icinga2-common-2.12.4-bp153.2.3.1 4>$  Ap`: !M@eeeaj\,tgƬP4WC[24?UǷq+>RTl,P:}JeBwsK ey.-M`Vo҈-O,/(D{tLv%v}C)8֦9&46:k.9ڒzIOͯ J^`z*ɃK5pDv?v d $ B *BHP].x. . 0. . V. .<.$. 0.< p 3 (X7_8S9S:S=k>kCkFkGk.Hl.Iml.XmYm\m.]n.^q bs csdtYet^ftaltcutx.vu0zuuuuuuuvCicinga2-common2.12.4bp153.2.3.1Common Icinga 2 configurationThis subpackage provides common directories, and the UID and GUID definitions among Icinga 2 related packages.`9obs-power8-04 SUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxppc64legetent group icinga >/dev/null || /usr/sbin/groupadd -r icinga getent group icingacmd >/dev/null || /usr/sbin/groupadd -r icingacmd getent passwd icinga >/dev/null || /usr/sbin/useradd -c "icinga" -s /sbin/nologin -r -d /var/spool/icinga2 -G icingacmd -g icinga icinga if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /run/icinga2/cmd fi!&1TzBx"(6{ R v KxmV k | WV\[XFA큤AA큤AA큤A큤A聤A큤A큤`I`9`I`I`I`I`I`I`I`I`I`I`I`I`9`I`I`I`I`I`I`I`I`I`I`I`9`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`9`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-2.12.4-bp153.2.3.1.src.rpmgroup(icinga)group(icingacmd)icinga2-commonicinga2-common(ppc-64)user(icinga)!     /bin/sh/bin/sh/bin/shcoreutilscoreutilsmonitoring-plugins-commonpermissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadow3.0.4-14.6.0-14.0-15.2-14.14.1 /usr/bin/chkstat -n --warn --system -e /run/icinga2/cmd 1>&2`_إ@_0@_@__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Guillaume GARDET ecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Update to 2.12.4 * Bugfixes - Fix a crash when notification objects are deleted using the API #8782 - Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785 - Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775 - Don't send reminder notification if the notification is still suppressed by a time period #8808 - Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8787 - IDO: prioritize program status updates #8809 - Improve exceptions handling, including a fix for an uncaught exception on Windows #8777 - Retry file rename operations on Windows to avoid intermittent locking issues #8771 * Enhancements - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792 - Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch and icinga2-boost-8185-8191.patch because now in upstream.- Update to 2.12.3 * Security - Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (Advisory / CVE-2020-29663 - fixes bsc#1180147 ) * Bugfixes - Improve config sync locking - resolves high load issues on Windows #8511 - Fix runtime config updates being ignored for objects without zone #8549 - Use proper buffer size for OpenSSL error messages #8542 * Enhancements - On checkable recovery: re-check children that have a problem [#8506]- Update to 2.12.2 * Bugfixes - Fix a connection leak with misconfigured agents #8483 - Properly sync changes of config objects in global zones done via the API #8474 #8470 - Prevent other clients from being disconnected when replaying the cluster log takes very long #8496 - Avoid duplicate connections between endpoints #8465 - Ignore incoming config object updates for unknown zones #8461 - Check timestamps before removing files in config sync #8495 * Enhancements - Include HTTP status codes in log #8467- Update _constraints to current requirements to avoid OOM seen in aarch64 Tumbleweed- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/sh/bin/shobs-power8-04 1626356193  !"#$%&'()*+,-.2.12.4-bp153.2.3.12.12.4-bp153.2.3.1 icinga2icinga2-commonAUTHORSCHANGELOG.mdNEWSREADME.mdsyntaxnanoicinga2.nanorcvimftdetecticinga2.vimsyntaxicinga2.vimincludecommand-icinga.confcommand-nscp-local.confcommand-plugins-manubulon.confcommand-plugins-windows.confcommand-plugins.confhangmanitlmanubulonnscppluginsplugins-contribplugins-contrib.dbig-data.confdatabases.confhardware.conficingacli.confipmi.conflogmanagement.confmetrics.confnetwork-components.confnetwork-services.confoperating-system.confraid-controller.confsmart-attributes.confstorage.confvirtualization.confvmware.confweb.confwindows-pluginsicinga2-commonCOPYING/etc/bash_completion.d//usr/share/doc/packages//usr/share/doc/packages/icinga2-common//usr/share/doc/packages/icinga2-common/syntax//usr/share/doc/packages/icinga2-common/syntax/nano//usr/share/doc/packages/icinga2-common/syntax/vim//usr/share/doc/packages/icinga2-common/syntax/vim/ftdetect//usr/share/doc/packages/icinga2-common/syntax/vim/syntax//usr/share/icinga2//usr/share/icinga2/include//usr/share/icinga2/include/plugins-contrib.d//usr/share/licenses//usr/share/licenses/icinga2-common/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:16710/openSUSE_Backports_SLE-15-SP3_Update/3a8e62b2221e19b6a8a6d409f6479f26-icinga2.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5ppc64le-suse-linuxASCII textdirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textꍢ(cΆ|;F2Glogrotateutf-807094296ba9f5d4d5075672e491e5468948be0e4e2f8066630941b5665d0ce8e?7zXZ !t/] crv(vX0M}t ؆T(@ϛ1Z%zͯ9LD=rl6UaLsp &[*cbP*cQv:'C:1>B]tD0 b#IhC! ;KlI'!NW#CC[_Җ_»owڽjg) ^Or.)g*!4b %i׳il VNhqٞo_Z@Қz,t1σd6tb,Tcx7[gԊ }GL_;(pl>>ӊ ԗϰe:I"ҿDa, XEou6F9?3^^fh ؏EЬ*Nw j7J8a7s( \]":d[,q _߽Vb=Z5FBR 'zDSӢ*VЊ?ȭjrp Z!z]FN~ܮ"-w\ύ@iLRLHi|:=_ LGÔJ !m~clDoy8ښeٝ;Mez zHb@bN|]k]jJK(8sZm\8#ώSAkr[wU.k.UV^mnMJJV'M%0C㹦ŖC"%Dq -8vPt}zyH19^O uSz?v^"b"us`sDX/R-VPYʋ.}pٔX^Oއג9:RK_kzp.1.g]g~`DgP4p%hwbgϞDP9<0/CP(19Ԙ]'sTiR+`#ct'kv:ӄMt'q9ޝQW 6hNܱr_J^8WD4ZLW=l=P"L}4f,u)77iijn 1FejڙN!Jè@(OcCmY[u2&7PY߆]kdGY}?ˏZ-!/wn|)ƿES~qKz6YcaޏƒB@=-f wfQLdT`SG th>F0X\GQ:D~Mh6U8c]:)0B1ggGFNkS:^c^+Hz v s Xz% +h]n5(|9(ϩ6(IOc98_ 7 *ԋ0 HT &7c~KU`pu=f@3ݱeN+oxzT߹C~ɆDa1ɳFyzŜDxM5"^G:V-͍ @ـ!sZߍw0K(p֕+b^7u3;njj8Mejg8rEir= QIiָҫ~N=e&BB1D9׍4f'Қ\`v #gc?WY6Z(01h]خ`PXUZ J츾 y <mY M%))x vV\ EW8F hI}mYs1|WxR)8aGI$F&+]>L}Fj ץP,2pݏ B-sU_z08E"AچSqsmjkooר'zÔ zH栗0Vˁi%nh>wye/Qx꿎/.5 :@G{UuwbaFQwV TƗ Mp%6e[a.:"OsTGuih hj|:Kzh^s4j[̝Lݱ[Afξzo<`G߾G$,I7OtSmQq+mޔ%k{)/uj_\9{P {#CJL{d~c\3]2?=w$۸7|s@5b(Gwʼ&-/~P,%2RU Z8+=m^:rӠ0K_aS+2*BmcE#O.G!+ WrO@B;i8짢y;R%,΍\6V7GP=lNrPIR2quV'j*¼qޒ >J5lgsb'fX4Pώm`5Zjѹׅ{'m$$?#s+?&ri~[=;`ii.1 }!Q\ &&vbsd$ 7gyGN@pz]ҍҕ|,T%:s/=RB6\Ey+:ԆCKIn[{ ;&M%l!d7j"WvrM5'L2e]g&&pkϕ*FJZǭv2Kc/Q2(r5cИ_* v`!ۙ)('6 i8U=dSL7;,A-3D |5@ 򸓞7q*s(]viC/b׹-+V)T6[t/VupZ,ϾxlO BxVa`_Vl'tv,5M(97~~s5 fMzV7#ոB̐)p]! QY5Nw+可UKUҀhvCXgN]X7o,xljNgo b ~M3wҮx{?'8Ɔ"{Ѿ`wV{S(xf枟a&Xyȸ[ e3'0K IX%"41=1/eO/ЪMG"]' z_!6;szB>dV .07^k#gض_n̓!y~4ܽ1g>q1=Zv_'J8+;c1TJx7g*Q'ߟTN,~-2W1p2b-擩tK@WtitAZz'Nwæd\˒ KC E3maXs]d P~kmoEg(ddǤoOǀJW[J"G$X/ _4/@(Aͣʧ4"eu)1߮mzQ3x+~px ~cc\6kRbJ9f9x$#t*Z9w0bjGR$Q[nEy?#>'6ZԡH*;' fZB)*Y@ĸ]G!,O\s\\6p2Ӓ(Ntk$FQl׻#8a֥)`3D@Ѽ -4j s ,=ڢ2w@8]  Y*oԎH6cMqkxzۇ׶Jw,個?[|^B4W4LS[++Y)i (qbC*r/:W$}ys1Nžww,;!\Yc5WD6;#xFo#5<2_SV ߑΑ^UFp5SvqG ;v1B<5bgHf, 7cI%J[R.}pNFx!= }T̾'ἧҲoE[>oyV90xHm5V#$DIzFK|5%&xmԵuܸ~ݲ^;g`'ԆDB~|rhp*p0A=@h;}g>ٽit;˜q^ǤJ5?bPH%P\4 twX~g !NB]5WҍW־zƲpp75^]\^6ew虖bR%+)Nh(bF$Lu+#tPwC 6Ǐqͭ):"z bG4|Qz !B|VPW@(Yzk!~āVx&m%+N}pӓOMJ뒤 *PUzD{"/$WM#Y*Bnfuk)%{^uz788 .}fICЩC \wY:v9ǑEM4p(6a%]Ǚvm ᯮ-*MVi -s,v~I{[Ex/ϫآT6\R=EiU:yX慙c?ɕtvf_hUvU:i$HpXƘzWbl $#.\)q6lN{줞eϖaP;F5dW"*{y#5iKΊaK8Bk`O}IM̲{˜, Udw3񬶀Nn* ץ- h~}PtL `&vZU9$ t:v 1nTAp5D\X}'03^ve6#Pl}e?>I,j{N60ԣO M5+7~K>yO@RI\ ڈ E]uhHY `>pX(ڒu/O TKO+? r~lƢs2X5+bMƊbb^r#"A#1*a_c\UN-Y>%M[SY6v[/W3U HpO*bNmRz_˰?4)OۏHQU85 Lv;S0\"Lhܺ.alWTu@y] Q=j_ݛОK9'jS_5+PrQ|Lʸ-WctWTXG} ʨ2Ӈ֛RZCq;\FH k$>/}\G![Pgz_HW=7jBa謘hyũ35M )h[&C\O_|T)ΝGMܙPmuJbj,G},/f',+Ip4\ dFgU*SuE%QޫԈ_=$ʇL٭:*8"l8 J/VbŘ#+Ax'+ { ǵeZ q7B׆yoߥ/ͧEAbޱ]|M?E2 ^Mԭ֪Ahe uKJC#YAs!]V~4j0r Jo{3P5 )h;kiӀT,:M3#*'VB҆w S:ež 3LʋĆD(bzNוUex[PBcp]Mf0\5F24<7[՞$D ct Xow*`3NҥfM!F f[ M 79zN(*)D|ZЫ]LMY̽75lĨ`NJrf_@ ')@ZyˡFs)~ZAǰC=m5-1շ*GaD-win[b\c6'5*6#RqOcsHJr^Lkբ-pNq0rm ?bJ l+q@c?!E)5ݬ{[YW+xX5rޫ$3R!sH֌J4_Vbz+rIu4ҷWiE4X4e:8;v'3;ujp-T7{('#/08'?u')+j}=gQ;.h6!ЅU FEMsb1)-h W %0M?.k+y +Mܔ5'%oJpYV  PJ3۝2,RMQ-NMBhg[(C.ON;%7u_mfy͑ǡJD#mӿa6cb 6aFwTpsm1GoL=tsӼ"mS|hcԽHtRυ,-9҄ޠEZXY9о?I* +V8.dL(3e_^FOv HBAPzCVR |Tl^uB`]UI[ 0"B044:#;,"KjRPYuo^P09PfpaTC DVsJz7--@Ԡb<G g% kJ?ݞvI5Kbnl5L3Nni-d* P)$;`Xc$3mO$mSKew/CQ eZ9rң*C+5$M5S/"z+;z@ ſ`ַv9 {CO!_qX[:QhC#1l ,HÃ^Mqc5u;4۝ 2Y(mbk0q2b!35ssWӫ[ b,ܚQy2>bx{\2Fjo3ŵڶj:;8ʍÞ3Ȋ LZ8.KAaV(՜UE#z.д*q+`JbD|+hsrxiNGXs uQg7uluֆL䊗EV y-'&k! 8'UPi@cW/ͤ9P4-\Gͩ>^3!N+FXjgNhDq y㜒-F/dB_MZc^@2' 5 ؜`w2:%[C>h~X0 ȸYӃk%E; MM'Ib_o20_ 2~Us&$Sl輧@1= {xSy!ܝ~PV( I^V.%;p`NKhx|v26֒Ey!W Z]-bq.B R%Pq3OנѼ'2|%y?%U 퍤= ^d9onO{KDŮ9OZ6\zTgUnC1SMO۩CV"@l;/e8Q(y+s9#Y'{@OЊ&%yXg|ᇎJ= .t3B߮$8גK j9B|j^s쎝_q`V;[Cma| hWؚP-KTJCH1eK|qiMEDۣ5oq*)$zaOKv['03[= P%?+%.rk=PIev\vz$^@[;Křq.Gm~a]<ƣ $`o+iz|&"!ѧ[e6` ϗGYG$\Χ5n+v_-ŕEeskQ s4#G9I_H$S^.AW]bB&0[dt(`gA@<ڨw7oQ 6 2^k;Q>LzO$Sd{][JT>;35rHu ;Z'v` mdLwQݕR PM,΂qZzXSu[m l3%D@!GHG*8(xHMQ0SBQ&~m@|t`8a^n~q]shC8Z׫5$`J()k0ȧϠ^KjtuC0~Ӹ_t_\퇙)t wA, Ox,Ӿ%W`1dzv @V>y[pUk&7BY? f8^/vwf(3K\2fhUWeRխq12Kdd`G9U]ANx7{bA#m./ mw/z-蓇tㅂ&&ڨyf*ǟV \H0 Rxn^JC'HԥC& ?ttȉ1_7߁S=7"bTɫ/E/J iWY0w.2ΠȫM-ȑx>plvXVG0"^7r@ݠ;cG>ȋI_9y]U׫{gl=c pa; Nwf2PÞ ߟ:B`kSn+蚫$5_>h-D_!сi|55ic ɱӹRؘ.{\E˦" |.IH|%FZE'ؘ‚;`OqeY=H6?Xd}Îcp]țosA;xȝJJ`2+8$ 禝S4gyK8,]S̔'fAC;%! T;v,Qҹ.l->4VCj*ӳnGK%#4WfcP5PZ6KMq+Lb~ԧdt4Qr9a,_4NjUe5:*oa_҂M{v/iALq}N撳n즼,n-CPҞX3:3 p'ҹ&8o(S'8I y7)?v\[vEf/B_ )ZE}1+nP%{_6nMVȣu޻[C&ƿ$,h |IgT&7!]&yE{l-yE-0yc@..۸l*VkRŕ.lDS{ *wW6KjS[h4BP:r8;"^=sg'NxT I6Z (#^tgEeyضxVj#n)t8e2zo էpvb+V6ʎ 8L)Lj;S2R_h^F2GSm 8-1 g.<^✣/rI}ੌ R!=X7g{/3 m("F

\%^HmoA\C^T^Tpzc%e1;=M2񵰆"@sˆntmVg̸a-"xZB`*:j7kL?c̅7JiΏ.{O99wP #εM=nm]{ۏNhύF&g {HVA`Ƕc{OU$X,UQ{TprJS0{LɢXu N;X\hU5Wk,f1b5[1%&0yV9 chUOLc%pJSc+&Б=~y\^fόjh^o"!QgQ]$kV(,@q4N58tr^д2K9*<͢] 8l[XFj?5;n3neB:+SA+pfca_jT&D'07oէuP"̽oF$!dc~'X|YhoM=J76Mz'FHEfh2CQp%a'E,ˎd}yR?na@ɷjvNY9Eymb "RHL\ɑ72 Sf[qQ'E_%,1%6Uk3l|7xMAEt݂ȶDP Vg5Srcz)lYFjFݽ#Դ'eמgʦ+A窈9v;oQ C.R`iH1EK~oX=c9hvS2CdFj(A˭@ͭH;ABgL b&q2s^XIсP2>LWOGN9π0;q+pUeH#a_ }ż8K?v6;. !duzr +e0clEܹKkiI_GYz-/}sf &DY\M۽䎥lVg-qxVˋޭEϤ'ʀt %F'RVJȡL.C])="O֍\Ÿq蘛B 131 ų\dv+zMP'ixpr*ʘ<` 90PZ>b cBhB<ҞWJQ'{|Fr)^$uۙEa0o\pq/7YrصOFXMkĴ i+j~u+0湍Y/cv*0Ar-ш4z3 J'd"W3:˽GM 99)d]R3SAdC-]R~nZ~Oݿ:>lʇ$wj}7y ۥ^P @R98ZY&oʚm©TRJ!8t[H(>`+g v&1:n;[ *!_5) 瑒FoCWVeg(y cpbkBt⍾w q Qև?V|Sv 9x<8Yxq}VTra#eh3omʕ:vжHWϴc1pEyYqR~1A3" gfI@$KP;bz'( #- V#&դܩ 9O~_hT y&g?{/xU`TfXc8s7Mi-Up{޾F1{'",)z2ڹ;hB(zf=cZe4IX#ٕ2SM6O1Ղ+Vn U?>4uߒMBp-o^jrǚ=PJs驌Ugt ZS?"㫭+JBKIsiehu擆 $=$UCvp"4_(,oI+wKxbjR^4T;SF*;,dZzzw.q׽x*߅Ɠ4C$1Gk)>1ӎ%SW˂Nb.^RޑڝB+j1ȱI^pd ,ۺ5Ujɨ`t]Dt#}%w  L}gY1Ch0@;R`"OЀ2v/d /" qFeGy qOU{UEJW{^,鼰 ғx3hr mi? S$2=+9 ` y\ٲg39$ u5-OUsmbx:ȟ4.]+Q'/̱oufc`dܺILfB:)1}1-SYX (ʃf .5Ҧg.!]x6' A8HSR.*nuT$k2][ʑ'Jgu֞346bH_ۍvo+|Oߤ-'J/m_dž&SuFEЇ܅~oR* ͤAZg|wv\惦ݠRo|݅ڪjʤpq {5 Ω`e\]>woj.R(\sqІVIG^(@* ՉfᲿ\Pt}.ےT[#zAw)J.fwZ{Mn4;TA#DGSCۛ jQMZCHXo?~ضx!'ЩwT噑'LgWz}DHfĀQlا>8~.SQk'L/OYDbB姵&[Mஃa92Pwp+3#,n Íǫgs,mb3 f:*r/?Ua\>~爂ܧ z󟀲SV@(%F5&V̌aM %!660F`]ע϶Z1F*S? 9{}$nqoR96u(``;*(C/I~M]G@j~>afՄvtF=0AGTwú]t`o˅BSNԈoIxfP1p޽*.'>ļ:m,걖d,+ٌ*Yj?A1O,J/peXJ+c|}BT.q~5 OR70+&nK.^Ȱ}-2^X܉5Ynq(Rkۉ pO+MAb-;ԶUÅ$9:SƷbά-x- ;VqВkx<^'dx>.M@>N0 |uAW<}'tX(wFO{bdōxj 98zo!QapQ eOpX%̈́ M#T nb%oWWǒO)@F]Έn&aؼf找zS9BٕppP| lB[D]t$'2dX& d1Jb.S8L>O| )&@&cȚi +]:`o +a%@`?ko#_r]ق&uF;$ #}nG6`ɜC/@Al-n81Jngx[b й>U\7ryte\.=ѧq [8Vkiֲ̫#̅"Od%P{-LY!X][j G@B.el B(6ji pR, }mu t< N7=%ZhL -'~wwb"֎m*oTV.rðD-@JpRY٫MTC۬xD&急KәtzkoK:䢺S[ 7PHɎT_VA'f60yW|zjA[585^gd+ӆ60/n&u }oE!LN 8ӵ)APq=&9#0~qY:CYlH1%;$x=f!){JF1:P#aʎ{2w#RZ=Cχc2yEAF"jDŽCQŤ{ozs(AjΊH-[@BvZρfrEMOdm+8T'+'PtUAH:7jo(@ՃYxkEұϕɞih/2'=YGKtؚbUԱ?E.2İ1`qD6Vֹ;+B,ar>OQcgr`F#Ⓩl{qBxsin_Wc |%F]u1DWW|!ߖJ(⏐WOlX$btIhI)ܱ. !--#(g"ٟʼPkyRF/_(Q AuB+gsEfv}lEbQ0-nNP=O%<_D J 5k:U:QaO{1jP`0O44g0QmvbUn##XvȼVi=Rock[oQɅY "Ve3gtTڻ&vچ bRY $af$>΅KN{) pa>{pJc7حgd|d 2P`iK1y0;-`_ҍŞ ^ġ~|uUaC]f,vAfO3zĩH996ߢt:M#`}Dh _MuO𽩸:HQQ?yȸ1?otVC_X@#{s9YnI,ӠQS!JQי"~F$LA*Œ 70G'bZ&;\8kHdLUYc/M7g-e4_/rJ4a Z5pK D?ƅ˻U3V0ԖH&)4e@lDP&X, 4(YR_}a@,hwjԳ%<#*n~ׁJ q<&/-~`BhS]ILGO/7eJim[r<&! DL/h(mkr 6ƽH֟{ |@qU?-҅&X*ʨ~ڗl;N w R: L'r=m8}ɵt kIy_2$=2V+X3K 4?I>%|{#0wzMѰV ͲY!ry5<fC( T$S{Xؙ)We{] p9NT]mK"MZ-f(*eEE H 0 xn$m<[|<$=H輸f+2Kz}6v3GWXrN{ BCLCVmW#\]@K+W-^#N0޿3lgs ҆5A RN5UmRb Fz @3i*^'+44+cj0lu%${R.(xzJ<-CCN/E}e ~-4Q >EhQ`(3i$P_abC{أDb _cIy5]kFard彤&}*a-׌3|QZr2ߓjGfLЄ`31D3HԍB(/UAaX}&T2G.ǺNThP):~I>B\hf4)r^;euv3:[-%ASrn+npD'ҥC(,M=˚[\bO朗^?*~~Ih,hqU36O |Sa!*#둱kZ@2Lm-/znT^&6f6G tՓnjx= pz.́Qu& 4A]N\n%9!J ]v-:T5wa\(!kp7;0GF5HYq q %y (iGW@Yj}zG nH*A!X=>Q};/:jK-o!Y?FN-R[_ MX$M; /81V L_Esޫ<\ A̶U Ta{TL6y 7ԏ͝TaaN(&ZO]#FV$%?5fЫL׷w鰶W3H9-a H~4',fNgP䤼sFH) mSZHZdhui,yPX>o˜#g#96U5O⒮*ǡ`YqQsd5e^SdzyzAf:q(1#!e5`2S$a/_ >5vb]ɓ`&3P-{uiGa@@FcMkK#J锜{4vzZAmʼn6JkaڟhFKnpsLVa+EwJ/nplGXYֶi4Xr~ Wׅo<,4 ȋiM8`,~ͷ=O+"x V7i:Ɇ18=Mqě.{Mb!&8 6A*ȫ{Dw\yڭ *ĝf}%֙fCIGmYDǀoƀ39hOB/#Y (xZcwZ1_86fn[RMf"a?HǐhU EG ‡%TQO ys ,߽! \nKI==d !:z{v.[O !z i98БsL╵p]QQ=ڼ+GE@8hWRQmtb?5ꊮrR4JnH,U|8#9]!y|^=\Ү$ZT^0Ci> ! "MG 1P>n Jެ桾?L pndxӓl"/a`h9-VV] Qgh;$JttZ|–݌cdȜvBÕYrH  WNX7V,!.&̄<$8L΍\ o8¢eF˜ѦtNm{\ZKә ie %7B 8 lF5_unjkHYI)|߼Ctӌ,lJ"jm _6TiGW8MyPf4!zl"I\sl=R+@}C>;*\Ym&v)gaYS9hN@Rp A 6/el:]Ѥtu6U8(IGe[NLlkݞK-doHy O6, 춆+:XD@ G|85"&{^ K{:PiZU!.KCZc ]2]g`Ҏ >Ƞ4Pkh N}Qs[Hˎ)䶴jm r6Ӯ mEY\^s Z-Wa>B ?[.kp\i"e409ˮ.~PrW +V튌y#Jq)E]DG; St4RqA)Y~7*%Wځzq)3hNGV|ͼ~q>ΧP졑29`CV\g;t=g]FD["Bꪀfyis y;]X[Xn m{{auE/jKOb_ d)i4Gp܄xf%x.c$9SFH-_G3#/q@~ޚ&Uz;G'^N s9b3|dz}MzݣœPY jt#ـӹK) 꼟6 /MwWv9-p=*5lry+oĨlKB}M Gw*kqBV0EyY{'ԝ~`E~o~5E:?@I9Gz"ܝԞ>P3H;\czT7lcVh&B;X4").RA䑔njLq' %!I dYWwdjӧDX#{TB֤Bpé!/BzBU?K .|n-ΊENыP.!#mf=#OiQ.6=^ J "yM Od)co߱7@9rIdppՂ>bV x{͓S;|kG oY4ԝ_!pbԭOAKBZ#̀G=*w4޶d ,AEE>;]>㬹+9[v :T LO'ؒ'(ZѤ &$@FwI”q" #R8 ĺ% Lom37(Hma%g@ /f]:/Q8 gMhFQԳθX]yώ;ښΛZԼ(*ۙow3cy9 }XCTm].ROF}Q_M ݑ5)X/aOqsӎ N7h۾òer0ɽ %8541ȱR47 Zۜi*u"5ȍ*N?ݻ7 ) zw*D~xK2"ODTۆȔt-]JSr)*ϩ/s2SCOOu}x1^nS7 Bw6̴3Z&`huthMP%mAAF8=2wXi(F;9)c^$pEX\2֎ZW|>5Es{~(^%XYZlք?9KQ䥨|CѺKF8#HD%!^/JWlH~˞yQ* bS0E0o8@X4ūydðtT;I?!-|I;;?f [-埒[]g(4IO$L W=pr,MkI'拲F9M֣'ݲ3겅>=eSfL "ZTOLV-9IsH][_>>ݏc,(hn$AAZhMDo-r`F UQٚjFa6lJr:R!YcDM:\d˿D}Q˾0CXn1Km멱[=A\&p|Ef]>r2I_Wu.|WH>S_`:㇭ad_i,-@N~0F:|1ДzmlS) ()UȞ3ם"K#RJ䒰<1,cv>O@(a!|  hyÈw6I6oOGN2WyÊ}99<#[>{n2EV0~?}8AO"[Ɔl9d$(^,&A&BX!{E ' Z |IPl[`c|9$8R;}Ѭ0N喩-3 [ M"}y DMUA( f ?U̪[v?TZ!T&,Ch @H7 @0Pgw-7`y9٦ٗ6A%,w./|~ʻxλzf >Ef,ؿ4]B+a,/fdOV=k${g6^|"`4 "%<J|iAfD?<8BLGvf ҂vUF~f V49eVSYzy׽f*нPM^݆梬Hhʷ&y*U1dC `ϋf= Naw*@E<#|"zt ˺ ZAY\~EN4hD{h}z? ]+֥̎S^P5(Z4VonlMIGbQ{ SEͱJyE1U׍ h|‹X+SmuX⬽ʉߊx~dN"1-= ,P Oj{ 'Z"nilĥ"l\TK($?_rR'Ywm}vi{ D]n:~a˳uf 4P{z[_h{yY|DsZg-Ѕ rD*&ihl bQ깻";zJd[뵜 ZѦ|Z5xA,4ʵZNXfPY7VG jz5+rP4"8;+=د}Y6/RFe6~73xɦqK \c{2\Ard,7ϫt`SҌg^򋓣)B;y6%MzAb$XC6y##י^[s&b&׋ǖx&L Tx0> %_bW=3ƱYbSj9OO_8fњay uȈՎChGn@s8"0-m1HsFToS|8Ph6l Na.Qm#Q9]+GS{GA,wy!BP!E!'|Rb+Ŵei鯛w! r-E0qbPSnXi(JulbIom\0&g#E4x;'C!)RoRE+ 羂*i0m{[tאm?Iî4n ~L$.Xl[4+ ]8VV;b-OE}M#'ˀ'a;h)Y]jhVaBD/H3'ASqA߅ƹBF΀4lǙNv]!C)R CHxc2(_K|'ˁy|mTw/Ur) pn ҎvDGzς*jVbc40g*=><=V;(Ђ]H<9TDe |Qt'fxig =꼈c` OBёȩ9RO\%_ S{K,tB1 Tsx•Q¿I.י>j7|R < 5Z5gZ@i._XU;CaI)6z ne3H%vXOMyz'd=7(Y;vfV,ܠJ9BظAzΎ;iʶo^C,4dL|;a5}y%S"yځ13Tpfs~zeq1)/ʊ;$QYx|,D[&^~z1ue_Xcg(`O%J`e"l1Q**YHi(;:%eso45h{? U RH6mm6&&Wvxc0La)(wUA{ !S j똥p @ocy^7EN}| Դzi[1kCFH x,!79i6x3U4nfAiZ[^h;jפqJA>t]v3W @ٺC TH1HW0Ya:wnRqƾK}W'+6TtGoaOEk;\L̿M%ʜ Y7:|^ĵ4q>jlTYVs;BC9BXh ®QXZr-g@n^{= ~[MK Kx2{,8֬K(B'B"C%0𜆃}}fNe=Y~ :Tyt2ta.2R @z"(jѫey "K؆[QiwAڽQU0^C;F=s(p+Ͳ;NIzc^ʹPe0uO8ki2 ߼j.ރ/_5˹|~,J_ͲFEpw~$ bZ.y_I(P@\ð} ڂi(^2m<JO$p>U#h'FNJqb4r[]NdW0.OjojkEG>A0Ko8!qר]<JAG,Ie*'CXd:kr,"+9V1BTvר ac&_szIϲuWy ,t+eV79֞GٯT2ҽXVQYT\YG%(4;W9~S%P Zz{2/xH.R(Xgi$z У8?RT`.v6t8V cF2{kduB  Gs_:bM%0A,WcRP=PzIm_G5 1sWH!#:Kadž C{RJCG_/~Nw9\[*sUB]%ſI1DD UWw!OnfdZ2|`E%De`ұUa]5nIVl.B'8w"*D;LQB6vDW(wU\QC HeА Z*0 @wY(cj{T_\uN9RwL}k5ଔ:ɟϦb0ַ,#HZr)J_DBc׍j֎@چo^)pn^ 1 *>cXy\g!%O0׻Le.2@8iX:+%! %x8==潻& An2ˤ}\ ^€%#X*-劦v9ZiNpMp$,ݑNV5w3e{gy;w R‡7Z:h5r/CxH{w^ .)fK`<^3of&BתU6>D26bxBssW9Yt*%@0ٖ_UYKWkR=߾7ڃH?;'-"&7>J=LU$1cRɼ E"QX o.œOcPn;pc2dXMvdKղ׺,ɍc )6LzGqj"%3@d.Ҫs&7}{w*m%Bٽ<mWp0QY(9t(Z{z (݊^0?)'Obݼ~C=jHup\t|Y#4.)^2Bmб+ xX\J3(|HQxg<@M] &]SldHP_,U&&oZKhzټ$Su!6o5vro,gU w(@PCQ@7NzDNFtO: |>q9Kd !" פdrh鿟O ˜i$uTʴ[9"yH!0$ff;-1J!jn跐LxLf=l Ɩ[06*IpBuw{V7D m:6ʏceoFX%AO ah0h}OTi8r`p#>BQI痔G TmClbu ,K0ru/s ̒bͭeaTYAk.c($(o)Сr_SUZ%AQDxH\ΆIK"וWM8+BD;(%!^JZŻʞ1ɨr^ 3 Eüiݸ8{!VD WzP_?U 5+[y_?h#]jT *! 5LD55Tv:& )*L~{44mwdͲBEMӎTrB6=glәG@pɞz!u6m32JV_KD`eIg>&L5wrYK{cvI6MA BJ!U6^M.u&icCI}x+6< UVdft=hUA1]u:ɉÜ\&q=HCí8pLՒBY@v9o܀4ͮV\+:á~Lq),Mb'5km>84Rߔ:MZ%P6eHX VtM5-b|u,3y4[^xr٫`By+Fa&5* fd,CnT炛1ԫˬ0Zg2EDŽJ=aV']zľlH8*20̒hdK3HY5&0J JALWWEB1JIFO]J"*?:[GEUiV]z L7`0 }{WdgU< 3Q˵b \K=vu 8ed6%3ʚ3Ma͔=:cZorVI>7;꽑$2obiCmUe]&#͙D&)1]W,ݯ#Zj1V:6A!}mckz~kH;W7sSvrLAR_fU: 5 08%%!ejA$sF_-͓zUzjÒ~wZ[ib%g: jI:*To:˫:McBr_,">2*! ^!2J?>~C1!¾reMDICa}D %SEڻ0U?:mGg0:D t\9(]6: ;:+~7.YLS 2`"C"4E@&{+h栱Nh1h`hV'Pv*m""UߢZ9A7FS eM Q,q羓n$"*,a@g|3"]f(M.l_R HJA:0pĶ7cW2 CfR-Hf>LAG E YlFgd^+;S81w L\wyMpLQ,|POø@G=0-#tޜ> m~$y/ր~-1.,O壜W$ЯRW^j[hrdM!m N2/fSCWX44Ʃxm^2,@/ߐ Yϯ2&b^᪯͂Jzenque()٢_KÀ"%<b̴i"lYp2vi dG|^6GTȜfc:)5,"#f)dzJ0ng.-B&F~VQ??xK.v:#RgO -²[e.zR}MvEaFbyy'y dr) +cʋk.eN6V_8(Yy}b7!_aQ!$)ζ!mFtf0M߆D ,ky:L-`WRSeq }zcVZINYXFJ 5ÂP gI/CfBEn ~ꜳZДȈ( DMؐCH#߻LnXcw\``vIQϠc`>ax ?įXrt6m%&|Vam!s}ez;4]G򻜚6[_779MuZ&P'4(6;2` ik*=vݵ~4y4!CJׯ(:RǿL0h{@ܹx.z-#z0URM8ξ ĝwX9Kcs[a}2{XDp+GD ,}7r˟sod\׆mKUZPm0p;Pqfr1qSȞ Y=%$olaL1MFt+Rl"v'"&db[ J:CKB{3sP\qS0`+TtI9.1ՊsīLAԤ俎|gVbV`YU HcUxT+L ,tes}]KXU^&ȕz X-a*_W=p`EnnI.+%2&ep|iNrY>RXϚҸIT) ,‚ϴh}mcZ=/8B' >QoeIr4f Y>~M]a2dCˇZo: <dN<{.Bw؇>Q`%qRygeNj)E@t)$ELIy5WP~y};JRiqՊ>vC*UQty/C#^iٔ -e&{ w,-5@ Pl/w`^8wOpZt+ޭmصd&w_?!O;d2O@?'/i)TE>P~wӋL۰9`%#./+dKpH_lf\r}\62^P;W89|_]uȲES ;$䖵Y(>F2g$ns/(Xz{i`1¹J|(7puY8a'h e# j3M5)ohwKVwj‰.BNSJ%1S7\)uE fRoE?6z j!,~&-Cxǻ2L􁌽k&n+0;)7<#*?lfICAx{OO2/_Bɱmf8XVaZ+:.|]ZӁU&`םV[B`/5jȐ?{Hg?;X}7|D#0G" 9|W8[n2(SW΋ e*qCK#A1.JT{4*w 7@-߂";5 4Ԟt.V۰D^Za$BWԯ%x bm^;Z쒢7 x5_*"s[\s i )roaBz9݈38=;T?/0Mu%{:gH_ -[^.X%mI fs"閱R A"E|@Q7,-FT`oA{VO$SOO3еǏo8@;I.΋$i\M:s54(h@27 <:Z۷S4p>&#u'3 4,W xه ^-.lẂ`pLwǗ㴶ʅ_sykoH,ܶ8cXp&oW5Dr}Hn9fk/:w/1~>nFO+tf֞b/i1IݩgpM&fp}FǞ@,<USi-"CC1K)EJu GIm3L.Aȟd`= 1]2wZ$ 0CfpUE~3l]乍pW.1{ p=V7JTE?n \m%$RIU.x5_C=)#n_<6֏o61/Ta3Z6?^]v(}zh8ۊFveB1ír=V6T>RqIz!pg{b}u?XZᇄ0=/bE 2줉d}H ^7bbr{;&ʩʂ\ t)X\ EᬭEk^a;x[ʊ Hcn/ ߷Ҵ2}­'kf=yFM.OӺekchLe*pAFFL{Mo]P/HlMe/|.),2nʽ7|8Lؠw }2!zv/l2a*p ~qU;Jci*zd;7Kqsq!N21j#>F&xz璥'J&'e񶪻H6a4_Cm3ki,h3<޾~[BqZ6JTڙpqd?n#&\CM !lLLwk}4~oV7VAA/CI*1$p=VjUnj$wG (>]SΦG|̉¡{+0Vx]Hd;\5xfܱh ]rP,"}M<܅hekAĠATE!9rJ1S)r3|,bw+m,+|(@1'dDA!V2꒩1OrN[iftEUeEPH/Gi%r 4`/`#D-{ܪj@] Z+4TP J9$&u9%u$@k7g]쌣l!k]J' T$6eJ:ćNx1wT'ˤH`kMBLjmj kywbSxsPAM1ԋ ([Y2=?;08G(֮X1s\ݾ[qI ea^*_=38'NԓOUH_0J໵e'm'b>lީ&QvJE?ߠ(K Ph#Ոj$9DzyEz @Bfu?H9g /4Kl\<{26 ))pbDfc<.Fyj]0a26ⱹ` Txtv>]R?߯*su'^x$w\ _%ť)Qc7(ot#8zsVymܗ4 eJk6Ng┭]ZpT *<02d\+zE-Ǡ뻆-|uҫtÁy2cGр11~Z9e&͔U )f9kݍ̰R{ uS÷11ʒDgY ӿkj]IGEM68$ǻeug48v:͉X:w`0nXb^/r!ꥭRzgη $nSdj=f-8;b5#m; |jז֕1AD^zz-6McUxӚ-Z󮴍%Y_ Y|Ck>kvd2(}/sġYnL}4˽YyP&^>6Z2R>mp ~UzCr5wOЏ2R퐊aA-Ls$Ag>sѢcg8R;j'EWC{kR+'h(Kʏe$ f2٘w ODƲ=Y-~MT""돃>FjzZBD>AdhR_=EG[q'(4w. iİ,PBSaP4N;󕯇+ׁ[Kto7=(A:Eaah]3͎!H\nH&xZh!<ӆ_6wE겸 fBZUCM3j'; lscvk%%CYPWCy|VjsMWmCq+RI$nSkak L,?MRC>Lw湎' qШ4nx4<z'|$pӭ1aI0)=@i8֒]Ae2FJpM 9Qm]?EbёZPELb$Vӂza 9a|1ȅaa\H E#PSi)v6F 8O!sz;錷{~}˃NȅMGSx+,.!{%x FM2LwyZ`ܧ(4c؜@]8>"uB0ד9U V4hgCZO𶭇J-,i:  6}*З#N dpFKgfV++,j(pj~oc]l)8N/X45kc4ʕrR~k21VJtpud}W覸#̘( +Sڥh)q<\1jl`˽$j-W*4~Z>6ΣNHUkJdڐ{7C.oF;~'II;DV0F`6 RX:8J22LLc[Os`;) c\dvND8~cZC} 9 D/Z-w5ㅥd2v8o| Ŋ8UzAla*i3XZQ-iGJ-w.Hםp| e>MR*k]VXs[I$61V`6~ҴcJxBGRzK@qק;8ܻklϏ!6iShf%`x5۴'^)>;)mLdM&xvxόyD_45g<h5 sCr6 $I2®Rۅh$k7[Rw\ /7XJz*tF;Cs8az~4s4PfɄ Mj$Zx?ȸ8jk`sO@$XR0t SKq!Xz0fk;zHAj%KRa ^2y=1e^:JFQjhdE5ؼT8s;E4?C2nSM+_@>!Qby}pđe8J!H Ga`)|.9DjGqХ?:~m=5J| .cKM%.U߰GX::<1;.ŷ!Grzvʊ`z_Z)=xZS9 7@ PZz\xK4,Q,_3?shB>Fe8?d]y.&.G?O#oԽ)0C"=$zՁ qx`AsD4fe3lr? Q,yZ:hL&pZB,@Jb)<1w jR_R+Oy.Мd%#8P.RJ^؝b/&R_jF{TR.Q?c.q*#!<@*ہmSD.̠JF2Mػw{;s%7 J-WK :9LEhT5ai<@?Z|A`vynHT퉂R9G> G2M\]nхV#ߞ\pT:A+oQ&p4BHB=gEE\-BinG 1rHdOZx_^xsq;!M !:Vl_n̷@cEa&`}{/QZdSrHQL'.䔴\ (j_tH}(@w, `lT-+ @<5LD_a6^zNF! hj~prvh'fFLcs~YF㈵2xupr .pڷ M9)㮡.>59Sst;ƻr?<.S(Dri _Y#gƴ_ r\T"YFTgGLjɦ eNNĵqWf Wc~Xu+*{ZIiZɔb (F bޅ(csTe\=>i6>ղ%KOsVRS`%vkAM[m?}Y<$3;f$'pH:n܏8M #d`d(:)p\á!rbx=@!EFe `mKMv VnƟ>2C;up]Jfv& 5\026bV+YgU!y9 H}`ё bϘf2g[>ɼ̓շ $z87>a\dcyJ"}8ܘIG93ܕ\0 >8 l@ nx9TA*GFPK-/ucL'UއR<,A0o"{RKGcQn^|˭doNSW9s+'9})ɏ`-ρ<vPD{/IYb-n{Ek.hzq[N`3/3,)Z: TvS ~FR]sOC#u̜%#UG躕28J~ j^K<5P,U#|>ja?Ƃm8ܯ^bԯi_ܼǏL40\3EcʲG,>uQ@1r(( :x0wB)Izp-N"x'K) 4-$ד=EG.=z^@}yuVI$m)?`Yj1yCG-h2]lX:o░-|ͫ=.2M)n%x֪^T~gEbL\Mř&BM( y,Ӟ GꥃMLӟ͈*`;iEL2xy*̕v0mED`Z/']`<] 7W,i*{wc7pS7^ itpM8 (&Ё m8n XAW$`\c)7&* ׭Us6q[g21u!I,H[9[Ľ'\&c7ŜԍhLr&+`>PD;q{3%]xʾK).DhU3YwG ՝Qh(Io:.rf$ev8]Ѹ:5VႎvHtK/opYO'h$ vtuW'FP{Ds 攺8qjy1QNE%w]>͙eɶ{,c,֗(ԏYL@ H-0xO`:"'2Yn%#S͡yAIrdSƭ Xqd?1.#kEvܼtyxM; rL@ fGqæ %dOjvwI](."(Ⱥ1.x>Lr3" ѦpHZܵϝ $0خ&GJ:WC/uy=HFL'X'iUkjyy]8Z /IRm(#K5 hgYgzTHDV=]gEqD%Q6#R x!jځJжǼ.yn+μ? ȉm1ML2le2UswYx#b>KW, q=A\eҥKyp78`yf^-Tʛ,4y v48UDH!g@GZs%m !2Etʛg#FrSq7#C/ M46y,ᩡ#~܎Tf5QѨ?`#E=y `#gE6Su/ݨߺ3[D*ɰ\ (ׄsNҏҮYD)* ʆ/}#q`Í^'n1))+ )_5_ugQ|p j|f2PBN$]Iw?*in.i3[cӄ<]ۏg]R1`N94q~_ փlBXʦŝ>l ߔ#hkp~%Qp 2xIތ16i<jD{tKCcnHg&Z8(Bϕd<:C1Hjn8H8 L FHh Ɍ2{(193vboV .`U@&Hc {y܂qUAxi $xҿ&TMY6CFkDr1f,[6v? G QsATGVKE.۬4fiq3PhDS,q#/|S΍pNKࠖ3'=}@T0\'B !۰uX@Q7N_ pD* 3슯Gog:~H1 p1*i琤gJh i .f4{ DP+:`*Z(ᔜ)q0H~t5xe\E8',W=\NH< (,UZ.}Omh:^C-An/`,XohH :D%IJ >&$xRLj>{^-X (}:bBާlj}W+ӻ :4z> B\[Hb-6ژP?E3@X*+ $4,3I. kǞѵ) XnNJh?rusk6ɠ}M8wd3ٗ b-vtjS(JX?0&68|5-V.-V V QK+%I mNӡ硰x0 U3!gypR4|l@!óYTIU1ɕ!֌rS=\\&mwL\@-oFa4y$O'SVK<+ ˭oMHWs56{z}o&Dz{i〫pND0~M>_0:vt#X) =$|2#?X-#{:Z[;i*/k,~9um%T!n+2E)G&`'')|3cUZX8V;IJv_mȾ{vX}‡h^DMgUԷ=& Um!i%uQ rzoTpk E?2 <A_,u˟oDSCM܃!ZD}FgO qX>^T nL!+q#$Gɕd/6#KjI>%7~CҴnnMJi6ޙP-, 4գP:n*WIϷ"ģӂY4I*'@ND™*(^$} 32ҝV }*6#J+>k8M0 \f:AJv%~ udգpt~]s/wwy E*w]UF SW}U*xcopfD ;(/ #Wk8'-x{g2)Mh6)Rg|S8^LSF) /?(,*S$%AE5,J m >v_6 qq)g'M]r ~klW#N*SO y_![ Kh}!W%)tqjJfat3|.PŎF`c#O~*sjSJyY -z2V"V"/Tiy[ͻ .V5{}.pb >-3. fΕiF+K]mUP- zA=h*tVH+U(izIJN/ _78+f]&pRB16}q&p/xvn@)d, @/aT@_@a%MAr:K& 8DS;J[o{;t?4qG\(˅a+# ZbHۻ18Ex*!'/8uK/2Y=4]/ajz"o>'z-c>z_g Pr jSRßP1]9wKS9 ]~̔Ϫ"?{|Y-g:T's2C!ص#7z; ,0S]Y EǓtuƔ H]#b[k%~o }0|Cj&^ UST>E-7{Zr |.[AnxZ3?dOsͮoUBCÐO@طӷeύv{Bp-687BmqlāK)E ̦L ҃G/>\$ՠZ~V?5+(?Īf{\tC6p #6`Ź쐿(z"#Qvܭ NP5D;UhXl$#Fku0{NI,E>7J5O 3]O\{MPF^\a=xpb'oY%* Q U^k`sh,nTьs7CǮlzA.X^_:bR gk{ym#o2Zy3O5}C<%gU+Wl v. t*.TXENh 4 ͲaR4SrŸncwS8USu]t~d 9r=h\-Ѓ" +J /(KPySS+.L y[; :(^g;+J ϱyBzH!3Ns+p~.5\ޖF {y13 a<'z@qGxIؾ?ry(١bc*n^@[[{edIhGZڡ;Mvx9Q?mBv}Aޫ8QG Rsf`Nm3~ _@J1 Ԁ2r@`fI'<_Mo,oW=Z{SՙڧQs>W&?̸bXs\Ba-1Qw*c7D \f]SZJ#ҡ$5!T:OsCpl>˚v6D'T9COq`to/6_sPXv#pSϑę[A9=mbt y_`ǥ~G`RȇH/B1čds/]|IH(}P5`<ܺQ+@++lʦ s1<=ygH Ia((fgu C (>IUHυw`}i=ȆX*҅Q>#o!þ†EMh.%a|$*3(j2SGin@ԐDغ1vǓ3;]G43lba8cl#Ҏ 8|l֛PrseGbB|y,c7am)IW{B]/8HS̴ % ~m}Ga qG1G&bpj ECȄHSؓ.!SP4 DoJwx?jlcǕ{N'5Dgi畓M]t ҁo'f.bǬHIDqIg);sp):؜))!h>Z@ZEhznFvH27 ƉuCKSycU_d\#_fhKнn RO`ŋW!(c 6V@4;z &11mOG+S}CM.gJژHm' M188^^\0|o@m8Hظ!֬9̳䘾-`TڢQ98]P]|_Ӊߞ.sV]h#KN=.:22qgPFVz 97=8e2Hqk:Zb5Du~ : feu=Bֵ4:yN|W_Q+z3dJBIb2@wJw4C4'Nd8R|ꐱQ)8(Lt)A}Hjzr'E C7Mܘidd;.5WCKN3LMulB]i{s24D#R > nK ͅbs6^qUj)WGCcͼ= 5t-K'$L UR VS{Eb SӾew~I$MGv1p-HLQ)@tcRooeUet\S-kZX+#%7$*BT}g@X+7+ !2&:R'geZ7z.}ǡCb}y7Ք!CNYfar,5^0i<t;|Y ,q=%{sVkp^JhFTP~q*8gENf,Vn9b.9 NβJ2x[Sb k8& $GbUc#zX݌K 詻d̿5;SGNPq_?nLhy;k Ի_?>P=p% K5l;ef- n`f X;,zｻ{/k$m&qp$iyfL1N Bݳ!(mDxUٽ1}<.c5ʱԦA1jEG]d[@/F _,OrgskQCz.OK]0~@}"Xsi m#mf`=t~|?ZӚlkc:mNZcFBa5V-vz;|!5sCmX!qbԍ]U7|)7! ;aAbq.ϰwQEI>ExՐ7R8^UzP8SqU=b,8pXGHK}& B1v"O87Beye!uB~bD6q릍1+Gk]$ILzqxODmb f]2Y>O)&mE witcZ. Gkd$f t&Y)A߭240 %ע% V9 \Ȗ歉Oضn gm ;/&9v8"K/]?Z?-5,xtrJ7A=%)14N`sDw^x kuJx JNk_[Qu9pk{,}J#k덜`z~uyYV;*W E&RʗT$'g]p_ d{6e6]a},8Đ ckLXAt0#0%;z*Io}6)G3=sYFfڊǏzVQr;>8`-WԌCVT{ {|K \ [7͍xō]x_e o );8w{-xǰB,敽(-, ph SFB;|%~. rj<*Pէ4]2F?U@YcU71hmr@AeK~9vT6 յT~s{!(\y`=TWQ8ȡv3P>3"Y 5^!%r'3-xc.:CC:#騍4956eUɾ 4-1vѮnwH;_!k@7B)\m*A@0JCމ| k]O&y#Yfa^\S(*W<Y٪2N;*]j`dR 0Dїz}fGo~># `A^ll}O ЬϟE?U^D@Ph5, D(Bժ]t$ !=|%\gO+a!s,2̜}V0S+=F@$>]'^4E0'!92Wy쪗}Nrŀ%JUI%)]o50V 2Lg_ Wp[&^b/wM5X=ytӮq=kwoMuTҼânb,k+2azyQZLX\pbwb4啀+ hw#FYy+rz WH&K ~J4 wZݠ4-ۛyg$7LJ]t iƙ _F5:`F `Ko&(6;WYojN2Z*Z-(Fc Z"D aJu%29IX0Ѵuf4oSREҙo6m$~(.ZY~7zÛJG>|e3R?Lb*;@V k\!*}lfqQ,FowЗ v~p=oiM .ЅXr˕6o{{%nޥsndv]#sT lP|ϖw=DPTjPzr r%9 /t"wbd0eAc!)S oARq  ţΘFڔ |vO5k˿ Pc$^\Ҹq6FNM1S3 E Q%ٺh\BIkx|ɼv!<,r*Ig8X##Ya8X"*ͲމzÐ`LCoasW9*G4qO@ tam"F)te0$ I'ѱУMdW&[ '.yS̔\&q f14-͎nN,jN+H1Xe[٬È/u!3+?qFgdž}BO^?AwkLy`gHҲ*uRjsq Yk[c-)4qFa}d8h0,}h#u|R5poS v`y&m&EY坭H,mda16=0PS eug?P4D}`^6M%i H)G,4au=>t@.dSK= xrF\w}]ΐEq\`%/%!nTKp-W5S-?r XvD+_̯7eө\x?)>|ڴ+݇AG -FjO@c~rQUĻF,ŀ‹˃{ ԄV!]3tf_+u?X>ɉvE" qx_ N470w(L%ڀZ}MڟŢKCDP=y"_ϼGErp铊,n'ySO?eQV_@Jb;ntI b2Dֶ85! Jp\ԂLCsBn;&X\snD\zu~Ji%ҐE+z"ZH'v@L֡RB|&|dj3<$iEw;$[rXYgq~\e=s1NϹ^}:ĺSҰ[a]Bi+s:FlcZ1FG#F* k/6Z`lߞ88|[HƩXJdte[C R,c|\$zE}iNTV#YU#ϟrxo|R)񟅔imWRO;/(fA9|t.%2j$ἵT#nz u@Er ?G$LV s%?6]G=Ҕ=RQHroƲ򶺻v 6 _i6&Cqz RNPԯ,K)P K|gHR(+Bk)/W_b,zO 2߯J)3APm^ >kw)J~6' 1)eQ!Ny`k֚^AIơraV,Sb-?Ϟ0.M莣,nmv~8X`-+ {ޯ"{bu[u#̟(3E*D1n"=U%1\ x޲dՓy)\hch7 c|%dtזH4g(_2yNJ˝svH6g@O MRAOޟb"R. 5}Gq[Nm *"q6M45[ Ts/^}yhw%Y29PgK:IݝĻ/˼(wDy7a-P)S|&Y׏YU e]p#EoiK.貯U*u%!t$_UC,--({XV~Hem8b?/28RxD=Vt h?ݩŋl|BX|-l4FO?wm  =pɶDY<`OybɉĈN8ijD^mk*־9rUa#7:> \JKMGeЌMtCP8&pɚorГ4z(]b W.X ZO}$ŷ2Dܚ-_>X噣/ѻy&% xO' {w׮dO|M6TZysRߴpoj({32HEMBkdJ#[ȡ/ز9xu|Uk~^w`CKe&LfGC9>gK>c>0Q㜘"I'UK>gg :zr ٕ뾋#CB("[8'R#k ~~?3q{Ż'V~:dh& VT5`[>T=|@o͍[\* 5]* *qYV ŪԛcGJWM$֖.&$0VO*5Ti:vL{h,(T?xGdO Lz._v-K<&ŔO!"FO:y9_ʅ}$ H>iÇH6C e`FBP{A^l?.:?kaJ~=YS]\T)G&T㳦1A/ pλ-uO5ٞ{[d$رr). abQzۈ2vN=b9eOh-!o=_].Qa2s-ڕo{ wRep3sR";fK / $ݠ eycmCوQЈG,3ת+] 2*a.>TT6hgơ˜5B:gp>4Rjc{0p2LKֲs|C:_q<бΞsť)_XZb<2UQ)stPfmF(IM@ E+Cc ˊL վqG`v.xBTşCM:r :5hW_N>SzAU-\ {˺Ck&zeqGO_Ye=2(izsgLAt6u0`O%Qlrxf vhwiէ[TYHyͩzyYum+xY`|0':)ynSzw0`h! ?&ܢ@f7P*vlYUF-$8sV(|J?c}ংAΚ2~xn m ǿAUftqHλ҂DIɱk[:q6^w-#vsqB2k9 1IZ]Y$ЭMM{b1PM ٷ(~7| :"{PO&ѧswSj:吸\k: w*a9<τF^OQcS6@7ix %Y/~:3+hcWO? ƭ(q, 瓮g'SN[]ŷrҢ>Ap!;BO::; 6a.l6ٝ6m q׻S(HW,hO dҙ8((oY)~I{'`UK,QQh==>ͣnn!恍fD 4BIHx){Э:9vX}gm3ΰAP:x"0z*ghCny{]{*<ΖsJ3-"] ;.] (^;@M [vEfܬ{ T4M̭z{DBF+N Stݻe2 \v4 ɂT;Ak2vba (ѳF/ɐ(#ɗ(, Iϓ{C@Vc㇇(ɣvpo4\C0V{o-/^[&x7K2ɭ* P#+WA;dq!E."?vI=?T[*Ζd.LNT\  iH~t>5eHd+3tꥏn\xXOIT9p \U%NH\;?.;j!ϱ| K玺;A?z/ bҙիI{lzA{0 10 VtzQ# 5(J=Ug+S +-r8ReZJmՓy fe-ʨ4PlZJMkxAJ^S8V;wwKqbyLgsYxz%!'+juo+Dgz_mL.e̠ghZl-Wt6ZAFfa$] [1}1Z3) Z5w*H^%ON;U\}HkGXیt-V:wH;]ƒ(EyDow!~nDŽGu|[mBf$L֤=>o\Ex+&]2, Ld2fo4-`+\9U"k9X ge3KE@`AӋ5|Nt6@ کoh2o* ~7 7˾$=5Xy%T𣮏/,*&X7E \mIg=Ӿ%y=Cz WqT̒dP"6N;4B~Yx\[$*-/l21nj |V֕ҽW)p5yo%c#s-sDY$tjz) ߀\`'Pmy"x|^څ} CVѪ7b])ǝvj0 Is •54[(8!m.8 ^~W\jR!mָX+L,wO͂y(c,fzV`h`)o@k/+dY"u:B'ly3Y%,fR D'7H2ăˁ,|ªtzˏ)dIyDcwB~L&Y)m8X\[ ^`Hh]TDb/`f+ I(Ct`.7|u(q׺|{e !'fht:Y(h~>Xy?Ǻu_8a~5@<11R:2B;Ӂ+o#Jn^B+±Fۋ|*:#, ןe(Ur>Β mA}<{٬B$Qy8PrP P,@ɭ?NۼleeBsB+ʋO-QM6,wPKy؎S؎LtP?EĽj[\e-lI-B bN=ZV[iW(.Y{:ou9RUx$raUlúp/Σ߈I2y2J |>nPww.ewQ$T_4sOCS_U7֏b,JQM5-BJ.օvr(usVRU ֝1pv)3 ϳ*֭1zI7Y(u& zM98"ok^/C:^x: [W%1%4:Nj|))'M|'cv31/Ț)m#I2s} -uJbU%/߳~r\(dt"Pã`Ŝ3N/=ɏ#"_?ɻ.+& ,wI4p"{u >5b<|oNbbϏ˳U0[JӶN@ 򊎙 P|YQ Թr~=3 fZJ"J+} ,TF UZddzo)ǜv)O4k/A0C Ud_YR -mU ʫ.G'j}. {:spOc4̃U-*;8z9f/5hfGfb^0P1eNazq£{ k .ErKZs;ƤAMU(&݈梌$U0Z04MR(Aˆ%D} x1# 9ӑ'}zzx09T65%@3a`E]D,ґV +Sf:Fܟkٷ(\WB|ܓF +\|99Y/17w $(hueV/vHYk1!VRы=4 y:s"),|?r=;a'q$yxf81ě^ߠn"em:'UT) GK |I*(-V CZ+[5S>gM,2py#iOm1`aLDC-.+˯M#w5¿#l{zA}rU A B L:Zvgz=*HId3A ^i>I>#.s\Bg"'V#DRT뫸 Mڦ-Aτb݇P&`Q q x Smc~ h1e70PGFp%XWAhh`7ciyr"Q&RN8_9 "YR3;^~HK812IeTz_*Pi9ڍ(hc\#PxXi̐!ާŨ0cFx`b5Dp‹m(r{@ց ̚p[D- 0E)@xh63C&Y>)yh00deTLI*^QÕl%<;kPzsGO;kTD/XY**˥1Gҵ}oOrܔ *,V$3uuTY4aev>"]Xe 3RcUz$ ko|˿eī?,H2J|ql1wgURfb|JRu^)^bXKsE WƏv <>HΐNQ%1Z×>9(kcA ޛTGz*i3A eYrc5Ʋ$c8ĕY-nS[3K\"O U8shS/4`a[:Ojgt6I:*j&7 Ԑ( VCnr OT2Kh;GYD8O\Geˠu0N$y4Ih}Uсn5#Ν a:*/xG.Epk=>"y7̎.pnoGtSNPDe#s|[rvOw~);L^k$rTzZEnTHu_Q|$|uFPQX x\ŦHg>gcG@;Ffq)P㨘ÕȏN/R[+m %ˀ?>}"H mѱ23G'6P^HB]`d)arH^&|;zl85}c_t{w9 %ࡨ[x`ŋ\o%(ZlM6o(C=sEoN:gG헶V9 F+C*PZ`ɗtu`]>[W*=dal`T]ʌbNh.AƬ^ī摤N `ԆfZ"I"`08=Pdhf쪾WP~f axC ?܊v]k܈̲%OOnD\ch4A@G(?>]LBys#5OHDŽ!V8DhFoݛ9΅W7! {@Dr 3or{ &,zjّ=LzV/GaA}T}Aɑ'c񳦿Ew= UV'a-qݬv}Vi/j rz`tUC9Fr(6SήGUO挲}dʢ $ _8ub?u2ŏ_*oC Q^o Sjڧ`) -C 릸=ۭحyYUJͫEucRo,gpiR#RQ"/bKz>^ 2@MCޔ_(;<}a5 rf1y“O/t 6&o:Nj.}h*&q9ͽii߫ThPikqG߽unCg l{B%'~ }a>op,ޑ_2#5CUW(z:#F6[ H6I إ.pBFw e F_H?A`SK[gg~,he&T351JS^%vXܳ:?/5-![b(fz"?q*58CA_5nJQRK\J:'ЬQע c`=w T˵lTLS>Ź1r+ C\_o햊jL^.Df?+6cAؕ}Փ) H9<##owe)G^BHN`㑁pzM&v|x g3%m z]hq!ӱAks5 vͽN?yUt3ˤدex1vqE?KN/9 RwG-No0(1VS9/RɍwFV#%SC-Dc!@)0[cȗ,ʜlƻ <|wmד1L~4etqqgXԓ 9ؤerfzClG&ɒTMfi㷯}d_ S%9`х8Iv:{~!.'K "6ks_73}˕HF'">d3KM>r9-@ud }\ MS F(1h#'C=SS\ݐVWFMqؑLP#InJ21} VyTt+0WMpiB7[Ps:  ׮0wFBZ!ucwYO? e0\ }+d-J_h(3oin~P;^L~G1Nܔ=*8a!N6 FvW[PAoۥb%J-n~M1bxBl Eqb‹X!sDWR2\c D59MTO{+~3,>Be(G ەSr+$r]va.67_4lYݬ>bl8Dp`~ ܨ i 0C#V}[ I#udG @M1.ӻlS8?5&Q2rTn(TtWی.já|?.898ＷK5F i_h֋й":Otɪ#\(ZV?TsvmSÑn}12[Ujzw&ދ- "z@NZchquTw'][5H1-3v y݅>Y>GTC C!.EXIxՀ#ſXT;0fޛ cbj|zei/Kz ~Ob"BW7a)Ag\lQ?%0X"IY(.aa 0Ph0x ệ:}"5Gñ3P*I}|_fb}iy!'̇5Om:y.k+ہ! Ix9o_s*q~0B=2)S]tNlYYMιHtͭe\NnXvD " #> &ULgGoi'-&*ٓ|sq|ע!yKF)i-=roC050vwޠz3'w:9SVEf?ǙXP>|r8d5T : w]0X![guz6Afw>. r&ThmRz<:e y"%['O}[VYO5%3( M߹—]kқ~ Kmj*`,-)@Zb :!;fV>Aw 0jp 5 %Rb>K\[[n+OC7St֌>"t dQP8 Hܞ<]%./ա1)W@]#=7p|.Jl '"A)뫪9)iw`~8ĔpOу7[]>`~av>a9dvД42x*q-g _˃iq3{*`'(1Mpt9T3x2}"]W<)LV#U.~gx^LvV<ƚuިn &?qN$E)Q͍٭yy=wK{/0`>V%#j='Z\w}&%@2/&;;wt cQf Pa%m?<9UKzu/7{:a萊!5Ѧ#?LPދ!1`q 饯hb,,;`{BR}7JlX>B e=X,!qVdSԵӏwts_:754efAԥb.(Uc!sm~.)8yH* ^a 2bk&emg㥟FQO)/O ?T6[v~rTp$L&!VO1\x_S_:S# {ڞ˭D*K1aN];k)WX0%n'4}?,6TA?uOi96lQv|֣6H :Յ+ǧ`fZB>-mKB \4BEyZ"W')Cz?OBxۏPE7wkk\B-Q8YQ +N OaTۘ1yϼd5cn.&21W"uSKF?{`ȸu𗄌,q^FPfKT[؆jM"r'.a;$R4ԁXڂ.oM!XzB>H2RmQBN+"2]lf$89dr[nCX*\ Nm$Л[]ᅻQ`?=^%( Zec'puj2j^8=KkzPX!!+QVg44-M22[jJY+uK @TOWl 1@^b9K7+_vE&נH80fijᅛu.?^&d,$Ԥ™uT  IaaW,fC8 :>E {;%FN|c1E.`.ly鶀o=?0 uϺsX-tbpXK$%@=+ z[&G61mUjFZ`a禛 -QYx"T)kH6͛KwX- UY?!Su2,m'XL Dty'!ƢI$z[2S#iR^-*TCX݈rsWF*(TUwJ PdUB{v!(Is}CkK3z'.Ύ )JEڒKsm H'Ã=U-aZҤUEqWu"iH_[%W95p0₣m=?,jO׺0KB?mF`#fwBG=qf6q f̶k!%V.beqx)cIY|q!+ VY]Ci&-mkk=)Z"n 0O*G(჋蘧{P^zwrՈ$! k5U( Jb3 H I a/ [ze`\Ǩ ?Qo]@cUYȚIX7: ̧G>ܓJΫOU"Iiߚ4G]pء}83+&*D9P%ڬf(G3(^%7ۀ6ֹs?dCj3;KUFgyԫy벰q"aP^{l^U8YTeul9bl߀ߧ3k8_FKo'^dƗ1M;WBpQAv8 tX Emj' M3[YO=JV6PXthr]L0w`U[0N)Iths޲hNsn^c0 z,$9_.xt.;xkM鹃j` [ Z&EeK ڒ^L"Vy_u`6<9CLنz/qf,OnѮ#V@4 meZ8 vu ʆ48'Ts^finB-mN{,S( HpqҪWԠݩ^|e+pg JbjNX 9BZ,$UGDI-AѾpE㉅]9(„3p,3W *n̍;v=ip!vJ%c)w4roVOgzTZHUY p˿*P&^B/*=,ddJ m'r K48Ų5CS}_gL ۤ/p`^n4X(;?~ ddpY=5d]NOvH&2!gmgJo DnoRԆJ 1_? oHCtIEY3J=[$f8Z9~TȵV$(%2W(MM91x6,K)ضUBE#kzǏuwMRKaNFbİi鶔)5xI jQJx)0LI%ۋ0OЄfC(Kgc"a6pMüڼ7=xA`k'V7+'VC2Gcbr+l^BsJ4/JS1;_v'4-nѾS%  AzgO'\Fr Lƹ^DxERC#ǐ)Ch~#A]NI uA?\7yY"ebt!&,$p] w?9QF+"/n2/.FةR>^0C5"tYRj(_yrN}[t b 97J~)wJ} HQ<N %\WS]nҠctVe勐uЮ}Qix7 3)luf3/W?lg|zo!=/P?t tfbiu*Az]9Xo`fG(> tv1g < _.*QcND0!A iaMe&n C~b@Q>UHaUtzXl-q.˶=H%oy'h#ԭtvF5Y )yXx[z'.ϠX-'C>ܻ}5"9* ]u3}~1Łd(B*!)U*M0z}dmUt>:;fQtzZq"G"I.\Tp=6C1.UFlQ(p1YuY4yظ٢$ !e;(IOuYa'gMۻD#D]wQ4J c!4*XvJ4cY^d~4=l@<#CQ!c?ZNK?ح}qnT·mxc@Q\3"xVz]ԉ4T($ 3Ң4v%Z]($(h_mR`~DJpI/kyg 4f}vo_ 'ѻfĢH@J\f^7H؃o ԡo' NUǩ~k&#,ͮ3jNMʖ=FRO:IE2w8n1f)*1=/]{p& ?82gAk9q,FϰH|bȈܿMc[Cfџa.>&|PY5+ wpmeJNp۴wbL֎R/m2*o8%ӆS\66 ֔| p Ch:cТ_p$D3FMCG~25ɉf#5K քm6E{bڥY)hiЬ{4ZSЙKWV!HLU;F. Wy ARpiyYX{.5VX,BuSz=(3vc'a˺;WHΐҹ \2NJU'R$L  T K\1l}ٵѬTuz<dPD7 F DV?P6Γi {WмFZ [m;? Ʌn{+#2x^2jo)J>"Zdp? +-IZbR Z &3fGo16gI'R۝Nfr2I"h?"/^ձMTT3h=\bU*>_C^p5Ə@v8i t1 mޗJD!I ;4(Q' 9Ku\{QcFy V/B\z5tq򜭊W. M<:P=pK=G@K:;Btn$ 9htA`)ç]mѤCOrIUbh}ENTVx:K3 J>OYza98:M8’B<{ͅ'yo_71.^),S-Ȑ"r[S]C&j[ڹléf: ٱ;]/yWTKgg8q]4+_y!V% Aeϖ$SapF79Z*2>C.:bXrQ(%evȚWX UctMTS YunW@DŔm)Q$_ Mt6 934YM$SlE5HTA@y%hG~@w=hlHAlabeߟE.8/KߟN@tݝ) D*Iy xUsT7 tD `q LƢL [x͉os \ӎwD$޺*c?(5mkʶ 0Mi,`Zd7[O[#ӱ0 =udc1f A3Iѕ9vxIFdD69/ $HXC ?.u[%+S (Ģ#UeHC*gú{X:rXa!cKLNjaC_+`]Ep2iyMX"";72&ࢹLT6oBgQb3mS("W 5wq"p+>+qRQ%2c|z C| M;^!=UX1fp]w ",S9 R,[pr,ZLRݘp@s ` ${46 ?N.ba}5(FDT9Pu8r@n/]/1^ :aLceԥVo<qi8a߉DT& KB@+b#Ͻ͝)ZL>/@r%Vy *Q kʬ7vTpt@%i=xUuoyZ}n X:G'ym?] ѝlA `Kz*Mc;4v$j'A4vo(NkEjaӊ1l>k l] w;t}U]V0"DƮ  `}%XI}î62ݿRTO(KH "+D'RBjàc6p\PɞdXv! +b5 :uX弌HrziccU $ӄu!p 2A8>roBS8$t0&_cezP{7louO|D[Wsڏb!d:XCG_1>bK Ϭ*naHJPJv4MRKlgQ+i#5"g/!X5簊R|;f*Yu7Ey)+e4abv)*mEĵv;'#)l? Q249pc'bG](*O _ZxEnDC eVvx#Z8/9f:&yFjdq8 30*U  =0$o:zFx<x!{B_I{Cۣ7\%yqSzZ$M~O+&>D[W`}Sd%yFߢn%H,#Yxj*J $lXa bЦpT7290S~p. n]EKlr{RItЏ9)YKA2jJOī#n~tlҝ|_8qUIʡEgsz]tub5fgn%x8ӝRp?MK09'I@=Ph? Z˱$jXw<''KIJOBq# 'q{MaZg GNGӰe.lB)53HIO SNZ~q(n9Rҷ!d6'{fSb:B(Y (Pm}'UTV'bOlHIJ{d Tk*]枢,9 ?|7gD=7 0 j<G70{O[ΒMV(;)bD? oxmbxHjR0<Ź&"Ъ65*VX( hMMDO\)v!R("NCaF$nx͐l=7G3 >$rbZHC=GHO}fy&++z+i^(Ꙟs1nGE5d?g c->3O` *xiq((&/@Q^a!:|7N#eeuvVW{Pl2n!?Lx$߿{XaiI8B>baϮq`LNQzR%zԫZЮM=9Si6}c Vyi+w^!:*&#|&n9N9a\: Ǽ.bE$T}"Zߘq&Rz7>k4Z7S&W|$S x$őu_5$fU~Ip5 bI= H{flh*-_c0UfH&X_ɕC󿽌I^nAĀWDdPX Ə7C ޼n!𐂁H h*=.dI~ !?0 {ӒZ ;nyl]8N=,Z}nfY3 3K}<8v;;/lѺfHc5i܋]܄)2H1LVCA< 68XD9 -,`.ް$X;x̴q=_,&P<38Up@󲅓Hu  NiP7f954͋:x$'W߃)I墇?X+$N%+vtp9"Hڃ}_Xb@/Oq# &2'2SmJ7¢v 1kh.e"C@WuwMFvlzI@œO,L )|*-Ekuv/($ ~9BW~XH}[6˰avJ rms7.hXet"[] bNfDg3 t%>Ï!]F- i ېAk~: u8{@TKגI `B x)oa ah%:qa\{,Ճ I*Ru/C?tUCB;bѴԣ |Ӫ̩,J3qEG6S8% p(/g.ֆOdZSl}w^yZnao$ 2qT8%2D`52PyM]o=puɣڎio2ܻRxX"J^ntA% JSz[dn5V gfjLZ ڥ?O$ 4NG~?u,֐m!|FtG)Zx7.$z2t/\̔@ oOm@]k!\ik%MS\߅SNVy}R1dW$jV=HĢ6 0ltyEG]B0,1y xq\ַ*N8&^>BKB)1Ŵ?v7k!$4pgt*?*t$`|Z GεSO-U렷5n >BA19e?GcH ~He@pA-[:"n[Xo4%1MHO-!)J8z۹3Sxs𥝴ׂ3z(?aܵ¯FM*x 3+ F7w V;WdBf?ήJSO!\vwfؿz皔&PO? q7Auk|}e#^)O ﰘX;,8!%:NƗͷjD#Sq:֣_r=c-ޔJzu6bTV5E6Q`xO@ e( ÕfIJ4љ$u*/̋īׯ"I$lxe_H#ZTOUxFCㅪi<-AGRa yuI+L/lԧ0ȠxD71 ''3wWvumT8 p$utlNTG8;(N3^CciL* wM9XZ'YA_}Zp6Ƿ iBo춑Y|6b)0t=K3tKX׹)]oAUu5=2m(,GmʘLY6\c6>1zfw,juJɫ 7^;kAnkN" Ƽ t0p,sxvm{So.bz:ZD'.O78s?x=ajx8~.-L m3x-(oufkO/R^'5n|]ʂf#tbԟKHv5uoת1x€XR蝌Z)7@ٰ R}A닝8X(Qx*x#ֱ&Ev;`4nd/u!IGGyT$R+GI4츺b@6LƜhq>0ey/ JB$uԵ/N_aI/I+¨E]sRNx[_3mgַ2Ax콵9l߭{ŝL9Rf F8,  "ԀF=혋Y`oGSW$\aP`qt:w0fr`>1TjNsPh*{HLEM,PH@p%_ 7 Z`)Nh*+;0;}8oP]Z"%U)q_rI846؅׍ᲊ>)ߍB)kNʆ*ìfzjjKKg:(@~?mj q tP誕k"ZcT5h]/QsSJZdHscAץ%A2;0ڐ0 wgk)j3SSZ2Bԡ}?_a)=' MV9Cҍn=PK/(5=$Z241%wo4~tt݃^TuiN%|Bt^Cf~o6aWMQaZ}EDx^ْh V;>Nndf,VĞj *ڈ₎H7J}ƳbۗR sZd).Ya[8ܲHDM>C޵ڶ_X-5OIK9 O8%Bpd[ϔ6S,s-~ 魸m~hHj튊&ZY8=^"itLҿ,oɶ')'" G)g;vj9Mvs|3`rK]@q;֦%iPsܻ9pb|3Owv꤁Lr'>JQ'c'^) ߩ[VIX6=#XʺHq꤂iĉc'D NNgӇOtf9&؝X` ޢAX_*F^* ^uY1"B@} *;) xlLҮ)g鮒̑c^=v?*[}D\\Xgʂa[,RIM֡ D]]=t'Ǻϒ-hɃģ>!ӚfbvԙUfm걎"*ٰ.cH2|b*ۖ>2_uǯ Bpg| / MAdqQ*@@t''z ncԢH~ǡaZ8U(hX \q?ctMr66 "ؓ;_ 2( (&hc0+[wpBy,N@~Y t§BحbԬuqaY1u>~kU7Y}P-`30@}eаp,1lJOTCs: M^895_"*[S;w>p,nsҝAzSwY,$[cqoT1nc3F'ZW5k_ߋTIF>urUַ>1ܦ0$5'8S&ј`cFWDچA *XV\ .,hkf27}`/∜LGrPOm$MbWݙSdgy5p+۶yM9U6p?Mԥt&:dF6 H0qA(? NHO$ѬEN3Ϋ/&>*@:R18r _<IF_ DCe_aE"KAu 8+:? y9=|dl_ϒL⃎[5m(T'T3PVm$a6FBcJ5VhIQ+{'oW\VߦDq=/m/GU*F͚nB끨Ԣ{ GH7xY*SQmQ#/#:Zk"a%W%MB VN_q#`*2%uz"/@-XHv\LIe jO|#Z0߹s05"a,Sa>웒ӥ'sj̾%`E(fq̋:kgLgRyIW>dp7N^4VFXF,L.zJ )iFGLlP[V˜1aͦ iJwNIzi>Z>>è+7jxG\Sn'ԃV;, (Ro7xc4O)ݻ<<ߑCZ~8ͼ)]_pgi [ 5չ3efƫ#0*R[2xo%pQ3t5en9.7]dY;“H1|'x؞{,rv6 !|+=ZQj\DhipBc;Bf/rNfg>7dh Ă*OaYDeu9Bf>@u@'\"!ĩuOF0IM,evO;qjIX MML7 )4ӅA l$ -JO;Z]?5ٌ OU&IZt^DV јhB5_kY<PKc eHo;YmՍ7i凝& 7iW4gmt1g%^-?SH$`xɝűFx=w P#}5Fa,,n:!K0Hq N~º>p[q ށf0φW[*Ҫ=aj,s^ɳ*x6 Kw}KD%@IN|-k8C`j:XcG݇oVe~T/E$Oee5填By]aD-0Hk.fLNnX~o L.x2zI&jQd C4n[7_:DU 9F@ǸcDDmI7_qX=u"p w)3zZlTF^آx#dOo/?=Mj$xEFIdm/<^,]>]ѭ:%Aq׭8%^_=57 BhA`mxt GcyN+ZF]n gzc(D;sCFv:B6=0ZB.Ht3|_oz}e"}iBYTߺ T] t`Ptja*Z7T'vN ˰R^E n}KCM5 qwe|j^9,;39S#0 yc̪k"lsoJo$E^5d)ijd7yNhU%7wNB! 4 dUǫ郕a s]FQ[s*5Vi*UuzOjXw#WvzSNp 19/NR烰 pMϿIul0?|EF)&y3?3-}iM AEH,{da.B^j ~;BY,6Xmucexd҂^A87iԍd{@g@X|݁Rd.`~N+A^}17#$Mso >X";6=#Fi@.@FqO{xǍ ?5eDzBYsɀj*3qGLA{y5ϛf씭t~YA  a.sx wºFt1|. W+%-al$uҗ|E3tRJ'yIy"J^3본O<o M/?"7ոxC$8#E0CBu)G/0C5U1Fm`f:_SU}ڇQh6.L J H-mp&]m:(_rntۑ{3숨#AnSgc ހ(Oq}&?&wZEpLQHfQ(Qs?QËȎx<̾Q3a9K>̜VFIDMg,P4A4xZl)i6LŮt&ZQ%jAHӻy@ Su#rȔk{8]gUWʼn)3Tlݴl~F6`XSk5FW_+軍.D! 0ަK| {JE8V݅([D˚RTttRYI N5ճȽ؄/-1x#BcLCˉOk8n_rPp<Pč4ɋ.2E,r5"x_n\B -&=B|P>KWo2+r8Ľ:-pbwjB^yZh .7^A&:XzNuf=`BIp5k/eTN5t~$Ky+tu0NEAܓ?~[s+Z}蛿h]Fot|UWE&O/=UDbViŖ*.H^P z}!SX3]g Q5[UQWY> Ral㗪%IKt~d ''t\\ހ>s\=xGtdw̓d;p]Z$ڰ(]֖)v]6c ;=q6t88vC[ip*qBG]DQy|93c8 #oL!(wa.+F7Y,PE晹uV*E ^vԆNym f#luB$:R}ݣa=v3!hf`$3M)ٍ؜&f|Q+Wx\l9א2C/&\<:tD\O-OpB?K@:55 ddx'VM1}Kğ6848ĽS?l) տzMdw|mJ-rO~(ڰ=PS_)U8_wUS&?ᙙ -mw/WvRZ?f8aZUAu'ϏGg}, Q?ߛ?dTuCYD#UMhEM~@]ܪ Zw'˵]n6tTӫddǦ^O')~qՕz&u>qè_$}JM?1HLPi` z;YG(xHRۓ Ȟaۜ5~sQ?HY^:~Ȩ4mi{ DMZqӌi{@k+P<qY8LqVi3rKK ^ڧyK=!.{+4%G>`b]&3JZO{FG0w eǁd">|+,Նh=KyW {`.*E? TLђ&5Kt:# gfe Odijнâǿn,^8> 6b(}.[oQrn7\y.UFZXpۿϡQ^x> aya XF=rk eC!%թmCQ2&Q-9iIMwH{z@[DKL.@PvM///E,s|K7+1ʯoNEDxVtcG1r*ܜ/~lqzRB ▾,ĞxeB^t9 mƫ9n7_d,*XL$׺P_k:|kݹg#5*'E\9xgGD~eTF `(E{ziXj$X$z*AfTbeuVr`)7ԍn0lͳ!ԶvuĜeGk}%m f.hmT޺IC'bq|膇o.Sɿrga%eanI5_5^ⴌ_&2gC^Oq"S_٬B=wv0DrK^Ahw{ -V e޼q-]١0,'T}l:~Fjjy힕`h[_b6>rZv@IƑLJg~j'NK8Gy:q\蛄(@~zaf;+MQNҨg׼Z𗭨KӇ:N>GCA*_2@uuH70[L9ӨMΧϳD_Lզ7Ͳ'wx%]!PsW=z,v]K Tεubʵ!w;dO[H4f4"nt-3:!;R7#cT+ѡlRn\ILںa*<|xn_'iZ/r\]fXл;g''yIRD!EqCE,)D/b]XE13!~ fmAq1N0ZZys_co;T 02zѹ0B69@`,*аcOӾꆰY]W{lCjvgOE 6 QG&2@5ns7B* -X&ڰB򰸛Z&#˴T}IIb0qprM%U Dڒ_]! Hvţ: x9o1[y}.t PK~~}>tv){HSXH,x[#[ol3Cw;cXCu"^t\$Q{9gމsɧ,m@p_uY`N_ErmG*o I$>kT#DReԼ839dI}rڲx(?p8 zE>1FpH–vTmT]L%~ա+ X5onw}CF+p>|Ih.>hj`LK Z?UZ|>ejT1x+^%[]EWK%Wr*GRY 6 cJ#Ĝڟ!*OHK&59\X Cg'NE~[!{UC5L.P) rSDLB3ŵcvH+B5="pn\A裹A\Twv=138v?*DXH.Q3^Y/qOx’\>p*|sg!6:FDrl"yuHFAjU[cꁊWzJS{Iy5f!VGwQ8#uΒwRn*HMZUވs++d~-#_NZ/!}=.N38*&1N423AHiS4 [|p]|:MڝA/wԕ,aDavמÿR;C$xݾQTYEV*av9¥4pej=xhr`',߆M9IX7 /j=:&/9*_lǒq+2l:$@/~p_/*!YB7qd2R5_Ǹ4%A\i:+ffώc$;|PG  M&VnMGG}ynF4+ɤO/z? rzzʚFBdƉ.,ɜ &р-V"oY×y/c ~ʉi\'fhmou۞<=t`d(TDs\49]+s1Wdv~_qiOi4($ƌF;9 ܙw# vY9_wW??m6jcȆaGKMD}bϐM).$w '&@ -lVjw]_Jrtd]'U?M&xl JA >B_[g0Z@a^P VV pZu[WIrXUypM\Ď/kvɛ%J06IAj7(YbMj0~(Jvi-uaDp8hDLhuzԯc$NHc-]z֧nZqA1e7f碾oLjmxgq?JR?4}@u JtwbL%Xgiׄ(5/Fc٧ ͐O}Cm4 )7gnL:#rjSO2;+b iͳHW.M0:L6 &v!RF(#R e,]^[r#NnU(ymG TBHI{*otXBaZ3|9 ~:-lr]k=哏p:#_Y.p?I?a~Q҃)ug=Lb^$m^r)C)$KŻW̐~t/|ʐ[:n*:Bi Vɤ|9t$X()OىkQzP؍[_j֙SP; Ha§XQJEL{?{V@cӃeG]Z#Iwn(6l/exbRvbēʮ2;eb0,j0j,>2SIԶ']<8y?WuOdǒ8rLLQk"j52 UWGd.-$n%>2BGQ] |[JAlJ˖ 2\&V?>&.Hplk +%Mk]TV\`.!y^m,c.Rc'X>{m0ڟ \~W6:]%4֖݆5ġ?[TQ̟f:¤^0! fhcg~:O U=aKpdWHGrJzx}]m)K (n΂*_ :t!P3 @k~ByRyD}|bſZWydozQ G<aY{RHյv5/,j]*xK?!~-o}0Rc}YBhu9P $*ܛ/ QxU:Yqw7\b:S[*`Xt齮B([JȦpR`;0xmK|#ec򪑐C= celjF2\J0w(Cq>ߗ}D2 /IJ$~*W>|Vs\H)k'M圡-%:n&/mf&A,x}Qj8"p9[Jϐaޘc &i,V ƏiGyA#z/b^ yJ?6J3ە//,S@*s{HQrǬU7ݩh$3an_u,xk H kQ"kT  ʢuқFG/k t!M6ȏI;bm( :4MIɯ#OXvA dȩ+JڭH([5|2׎#aNQD'$?=o3_ жp 3E|]Įo: ojŢ R.$S;U;ph F;Fooj.XdcG[es1Bww@͉K23%+ie,Z }6p5f{+CL+d3@HCj~WTP}.wMХ WQ)I ߴu(1AfqGy !Eiim@Vw_Nfz;$úD"uoC-B,i}?~E!`|am aNS~YZ(S$ߖ>@uY<ϣ?/JFsfΗY Z ~06 ЫAbW{%̭[.,zӯJڦomk+B6k^"B=8KH#0o.EeK" ɊFFCtUĵ&iQ9_-@5|SҲ2c4 o7; 4čUI ݈OhzWO*" XKu '?}6Ot+ܳDj :H ַq7lOii?JEEt;`FwNBVA|;Ɉ}KjDg{Z4I&rY>ӕ;/tyL:Gh؉=d*?SuD4)K6JI7|qS`ҝzfCvX\1 {JppC,6^ %:uL2mMΨ:Džo>/c{ |A89i\rو+`㣡|wCſ 5sUÁ"Xt 'W5|@+L5H]0]jQ(k< eY\>)4V2Yl \FuI.`9H֞-t v>qEW'GDѐԁ˩>(I/-Qe:''5]Ce>!n}n%W0+ 乄-Nmrx~iߘW5#uvm8YfE{`,&`ٹEb^q;].8E2= =hvf ѬҁOLd^|*<17FY4Ƨg4>XUy=h[)ҲJ.iwUKlK(/_̤}2LFo¡TsS{{5u砚h(eI4%y'J2UBv+U% Z@y \-1!=N~4Pp5}񴯌PtQکr8jNdgx&ɆhcX[}.0&?D1AvJmnYHh {no*Eȵ6[օ p&?J&!|][4E9N#Cf7 \_9` ("hY7SQ6k} h۾UۃWoUșȾ j^N+#r쁫x o()yE.cx,\Vb]4ƨ(VKKCSf1> ¨8FQhnZH~U{qYHwSH:B-j l_lq)N@̣]S\1h䵼3a︝7ǩ_eMd3mCn1zyxjѣ5qbmA FȉhI1hşRpϦ&72u[j۶l$26-v.'H;|6;q7Z e$&9X@`j2v6˱ &,.E7%1jhgϣW&oH9ip.iS QZ3k]ev`,5ޝ"xz(&D$XH ViY 7.heuXc DG["婤7-m('rW+- wMQ6#%X p32/D+n,7UĽ_W+r6zYV3HqZiYn?.@7ᏸ.V ۷?^I:3h7E<5P3CdUAG'$?'`@k/ŵUuq @U<& IT#yqш44 p*(V~n{vq2˙l.5Pϓq)*NN I Tdϔ>RkSRsǣLn<'LpK'1pR=ze{O{X]_J<|h=pzHiXm=F="YS+=ti+*GIH@sr6٢j̧ѩ5ӏT>=.Uu5hb:~hА%Dҳ> 1>bxѧPY4qg4>D>˅?ƶ؈6\CmDb)㖬vt .լ|{8=j80Dλ%=ylkC!޾Ň]:7yA-h-ܵwa CM#/~`c'L[Pe}4ڠROQHϭIZkC89\xp xJޫS*'hq4zŏ}~p#Mf^LB2P=_"3,whhWk73tlJsC=%.:P("5^foޮQ'E"DWݱ}gi`p,Qyx!,jÂkc٧6Oq{6ymh3Ȟ(mpaY[4.[~#vƵአ{kY rl̹O Ӯ1ywqk =ln!5~u)hjX.:T{_I.֭*[[{/mܞnOG&wK<uAm<յEHP 8 |uexC>sDB/v}3 P.a2=7JRAe|F$Su50- Ln^Ęt||G#*@mX&lT >()Y[y|lE0PZ)8.ڛ ~8A|oDExW" Ò<xYþ1bYu*^ O_-U;z;P_1)瘫PB.A^$=)%a'*3$bF}4cAaf3¯M\l?Fv/wKyFޝµJy.p—"W8&)4`A[dC3`ś)` `pF;-*t񫜆L!Iɞѧ>>}O| `9Љ-} W6Q@l5// Û֤hm53 B5JS&!qQ`-SᕐpGB~i"JHRhIײ1A!ɬs` (7;)u>Wxӱ )&%0iT yL\,fd<0$Hyh+$ΐD|M[7>H?ƜPCLog%0O$$6_<ї 1'ŵ7\Er$KB7jxoMzϜ1x#v>96rt)Ca2H-B? 9%ϖvsr298FLi[Fh/\S!J[o'V N&Am3({/n%kRz,Y"5Yđ- u}_* V9rWe%o2ּ] daܿR!'Zh lVM4k( =&L9ɏߜSk10s~N$C_O9G[2l.Ap<8p= _7u!.s=kr!_zOу03I795Y) D|G2;)DZ,Dv"cFq ӰQ^@~qp2άr21i\}"U=6Ufa9/\!2[̼U|ǻ}rٺQԂ]AnW _Ah BcFow2 Q~u-i3~Dů6mwuoZyC 5ď 7:u$lK(Ci̘Z'B7DcP{X^PBbHB|οB0zޝ1֪(a=*>*. Zq'$ߍK'j75GVk՛ HsjG*[Vc<} 3 c"pR^7y@7y@&[l5M|Cޡk&CyXh[):HO?!1LjߌMZ@y?}hOZ$A1S ra¿3嶱P*-[zL܂B4:a^d$D- &Sv2i_ѤHE];\Xrb LC=(-GgX=_TE I%sx[Ja ( 1|9`w0?d*H)ǦNOe1 ֋\nlV[e@M^a8v`ɋqXd6P‘>Ϥ@7keli'! `eз*:do|~K#>'!U(}ްI'S]Wa#UӚ,{Z`}b:pKl[8ȑs0!|E^fBӲs0-i dʒHܧ*s^!.yS.+ԏeTStI8߈sM?ojx.C?HjxM8C9,7:Eu|=a!3k," Cn҆n[c0*y5Q;ng`Vd6rh3޺ SRFzӞnMzh]]-קYzVONj|lZy:Bt.8C;:R;v\N*:j?z@@e[~{4f9 D>bYZLP$5^mZ(QǶd;Պ3?:<=z 'ZIpFD"dVhX֩8n^snFSkRREnUq_eEZmT1w rhȝ;/ѧvxߪT}!( ӓ?ϻڀ E8ٿːeM@YhW_Mxw?hdҗJ,oQϟ1ks:@=>h0"Kjd3)Dwu}0ހO_,p?[ >Q=7}X:Rx_B_E~^k>-?6Xs#Ԕ`^L3T[Rm~ KݫL>0dGW&bQS<).a3i7ast iIWZL8ki$44sOK߳,111 m sZ„ZG8Je4` ;;Fb0&qߟ51^UK7x? 4/^oޥhߚ肗99$Pԛረ. (7_255xht2Raǝ8,Iv)Rp}xVkD:n/_Cs~S/ֿqt#dyE݁MG0m`|\z?S* gdsO)q8{-<|*/5yvE FX">I`BJlx6K;XG{,S)̸[v28DN9`8^Guvh &P贛v`̈́}"cx$θɒ }\l gxd IajH(ٸ1P%}AL{ )RiwG'FHw]H t\2%'3O+A#@ f`4Lms_'7 [L=kQԏ{)z0OHj4DccB+K=^t2F_/w` [Ai \F}uI lE2bQJK/=^+̗h>} i~'qbFhe : =dznj}}nx95"ZS},X)(!k7d,GF 8 GJRjE+8*rdשQVKr)})8Ɛl~O״')bxIGb:P;ZD,_|[Uz%RBLu"NɿE~2ET` "_][pmx⫮%niQ*ςxRTO^-Iy5 q ϥyID%A"zJ{ XKj\=t%w֡ꏇ_aht|yfggҶPn7JmО/3|Rb#u+`X*f'W520pskvgJ* m{J/_c. =*qfW葥Y,,D[ME '}=Ql[>c"sH$010( "/,Zu VK09^ shtU]Cjslw4 tL !=wZ :oHxjAP z/?OVS& S"@J|1!Kb̥2l$uz"UTChj'lX=R-+2*rOoN~&T/> d哅nwù=k$:';UBa|C66Pqu]#$"tCgW1 #|+:5yk!U* 2 +mkԑ RPڕ7 h|o<}%#qqEf4[}츼JiWGz+BZzBX{߮턂Ε+5@[YT6XPdAKbJWaeN8 Dp`*0upd3Q5Rq,;z3!>:q&JĜ#֕2KÝF PB"bsq9̯%-rH:24P/a 4ttT<GG#͌5 yT{[xRrWJcruu]yiVd%V&G f,!iB@*;-f;$(Z_-BtIV"R -Brw?,za^:o}`y'xZO*(|NdjyZL qӆвރag\LK]ʏԨJrQ]w#NĖ(8e;>J=XjjDG$Or3 %r#&7iPl"D5CٯJ ],pyI3 ~eS\(^bvcqlL]\I&)+;?XW&5va"ߜowR;';$7x'c%x|p׼mC9+%hK!Bݎػicd:AQ\o b`ʁ$>7U&>ïP~'Ϋ_bwA8_=)w p`UDpUm3{|?t=E))>IN߈Z拭 :l_",k35*HL9@7硶ZlAesf\dYZȌ~[)siW֖=Zqf7N1pVD'L)}l7K{^pHaeg쯁^AwAK 6[h;MPZ:~&W/ fGX3^g;: :vkF ^Z%[:b_ Sn`R$0Z3?ְ k~$?ZQ}՘ǩgݕh4M}*ew܄50PxIB?̙2 $uPzeBp6T,Gpβ_!"ǛqCcLx Z$̱Q~i|w OIǃh!׸rF1?@n"B=ɖ>|ne В?ܓ0ط̈1Pwat=L@gm M EiY\`ۢG{B#/Ux@h{noŎ/F7I(+:qfh8o8!W^RW(kS7klđms^OѦɮzbZ>\K=euK$wnN1cvP9\m*rb#^S&3 B`QV !l] uRwĈnԎeL6.Y9k֢$ut$z%;BgjcZdF_#EpȂ6Kڇ/71M"K1s2cN, K9AE|! 3Fmɡ (%5E4 /籠N)jæN(~xN"[bu#]2і}ޞ F}J؆̼(e"GcQ8sc`4k # F~XEhp gXoHg4nY$$uڢ0+`A-隍{ѷ:u,g߳Ұy<\r Q =:~XضL&&Ƕu{N*d(^pܕAE=ADCqۛеPVH/m GٗZb|e.{ʖQ8h̐0Luxq|НF=,s|uLܘ*AFIc_ise@uahz uS<]lHGAj< =40=)P)n aJ`rgz᯻s R=AruxT#:p1Wt`*zT D +~ X^4DO}[A?OpM^KQ%PomRa4A!?g W|Ԙ`;l͸7.%[j2h}<ڕPA ,1~!aͩd@͕[`옜ݰ$1/k\cf{tVc#. 3|¯݊_o!( +%]l.F# n.R]pzP'?WXBCx\乭~?7@91}=>\,ʷ)5Du pvEz(d8CCW}K崪CrO*6WXX3 u.9Mѯbylk3O Vp,/y7= ;]])!vpy^ac ВV 135n<sj7L_ ֧heXsCQބ-'gBBu' .?tuAJ=ZN߯Ty-P5=9kHQ-q2vQs;ਈوsLGibVG @,=y݁3أ r(tHgyaF^t7 +mEO Ʃ5\Ah pӡ(dux E̮3 P?Lyz}uUp^lWr@Xؼ2;ub9`]X${̍g=tXfY#_g1VCD{KN rPH*lҫ*4Rp'4 S96MA'gUYofdLK"'ܳ,3_r{1%,wwA[AGjfA&OWדX>iAS\D8Y_O19YHJ4/RXDG/d-jYa/4،oZ pGLzfy4}j $U 쯈nh,3U( dt&}4UGíhEc㄄!R[ \ՄP}[tLpjXPș'պD//MmE%4.✊=,i:LT4 Hac@1y%!+d([BRv~ZB-Px?\w÷PlSRIۈGUɦX5ac(1aDڬӎCsʷ ԙXb"z<ނCTosOaӴG_|2lJSĸ_9V`_xr9@=|j oX[ʯWYu(Z镇Iu>^ J*{~ Ɂ!xbU+A_y}=*Y}_E|~B@;K THCBNbPjM, # ~@QX8@VٶQC [F'YvQ#V㝷]@G; gJ$ClY8""Q{kv,OV_I6[Ub)4rF\ARNE09wbT+Z*fg[ d3*"Y(^W&Fרqg0=i >jGΨ;:ҝn?ZgšI֫d4<w4An}2n;[|<) Xf64 0zw2䗧LZv=2Ԧ[B{->ֿ|W!*eS^>a [xEMߟҊBwY RpH zJ }o-(Zs"U!fP5XBJ_]<͆| *pc3rTVp]>@3޺";.][i̊CϱrM5mlh'sʌ*I,~1ROyq({lf?\&Ew}xx㴇jaB۬!g%e#p]je7CHZfd@p)0j[n[prmOoRM0LnbSZ@2W6G9G);ƶƗcAٺc&ABO*u؇-]1^aq@]͖#:$Hü8J貓I%-3[f)  HlY\ф#vѫ@0+j6n%)!a,*_r%@o Rˣ@L8%⒅ue?uusNlMQ. Kbo sb1RG+wgg5G?y ZڠbXȒuV=ڏ*<~\4fH᪟ytng@ pd,#AΓ~ƾhߙ\EcQc'H&||Q'?&oC܆R<4N / /Na\/D]hr|Gyp>ݓ5JgFgUY(\WSp.: ڒ/If";h$)r`/mY pG8O>q>w2{Dݟ^V}GKp Q?n tc`"M>7_>MfV_ϠaәV\+W.݌qskड़DzN@ɋ8D w=uZ:uxkD v[R5*[%Ck{⧉ Y^5d 3^$u`WӨi5N-KB j7؛A 6fZqUĀy,C-9K7{j:4b{}&f\=pJ{b}\QRT2=`̢Ń4`^7 FM]v1ke ƤX۽CR{AV[oT? .{qjTž3ʏqy{7(ؠ*GٵOЎ"t}2o.sCTR$pkHA[P۲}׻&yVA vqoO6JX ^+gYO uo8vM]7VlK}8 mA l_J>*hpN6e#];Ѕ8%h-CZ8SZOU$Q+-c7s ޮY PdhΏ$*|$g$S㻴rQlae0V ξDrKub+QpҴe Vh ˿M1u07!Gԁu(ڌ?I$7F-%X)!)bPPs6juaOkg o@lSAg_%G䭫WM'[xL0Ij{S2U:0DMt›"}HBo[F\0ɑ4 3[y{^sIm@NɪFOQW.\Kw_O=LCqc(7 8* A2&<AxPCCĪۯt>C^ũnm/VyM!V.Ўn7/!uGu%qkGVTj:p$*.RZ0؟ Bx ֦b-x/T6r|l/9|_W`g@QHBExD!}`9J&.W6:@ܢmX&c[ {c"͂g 3Uj J}EwaBߪ?6@7ݿM)SʓVϿUF<2|kDufM$Ucx:Dl"$+Byﬠ6I!DcCm\o(ru_<#t0)twƔue =^#Eu=;/n/44ޠ-R0}S_ eaSe67@vE|;ԫT7[rX2z??｠n=I Kʉ/!]Q_NqNòcef:ݲL?>KLTL++6`cZ\f (-MmVڹ+!fxbZkLN∡g`;.<ɬ6E1oo;ԄR)^sL}( H=p(xBHq$j|a Ϡf.ilY"CYI|9?lEe rd_=gۼ9 !:a+Kkźh] aˈ%7Cr&PT>5~wÙXǩ)Z@6m1Hըg͊a@u!LFMwT[n'Y'Rqޒ2_z?cxˣ\^µ]O*TĿ˄'7%ccB^n,;+/7&k`7Du3S2YSH^T׹-~RW-~n+?\\Z+fNGO+i},%Cʁ<rzgͮ xKҊ$͆sJ kZRjorM"%F= _"R̟*!w>]_•=A>H`Q/w\aM@Ke@C|z!ߞ37S ciB~-uEQaKEpb:G0jWgjXїW*PkaSvC=jvwP9ԛmwwꏻL{_۞@Px f %@^K޹_ 4%&N>#KbɉW 4M',.Sb ޫs%(.kȂ=|xI)uR܁Nqs( nO#~~ZBkSPw+N[JؽaJ[l9;E 0>YlګSP{ B2) zimvOuVm >s.`Kb8nD;鯤?몵D.1|\ l(M '[aLIsU9E=s7(^a "{ \~}0% MpL={wQnCic]#} 0_X]Md?/luy6AKDtWǡۿҖ%RP)-C9If~xYS|ܴR.sGy6^a'Zt|d^% :)azszy;(n.%L><[ ?xp -["+tN?#R0.;FEL;" rNLI5vA+!\g Ip~4hhxٵ+#O2%.JڝF 0{y\ qCbm-~L-4vH%Xf7SLYbnJ؈]״I<ƃ 7(, Os'CJnVu}0Su4#TPx)7e/!D2롻(O.hc%=U/>f 5iP .;*Ff83E.%aQvmB285Msw@o %{wf7I [їB.Jd3T\=)/3jh]F &+sPZ4l$X}qH%R5 (av&'5ʝ;`9VxHw2Z\$Im7G/xoTqVX=݌ EsNtC2cȿ`>䛼DJxӯ(ֆ0sQ|o0'lҶӌ.u}te:˦O(zq~NSgJaA?̘ʐHLu/f*, /X{X\@Dz^r0ELoNh^Ah-2gHr(c'ޚ:$*I41ADN\Ӥj=\OLXrcGqcDXHA]OlwPt G}7d|1i7Z6pӚ, hWd7bbhHE:#1€g $J),qIXaX"$w  H!} =YID]34@JnjpmbU2'O;}(Su%mtQHsOg:3KKR"htF-%L捘F=(j+2v+$hjsc ٘R.bOδNܵ,>4|+-K;#?"$[c¾:v1u<: ݚWK"qcrE.`:UaQd]g>ӓ4\Q?JKũ<+{^@)PD ڡ2w ݩ޳z0'C&[=M dnq-Hgwۈ/.ѩSpp@ހG)":O[U(rCR.n0.4% FWUkg$TQ-7(IR ֋z I9?ڋOVJQ+ΠU L^-",b2%e27c1,m ލ-)qGmi#a98sT" m9E~P8qjSHwMcS o|؀ "=Nwp#2(0{ab7u[Ƞ4șonXj#Gvv==]WJZmZpwrn`h(hƂ`}w8N| \tEﶟ5Sϯ<=^_9)5hO/5+C۠% J) ~_VBN}bT|6Ʒk,j*+Pp4D=}1I2"R,Mp]q I:"ΓdWLu\|0~1WkpѶm_p{#SDSܐ_L J!bzʅ sK]FDyE R 5Y)gQ`4[A 3Q!VKKAº3I{/3C,o ;J!cbKaaLT*簡{M[-xB`ԛj07-.r"s! xILo#NF50hJAAV- [z5$"Г;F/('8Q kR4RX0#;-نdViE5@QAf@}xۢRO6HPk2o;HvN$꺂U7rl^e~~8Wȉ_{vfZ?%%KFHQų,T_:Gǥ#T!2x6C JIGV+HPO3jT~d=cMEl.t(j~;16U|qYI{QQF]@U183bB̮"ӲmzT >GtA6h`F5}Y3 ش5bxeAW4:K{Wtc/$D@T?r1[a x\vy BJ'J= W ѮWgWEϑbFb 鯭ܵ]|$OKo zvuw5؄MGϿ:K>'%(2C<ͺW KC՛&Šlr0d%PO(iVBK[~sC'iK]%IH3] n(dF±pSYU/uCd,2O0tWveh(ui[2n:eM>;9NǺ|}Q,\Z1{Z+ȴꞞ S0«T V \q5@ :M3$u1wQaJH0gXjؑd>8%2Q%?|,9:g-~NB.rVtxB">ZEN=_OPs>bNsQ1m+; A3fd݀?VӾ" >(&$_'||Wc`G LC`5''vvCx]17B߯=H~.,Rq{\9bx|3vQRUX1HQ}a7A9Z4,1'BXFD֝4E\])iBML:Rdz?}{!6Z m@jUx8YFvXplꖬv`C>xVPʩ[7@v0@O`ox>k.a/kiǓ9O7@xdҪ%Ϸ@K3~|\sɡRK&dSPEv'1,65K&ofVcVdmWfOfC@3<|3ad\Ƀ? -x|+)Wvz-X(2P+3~W9[9d2C$/ =KUBZ?v$ qzKs]!?JrAv.b{Y+;czT9k͉.֮OH WidxC].RƬióTl:p{ɘ+Db, Q2B iOkqs+h]TzUF쳌 goY+hydһ YTd|FBJ-(+%`Ը&BUCNײ J^sx OK`qn:.kmO9T@DpgyS:!" Om9@XVkX磹b\TEaU?zG).E$|y9,Ȏdo;sh'+ޢu:mG{H1;g(;QbV0d5D7%T[i҈bP9ҙ+zB'UsopN‘{+tubRQhU 2IZ40pPa(h`YA; B?:X3(G~o( B\o{&rcFŐll"'Y]ܪ3կ)ՏZ⺎abs;qԿu1 OOz'пL!+!wQqKZz&b'k_Rg -\ݳ`V /VZ ܳٺXg@=88'˚-瞲wRuh*,|NV`؎.ߞfC>~Ysvc䷏d weQb*1=_t9sNr^v9Bp1*$.;9L: ^ ŬAtkQ[wX6NӜR߶VF}פ-HEd3>FdU֦ŀpT5/?NN]{=7O.h2>:ي/`J!(dN̓<ӃkEEZ4 *EVDu|JT'j,HG}2C#P(tfj 2{[` gCeN{pH ˳jwf認 tpb1Y\tR 9]p2W"r{-)DHuBH_\DZ.0!ok{:#Q5cc!+0Ú{F"W$]&˝V;=́tv'7N]% Yh&aJfFHz'\:r* .*,5H4gr 03Cvq!81 @ou~0)uo@'kT"%tm3J86dY]%׻vbsՐw~bpU`YPT;FJOJJJJ̖ھwdz *L#D|o$ga5lHxJ.BHnnxRMN{FhdDžvaB\|6cv8rn]a嚡: _xJ7Q0=e W3Φ@,|Ya.|ƫіy{Ic`p-T974G,<,;6N,v bR?<37Z}6>nY?UnHl!f)-<|֐Ӻ*Y"[]"k =hC'ԨI4 ftbE6 BeC ochُr#YpqG QP`qDYS=rt)|GkE=J`2h^S:|<^?b2Qc&Uh$SGc +[ `(5}&8Bd,Yg!3DÞV *[Ƶ6?Hs 4|Qk[vE{oޭayW="1'S%:|>p^]dy1]scK@(LaӒh;Y䬖S1{lh1Ǥrv ˥=V2yIi&+!5~l퍤 tBY..fkjrv4m6Ck=2)j`ë;4h^Mz>-U ǒ>Rw [&,"UD[_۸xY=BmzP&>RX_c+vZŹ1уr)8a}6jϠ%P^>gxx  C[}R.f.&c3p8u@ &hc_zeE_B8{I&(2 7q{첵 D{s,b>w؄5ڰ XUU`u;h@"g.at\mX'_PEf)\,#JOYWC{~Y POi ybzAtdބ/*fGMϧ_>z\qV{q7nBwn#AP.~OJ %[vPOH /DRwCQq\)a-<1Dv'rlzMنqmj0&tn#,&@"0KȘ6ǥS{3m~3qÃ0 5 QLYy,D_قl'I<}ZM2PkAt+ fn{.El[:/d ˡvaDH+4r 4B,=՚Z6*1S dž.?? D4,vw:@(XwӗN}p}: -0,NLgAƮ ⓑGn[~^^:2 j؟zS| )IrFRR8d}re!hZɂB7F(JuD=ZpEidN$ɻWD.kMs]v_cя~x=4IkNE7#䰤Њ%Z."8TѕoK*#eTع<!4%ZIXLc26L@'ܛr͖8V}\?Y(&ّEK8cV*S-sX~j瑻jt'u&5k"R'Oh|Yp__.![u.Sb۠y;.D1P(A%t`mPWb{<_7ׄ[ϵKݠr/ԂFZljɛΐ^h+h~f)l#]Y x݆NQɨpZG{UTzqq'tAL_ f%g]og LT2Q[>*\ l$ʯfץV`J.&] Ӊ=K=ygN J_O%IA6!n:PُҰ|XW{(̖ ~AB/|C *wvKPz˄s?*hrp̕>IC; rlDOgFbf/_xe%fo2LzX: &oK;o:,sY",.A 9t\K#e : .m?wp`6`I^5a<*1.ٽSlU Pi[)YVn>ouodD~jl>–EMF>b*)3 Zll"̾(gݚF3a mL d;`[WUв8jٞu^M @Ln@B` І_á(حv{hd] 5^7s/!?>H{LSê9)^d