì0vȞ $i=}7J <4Vϐ6x*e@УTe`=_:+}5֔lne1a+XBvC~1 pZ߭GF}o=ycpa>4 V_EBZPkE0y 8d8h4Bc;hoc Ht #kb}E3׹< cxB Dǿ9#QðP]Wە3lo%N/w5M/vSUT! BDhVZ!N`;.l ߏ.av۩$]<7̠׃ydVr'RKågv;A}zS6vɷGބv{jL ȏ?L??GW߳-Ӳ a9uu'< tꚃ0̓y*F`mJtHi JXFTS&n~Nr]Bg_쇊F rYM * $]Eȍ9lGh5{s/κ'WO= 5!ɠ 2#IR(퐨f5 *E"F88U[af3 *Ib+^զuB>%'=ُ ǺqV (f0R7n}0 PlO]$4MTru)s00UoXJ5Aiw'O= HCm|j"MFl|v\(-o cǒ=7,!2DniBgv64G,>>WWq"mxY3Q7PfjQʮ7xFŖT$sf׍ o c#߽N.k|MFo1qʄP >mqMbjBqB~j4@vjxf(*P'{&K: Ms17ayAiz(ֹjc'"ɌHOEr$a#::eRr8 ] w @ uMjS4Zt-L,\6B˝ ;WBlKIpe҄[cݺzV\C # -O܏]r: 0b$(N8eQxׄQJ0$~2AC5 RBݽ^'G4C%b[EH~ZTiH>jsOA^/[4@;fdI2Pn!+FWT_D7ݵ1Em}|:`]9zL%$WHǧI~ƫ& E0'[.bj ()T#!bI<i^%87ĸx +θi\FvW_zT 9lD7Ou<, )^Tzužs  smd_)[*Zg [w^5(AMHӅXHƠ!OqQaIbL  OC?U8b-`seĴ-AVdW*WMr:R`-@ta3x|.EBX+Zg5{2g0U14,PILsI#@L77Ou"+^agA:[ch>F_8U>n4؏'F%(c%͉|wmk>y]T9xL6Ϝcf™op4.3 ǚ0y|f2I8Vcm|:TZ˶Psrk9p^^esMҗjKV.${q׵D0Gi=F|q ,dFA%hX[A~8c߯&3=S5SaO[jtYԋf<XizRU#pxtÒ{Xp'ԨENn'95ULjOWv> O[Q(Wrk]Jx;?n(Kj&I" 1ߢ*|+>ˁ?2aiJ?-ʺYo2D cgu"lG$V}c#iF(|/m El4MWZ#"=pn2kf+5Dp[Ǫ}=}ԪQK[7r-rKokBY]-hx4' oNjL_DvrR a*k1/$߉o :6]$Z5.fzUHr_Q-[a4'+G*.\҈qdHϜjCg2+m#,"29X7h YQ=Vz֤) c_ gl VXֲO󳫊-6 *,f%Xt8LL_|zw ܍8no `X.:.Ec7 3`7u\]ܧerL#_2w3I< UEVNvMM Әd)&Q;M*ʮB,PD&Xp_o /> ?SB}lיPU|]@z$^&q~֤fLVMO=g^~7@J$=qΉi}qGr CE[Y/S-]Q.->:Vgҟֶ7*IVd xՐ ;JCx}Q`X7 bPΛn!B/4ǔ#(;ysWYW0VB&2YhKങ%bDޯ325q ]y%|JD~\$ʜްt u:`mV0Oī>~v^ n,&~F. R)+ΐ0\ʺr M6Q[ B :+=BJq";+c23>-xʷ.M|vw \͕c6 <*(7P}!-3CA*OP@lڸU'Y"Hr:.q,H(2bUk?Z"W1H7b@eS\J͗cYq_ϘHQd6ӝ1KjvTKzk ?F^ܺpWYᙫ{G98ٔY6ݾ-4U53pp/?Ba}Utpr[0m:yPJ= ݬb .-{fxLz+lr 5A.Lv? dV{E8N>*Z}Q-L޼"ljRDC2#4R*e߯VJ428kCPoO2z,|I[{/Au{B  >=F8CTYk@cB_` E 1 D6\5mNfuheY%'~|ߦpN.49Q.!Hli7=\2&k}&x7o4 n Ij *2Ӌ@](bA?xqfHEОC - y)yx07R_f.-ۓ;؛dQ/'>m1&a<(eRP};WM6^R\[0x.-}F~ C7K_mp-lj%@f$f/tXeez5Sd!80p;Mݐ3%*M^m%Xj躤[6%u1D}-vqliLg˽Z"%_4KPh>knerT89k:6Y?tu!.슩&19㦕|" }sZkz+COV$ xD4ݚwdw ;OLR ].xJ«&Mj:e7|ǀpǘ2"HB3" L V,;co7%[ұsPz7ô7| (SQTy|OHS ZՒ讴%;%f~}V[GsaʼKx!JY_\ vS∺z >a+LKh"gd{D9E nVt|h7@?b%^H#@NH R=,J}vdXNjy&\b9ύ]m4 eLhj1o|,ރɷ0re׸d$~DopJiM t\!OX2G֖oP<;I7wmK(1/ =oj-;](n&I3<)'s$`%ik8&ھҌv̽*!jrLP' Υ# {,?u%G(`7J̹XsmlPaa1X3 (00/hP9lxʞo[7 Wm?!T4{'Q&3_p o5OT;tܵ @y'wx'֏4U~ %s`:t]]TCrEzVr(iETxzoU1Ugu̢ȄT' W3%EE|f5Vҿ#W9k E0z~;`A%a"\DM[U0|9uUc(ВSIk RtML^AL*+۱kc\]T*t"De".d瀓u"1H n-q~-P, ,/Ifᵭ|WVtqt 6 p^hc=jWԱrt&g"q%x+?Ekl?U7ϟhKIUάR40sck3n\VʹȰ b*'3֕:$|#>K#ĺ^zF?#EmH(+Fy|"GHD$@ RQŏsjNf\Xw72, +^[pEw+Iq?̽0U\^0):YeiO)Cꞩ>LR“diuy{|mC;<Q\oM'C՝ʙT*N/FsAܥXN+FY>/R Lb ~~=!!E" X5 uYۢyHu+쁦0p|EOj֪ǛV10,c< kyWsJam}[ܗl>N!K'"Ӝ  /W)`y]zyLIE>8$UhƸݵ4# YS99A=o5J{C%]5JC9yO.F: 'l쳉 rvĸ}5 ;66^OIػ*EhͥA0 Ͷ*o <)z2R9w8aL49J~ 葮+vD(]nF< q%e!*Xoxx:gn+ '/Rbc퍾63ML5 'Z2`'o }e}7V?ƘwL59֭^Ph84_&`2<1Wә.e}Y_9W!Z;Ej"3Pz)ޤ å-}O/\7O *=ѝtDۚndd]q6/ i!;avGV{%1]d%D,%^aw=C IJ޿AUmhNۢD/PhdR֏|٦\ddD A.u?ДU|͝1*$ c4uBR%#STZ7Bf7(Z΅Ai;rzSIUO.{.|/OïuX5zۆ,T/nQ 0/i9c[6k$)J'w k[c^ \cX[8陞#4CKʚ5tT{x9md(F-qb{᜔3_hgayfu,+8z! 9FdZ-2 2vF$v27,WZS@"ڠ Stek yCnuITϋ{h0#PGMh?YH _PND{ ̷2W(lm*#>m|LGt^lde!C-˵0R5W(> FZ`^7mBe+p6wLc>W&i)Af Uc>6+.[ՌYy~-Kl<Qe5/[ܵ?08^N"ZICmu O%+-GZ=_CM9};Lg Z<}_w@K9s|23 ?x^$.h`'K62^X=@N Tˉc Rqu.4~ uWOQ7ޘض;-b ,85i/C'F)`!}TD -L]  7_yHiO}psc>VtQ:mi4u&darCꭿ];g1 yCY`Y:Vx˂]XIC*_ws:F5¹1{z|fFp=ї}TlfL%M$?؛`Lj_iQJ 4_`)4Xcٌ/dmlj0?g7c`,5Ny}V[%GBpQ1l\+8" IHRT")0j@h9NeQRG|9݃LɧG} EcR˅I &mElAڂ^~ U@ez*όQ=L& Ma ǓXI—d9tyn0O1XPj`fwXa1F0$Hlxc|A'st;  c1x\ nq`O{J#^g{?aY}켙&bG~"PYEPPX! Aywk~ yMJIVa|q6 Ѭ㳺wLF|8vVaa  S#i7Md|k3oSP8)[{<[˞P).0nX@d_kt뻏Orqe>HP MUJYp͋_[S^=-J ?BK'-:??yas||6sgZP8*k}XK v]4(l`Ӊ5I+$W(5픟 (+4bFO_`4`ieB~^W-B5M*D!YDv_.O2SuؓBZq#)(I~#g,Vi$`)dy2na[7cmqv]ԭ#+lVU&viIS#?eTayv2YPﮋr~7]w3/9:'՗-m;B"@1K4kKY9kvTOuR}T:a/˖+n98ZJI72v>P&m`X Ǔ:Z_kY59Kcbyڣ_4W Jh$ie}bIvs33bE(6CiO{ͭde+덢$@> mZu˓ل^pb[|Fi],&vJ(xoGA[4C˫;CI=Qpvy}(Z:zs &'.?8Vd@d;U͗ERIG# QO78ky dDFZy9xTﾣos( ;]n @w &SaOHedl!|Y3g؛#ƌPhWvF,jIҩ{ͳ~g)0rv ߘb,cSBO*91'6Ӯ׀p6iIHy׉i%I'T m9"UQ4PVB\ᾱ92eCHnTƵ:'i~,TyX!(y‹gs`c M$ߪ8Y $i8(S ~e–Jnsȝ7~H!4NÜ&lO_Eۋf)xBC#UN*k XKsۋҟP>cpaoQO<z^sױj^i"\. TC>kLlh*J'"OB5B}@#Nu7zW8:DEz׻hDnH_kLXBP]E7tH[-jnڸc6s tI\ |\oKUW7?I$8A3 >|UXrw)-G)K/CqM'0fr+4NӲg,aEݰA ]@j̮]VҸln5Ś.RXs>u9a/`G;dr:9RGEQF>Yp{Ѱ˨!i 7Zc֭)8exg[] -x v;zj;yMQeC:3Q%ׇ(jb7/\:2%Ìhw8;wΕ3y`qwP.xXF ,r@@(Dgp`c~Pd9aC0\>$<ۄaa{bɞhd_nXCؠc&)Őy1HaRå C Bνz*lHA,8HkfÁ/ 5L:+k \fwϹ=.@TZ;*׊l{cmOu?}lt-+ ,7/W+K+PHv{Lד9ZCTK`߮ʒw^C_%AQiJVldw>ү 4S$\? &HđҬhO }^CG>6ak BrTRZW>&nRixd0&6p'Weٞ]k:W;*£oq[Vu5=+  {Kcjz$'J^ԟohb76O^͵cTTKF !b޹Z".׵6Wi '͏Q _BdOs$",l[nqeV4SG=yD6Nd<#*I~0/=|`80>lʒ'h R>H2nJuãbEtAGk;D9QTN0Ɇ݈AaMȼnCҜ{*5cEB!`-l`jI|+lfbۋS櫝<[[pj.Y0qiBPE cS t fM݌YwFWa?wʆߟ,m~e&?$E1r-9WR<ǯm;.ՕM?d(ܝ}ϒRQ$sL~*ՊOv,y>C ]NQZO>Z?WIkL|1k99UySaѐon}]Of繶wʡK1"/%㌂gX"˜m/e?8Y%{8#K+6w@-i8B+}㳩5ߗ~}̣/WuBT=iKO1{lp7`}sGFzlHon#ӸZP䒌f*SMˁ: 'l*j͜B,Ӌ%)P^$.%[zn!R㘇 L߳* (9+]VHEmZo+dԽӱt>?^TmUKY&m>o9iy;m„w!' `HH5) fm3Syq = R\DDM|8Vy#3>Qu j~KCCۖml-QzI? Y=QuQs$u/gړ2݀D+mZ]|~UfeqjI1Np߶UMZE/t a=ִޭ@g;"#HY9skמE4JYi>cuS~f ҟ /H&8{g2Os71+}]9+Z~rq"q\g]7&z8DMU+oޯ5ޓ#uK$rs_u99=v5-Vt}N`X=DDDnJH䑦*dz`?ˁV K\۶#ڤ< qWEV#8]#˸6|9>~b5⤍XNy]5'T߁N7HC ŝ.%H4hC^%FmȂEO\*-3 ڜ[n^{Uc~!3o?I!z!oOeSo +?KG\ib%ȉ+3Be?Eקq'8v\z;;XX3I%8T}-0h7o۫iY$id6gQ2DTl uR7kJ}f / >섶DaB~W|)g+8fޛml\]IÑgIB|xv8| 1;zLAz;Y'ڃnbjE|G``F=F'Z7qy[(1O[y^ʨܦnιCb#;!KKZ^"_Mn82q%QmO9%6@"H砊"eQһưUb喝ېSLRVAڧfo G-o[#nFe~ dl9mj FRjX 7moF35}/<8J {"}n˼![ NX DDTql+J .a[n_xmh%RāWꨡ˭<77kVl\m>4&{~%E2\R 5i (hTi/ ?x$N7]LX6w&CH9[Q[_/yг ӖK =)D󴫷bP$id^,AI))iR1{x0.=EV.TdʅfbiԴ)xhQkWh'jaםlF0ɥe D@?Ӿ4Jt+V W SۖAݱ;ь7¤0oǻ4Uq94_xO];ZMz"]W\FԆ"x  8Lt¥`r>KXC8^Χվ4ԟcHJpib[f#a %u}?:JGE}+҇t/2L{ 7x%djju+iU L0UλPd*ebrc!jCh=^cG<bC&WeT cd6&ȊĻbA WRROշTb•](I(+~*U߽kz'BFHaRw׍O-K9cHx.' ©`K=D0rwlk˱SN V̙G `Tr^mmx+gP%Crq|`X~jO/U,P[kY+[_aV havgsBjT!6kɣ&<[ Ĥ 3r0\SGixLgf4CtZ VV" ƿάpwӧt=PAc1't~&`AEշE ;sp!̜C2dZ|%i 8g)Iҷ}=j@! 4rN{0&=}'K+wrIkc۾D4>%2S,)Ih*|r^.0<פrt"slcOU G&ty[Bals%y!g12$o>D1ȯ.NӝO?-Yp 0##Q:|^\0޲~;ي-F>%S Ff*y=kHzgru\J~ 5(ij!+ٛth‘Ck9RWGW0򵵴 $ɁGXXϞ;4VYU( d,7`} #Sw" F% nv@/3r^~~V$O>k>EGg/ro} 6$*4ViOv\DZL%YqdF6ٙYUڟKC7x- ULߚ$F^lCO^0ʳ%Hr66Q! *E#HdKy)7^ xD]bjxQ 0jyVh#ZFciE!RSP5Bтs@ňWxSpţ[UK g4 ;=S_0r2GԅH8 ۖ-[FMr1/Vt<—ELK΢SɝFNoyj7oZcD0w 5JGBls<&0tcwwk>klA_de}?>wIhZ3ښcDT Zzn`hf*$ٖ\mqN).Mef}& PwnBkbKl:q}Sj$5m^_f>l, !:VgSgN(L{E+1#kwZDԏ KX/3sBNqCYkY҃oUZoR>kōlBƉ]Mh}ȹfz6 ,pH9fGv`4cQVM-PI6Q[jA1A9E[-uD&!XF@$&6 ࡒ:n-~_ԄqZb`7LTDZnCC%vƦL6;BĨ3)aڢuhNʒ|ۦ_s]-'#x0L D@қ/ToU?=љ,96HHmSrDS+jQrVe?a:bOݖu5 t^6=GN)V09BLmUD'.PhqQYnZySһ6q<.ٚPYkV2e JZ !vW&^.qYeuue=/>xNT?}`$sȜyq$s8I7b"Wר>s8)FPq'{>< ?U7>GcZQwl2QHv{+Jky;Oe)TJ.wڶ.g9 Wĉ׵Ceed5S˾WfBjJݶRS"|Z_UȊӀUݨzxӃ чud2PFNB `X(V=o=iL:X,LcIB W_-o(SZPKNR- ,,qcƌ FY/ٿ^QYÕxq\UO=!`Jb 76(.Wb1?Y*z踯&:py^0TlNT4NօM` $kcOtf(يaRc֟ϒ! E4ㆷÛL /I-ﱔ@ Vʭ3h)+fe4s{#1E9RtˢbUbG_k Me.Yq\K9+;撏*/maBsz~YXb2W % 2ةnڒLSBevKՉ .[g[؛ιq 9Oܕ k _vİ9tݥ FaN' \CBŒ 0B]<#O>8PDVCu%ɧ٧hIю5ҥ)×]hJK[}En ױ7M`VVXCWe: 4j[SPkTkTEenl]{sR[_Y X3«ZXubQܕ2AcSq3 e&.p+b-FwZ#<{h.x#!XZTz0%G%p~ &Ι0'WXKQdlֽ]MᜀA/bqXW5j#gShLסD%nD T~K$N+(kC"i^ʋ|.ї꿄}EߨL4w -@;9Cxa+da$2؀ A{ZYĄ|r%FۏPc `cnS5i!Z}Dm a tFhϢ ?5~$9n|2 8.1>ucv60!x!J7d#0'3UH.{I1L{/F7S0>{!ʂe㢚ZPgs%g5ENSègj#„@v'~b˘{9`r3)oiOf+`mnE3dw@Wsv#:) ̆걅)#Ǒl+ V;sh$.{)VE#9e~Un]ܨ9 vf­|m-3[h Tlq1 R՜d!М?q|wi`˼(rĶdv)u%^7XIއL%5,iL]+fNu/ 6vKG ?E݃QH­ݠAKjѝyaʌ׻D@qV`_[$UFb|mS0#'g6ZOi*bG+JPg)Ƞwƛ]Ɩj|R>Q|$l_ VCOJEzV>:`Oaqd4pYo,Czf[a !B#t!nyxho_CwfWeܒVq]&!^JSBIgʸmYYM BovS"M#od1'^]^C!N5^ʣ>rpt١P <Aܺ}VGxruÄ9Q 8O|Aή0A$cA}I\Y$cϒܽy摃G"֮~sA*EIS]9Bm}'& fsƍ V4cq,?eܱQ/rYhl̃hu nΎ~YYαqdZ;AZ{B ULUhWy~a{d5G;,fj‰փYhM' De]F>`A k6D"Q?>bc)"}U#' jYmn{b[u&]?&_c*7Zu8@2wWp7z耋:W3xYhAP?딱7rCsZr"pOhbCǧ#Rtd߭/ja9f">;VuŐ1a_ ';OIߊ&McNB=K E A>ll' Phm#&]zN[Di^uq^\ТU_MbAc `V; {\㬩w3r#"$Ցbf!(GCLȁ'w c("ȰN«Y+z%@;?mƷ3θ)7Uxc BleYVo}j֬E b|RAyWpTOnhIfzB&Eދ$>{9ccZhMZo䫝NoK1fy M8X0ig+0moY}j7ivi/U 7ٽIO2m@FnooMu cO'xo7 pdTUNy,6 `..0A\^==mڏ+AG\hgc͖9skdl6F_3ү44avΌ-GVhotq Q2W^Y_/@ߘ_MV۠p"V \{<^e%d.*)99򔐱֬EЭ#/Qò^tu`R<N@j==ڂdVwr/xmɃe)jx}PcXEDw m~ Tؒ|{Wes5u\ W}/$0]jg /?rC}\Yn9:8K# (h3#Oa50ed.Ar7T=kIt X|lč։i‘ѹm?6בT"&:Bm`MZ\V Aw.5Z%R 8wܕ5Z|]ƫ&F|+Q+PNJ |Yl [ֺ151~x(>U2vj &ra !pX4 H=WR^E#hTǠ]>ƭp.`w@MپD@5j*!.+q$0y  7>𩱠=X <3?2Se`/>MTq; &rѫ?=h8AW{6eJ(PS~F%up4,&'-Cw6*QUVnbp!Fc a#c/5S.-`f*DĐ"tތ|Fm؈]!JaFDM j@ tX͹L.U!) ؘ໛1Q;5)'+úx5i*% m5Z_vPكQC4 .䟋 w~v0EƢgR[al[. @kZg1$FrתTe2km-r4VAe^9H9("G4ts'^7`k+~;ӰHtz&ugGoyyև:&'_?<f_QLPC$e׾t 0.9i %W5`"P>@R.HhW`v,s߰12Ԫd{ڱ}R1>NA0")Gue'V T\15b| @m0Ԍv͂@@DN3;} @5Dp9pHdZOӍ>u4H_ vZ雋3nɩrue[Cd#PĔtUB?d'!Rm.6 SUa2 ,6 (ykq˘0yXȉ ^2xJc1߭rL0IݬT^˛D|yRS/x٩UtP$#;:Iv;$vechGvF!vJ-yx(uPwiіk*1ȒIlXWS֖߰]\`.d"ˌ%AC<ͯLXVVqir5cr}Q/YL4 hz3(KÓ6Xܱf;S)>DFj_:WlKkF8d1m -cvk,oo=(Rqcx1mORJu%8,1 Rpd'%Vzẃ_#hkMk!ovd ;ׁhƒeR}Ԅ8=MgltPIZQ9.[kq%UM]J1{kLIWUFtxT2G W7SKb#Unƥ*^y;!X؅YKpV}!BLu 8ѺQ`g#J ik$UTAt,6(ޣ#XMWi2okW]AAh2$[4Om1p0=8O 'H C~O7bS`=AAQk:E$3qgJL MwaIi%w8@ޓ4+AB7 +nho ֈ2/9;;GrUnμ =E&6`gB}LGzㄙcyiFB]f46;/V$?Iice@#K0b[8͋{ Ehh~$NgR6;-0mjkR!p0HްaТ /gcջjy_h\H5&Ԣ: ī~;Fr1Jõ,1.Yf%޻ }#xbˤo=^DbqeXa'xK@~nEFM{uJs9C(?p]1Jeۨ3;2c5qQ!wcSͭ[BS3j\g]jEuT L@NI@q^S,MJMckgt}ʙZ RO8N7nF":AйGn!*U!k~,Թ*s3ge\ȕ#Z *WWtL% Ugt%֦dΕQ\9`,kMӋJ(dzwWԝ &#,Y [^ o_d@(.yrQ8<?,~2 \ǘ6^t(ڗaa?^37PKx&R $S;3T^]BQ\}:ݝz%dR%yЂ_5ODItaxw~ H O$_2?oX2Ad5-_@Ϩ~1b#i(іi/N|oBʢy<%blK;Z=YD *H+{>HDŽ!Pce4Y\Hq|-5#)Y+YU.!N95f| Ck沱*SgKؓwp$CuZ?YԈ2L.Rznۅ=rñ=D2ۮ\QU3G-OϾ},Q֕B<ңdJq[1<{=DP%n*-\AIN_hzR&{ؼ0PL+5(,ɆTkB _#LPx~. ~A5a+4 $@@ g+[ ͉r{WM!-QQY؄N1 lqFm|7TD殪ʉ:0̠Fv7d@aTB"㒼4 D4)mxO,}.{y/ AH'"^wcOV{Z65aS+1LN%MfaFm1\_3t8lA?>bSev'0B'<"9A>ˈ.û8 ,Fix{ZC,{;ϵ$ <`Kh{'!4GN5eca$;1wI\2Áz7)򖢖t}|^^s`]A?KGC@' ?f2oCXwWE>??{ Ϫ)`%tѷGfolմʴ2bfڦֳ߳V ZuzJh)y սUĜ]7zfWH6g7 @;&cDK pC׿_'rW#g̮b#) ] ,.&51DM[,>?OA/g`8؂1轗rm]cwk,2Nk詏i*ڨf3/˦R;/R@F' Lu}f:%#IF1t=+m(lY<=K"i*:2g۷G{4شPW<[v:x eG]|a(Z@%8MXǜ`ES`7tlX|KNT_pZtrWNZОa0#'ۧ`v+. k(#RqȱVm"l_9,@?;@gK/;*4IhIF ^@ȃzۙ F%L1 V>59I P뎺1wA,PYxg.oƎݦ19L%lx.piIt=kGf.0A嗌0N(gqʿ9n_n*)WogPO՜E'7\pHp? tw$nrG9$[3rr.\'ì$ Kd)rTYy6lK6G6DMsҦj>)q!щYr2d|^lxJڅO UV52 [HexGԛrr dG#-1qO$Vh'SU<8>r9VN$r0M{6W BXeC7ט燫0<522nP+sWyhMM *n笷;.f 79p~}'u>٨nPpg1 r-TXVsSI\;&JЂ }Ίr_$@DͭOOxt3褿'| K2MyqE׆/:@'$vN}L)*I9\3tQSyLZ J\]܂D"kB' fI][lD&%A**zugd:T#FwXx3 /%BS L:r>qwHV֤J'/`IM!EB7}\2[V+Ջҋ oJ{⤹1w'ժi࿊ ԮGhJ̕[r\^SU7b 6H$']WM)FPƒ/%!t/Iz 钊{?DNo-Zcc4ϯ9.uO>?=3tĤht<SaJA/@,\N|UFhr'nД׸7CU}}T o+B8}3 wSMV /P[SǾ_ i۫pAyZI[:gvxyU88W`|5ŅG#iWn|߰,Kg»<muAb8@j+ 8L$_eS糐(Z2;ot <\IV,E'a8HҼ`Ӊwr@I58qbt8@_L&dh/ܓ-}[`¯sv]<({wtק>VF%U"<O,!3KN],ܯR vXUrSs~9"Uo{哀6YZ_ft g>p f&O~׈J+hlޙd+S~v˛=t [qz.eʌq e LY=/ii{ s@LRn6sku40:wΏf+=,$Iպ'SDi@2uv0P۪.V!:蹗ូc!&(up +K \! iĝY^ tG6)a}3A(vbjybQXۘ33fFH졘vhj=Y@#,z*&Tx#ǯY kGo?ZSe%M^)D9(I%$mDh920NS2! a{Eޒ[G>Sƭ_\s^SV6_cs0Nc03NlX=S)`MCl h{;ʴ`N `9(ss<쬦錤!trke:lnˇy8E9zMx: 2kHár{ ZO]~>uUlj.$įOYTP;A*wbO.t$l` 8N6=Jī|mdYvs >aj<~bZp 98Уzk);ήXQܪ٦I6ݭc?z7;0.ƭ߻sX&~q&`"`~f:UF+aI /%O*.f6JWѼ`Lz,\|{V+]Zg;뭳'_ R˧>+!9 cmvپWB1 lvU+fks]wtϧ_nKkmq,5('1K+2/ #&ܵaϟ.͍WZ*B2>Άv⮒W16LqVէ]|uyM+IZ"1ޭ >G&:F|2MwqAGpfl6_$u 7 Pa/"}KҽWH-kuEXKCn%0mBә8|7~EoRM?M  ,ImNz䌰zoK@gĪ?1ӄpRi4תO _x9 `:WԮl̸~S쾠ٓQ Ry%z8(61ye~fRl<_4YZ<m6 TUά̓zRBfR:}cq\޳J,$MhTkwNhSC@%h.:krMEǹ "1P[j]?I=.\UxgJ浫V^ۈ?>:M5n?Ec<ðtarp',~|}v:)?JXV=3F`ꇮRe'q|/J?D2x|YIJ\8,k7"JM/\dpR.|kpet dWG`ReN9ƒ7_7!ZhFlԷ%EQ}yOq0̻?U\.Գ/U=?!<^56Ž='# Nh7g*YQ%Аw=[o>,̓윪oփjX%,[D`fjkqa:%;1s+[;& ]{nm/T7mcSjMpUx! SrhI^D޿h4ziz"F*t{]mWsV+fXZ[.ٽBh^U#X|% z5'$I 3D M޵ҫz8ae%<_PuXMn^Ԡ!Ù0YiC 1Ĵ?Qbc&kHn?H^nB';X?Њ"^eGCn풒!RD9O4[G`\u)wAX^ /p,;ߧjv%FN夨HpnHh_Tid )HG@RғEX{]qL XY߮ϣ(nsahJsF]*Z!8n.` ތznS]Vl? ·q"i]jn A٪T. ~h"#FM}_]@Y8w~p8" YUʇvW 9Ps0H- Qu#Os@Cw|0a1 q-€6Wb* $/gwۚM{9kw#y)#r`P1NGvjTLwЂ"T,@KL'hheq`*zJܾ`ϧ4g]kboÿr_}bP!?(]!^3&ۘb|R ~TR=]qV=@ *Z[~:z-Lڀ>YkqK&]9HqQac]((B"Z;{7>v-%~;{<.i[G ,F[z5Hi>0sbx_60w,VX O"K7: @:M*ae^${ωOLsUÅdsjѷ9dskХp;gL mg)u{!n<.=WT0CU؂EZ(YXO8ɇ }ـ^t;%J%#s}%; MI) kgNdn"wrk 곪c?;԰S)yv9a.Kn~aV~y7KP dz 8ֈ)Hz]Tq@+[$"^ NVB#܄X~ēT.wr}9&*KRy OX93/ 垗@8ˉIUeO:Cyf0X/".&/~dS7;h4X QHn똟a57In8t`M쐎{t=$bȏjQ#eЁr4sv6`5h2?w_&-yu.~sa8UA6OW_+UnZb87,.慠Ă2F̏1z%:E =u25ԝWVm`\7}|TXB*heC KoN["Eyօֱwu'zA|> ?{9ɛ:hS |(*GŞ:+9e sNlB5xXceΪZ'ZM:BAp#Ю XS.QCDc3D#s@U "k)e>DȜ"(蜪S?2M{ dȈF';)dw\GFvkЗ҇=_T߾!TosTg(cGvSiDڋx7@a푃GXpp^izF;q4AgXvfNǃ)sڹ{湚_[g59jXtw#=eK 8C ?d%ʨFxX=@5>aJDK:<KIaT o{{/Ŏ)ص:5vvCSQ~{U%ܹ??gf2: WxrQ䎐t Bre|oBg +bB)X|'4zݍZƐFPwԻ\pm䮼λ]}g!cJ:N᪱C|EYuP%7Tfwx\ p1,9 rފ"~6v6F|& ٝ|ϲO 9e}^p^ m{J)x77 b\(`xǛ8LLM7-}sUb6j 5t 8faHڡ@}x2Vv쒰iCh 52pD5qG1vޛ,ɡG+u[6O  b>r&+&BnU3`f c-A/C%oio[ЄD.;e:d?PPgawEOTah7 ͻ+B0˛A &U#@%=M% OˬyB5yJLċfxxqm' lG`̓W븍dܷl]*db<'53;*i euOŀܧFOS[J,P]j)};M앚yPP!$2 BF: \b>h_7khkݹP@|p|b!ӶO{~]1axiCmnT>&PƁBsElX"= 2U8̞ϐ <-.M*rs(pA OڰmY2_0M'PelӽnK=/w p N0q| )@`]wIkCffgӃ(Զ[1sOaIQ,? HK|JX,UVU/lٗ:\00\x$y [JfWEsOYSi0 ,־aJwu T8`Ϊ I1,i=繙1ΠY& BQM&~z^zDzvoו{b՘6(K: G*ŷ)0J l#0o\RJ(BP@qGV R[ Aa@-;G>u$JE yTaMa k U B `Hvr ~OFP- j:G -h\̞B^ X \cM.QHv y(,/'y#ťI+)"` nMaY2;ltܫ@UB+2J£N6mU9sQ^I%I/f3HӇܪ%"t 9%g|ݕ'\֥4sIr$ꕊDE4l}-ͯz Evݲ,nL/͠羳7Ueرv_M&I\c x0rjaSH's?(wɟu-qS]z)o,`_QmV~T~ad3F^ǎwʉڗEv &'PKs` j:1ǾR?KGqZ$& Jg"]Jg>Mg], |鵼|MkYb|si`^T{uUjCÊhɏ\@s"[DzRTªVԆ c]T7A#8feݒve } ZRgödu@h|m){z3!6g Vg'GG 9O њeC3Cp(f!-<Ѣ"9V;g5Jb"@mU1}[vs_I"];8bEaTlδ Xl1xt7܌_hnͭdhf,@ś &Ĵ,.&Wyѳ|}WlzDUvˆkY-re%{z#A[Y^b5w29>+GY,BFeBŽ;CD)JƗG.OFcVUܷ.ݟ` :_2pq5_ojbc&n63S ԁlY&ًBB#ހgX_|;!)a!#:m W8jS}t}}汕Y€Ch][l\-WK3j=ZsaXP^D'H,~ kp}4' <Pתah_PYJu}GUMf/c-irͪ 9Ƕ$ZfHv ݴ("6|j2J7(dBŒ?^yUI pj8WۗQR;Sk:R6r+ g~}ChMeg6G[I-dTݚ#]Kԝ+P5b`5x+Rv4QΖfjc/Kc{t:PIm?Au>JK@xG[LBi~dè0=Ơ]Lꘕ-Zn}Mn>5e~o9sC9D`de]*8#Ωk#6}|3ɓ}iT=8vW~ZU3 2O U‡SKfVK=gzbXMMS62^uH\$5oD~0o1{[CA~_`d cCyb rE:(#:gc1Z7g]9i& RJX@[DKb8jI.16g^ tBêHsbw s^ΕC#9i[%53л uYM KT0@'(憓 y6'bA=RQnS ]QzrՈ&`XT/i⹖JmݵfL=6 7% *u9KCjKIbRr b-Ae\I}?7N5FKQ@)J*l o@2QBjl\~7w$Tl>[~Ul=9v/-7N"=ޮ=L>g~`zML(Kꉫhxt-Z0/]9^g'ŀ +Y!3^eVjHyh nIDS nbseԺj;hh\}LP|3^/{-mRb(P#8 v&% 9kFGo3ܓ&P;R6vkVs XcR"xNxN KJd !*nԀ[BA Nb֎7řJa{@lh"udjVY'e[ \#>{oLRE2bHbҚ}{Jg)|"Y(345 Y !IGq 'Q@3+ j8ؤs)no_mTUFu9 'h~33",bLAL9 (HMS: ּ3r\ʿqoIN pGU)՛bWcvPm (P=u [ŭe٭t[:':f|r?`727\|I\ #@N~U4U:{W_n;s) XZ;[ƑK𻳎1\Vv nnzgblFT[1(`SrU/sϻs~s[π{;r@**I}.r7^ȞEiTR]]<9v>LՐ,O>ͣGt䱿\jbCƱvz>N)3> 6Fx#lyqV1-flCIvwF*;>UbM|>/"OvQTrwˆV%XNŏ4AISk`S@e|A;H4{c\8J~'Fyq9 'BF#:l:O% Tl!%ؙBd zlUkn<ņ=s˩i~Kw[.>G=]Aɨ"X]MH#.9: YM5JA7z M)f/1zSEhuN٘KG,xu1ZSi!ŸCƫ pV;2b{UmTǴ61I%/~>bqb%qD!Lw)|)z%cNzejvXmv zXw #^ g P]_:{4Mk0.Lg8&%V7`So%k@eRXص@fB6"!o`Jo;p@r5=`~}qǘKM{$={kRI?DT'ut WNx_Hh/\Gd !~:ߛ_(Uç>#&tC5]0M,w薲ӒtZɕO!$.x|Fk2EәhEjE*`n\n݊6!tNnwFhu*ʨ34蟤RÃ| Q4nz35$7ztt[<]fy& r4i"oG5npG+{4F3{zC.ֽNgj#gwT jXX?XY?ɾH^O `ܼn)UG #q3@Rka|?D $7h|x(xg:ux4st ϧD YTFt['K?%,9!8nfv.Kd}LYOQ]OgJXSb$Us# #/V 7pá龵)} T0boEj֫7[~*/K u:gepYDYsZqZvhuQj#*NCo-fg+/$ka(ޯ݅p)@eݞ T/K:yiԴbzc &Cx͎)5n|SbyFR{`뢉T\eyGk'G.T!ґ^ٗ-Z~P"2?Ⲿ(Ǻ'r(cn)2%Xi$JKiqѳ>Ӊ:0;Atg} @r.+^Oy;Z" %Ɇ̻ф7m`eOEc*:쫸cD3Ō않:~W~r/hM/wfV|w\'&`Ap1+Ztq駅~'YgA;0YwzFD̆x<0[l 7x˻Wx 'D`8:-¬8H&CvL%vkE"(FS.Tf%dނWV0> 鼮51R3p ;teoz$J"G:Vg5O@ܺ~R'9tJVF?<*c, Sl9Aڵhn*b pȩuF{MhѦǟ67]]k4EW_j&Hj1%+Pi%skSX&=ŦU,GhI˥ W31=ԅ>gFbT3x&^}ćh~g(ylm) ;Nf>{8.@}t0?^@q^GnUA"NzΦ\8 Z_q̅"V/yCDduX])QyPp!f cTk=^_ɨl/w;4*315TU*REe'oȪmH dF9@lb~D5yEd3dpdl*UdiuvKZ6r27Ǎ *d/ wYx jw>k/ CI.fvz85MVEPEthq+a&!' ';`<^p~q3x]=٢ NU%0"}M憥ED6]ڍ_йR忪5LSp{qd4F5 ]R&HT`iYcs;徳/Oeؒ,?/ɍց;Xr; K[ uSsp}S8hR[?z X;'ܚS`iK:mOۄطjXKA*|EMu4NCN#߂?2u#TmBHuJf؈sfCgo%.3.׼QeRk7J&Qǐ_ e6TAʕ3s$L]tY"rt,;~Ɉ$**`s2Cx5+74კPU% $Y&#DH63*LMx<]( ){]pM,8B- h-à.G=o<Db WL Fg$S^F;+"|yRMa Xx4'DR>\͆g3Hm'FGFM kk 1 A8ps^ uT}݈,2RIϯU+8t5#73OR4y4"2s}WH8U[ƃʤ`HÌ!eDލ1>r SO'>!o_#A`BFYt &FbٞUH['?Of(By`6yDkk`3U)oJfcr 6;cG0ˑDV7K't{+b^شir4ˣw\"l_G߳dɯ^_foc1Ph.!TiڽFFPË F8:o"ܻm0H7[}69qл;&crMFY<^.sP]gSV_(46W",fCڧyW>__i{sb;YֽH3YpAqر8nPx򉽧9>6pJc}sc7 򀻆 ! ڢ[1KZ⻯lcv X}98b hXM9ۑk rSi1>0G)Ո}Tl?%LUc44d}vW5᣷ImQ4 y{i~8S Ghd֧pmL6Yh|V€wwߊu!*wK'sǖR!Io|_O&(<GbS뼓Lp4C6v(vm 'Yuή"yoHXWIĄiÀ3?> [G\1 v#-+K@I̖͈ܡ>} $u01JgORZ@Ml %3 9By٤91eqmh%X٦E/]Tɍ5t@ UW'.B9e530VL0?S3t J24Nsl!ƦE|EzJGfiۑ?[6:TżlôjhT)8ՈإsQz&%ČABW8 ˪˄=vad]7V!׊;/ʉ&7tᴎORq)bdm. U!Fk6`-JyW 'Xb#_#2[ք)yՋ ~4?OViEC 2c[^Qow4 qݥu5Hupnv. ,P<ث/Y{@=w!zƦ珥YPeT;Fj:_=Hx3s(,>~eJj _f.H▀N> {!^nd↏3pS͡=+# CBdtNO^u|iFrR"a3t;#6H|QOif?FlQdijl:ݖ$"uZY\v#sx2yS\.՚YNzJ/(nĭ`}gPk6ë{9lX #zڥ[ 0bK)1{wjl\ Q8k)\,ʁrD'#ռ8RkV+Y?^C[JWSgI芃S@yKL@&g\>=D؆2˿OsY6) $XRF_3ik .f:蛶&z>^OHjp*VA*!=B0Ĩmq\2IZCuO-fyn'6ŦᏨEBUR3<5^OkWצ jbPn8s8Rk_L (4 I}ӉGBŕ䥤X*ЧFJ%H.z1tmDè|Mw+EB#T"𾹲\[" /)јVWiaj*VDa -QD`Ht8obqNp;P' j(/iHw:C&!caN}(:7!QX Q :u-1 xR|*P+ 1Oh" bDw6o65%7(梜vnۅ`g|PxlX}g6AHOkZ͌l*vE(1dX]ikȖ,.;rE[[k~ Fڤq4 <ίVVӂ0qH6ĜA4]21mt[UL/iw,PG(?􂨽]50JwN1lnJea&'t F?Wز -Mר6mԻl)2?4 @_y˩ΑdQ)қ2{Rz2WӉÜ(g˰!9 tMf9XgJ/ ˈ6?W P$\ USl+UWX) vw:YF??2DnZ{}eo]z.6,eU`Gv! 6t4.Ҵb1!ۃ]%F4X5 LХ٣wkeJt &w]ftjBl&CNjWg:Q>3xͧO)!>T`/?{F] MQ})N?;j3=xI~3GzO!rNMsD߿Unr7No5սeWqL&,QFVI*p5R ʔŇIE&5 ꡏD{TV>6v$x}~<~գ/YqgEqvަZmh<3Xu=jB0BgEfa}pvb =+@P(^cLY!IRݴ>Koib 6hX}VC_%9L4(1&Y*"B$NdAR,-O lb~G[33F]UДd-N 1PKj3x,wF\F\U2bJ=|蒯(قr{Tk0"gS!FҞVFfc1 ;QpPjqQ&XpAV`(ELX Fߑn(.>^͎,@&!Ƚ;CP 65Jaנ]{m$_+y~$ON96,·igMiD=yw.7F(Ҵ t+i>u saf[YZY>κ^#i gd°eנ/4O'i`TE+0LxxGEoP`r4I⟆d^T 2bځ\@cuoҾN f<5@Bѥ nxgSht_-gr@SНO÷\l ?v'S\W+8!XK눺يQV r/`4W#yèW&8QM"uB#ח5=# R6o*^*8k]$:~E] )SIZ^}`X> C)mT\xK\jŰױeU[%lZGmoJ@:V |snnli0Ȋ}W-UT[9aI/@ha)^aا'gEbcO,Wrj\XD3X5;Ha5W_ Ta3y<\cȟz Tړ Ӧz/r m{Kuk&{dtz^V͝d(,YD|5W(Ih-G6I! L{xwlT/<ʮ)+/xoNdpvY3sAQM36!wl.>Fbݣd<>Eb^-IK9T9Zտi;'?vK׌'LId L;&DdfdqDSf_۳H)?~.-DIM("l:Ȉ@NڤKy,-VzȹjčG/\&\8O%?9A dp+T_k²EVZ@yI} _g%I$U!UӢCCS6r3IX+]2I\ 2I^&Ao-+&)r*sl!q<\W֚{q#l&:8IJbtUj6#Y,5^Ihc#QRm-[bϙQi;];D8Ԓ5erVKƔD]3s r #P\ONx`l \HGIbڽ؉A5w2VMNR>StjK1 Z n,8a:&̱ J6114%j!JB;Xc&c "ߣU-qQP=c\6_mֶͶTjMHC YKwWiV&s3q4LpaNG|JE\ٍ_%9H5qEt}աA1p؀Im? UTdj 5;@~NQy`۽=?2Gيۑف78Ӥ1~uDucy[9Yh~xa[y$~jBlDLzI+mFQW9^{Βe-{)ՙ i5i\ vMMZO]@99p}U5b.#}HuČsmtSZvi|OCpx|,9ҁ" "xlb;rr*ghZ& Ge9m%:ѩfM! E ԗ;h[~Q\iiS/_Wl,=?gM=w-1PTSH%U@,Q[C&BW!^YՏzy~5˫qfE,-73gi K˝j IwW?0TƯ"l$Oٸ `\d ,O2?bqPt8uk7-#x>s+a.ǮTv8x@0 gxUbr JVz7b4FTjҢ>͐H‘q€K^w 4uҹ}PjYh6>Ĺ%bNp't^gy@I9-܍&E»Q-ʾ*ˣߵm疌==zZ,$ >m!ie䪜} /bz:3-/ $~2sbVĊ'+iKqV8[=nAAީ˔TJJ(I_Q=өQ4Ϋ;ۣx:B3fDG,G94Vt`I;oZ}іH52Ñ;o HVTY'ug{CҔ+-A_>ފ&^"SW{f.2Z:G :t#?H \8ĥN5֚լܻտ|(ȍbxMYx?A{ΥA&_˖_xccSb2mUp~Eq()9QnES y"<0Ü*UrYZ̍(ozIdJ9«s 7u٪V*):jᴡTŒkžr[kh?{qJp?D rpCw!([:`>Ù V{,٦˾kheMU^D' iWGb?Ԛ_!H89G$4/xA c)|#i}ng=8Cav5e;2uăk#OiX&/ WU WjlÅY:e44 6*fbs+(G(WI gBDs^j^S jӪrO|?CU9*~{5D{d8mwp! re*y/q6'6IJ5p\<+w'`|; \iVw9UPofByeM=?;ؠ@<pD"$ƛNrdM=4!Qפ6BnW .KyٟL1p~~:q,ag'@SS%~^?D cV+:yyPojr, p0*- rzFY9r ~~ʞU Q'I.f$?Ol~ZT+(cKHe^Co:lib4~ѥO1k=w' 1g EF p`nIc^jc$|aM5 if*C) 7OYq1Z1G$Us H4)v#)Up;~M=7HSՉHr@+sHy*wq,5{iH!84QE2wI-Ů`~mS'يe&~ j9/iic\=>ۯ9mvڛ8v|w86SPvo,ډϿKNbvhril/%LR \= eahl?B ߩy{kcA=ުl3x])V-fE""G\@e[t%aqbA\e|ư*PAg;xOl}Z篔[BĩGf}\\,9츏~TP٥E'6ԚIQ p,jr O(\ ?ҌC1R]f">uݫfO$Z+["硳K` n?/z.I5; 6$ c;On##aZ2кPD6Fq<^q6?>U]ZFbxSrONY3Ҿo2D~+nh7>f#/H+4l" g` CU*31q́b"=I*#,l3*_=beN`u c5n%+b87+xuy`{]:'\z~ތ`G"`* 9.KZhxO8͜+c!0J_xFYXlWb2M))_A6yZn о"@]j \CKx(fђiim&<03 W˘Ιf@ VtM `9IN'RH8+F:K3Zn?0CLjFsKoEo}lz4ɭ Qy:b2T}l<1|HBz[dgGYTO 5P#{K溑bRЌsuq'߉t؟F9c-;?ۦԐ$o -en>"9Q$rc˞RK $IX+r_;e~ԧ Y8Ƶ+~q EN9r9Σ$SxVɯd:#y}5'Db'FTJ˘ּo2<+Tj]̋-fRc.&9߱ `%2Wl'^ۇ*kEO?/GDBu5c`^DYq)3ۥT?ja~+Ad^#yۃ \Mr˘&2qdG5uz+J99䏎{g#xCR44N ?@3U\ Th?F#x %婪R|d;Ń&zgoPKXDǽo- 2]#ag[>K49xz ǾW2"ddo=)7OcΨ=@6'j,Lcr/`˯AdL#Ei!Wѷ;Bm}2l/ݓD c{Kx :qw~4Ǵ x{A~uxh&9Sڅ"Ds_1#rj _c͏~/E|~Q6K9YW09G~nM>/[ND@:W7ꇯ9L:1Pމ.L-q@=2Gr[Q 5)  ) @)p0jE.bgq6?94W1I[qu~RVM@}Kv F"RO~VspR}tK ~]sOcl3}͡?4\&?ԅAЋZ ;ױ*0Ӷ[/! ^w$QߩcMA:o9Kl!tx/ыd2H=T}ngQ6/lA0b//m#=zͅyu,A}O@%>dtz!\!jI}C&y!㨈-`SD$*LK}p[ C^-!ͺ9Q 3PV`fY`qaVnpgFB[ s$vaA,2T0ؚ <$ {KId A8.{SlR_Cw Ag9 z2vn H\>eEIڕ^&4'Ϻi:ޜ6ځ qΉ|qqLAP9CŜʴrf&hG># U.`"yHuՖ7\Wz2$UĨ{p9bWFﾲPiVhp;V9TsZfΑ^F} 3GG6IVтjB}7bML6ިÈPt7Hj:g3O`z9qïøRoϚӁJi S(.qm ԑc3UQӧ{^=j =Qa04Uc$˯=e~'ָ5 p uv-O\GH|kw& /dB⺄JpnP$HrGg>!(T TD>#(?\J-C+10MbU2ypϹ.ᾇiZJH2duP ‚\x!ZSa}![G,{TKRA&$Bwħp{؆H_;|&a1 `r|DExf~!增VCSJ-1_3,^i}\oVNa|G:U]Ӵ)TwUxmag%Kg{VAɠgkȾއmL_PaYy'NNB}9M8[+t,ma lI}&?t.ƏUtJX0ɇIba/-xv`J-dѥ@zn E:[PW6*`ܐ! qwQN_r͢K\ʹtSbFrMZ'Q"gMTe~9ll_!-[T#8>WĮQLe}{a87K;lKp:Ϧ:D$[z9 "ŝ,k YZ