icinga2-ido-pgsql-2.12.4-bp153.2.3.1 4>$  Ap`: !M@eee#.ޑ-_>"%\D'liy #_=MoA-눆K!a a4@XW(_uu:<ڼC(? >qkCHJ. Q\CT=WmZz#)+ܞ\1ހMvn')7U WaZdSe9vl'%X 2V2g-Ic# e*Z* ?>pBl@?l0d ' T *BHP:$ R   3 d 5   ,   ( 8 S9 lS: S>dI@dQFdYGdtHdIe,XeDYeT\e]e^f bh*chdiwei|filiuiviwkxk`ykzkkkkl,Cicinga2-ido-pgsql2.12.4bp153.2.3.1IDO PostgreSQL database backend for Icinga 2Icinga 2 IDO PostgreSQL database backend. Compatible with Icinga 1.x IDOUtils schema >= 1.12`9obs-power8-04 /SUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxppc64leif [ ${1:-0} -eq 1 ] && [ -e /etc/icinga2/features-enabled/ido-pgsql.conf ] then # initial installation, enable ido-pgsql feature ln -sf ../features-available/ido-pgsql.conf /etc/icinga2/features-enabled/ido-pgsql.conf fi exit 0if [ "$1" = "0" ]; then # deinstallation of the package - remove feature rm -f /etc/icinga2/features-enabled/ido-pgsql.conf fi exit 0h&1T[x*(#GFA큤AA큤A큤A큤`9`9`7`9`I`I`I`I`9`9`I`9`I`I`I`I`I`I`I`I`I`9`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_shim.so.2.12.4icingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticinga2-2.12.4-bp153.2.3.1.src.rpmconfig(icinga2-ido-pgsql)icinga2-ido-pgsqlicinga2-ido-pgsql(ppc-64)libpgsql_shim.so.2.12.4()(64bit)@@@@    /bin/sh/bin/shconfig(icinga2-ido-pgsql)icinga2-binlibpq.so.5()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.12.4-bp153.2.3.12.12.4-bp153.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1`_إ@_0@_@__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Guillaume GARDET ecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Update to 2.12.4 * Bugfixes - Fix a crash when notification objects are deleted using the API #8782 - Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785 - Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775 - Don't send reminder notification if the notification is still suppressed by a time period #8808 - Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8787 - IDO: prioritize program status updates #8809 - Improve exceptions handling, including a fix for an uncaught exception on Windows #8777 - Retry file rename operations on Windows to avoid intermittent locking issues #8771 * Enhancements - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792 - Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch and icinga2-boost-8185-8191.patch because now in upstream.- Update to 2.12.3 * Security - Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (Advisory / CVE-2020-29663 - fixes bsc#1180147 ) * Bugfixes - Improve config sync locking - resolves high load issues on Windows #8511 - Fix runtime config updates being ignored for objects without zone #8549 - Use proper buffer size for OpenSSL error messages #8542 * Enhancements - On checkable recovery: re-check children that have a problem [#8506]- Update to 2.12.2 * Bugfixes - Fix a connection leak with misconfigured agents #8483 - Properly sync changes of config objects in global zones done via the API #8474 #8470 - Prevent other clients from being disconnected when replaying the cluster log takes very long #8496 - Avoid duplicate connections between endpoints #8465 - Ignore incoming config object updates for unknown zones #8461 - Check timestamps before removing files in config sync #8495 * Enhancements - Include HTTP status codes in log #8467- Update _constraints to current requirements to avoid OOM seen in aarch64 Tumbleweed- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/shobs-power8-04 1626356193 2.12.4-bp153.2.3.12.12.4-bp153.2.3.12.12.4-bp153.2.3.1 ido-pgsql.conflibpgsql_shim.solibpgsql_shim.so.2.12.4icinga2-ido-pgsqlAUTHORSCHANGELOG.mdNEWSREADME.mdicinga2-ido-pgsqlschemapgsql.sqlupgrade2.0.2.sql2.1.0.sql2.2.0.sql2.3.0.sql2.4.0.sql2.5.0.sql2.6.0.sql2.8.0.sql2.8.1.sqlicinga2-ido-pgsqlCOPYING/etc/icinga2/features-available//usr/lib64/icinga2//usr/share/doc/packages//usr/share/doc/packages/icinga2-ido-pgsql//usr/share//usr/share/icinga2-ido-pgsql//usr/share/icinga2-ido-pgsql/schema//usr/share/icinga2-ido-pgsql/schema/upgrade//usr/share/licenses//usr/share/licenses/icinga2-ido-pgsql/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:16710/openSUSE_Backports_SLE-15-SP3_Update/3a8e62b2221e19b6a8a6d409f6479f26-icinga2.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5ppc64le-suse-linuxASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c14c0f959ce85de4e7467d0872761116e4eead8, not strippeddirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textPRRRRꍢ(cΆ|;F2Gutf-82bbad7bddd50f33ba8e4d61a88537afb21795d2081b9f58695cd2f4ef377c292?7zXZ !t/d] crv(ȭS]U2D>w$tY b__gJ6+BK'Qk 1S{`]Asa-|mzK/D!S~U8VqD0)%w=P/BD;)J ?0^/|ŅG@q,6;"G}خp@\?6MAq%] @v#<}4畀/P_PFSmT\x!PڠTduY$g`Xc%o da9ዴD>Dub 3.3qga}f>0ZG Yo)5PxŏOa6PLYk[>2!\VmYB"UFS-b_Ն}c=>hDXDmn )OT݃tF 53M#C(bRn=7I2+cSY裏ӹv C(&lo${$(獓`IF?'ke9|3ꙂbX]u֐nI.+SNWwE#>&7t2+d[Cje%h[9qcwsruLր3I\<]|@Nz;5$n XC^b2L9I.T֊IG1ǥԊp6K_jUx\u7NAP08W2қ0VWC'kƺ<:0KzLjcݛ#d(BhShU2,zv]DbP!6Z'3<[=0aгw2x7meXÚSLwe0-`W̆i-QtN:srMb9_WށtϒbS1]wut}1RB1,9z ӢJ 6!М2jKܷkO7^ q!OVϞK &c>Q+*P.f0ӲymVyu\gc(Ӽ 7ͭ6_ʝq &,9r.ak]+˽|yYqӁMVzk+Yn EsXp2b7>I0|HU.TR(^wbYSTCܗ ({VʯպnkE fuojf?Ye&A6Bdq0Ab)\Q'># [*vbJ $LkrޔzHRҿy9sW ~̓]LtfX6?OFcDk0`¿rZXZfgRpG+$Amut1ҬHڷ*N@ZcGOznSȖ]" $бҺГRJܜvuI/~%ֺFny䛦Ҿ 7 2^PXzpʄz팈9 r^`ۏE EJ4  &sR& EhM{s󃗅]gTq&cmwf-DZ:u#LvOx<9 [*"7~Nʣ&IkAAh{}Zk;!,u{sRV`])hpDeR%}6>[XBύ=oHQk1箩ȎE} ?7T<3.DaQ|5W>VrdHR/u{iYp: NܼҴ< ~FEhkhLV)vg58 y껛9wcSn#}{2D5I ϙџY 0m];ⱋɨ@ꮢ(<#T %<(+)TK eّB=S4H]} O7U >SlF=ہklHҞӯb̕JᙙQx0ySWz~Ej\.rb Q VLAgg6usX]wLq:kjЕ8aTsg,BZÄᴊks|WA&dnAOO `1oPGޠpRxZBWsihܢrb]#ӅF),{q/@i) 8M/ ҭL"XbQ$yV w&Y ]֌~f4 7%2ğ{`X?KfLI+݋d0@&HmQI濤eM}usM#RɊ`ߣ#/+ׁyoMøz Ҟ@0vgYC'8O+H=GW21c2-ӈt;fr3Bץy¤;1AXu4c2*d} vzYfY,O'1uv@ߍ6ЬȢ?.b޸*sXh[ GOz_(]Aa`326dH)t[s4^0"U3Uaa<TL~H#l ]Hhj޸cZ GV잶.&ۚK`R`#=eY4@bA{ hE:%$eЖ `jZ"k( BF}QO_ ZI}W *IUBYjv=N|E'`BrDbٽgW,8dy¿ x3 O}w+~RK[?TY6Ҷ63hb*ҭȶQ{?Ĵf?whX~&rC *[R5>-36ľt1ْO˕<^5ԣ%1ceXpfo z}H:Z1Um%xo):~)nս>^Hp3Pc}VbK7*j7\=dZ @x]CSZrdaGi(ҪqsuCb  > w|x/Dn[զƶd&2SS &r3U]?@^3*tJ ?aÁlGOR5chb~6It}3e{ȨhYuԑ 9Մ]`窫%n5#qK,¨.pEVSQr5 +:[]hyۡ1+mtʇ@ Z68` ;dKv11&"sONf7׽7S"QA]1vBF|Էm(s>T:Uwؼ9@qsmᣢeӀchoOyҰ(FFـi;^04\̞vvdǞS 2$z!P  R:k֦{'뜎i(bvKxMXU| WKD{i$զCf#Wٕ-Ӧ9(_+.BP m Zழ́MO96xE9 x}@7ޤwUudjFߨRM*T۰ .F/eN4Lt!T7$>Vh,+ϭҜqnx io.f}iI8_Y%YKP8k}ilm?&A\ܧda<àV9`2hkU ? *[;jƛ_ Sn W4/57P~JcTqlT~|Dg,B`ftaFq rȷh14vh|\B ߷}2^wVTJjuTf7"ī}V`!5<0Lx?n~hPOߞr_I&n>S:JcX!OY'6е0ag&n8iI'[nUvphqh'<9\lCZW"TZl5Bڮ7a_栾OGl1Ћ\o꯴6[=[35,w L#C=+BeeV0v+SUckUsvv@[!Hِp ]HWF]Wb ;DlivC=":b8JtfW㱭TiT2F%`-_;Qe}ꀎn|r&qoƋa3Ϗ9~+r;{]ZEaFt@koC8\12;hNS=cV*&yTaDc+'-k.4M)J`s$Y=l''1CUrl[uh쥯%m@ .YP9Fnr &aORPvf#j*])EuZ0_)N``T'|924E\!!Iң 3À×!0Fd$f$yS>@%%h'xH70"ť]m{-kY`0^wbRVy9 CDou@ >K^Yz, J=N˲\@Tty#(kPF;1I$ ȋ "ۭPR VtE%Q [&(t$$}AdjE)Ǝ (om}]ADfNiJ}.%,$x^*OIvJb71abRpC0g6 +Vbv]?ɓWy*\mdf">ioC(űq( VSGt黽֌wʘn! 3ho{6u_]B!Nm|l=Sro4}wрD/UFw~*s]a]ښgbzg:TU!>[<@q C}t=rCn'[!g[vF1Rs,MsNʲ;xsn]5OLomrOs) m(]ˠхaΎ4QrlxWhF Gob2;1`6l@?`"4A4bSD 2sWzx`H5U=E6bL߄?Oo "kGlPPyJP yFZ1:X"?KLP~h]cTґ)/‚ )I􎮈O@Po 72 'wEU,9 )t ^B%5omY f҄yKO'?{vIɪHo/WP}$HNݹ/ߞEҹ,f#?Xɲ-ae#}܄d,뫵!zK:)l7>x-NW5Je<% 3a6l5sm95Ҁp¦)RB׮Eq~%ň׷?Q'Ѫ{NCjp| +9ygl⊅q3.soQ^KhaXو{[hQiM\YҾﱔח{k6qhn!NL'tH+RH2uhӤ 6)q^VvD-XpTvB:O~@䖈QP$ -*-zo/I|Q 5oW?`AxH+)U+uVCb $%je#!b u NHkl`q/mQ=\yzı}fQ,^V|p1 ָ7x., (0(NHQvzˇ` 5&>g?4hɓb|U ˙*u8ȿOTH>S9o,9}@&ceLHK~,u=8L]M 8 ;HozbɏX Q G"4:B"Rܺlf @n@PƇ,jUBbΉCRi\yE/-ۭE&̥*R]Lz{OmpDZ. y$u7+7MMyG~ٓ[Ke(%N K}ҷqiT@΄ AU,7KdkΟpML+eΝuZa ҿP7j^ӖtޔK ey*/5wMY(eQIǰZȏ̮T&" yǕucLFP%*;p{]׵FAՕ|`U_WHN|.*vJ@n6tR>fCRvdluQD.jpܣ[zii.>T@Q7}A{8 յi,DZ T|q4MW" Hf#zdaĉj#8I?*`45I{կx>_6SqJ%3-'69\$z&hӸoY7qq6ily<)B6dz?b-k[ȉM3ēچ:`Ǖ0n`9p(4|rzʳ.=,džɍI(|;Mex\m.>֌)|Ɵ,nXQT; Y "EkT`HJ \M.a*6T[`Gh xג6d|?ajЊ3\i&Aeq닪x!D԰> wZ-'Q? V@*(xBdɝٛ15v^7Jj$P 0-"{1F>JL mm2:##eS'榊*ecp=CcHz簫q` \vj4q2q UŨ.]h$ŴnovI(][uA/jvvmߵx â=t&rS d#*BUycť) ` jG"wQM@^D;j GcN7'ׄ0yҹt6Lhϴ*fqm.\J9XQhb́-I?f|cwSHklIs.#@VO>U2(\ּB-0>[3%CO*TXS@6=ݭ+2DZ,=+*0!SB&ğ_4NJTQ}}]BNfaJ@:nYb_`~q+0M_9XԠ:̥lӠ;+w z?U'AL\|[o1 ^.V _atYh=H@dj}Z^R~濔@,`NӆO$%ެq36]Mœjp#d8 }Xv>@B"葾}P+Y{g+4K2CW\[HO`eQvyK<#K Y!LLݑE@5 'b,Ҍ CtTOsK7pzۈY+USP$7IOckpAcYp7R:8=PT5LCj}/kgY󕲑\PRb3 "cD!L֦ g!KL;̘aMO e9/=dͲ'_[I3jpʹRZu/˝zyhsZB&\Mxv;$FHoW"q)̨U(9KqJSY1wlsvF꽲8PAw'ɝ_ @gFn{Qm9변bEYbس }9Rṣf5"8Hn'G,6S0۔qآ*\cIHfŊqw1q֘ĥ$02%ӑ3)%ž}M L$6kdPF%=Y*GX*9[ixI %B]\+ubk7vKBP#o0re,&ѬD+|27Ahq%X.\iC6K^2]mx6}q9KmRk˖>{9DhIc).`<0bF0z .`ݮ:m.rd}!ƅ_hRv/NݶT Tk ^;['GXFZ4vnl U!i5e%]ݵ^)pV0 l*Q!ИdUZ.C怯|5BV 9x/3Hhq87c30(h}]V|o^lGK._KG2ZIU`y/P zsܟ:luy G_jӕ4YP Z+neVKJA}RqI7/+lh=Qol@~C%ݻjb8ݥ> s-O nBbyvG|[3 UhOtzS6Z5rCN:\"P~u 6O(ǗN7ut K غĐ$f6E(3&ݠ;6yC1etD-%X 3Z?(ð:5抓]<4)Xt1rM6!xìX+0M(9W© 8 a&hb\}pD{!Y`Pu,Kgt5a&d7 J{F0K,|=|YL𪩑OZM **Pt? }!C'N9^'c`5MuaZև~7x@=Cc3dN &#6yc.Ѯ: o8]a|^ΕtMfh؇,:)$KZhyg` N*CBl;.DF\s &#nz.̯ i9$ldU&J)Sv²#Vgv6Lh>F>rQ򳯍\m2pyshV 9O _ "BŖL (r'$w4t\[Xqtz{1eӲˑLyV+b.:"tmȩ 8]t2lWbkµE3ĺWdᶉ^W& SP :WPCdB~jz'#?;W`m!ô3VBߒ@֍Pd>2=( 5` ?0 K9'j<nB7| s;9tI9ix؇E*3|K<_ NsN{Ykbw.<`K(0}lRڙ\O<L~@^/J@Koa]o., u`;Mla^]~,5֐N @|*c|ī_\ߤ;a!1d3*Ä,hǠtLk`ↆ_қf6Wc1TVTz0aeK4+>ye S,"fqYP3|ԥ fBvU$7Vr^6I+n޸8l2JBxa+I* s!cDȳ&>5x[(˙|s+; aF-ԭ{n-2)"uMʙ30;pCUwQSV2UZR'*I4j)\^s >{BT 2h8^w& #oش K-:Kjsu 8^;7^T1 !4<#8rx+cA䵚M\#8xWֲ*y@*Rzb@0-h_3Y(S?C0sveRh_{NTT?ɻ3Ǻ7E~ݹWt;G6z!kP!4 [ɼB#eOi7о"HHZlH?s4JׇX͌xj lf Yj͜.byĭĐCdK:G㿬ux/ȋxގ2t7@,.*0fMIcTB7Z@Vj ;>H̟/J'[SsѲXVPYRG/;q,\HLjC [Ce>'"Mz)81bN1`* Q<<-[2sR?: HIrNr"%p2>z8:"m(V,25AGi瑋%nUkFOdb'JDp;`DF,47 0JRF*sٌ{l7tnp|w[E3 ©>d꒘G Z9tS9G.B~ZN9*IcqHmj4$PJdGgjFٮU5g9e~ jK.¾fU08P9vR@#$OYoݕOzJã)'c yy\IAxեF瓇fR@m p-3b#} K]L(P̚,=( yն[5뎷!xKJ5}LU 6[VV ]5#+_A5Fܛ[:b+B#6GRٚrp6?-J Hw,nͥ 9DFS2&L\"H-eX3$υ~wEI7zk7CkT߮|bpyisԌR+EEnAAlQͿE\6ļ?)B{Rc]z,w7UI)/g[OQ݆&o6mIw 6x\&1{^E;q܇v\;]&!A'w]GFi?Z C,~lPn j>ݭ!#D{·Oj3acⱢ n0;W]/:]9&@BWOJ$;Q:Xq%*U.iХޜ f+a&d:xfױ/HyK~7\&nW'mPgD$G4_Ό^ڈtJ)s:IӃ2Bxt4L'K⮝Bk[yYEtx]Lv9OA3,|v;$-&wimHYx>V?T(èu28_G/`=LK$'+x[0nh }i6Ĥ,p Ö89 Xf=n=qiJ5ZA'(TnP#O.yEL[ .PrPHTBZЩC:Co1WYEoZGmŚ$Ul[|t_G}x, ndڒAeYwE=H>OxC)q͍PB?4΋ٚ;7<9sy/3AIXOꀼ;,{}=d6/-７(7F"$>רl)WJݐ6z1~`FJc :mbzE8*xgwS=b^P{>Wy_4OVȣ@i":%LdsK#\I&h[XC5mC >ܣ`C35Z\ӖZQq>:A!7JSgt_~"8$!Q!_NECݫ7=#0)(ToݽӍuš;Nf#@f,|eIs?֥yzm\dvDӗc () SUZ@\u6UC?1!^fJ{'gا}0"4={K`Ielf0)ܻ0:~qĞ'tϿ\w]:52cAUbjm[NO1+*8b܀X-Ma87m|-Nx5đ_g M6WC:tWNxws.;Z7*]NV!w"])jtF!C S7c[6{l+j>˳?㘈c/<6="ug vyQӳ.oHB8^ˁ{|F,7cGiy`ܞ(,:xqRCw 7(w#̲S"Rn7n2"xE V= -lzuֹ&e_'e:cIXa)Y XU;r,EWݿ]Jy N#ݑw D7\쯫a;j{Hߠ3\Zq!h߁Ja.ń}QEwL>9@X{&)gt%'F@XX;q^%(dwE|L -0ltKKgֶ0dr &Ӫ3hH.>UڬȖ93WĴbx|~轌9>uѹ> zLVn*-Ȑ3&lWihcPjA6vX=%qH֚>#Y!C n{fF-uyM tu1'ʟ]?/5,ʽt@ek@Mcly &s>3JЈi+wae F `` /ERR?ñvNEs-까'o@CiV!*a)m>A wH J\F$s 6?GK& g G\ύM/[u}h5)/`hv5KtEN_3N&6l6k2Wfo^I~fAA!W PzPO816r`g ya\.T!W g)~||;5ln(wў)a3}Phtyz,,]i| GWé-`" ~y̨`O&TY!CS%ц7xI?R؊I]$1zWEN4|[ݼVzBH=ʇZ0&-y/wl;DGUeEװwaQZKGgS 0rEfI0Co|u7fJM@٩E5kSdlp;\oJK*L!NλjT-M:6P"]fbgw `C1:Wa<.{3:Bpb)Mi2IM^ .k2+V/{JGo4B ,`,l'uXAjg1bnj6+ӝZ c}K9&3.PF+"?h(dL9:L/sP0Ű>~pFөbS$,k-+ZxddҡYrٳ[Rܡ *_Mk*UmFe G3+yG[LA_o57.O"jMf@!99OT/|gҳ< n_ :z ib'EblbE?4#;(%$;\ a7 Hh {vumHs6ywtb?-4%aW^8ZNb줅2ST ?bD{'hCf&Q&m%OlB_@$f|֩2zXDWdo.{ 'e~Iݰ:ֺ%S1aj2{HŨbiPD& x|XPJC,po<*\K1F1zyFxP(jI^LVGY-w4@qTq/lB;K,X`"-vDŽϭQ9ވAq&#z}e c?5}Lbgq]s : O-YO w2=q#]'6eSJΣENy~ N e1]>"yBf4 \F2F'^We*,x$~a~V_@Q-X0L7ُ87K%v@D;rdA|*sfjv =A #BqB~+eÕ_[8ph Kw6%INetl*' # n<{~5C)4Az0 6,0~;䋥x}w+rG>La!5?^Y;<8jœ82u>Umh_hz/-ц(9x."g!M& r"jMQ/1/,M6@rZ]yC=,7Zg)s{qr H7c>!*,3Ezk9nAG փS/JWz6"SI71襄e"a L"=R/oTJFfĤ_ZmbDԃO;Ӭu!/? 0Cev,BO|* 6]w`m]Ca)! +z{NP~4$\f?~ ]>s@h$?{C^ĂՁ 0.k"5v1-v˭8sbg,"6& 4Pf&5-G%?)>&t>Ng0NRَjJ ^ >8UuOCACʑ-*Tb $YBxG`F_v#Fv[ĦŬF9>smC5B1GH5NV;@hER|8{ύ`$6o2Ąh4y',yD9 N̒iw5eQ"aJfOV!>x3=l_宖#~Hĥr61oUz8'{J5# [z?!Z')}Bo63V;n8Ү=jdE|mxo{L\=L.CA?vJgċdw7asܝ~/j bո^5?EL{-$?iuX@dq\ $4JQ ūzS]va+!:z.66,*BVlaIK5DPi/{ɾ$RyW%a&Ը«uR"^:Ԉ+gKyY=Q|}PUUB*.iHH# Sl1|9_a4NbR ϫ6\{FY@E%ObQrtJޒx1)]bQN"ijS2#a$ynrQcE-!>l^ڇKB!{֘ -7Y }7+t(9nQE´ї2jo<@51$ɈPK:H"P=~{U Y$& 4;Ǔ+GbĒ tU-R[rfJ2 +--) +ٲ~*1>;wPθ-+ Ƙ d^WR57G'k+f{/FK @È^C;az3XU3xW*(>!PFY}00ij0oRL~ ߊه&iDh%tN쨸$.)ƳXVZ Ve.[蠀dnv?y@fN_K)]/~e\}8;xȣ Ync~4.Ny|8rGAb߸ .V JH֡T%f} Dmx Z<G>Ul^A_dSNeOOYIjG[)718,̣V.X.u攑;8gXVXAM AL=q۞oc譢4A.|.q~/ L0u:gzٶy7ׂ1@Ƀ*Q4"$3lL(X!R#G?%*Mth}fـ-^3']j 2m.Ew˓HOC\5A,lyf=xÊ)>(jp] wE'X6`@' &Cda*+ #6:Fkq]H{ ȌI32>s{CKd/opB5 IC{'2g4;pZA*rФ@"ӶuzXe^zN!nGz ~]J6dOi F4?_ ~+-Z1co_|؂ 3q`e?Y/ V[48Nz_clLyVlc]$&/%/ -hX~oZ=x*H7NkWW-{q0=i(եB./, m!~2śTMXrx5LCl6bnHh/?0@W~PBjLm^meEvNӫ[Ekj5W#,m>X|<}/ھC/tI]pWjO? Hu4"~}0GRJ39C5 O[| e""<@MxC9 i~>X"!+ ޸rԄ> ǿ >DfӎvvuD'ޯ<㋇wٓbl/]LU&x0QF,Q͜e㪧}fݖ?ߴey@0 IB A&oE;惻URLN+tb̅ e@M%~yJk0h9ػ^MJQ Yü&6"({LI LQXnFrta)Ũ? + 6px 5Ԡ=A 2WzvHVHuz"E`??Mۑ!G4dD0rzGR%vxW|Fi5>Յ A8qJ#&? os 5j**Χ_}xӲءV$^ > =f4n_'U'TnP9)4}ыFs#MݸL s:;Za 4i0z˨fWGHL߸Rڠv, {NƲGz"̹lfs |:Q.Rv 6c@TlWV_,lg6Z ۓA̞Ɉ0*VJq^Gu ՃHdy@|=b>#4w+qUMmoX~8j <\{d'Տ MX~=K@K' hO0\6ߌVcy\#nBHzai /Hf^&5a3 HXʠira=t jZONb#`v>P p6x ׆7TćMWnŎQ@, 'x$ǂ@䧋餲)Wph@)qs"3wZkKkLvGQQbqhNYe:V>YmypN2;Y pmImiZJc( AM 98Pq#oZ@HK7<9r#݆S /eRr ,q~#>ds S`[}\St"ޣ>=o:z_f9r{71[8P.j* zxy Dojmn`UЋ vފԥ+-\;C!Ze Rm'y̗?M&m,2QCǛTGj'&0o$I0odp1(nmZ҃@}Nzt! &F LJv.zh6l+8dʠ2#fg7t`onp笅ĂSOO?maNںϦ ` bڳ<϶:T.1EVxbK\G_CCȔ\b iZmSKcd_&XRUosa E uE~[mk *tp-048j J[Cwwpwxlb@˂s:n p_@R0CqO]kgayԍ |(;T' "Y(6PDB3F.KUh. j Zf/',51[9 ftz,ͶY@2J kX41ʮvt{Z<˜ /I%KBm`ws|f1ȹೌmr HZl?٫ޑ_G5k2ɉ3? tJYfezVe#J젭bePup$ ?1쿥Z a{$RR˴Sj'DxpB JEgՕ gm xZqo$<`+XYWS*f@wL6Oq_%-i@T>`HZMSl3Hb)=@_ilj )<+u ^jVSEbDڅɣۨV25='#9ԩ8EY|,-[uDjd X9AJP tn#/fUu!#M/2Zy گ6kɭ=3֚߰+6m U Ly>޶Ex^C$ԣ5ː4>oJ\+A)[0pW^%ftMQDF-zg.SV醂0ER5%yUEe?D٠.*g|Vm]kO!^ |oZlY3.GD7q,K_ENsܰMB$VI2[l/,nl3-V#ƭ~.2ޞ^>|"$2.aͦihumз,|- uwةHsC;+cF4>w>c&'ø4s+3~@(Z<(\JC{puǪ:~^ؒ˕V@s)@AM)ߵ}*6*HUL 0XbR 灎DȺN:mxlެe{F|+t6#-?L9,1,l@98v% x@6t#{eW>OZ{ڮM7,asxhO\ѕjG +,P ;B>֌Dާ*z/\ #dHnwKخ6>"m>p|ܸޟO6a(`K F`$4ŵR-DU5x ĻT1J|<,eW_9oϬ{XQfr4➀R twAhMGP ]ڏ!9i <~5gVmOĀRL񰩎0$np:#"ϧeʂҦ;ga"sTMz\춦pI/mh Fp#!J ;, tYNS@V*X W<-Fhn z`,#[}/oQ6$WLhH<6so9KB wmwl(HT)ʖ䟪rwgjM%lm?e4t|,[("S."Eq0`Wn.U!eh3?B4JMQqÆS AYwZ(ԲmO21- ;ҳ ɶv1mʰOƤÖz CRiI&GRoM lp:]iB"|bdYZ_{Uɾ-bpҠ- Pwۓr6H,Kz hLU@_y&f*sCWg61۩ 7DU$o0}?a`T~둬 i>'s){sT]֫H,{{W~X=J6i$F}w>yn1pkT1#g٨)غ8QEeυME6 Li6OZC]sz4tPO-A@¶;ׅH(5DJ~@ D#MNFͷEh?D;@wKZ0+wjEDΥ9G;f+&"><Ŷk^7_fe? ,8Ұأg2CG:(,LX) =s%C}#9zӼEf}7L Aղ|]:aKzY$4GU6Ly$wD]iW.f \&`ymע$TSyCޘ5 G~53&Ycd# UH ֫Kq)(!w 37 7jR_rPQBUI %n5M0-x qIԆcb1*ϡjF^gCk6=r~VuMߤ(bx' m'[]wVg__jzh 4Q ƛ\U97$-d ϶cc: wϡn-t4w ;6N;% I RzF9IYP/bE=o v}*Dڋ|ү`0+zmEiٰ4Ϟ;Ks{rKYE fj@`|}S%;!GIzՅ?|4rCEZiH,ц}^G&3A2Y VzϛPAaQ/5zc=1\ j{"xpN2 !vjvV^sq#j2^ňXMq\'H 2C81nmT@8jlҙF?q,9Sϻ=bQI{72 #1T!q4pr*k_i 9oǮr/z=nW4/#_ѧ&8{.wRܴ.QrubLO; XO%u@0I[?cujb*cT8R("J\FYPmzb\reѣ9ޘm/?K͓sƉSdN_qCbA/L jXHe3'1xֹfL WWv-C}XU%kX٥}jK=u tbwN15rZ$Y$U7{H>JjW}.SP}ZQq琧H(؅Cq1Ndr- Q;{,z"ecv33c- !/ǁenxqhH>4?ylk;{ 8iK#.7Gg?7OE}dS> /SN8.%7P楙Csw֑D~`~uDH寫}pe;|)"̚F5[fƭe9vFPSa!v[qབྷ4ͫM)E0_Ufi:M]l)*S*F%\߾q^՚z|2`A E 1ek2IgOD"c4bɟzЛzl+Q4g ;Oo!fc k^ s:,/-:Ns!dCz2Zޚkq|ﭧdƨ_BJgE K8G׿`qK_%8 a/2sA܁H.C9+QYhKOINk?}{-*.iw}F(%O>ROZZ N hm< 3hXK@QeR/)t$x 湮l7y5+rν-h_w ZD}:,5<Dh$;ޅ+:}1<'x'o)Sr0zFyho|FLU%obގ~+︱[b_̆SgW%"sqIb=XhYZKPO5?>,5LvotzŸv!T)s&-2$&1&Vw88IEm%MfZd:tJ/n&V@}FUl|e߶mKMK-U1Vw̗owhMajƹb #Y Uni~w}=]գS?N^?_,58p2C5[N^iq~FDin=':_©x0@l/QNxi+w7?{9"r_rq=Ikrֶxgšku*qc>>QTn`{\ -_wᰋJXŝG?ϰb ME?LJ+ "=޴jsXuRp>\v`G$%7?n}K--m?u+p[50˳g6G#_Z&ԪUtB!(LԫCfwgj"|X#KwI S89kAsMbc(QOU `АGF=lk8 Q9{[1ܑ_?nV9xm yezhuXo?Jd+M^3H0 7,x8kοkI _i'%S.mw,ڵDvcZܕ9!g(W$;=U5s%`'+ {Eԑ F9 z&Y{rjlGإqFSy@v&& C*v@m̌dd8rP|)]GtP 5+qj1v.nzY~rB!&a2-JN&BQJv!NX i<Ͳݺ?aoeeVյpk]^pXS8Rejӽ?|JsPsEDQ]ݧ[TDLcdEk;6ҶXO5pYiV] ottM% f}V.mF<7Y~ڇY l$-&4^!e;@J$M< KK{ )RDK֨*Ro=mg)JtKѬ8:{v#mwWS!:@J 3Z'.mpg98oYۻcrqbD5MvL%NehDzf+jz?\} ͆L32ogJjW=W2Hr(X;d~(JnRrP0WP 4 #DT]fC$)z*1r5j3k HƮZo[c?_(U $r\*2Z)zanJ )[UG-йSOo7ᤸ#VOX\7 ,0A;\KjU!L. gSM[9އxv Yh}MhakvSY슈ooEA 76\4x@$ũb0I $KMWyhdk1a_)dvGhwޒSƇő;4?E4do< BQsڲ1IdkhËn|,, u.dA  H/_^7صg7 a1xlT&b(OKg,Xm|>z1,hm@9-xA[ALIn Icw]i}IJ1E5ًOx2nK)oJz 3{"iYf|(IBU=Z15NrYTx\G=@7=Ck@BzzK+`W J;GΆ㼿4h#c;|qO棄 LO5ٞz6r]n`]? ( FdT{Qf i{k;6H'ߋyX;l#Z_J?U_T-z{fOӱ#>ݻRMI轜ooG=O=Bqf,p# w|C, KLl]q Cif\m+5hm}'kBFsJ"F_Pd 58 &rԒin7&ИauJoس`.PWv'4q0-h/O{˽X D!,:į8Q})ynE/k΁ED(B;7ձq̚D26Oa;I,>އKL> 8U maQA*&8?iRl$X-cVqlΡf2:=-9"r[^?l8m=H *~`mo~!ܖGTxj^[mh tʬmNK&{{-ס4l5VPGD]9WQ22kkP6E 'k)lk57/[ǸL51gQHԁMFд`22$[4dyM@;`Fv:ݮ2*6, )]F!~~\LۭWi ȮVM;`~\&v] ̘g5 3`ܪV;w- &qʝ65p>E`0lZ@9N.'Q~wͰ'$M|`>ˣ*\H .]ap&_?ڧyPEG-T M/9'' [.=a# !jEŠčp&;vw4aM/R jbX}HU2⢑O;l' oMOVxB1Yxu@T˪D/ν6AߵMCltK@ح%O4M{Bϟ|իX 2&& ;ei(*SV -n`~g4vsQKy:F&2u:㝋qEu}*|U2OP_'8qxz]2qrg`^;k'$8皵b41ˋc."7>ђviNMMh_ '˲[5WAfj Ĺ}w{}k U)zJE1;͙l)~1\(9Oyzt#7_(-ȣ& *R ػY5vIbz#WPv$2x3IXb}zi-\h dSZc9ޝjokIp.@=LmMFcV]!$ZBۨ*o242}`qJpV\TmxLqh}߄ x0whw3 "޵E:5gR[rc`X4;YpBCcqaDm,B#x͠Hs&&#Wc:7J5;y61{+5?Y^]$ê}5>߻̂EX)A%Qj^f;tX 1 |,TYɼ,\!DC9蕌URh\Su&[4{&axkCMd* ?ZL}DK> Nݰ ԉdWJY W$GeaPG8n=c QܒRtY&cϛg?8 @o3hQ1L˲D;]o#ZÙJ}k,_ ^bH&$,8ۂRF~W6Jk L=ʽc4jl%з뮆'2%}/'?MzEA-fa@7׍7߂X]CĤy7F E]=Uijj8i[˷7e++t BQxY#}[ DnҎ&_"=K%Ѷue_|P,]sMՔ]}y[Rhnң8hմr Xo]3I$ -3~IkY]ppV-T|/"$YXoNs$轑dEA2؆]A>;~<cz5f2E>td- '(ԉ$r5pQ< @io(naixK\E>;6eሲB~$Cfs1t9 ŋjrM(o5 崴x^y)Wi*|/LNDHp!Ys6*ƙO X@#h!;d? ij4GEa{oM:Zi죇 =Xn{w gO<σW--,9k9A@!.|i.{L4Jp5Wk×`߭UJzI:B/iy0/"䵄#F.eA$9Q\8vx~݌zV]Lisk0˞$BH|c8O քUTA ъ]h]mknG =lHk3tjzThYSyѼs೎ { © GvW~f+RtPkomdu x *bm?& FjRO8΢p%!֚_ U| 5zɝ& F\t:?!>zO}C8j ̝C VP4t:>:HSi`N=$cSbk"!&0csU p悴#HGȔ8 &Y4-U!]&k!L;42P.|FPuVҕLDV6АC}ĥ 1Ey! {'v?~4̝`<h~wRJbX'ٮ"nY) G3wl{mc'H@$*^HZsXFމ|O픿4w">tTbŭO9$KrcGsKqbM[d-AYveFţk;t&tۗ&b, 59kl!@|]8q/1c"{XH[.ZP Ed~a޳GaiiUa7TJﳔH0[P&9w9Vz'w8kGd9݆&.mEwrB+~7%żF2$uJFcBդ0= tbk/+.z'9)bw:{ ~a)5_? G LEjfJ#NFh?uIX|` V u5%bH{ &)܎:$6k\1q=0.h,DCZJpW!|3YY{TA8J<@8'{4!]>|[zb.\C Con ΀@ 8R.O>}&oA>sǾ<]<b+îaZƒrD N،Hȑ,ñӋ Q.է3yB?.@zgS 4yhyӊw9#x)۰i$w\l!6Y *|]\wP9?_6 aJ è ynƐK=TY(eQi^m bWJ+볋>tW!mt%~Ĉ%%n"ϳ_|齼Y4gF\rf܋)9TZKh9)BہMӴgEzL9hW-Re1[myMM{ʧO[$9&}Gd߇#'go ϻN6vT0v@- +<^#Ӧw;K|]9[XuJ!!"ҷ|=Qn#;! l8zaԪoG m&3гx)youXF5>5AOOPf r]f$ٴk kDYoHe.jJ{bz7fݷg}!woGh (t$;* @cO.iIfby]HU{`2ެ W ;P3Ŷ jZQ&pi|{C# V0}([  )zK~L@p{}1E"|<Ȑwр3aFp^ ?Zءtg9q>sK3Y Ȩrˌ5Vj3P/g0N\n|*NDlg-Yo(zfiۂFWb[Ӻ"=ue'F4*a)$ΎEAĈW:T@QkhNaI]u YɕptǙw9\qƗ&AZ$S75QzuLإ䦢;-(fjօ#)="b>XBGK*t}G9&yL~!-VPZyI]p g}]*:VkR745m;fF}c!Zi#>1Y3\Y~!ux4+JLCElk/C/B| YTMt` sP˃Jg">m7ZGK>Xz(R LޓvI1GdԤ3Jl! -aQv ~me0hk=hl{!AkՃPTPg' FhNyCϻO$uzsu [@z.J#P{F*b؍(,fFo?jrD=В]uDPzw\oHyê+WL ą^%V.9fHp,pL9`sCi7-Ĩ/ۦ~75Xհcxto^@L~6:"R7;$||q^˓sCE4gqzb0LD / 4ľIzw|$nH^pDwx\5w'9P}ZMGǶx:{b ~7 `/>[>!~Il_~G (zH#-svǗ1dl=/&%˵Mhx=\KzIRB|C&:lfL|3򀩱B?P?lYd.ovN3[q3%Ef<\Pݍ;a;T;i2ҋV k #$վ.ad Kd* xWPd*em,iSUd\e_[*[#ȍ!YtI`V\nz J^i$)̶Xs "P?Ev6=THîm{Vnzxb{4 I 5 dMx%!3Ɨsc6aj(4'm *-&_døo Zs̻Jڛ.g2/I4q"FQ:BXyZ`:$vʙ=8}eT;1#7-'[m""Bi#Sq1C8{SN 7a9~2ʻoH2C% yJUzsSk22Ƃ÷.,4+C nL<0?jŐcHq?RF42, l.{[8QujǻE) {iR1yZ2X}ڍD9>zt}%CDIp -"Z.j[&C-EFqHVhS٤77Kɗ 5> Ll@Zq?S?Ђl?&O }H#4FgvDnBѐוst<;MGMwUdeXbv>iCm]j<~@O ¦2 :(7IIW|c4=V!PT6&(WKIg,hq|'0ؾ ɓ -4eG.d- Q8}{ -8鑀 EEQ`ijbi=%1S$s7[{L,"`cnڳX8sVItv8u$f92ŕj`t- Z((p~З~J0 B)۫iWᙓK9"f׻EDQAw"/>ʹpVB@N|\$^VEO!TOb2:ـ DJ5Z_vpe0}5oz7 }!Gʋ%& `IL,5K˪^'},S&fGЊZ]tA)gkh)c sŋD{k-3ӝki`rk%Y𚏍V"=vQy_Ok _'bQyڳ̪6jG Yb  Nt_,wwaYlZ Y|Ց%0^>)AP3~ ±`_8; $ᵛ"Ĕb./qzJXۡ/.i3׋AVDKP18yαgoo&О.HIk"c"^ɚ?3[{4ᑨ)sDPGmlxufkg}x()ڏmZoæMH`:ҌijVx64e44@5]evq=㜌MwX:o%B-;|N 5a\o3rک_c#TP '5[IÈ5mؘyw"JquJg^!YK׊4y/@Dc .SV8&a7CQmڑ0v(f" 8lM턲܎~ϙե0A;<>6g{;j<:T%6* ވơ&\}[Qz?Rk\<qߠfuh6?[b.{=ނ{uU﷣?ik) (;UQz#:$IgKU;O5>/$ 0OOɗ1$`MZ`#0K)Ni=^cDdY P}׿@=tOd6x+0|:sCEP@n$X^Yp "Tpݸe!7= l/otҕrlsKTFow'[Y=*xE>Bp)Oh?%Y/s,w!Q@m'wXalb;+dOw(GM\5RRnk.v̞rѐ/'oL!{˿_It¬cͨϢ%U_Kb:^DI(\׹_7NHB6 eܩvv1 aYΈk&?X|kօ8e:Cޚũ̀*>X,R'_=,I&Y\7>9&H76McDC( gy2l6 g\:RVuρNZ?uhsC@F\ O/9(h/9 jٓkbΉ{2-t yJ4xV V'I/_I#m~uaH;mh"✅T\Ԩ:ph9Ih>l+L10<jŨ,vCf}5KǬ ٨"S>C"dC\ފp)rwUU9Jpxj52wK436E \ ݧ+i!03mh19eKv1x:JKYSjնX8*-C 8 TՂMmٻ! ~\YREܚ@KȿbS|޼fr?gTj]”Tމͧ|i~霦矟e G6g\O=ty`Qd|5gzcq'Q/t!8>95[UBc,WUH>E i ?/=%gf*t#0xnS- x%.삅;P0 꺲Ź5ߐCԌ\yAX!8|Ώt@TNVυ|;Fx@ݗ{NO')J:62w1}{{Mc=T\VTBMU\z_ l}k3L/mp)?;Kb Kl]nn}gxhAP&q`vg`t&%SȠīy/聃Rɥrg_ּ])Y.Qක X eAU 0]j+O|d5.'H 1kP RWx o>+Q~ZW>.(>?AVrmU>HZ&m޺'X4MO_H؍6Xy1&8 0 j[$=Z Q;qM `%k9g#P`$f'R1.oDWlskÆ :X4j2iX0͒|;.T%j#'ɤ}o~T 9/>Ig](DK|}5[Ƃo#mbv.9Az)\CZH۞rJq}6}ѥ03|?|o~ q2+~أ( ̴CO -yĆV ]*Eeo[Aɽ2{ޜY2>>Y y\FvPQRrj)uF7G65)^{_pdjd'%= 6fDƒedڝ/~d;%jh=VF_ox_B (Njnlc-!qdB1\ '-Elk[SkgNE:yàY g|C1n̻9]K$ #.IxJ92Uy6gq In9Za)Z{\=){9JBE~{tȫ@wN/ؓ~D#쐵͎jxA[F{<]h71?6$Wnw߶KB<x]`Orܹч;t9EE-lqA*6DGQ'j&ˆES>e\zMpIc!u>^۾ f~Ó6ZKjg)ګ cX3*{=9"6- psRFI> k*D W[ pi¹J?١Heqh|'euy hm'$j3wrAۘJZiw&8Yn 33EtO =t+c&} pr ŖN\1 7FMTB n\w2UrwlqpmrP⦈܂QŜƌW \c-ߘheLcJ4T_& ;s+"n >5_ DRH15th&Q<5@ Wɵߙ?X>D kC8sDҒTSDxiH=)g*pC=^YB)_ہ82NWl5AK {UbFx-|_9`&z󭓇mu *gUy7T8LpYHD⃜=.&p̌skw/q8ޝ{woiiws`= `QEB`7lHuk niD|XEfTGᾚg7V!;,Ap}c{"jevȒTgV N]mnדOćQܒMVS iVsJf= I« i57ȗ؂mqyP<(f ȼd2V$1wpєyI? j$Vkm[cSN "^zwZ4) ݧ g3–F%kʥhA<*廑mBg2qikHDvJ!ZXȝXA<88A=/)5@3$nH ʸ2G[f HmE4co%`9W^ $do%,6 (#@Jvԛeխ1P,!Fy:kE=dTU!Jb51Vg3Tj3*SQϤYuܛ*SX>P#6|KI=mVXEX7JF1P1>|>wURtѐ%y[w]l0s3&FK#covs٨r ^t}Tdޓr]CS:ڒUy 4B6FÆcoƌȻ\!cz͇ 4 zٌfۧ_|mj3%H[\fSԛ)j\ˡEϞjbU $e ϷoRN9|"ͅk;FpTo'Rd<C_p*=V @:gjZ Uo3ê} #m)]ѹF rb*:Aǧk 𹧁Q㶎 b'k(֯ kހf<0+ply&|+2# T"(ּ[_f|=, |ަp/nx~osA=%NCYm<.fYz'2i],-#uC2ɾlܜ_wt -ՎfzEb]Cq6OV|Duv:yU^N iЌP٧i|ɛ?`Si< ӯ5^`L#]=1fj2'Gj1d[inp a&pυFA9+mB4\ܟ\{\`MR8L'|ZwxSڮtf[ - _ 6u+LITXye.F\pdWk/.b]դۉQc#P'YNE7F 5D^}_5\9 <+Rn0P;lcTL+k:A )Co u`"GwTņ`7trb0_^)4tƆN _h!sv?YƌL j- sYq-&I"n=[b9j 5/Xw-ӗak{\IT3O)"錜DwC^^Mڷ]W>A +!Kf2+) p QN%ŘIǮfE[)56gb4dROe+LxWͅ{pWԏsyWה8ElDluGc CZvޫ7^0#ij' :\k*~MצwEyYЅ4©qxZi=r_T&ќG LƢrж vQnzR n.OoWasTKz)yjS|3_#oUQ;(%/\yHjN!i'g]p@_khKɻ>NF ֻ) -k/k/Z6+/g`3\߽x|RlP PJFY7Oƴ$JGG}.< =Zш-.;{,k"5-*t&mrr _McqSy?8[~\Cu<BN^/I0/½ L٩v:S1KPW$ЌacViCya;>AHqZpyF]KH1&^΃F3y L3VI2́yPvsjC»5/{ h[֑~ex'Ij -T'TxN `.BQ՝+6Ul;Ldxn{8X#eO}e$AVVμ|'haGB{Z-Ұ'Gƾȏf`j ͆`;yn&g★1 @ܙrcpĨߖQڙ!M]""6]D@S4 ncX3c%H.@ZEh ?+(BZ4.-|_y ; ( VѰ94@d1cŏCƴ&/w!9Ȁ'FNh0\R2-Wd:Jߴ-o)'rvbQn51{u=[AE{? xt^yP`6{\%vjAB֊&Wc.K1k,`43Mm_KH1\~>fD2Gݭ47G=]F jG>SF C'~肥7jdzA}z9˪1V&|ntn X&c,ALGɔn}KtEzj7r6[4A8 ?>tGEnV^s'\~C6O O|?C3oi-Ԋa~'\t5$Lxa.ouZ;3 K`U`b=d4l=nC;y#G;K"]!# Z X:NZPY^xUg$>@϶^.+RMq4-%u##W^D%XPWy}p7>didNQ6d hzkc TiVNѰA"ar2߮7㑻/\R`"j_I͎j\{Sq"0EL{BK~oX FYO*BQ/ShSneBSZ[N_*Bj d1,oMEHwU|$ΐy~Pndr߿Ѯ+S[\g}| ~iP 4Vw=aS%`S(Com~[3 @"+Wۥ g0Hc*͗{l4KIX*?:Б%g=Tb>2 ۦdX]\n# |=x:Fj̀CRPCwSp<՛1d9ߜPsC$. z.0$c ŕhn^󼹢?!ÚޖB,ɒ+䁣Y ,ش:ne#>s*ϗ2K@آɤ9qXqmP . ?j}{dQekp W̔gn=Cm9"2)&-K%To/gEhSq](?IMyhj,޳xz/DyVgKuW"Xv [+Re ~gȫc%EHRu$D , L>g%8BצQbT8(r4--= 튌f]r(_;6.}^H¯~@LjOzQƃ0=:ACaKvCN#_ a#s^ȷxZLV5{ֶd RO)# YEޮvu8,=j~:/ؐ3&Gʚ7q9R(ҍ=K`KdR1SoΈDUҋt{`ݦo\\NSAX^p1}U1Nje@m9`&H&ƪ)J s0 e13jAB[k[e9 C];3/A*TZėգJl݋ ; Ehv6`C&jrm%˲ZDCX 㵉PZ:lF!f0N)W4b[`?zįF[GI'C!aٵ]x.V\ؘHT4-.i] U7 ihb0=qwGD}C z|O+l6aFfEg^>B̵ k%H\Q]C ?_0W"6 X^ϑÒp5 `7&4"P9˔|5FmOJAuPlkߓ('e O 0}_=)6π>yPXIm|#QkmsG +߬(i)(»Mw9Y_?=؄7i)-O&-;YXsl v8 >\=xjN(D?Zsәp`7*.0C7 sdmUJJcЧ]Yב.1_5Tg&$uJls6U&%./÷8ڣ TVA[ޜϭeLXm2!ۿW bVm7C%=٬&Mvg1 qJ `;ʅ\֚$Dyb4BzuqSϗZ`xgEF9X0  ?(q tF+Vj t?GDޏ;]޳a"> c KbAdys2B%hlfc9xEP7ˊYܦf4;ȋFS^1^FN]źʫZjK ;P{~.'# )Pٳ$;->1l;/.5^ExYxx&Z2Ft5.a:<檐4۱ zBQ&iq6R e+z}%B%N2!jGI/q>3h.wr vwєr+zD'چ*ܴ8y K,"Cjf;( ͐&0;7BOifZW`N_xv@"Ӫgb_^ L: 5nObY6sƶFJ*ܦ^%\ýTrR k#8%zїoyUHKnhu"$'#[W}26RR 9 <x{eoΘ J Ӄsvٷ.g:c48%iGMM5+jعY^5wwWGhih)˔:B6-,wPH$;{ƴU/kNNJEIHW}ʁT^Ό!υ;+=bACV8hCʵRBF]0 J+e6Μxo/id+i{4ϗbq<}x0vFf!Yžѝ,/]ȍULsPr& ~nuq4~z!v+"ּް}!j/ad4ĕa׀5$&$s,-*F3sRYZ pp}!,]Rj&$⍴jtVr7@ZE*+spXp2j l'sqQ wAF;K*]tZ>Kk!'qU48潊N Vn1LN@s>26]`Ƣ5f:>~/(#+;w[f xavĭ,Ͻtmഒ4pWzokT d+v_/s6o0ceA1sg?n ڦeV3)Z`N:( cdWp Lj"c,jP&|H\7|IS GZ5&u=]sgd A[' <-JXG2z/է#"ݙZuZ{/[epI2=K/VԠri!rXg5';0~q@wɱ0f8l.:Խ;1La z/% ba'#*BV("8݆%+"4>UW//*DbygQ-4{{9Yx>!%Og_P1P\NN7ߖ[1 u/s:h/! Y´(R (%$s%΅?IRDLl /տ M;,J Qző$ ٭HBif==q Rrd OZx)?h$.7=rg$ed $ZIIU]).v9^e %t($w:L 'j+Vp(xaIS){;p0 Єc0 ԜB 04#t YcD44 s{|7Fe+%5!GEao!ur[0ex90^2Qs[11 `u 琗zV-McRoW%u[h|3d pԵS=[8şQimޘn&٩AqDz%I"YF aª |a $mB2#`&E fk4eFvsx&!ɫcôhkjHZ05;IiօTL3څQ;\J"VX(v6ag9R+kM`}'zE las` Ksi&D&#'<9 ƧL۝L4&9:gI2YXUGjb}ɞ()'?hyOiGˣW]! :C3BnNun8G!D| d$fQq9 WxW-Ɣz\d`hbf# 4dRtLModgVwID2hH%2cްa^lq p]|[j$$N>#Uk8" Zf/>) &#}x^e-ڸ׀ׄ78}$(-Ohtf{b|7QL+kƚ$ǯ#҅c>%~Nu!DKwz谣^ζ.MN%Y҄ c73~LD A$$Emb268`BIg>dܳ"!SUBy|:S::r('a'@:A1'd 퍷 r0|Ά#Gd%W1Fqr ~R|PLS+k0|lt,, 0)iٽbt~"I=%GP!Dz⟱DUNkP&pNqDXV%|:9@kj#PPI F^ n fD;@#b>:RMJpa`yO99b?b('?uv8KJV Zbl~2X *o6EM%"> yMkw? +'&]!e٪#$Dm1tT6ɡܮZ1w^ZJ]j܂o Kwu_hwkzs[hEv&W ~ mZPq~iNWb䲿+PbbI0@| %PXC )ToZ=;[VCN tMƆjuΖ{_&.bݹ#x]FP$m.Kj oFJ_6؟岑DO\})x[j,~k ;d!6ˉO?c<8ϡ |E1qaĨ= F*,W?R staka#huO0 Xe2 4{;#)|V*|XocܙZ5RjgIBŽ7av"]xWyÚX~ H&ü av" Ql qU`ڛֆuN : uIf]0 ZYJT˶GO8 a'EXޚar#7㕇 M.:":U dyBS e48t6MȪ5 aڪ,?7,2al0螨%s[T9I⵮8v/Mi}ɴO[Z( /aSJ!dkXF6RdL@fAbt!̹kB WZWa7C "^h@NoE#O[XW<V4ĈNad&>Y1 `VGDj-f4J^`xY~rFo %5>$,EKg?cFV< %`/W\]p"tCE%.? ,^JOI0 g W dd/쓳 IUq D=LO:jS0y||_ QxVFge+AaHePBAD`u,BCʏnnWr`e^]qԟ&I~G+|T4qheއ?`HE=jk *&isʜ!/(X^[P oy>!b"|U:&GJ{V,$C|T!鈠{A7Wނ_98*^@j3i1^گ flmIb]`^u-6HAR D}y c0USqp^}d4G+;̛o}z)}x턋 TVvedE!ͲP0vciz֫ y_!frw}^*Ft %;A16˕u)ƹD%]i=]AIXeTA jJ膻x~pW?6'\m[PSXT hXBM=>(g9Q29#FDUgaS9U \bۓ5y.]`C$6D#;-uݷ+9@~gy{6[ioG\+I{5$2ND}8Ff,Z:j`O3诤b+g} n53nk`\tK|I]DQ@[5_UmV#!$<ܓ4}*i/H;;k%2$ -i]y㣭\fAm T(RDx TFZ?1NW4dYx?whD6MN˰}~{T00s9!n +L,ZpčÙ23ؕƢIT0鸟Tum͢ryMM<ܶbZ-vgv'wA5KX89gЫ7"./h '_Bɯ ܅O 8]&j !a9'\%¸LH_BRg5AV]"wWle渖bEy `CQE5$bQxyW207a &,߻p<'"Yt4E%2|]V=bl"cqۥ*/W [`ݲPa氄IhA+\2֒ǎ0kVĶh'ÏƭM\i(r\~ePܩ:+fd*ƊN 0O!#9s;9]vd< _$O cW<2 ÷Sp3=gxg^^9oq?ˏ6lCdhDeZ?Cp3/.24 =ٺ_L:`>,9<%z%*f9gL/C/e4 ;+9Tld6hb#VqF{x详Ѣ?uE.լ6uwr`ܾS,}m@#iv64|Z19SnSLV9xtYSS^Qf׈zƃ#Ih&ZUV"9iP-h]|syrBDHa 󗃹ZGR¬~+r%YAB @G_Z^8y|%p~4WVR]5#sdeE/ Aqq-馦5ɜdhW["MQ~_jӎtK34 V"U0vB"2 Os ?0ݣ!PxEv&M)oR,rǶgz5_MYXc4|de+ &E)`l~$*gx{7) !0gF! {,|1.`ym\E^N{C>ˁߠygwHR / GVmwII:̿E.eؑ3~:ZrPq{ײGZv Y D|3#4 P ΃wH)`U\#I\.}8iYyLBD @`'( H}FH/isE};ISk $%B#E!XR@ņt?>M$xbI#dE^{He1MRzt G`z 89})qTh㒳ױ2m<4!r"톝@o,(f|DGu*F}MdWBekժ^\zGʰ91 O6?6 3/u(#a*B\BB+0C+°rOZ#cEi/Od[paVq9hq.QFYCF?A@>BHГC蚩CE>0.;SԬ0 \ޜ/:XwrUj7%/K_zm@%&@T.p25Ҍq(p7W)]w-LV۞t\QDn TٷBQЪ R"1Cug۟zS&UkIv6jH#o&9-Jڙf 7O8d܁ Ȁ s)1b5ѣG.]^`__-ăpI 9'z&w^ ڔAƱ^N_)̈5oq;PV]^K_ wQn (Zf"[umpĜF'Amejg@[ X5ƈeVN]%#auG[ (Ks7ld#es%EPx tOVWz-k<쪲Ib6li8 Ѐː F󉡚$yˁ1;oO& }v𼓀r^|?qtW~,wUAa.!r4U#\P?6ATWٯ ;2L8"lCB9~jp'H yW{HcU{&_LSmMWwwI͑˯{J!MӦE+ӿΊ8XT?&+1n;)SVbt ijdt=/g?Jʲ6k΋"Vne5gh89$F{颌,/xO?ᒞk~VZs/}$F,* !#w4@=P#qahɇڇ+pE4Q~F ?zjV}!؉B,R;wg}1qtD5~Fu!<]RKQtΎ^ۃqvp+Kd:\gleۘ坪#VTaa ѦЙo>t(R`96Rq+Hd I i|/ac[8ncߋ+՗i0uoml`P6;z>4/xd?H1\Uص;87՚er"I=[Xj:`b$[s0 .yŮ)!jħ.+Ω֕jrqBt"Avgh{ m`5Ĩ~KZWʣ@z&XT*ZH{c 3ٝ \وNކR3 6J2F>fҭ4(M &a{y\D2]~˜Iu1).Q7E>5 㭭Ƥ酉++~W+y |4@VH3OF`imn=\ =5Վ{i0k#Fȗ# 8)fc;qFNsvMq 7]D{v/(n?M @Tiٺ&QYQa}w%F*?^9WkB/B A0k}#滳S<3hR#;Yᐻ ƫoe2yoxsXӥ};i&-8'dx)#pm+Y-֖!Ƿj;Ʈ3m..u;2NX/&@9*"i}qGد]y, QImjE(c+rOQ8qwϝNeU?1M=r* h DžX7uthпE'~<ȾgO6Qc$I{#Gi9;ߓ)%!`HbG_*1di 3yGPXQAH@zݣ$7K-oI_3`KS,݆J> 5F0LUql5@sĉ2syZvҐZ@ٶOMxc ȋc])~?VU]߲EZ\yA^|T^'k-o~6;@ T6G&0aϝ?ft(l>Fœ9"աnagpHG(MgVR䉉mןHm3 Y](~]tpm4e("hm\U޶NS8jd*N!Z.hfG''К -%.p\7V'4d r MK7"v '5K(⭹eB ݞ X5SX^)͸ =+WXs{څ)N d<^x ETp(Ȉn6:N%0`zU*!3gq b> S28Gh#|ֈ1 E@? !K7qss4)N_ r eFdV{ S`  ~cHc?6 8ipХT4|BKa\򰕘]st$WL,Cs;*;<}5Ot _qG˴#ݽ`)((k ;Fc(QՁfa9U!pg 2%?w$@X>GY0,+9Wnki݂>)4̉o6zg/Cn2U+_Qv1M̦i+ykb#Dx 8S$W:,E8%RFJ4*sbRYKW@}H8/iZ?]ÀX\fAgG'r?:.ӘHDUb^4X3XECs~b;'Y߶͙9oeCOYǀBg(E!J+ۑAeEC BQLo`L fd_'Ǝ TYo/E`i+N &\nBM8zw63 bϊ(j͚v 5'}phXUŲ#ʏ_~Ѣ%!DđWG5̱A#7s`+|J޺ ri0DEQ.qe~~H% 1WjYwaO… .GDg"BP\T E!&,hx8"ހ~I 3V:<ڽO 6ìuSf: X9S's+Ia[Oɰ#bBd $to2ĿܾQT`i$C{RGj%vpv4VVh:|1~uփ,#E$(ZKMP,p0t#ɗu#- CYrRo}uzۍIfYz].DDt./[X$g-$&IT <ia}5t'YYxIIpt0~؛ZS-V"9W.4ZFSrhIjӔ7~흎8rSȳϴmsk678e:+C!wKRP[x6ؼ׾'ڂٻj3^8. mH4X%¨9A)kFNːl;XfoR6Ǔ{)sY5m@X j/'P?mUكѿ*OKMKAhڿDA>ܱ̾=Սpn/eSY[=Op /ߩVވ>@i#62mĬYK^**aq q2BăŧXkQQtC&@pbݘwPabDj 6P7JN*"ȋmb uZȘ_6bc>+[gA$D6a14 ,!fl02st׈|8Tz0~§FWZ3  |mS)rIIaqԲ[;ym'Y$:0fW}Lf_@R.,rd`j>i[xg֘rQNn8I&YV£' j V 05*&鎭 G- =g<EI7dW[ËNrF7a'7df/Gi9,dDqoxXiX/Ăxc[p -54C W(aȯ"TS-n)Юkg)mGqI|8 UQOq55u7ަ:X=kPO MTs?&!pnxVХsB^j-ҨwkwP3rD{j~`YݤDs-+oqMI/O(N|R& u ?TjKlM,mڬc <+)L@7@zeݭ,/?_OlO'fA~Vw{ o7VQZ~ig7%>-Ԯs9W(i5eZi ۾*f(l LɁ k99m WP}ϻ?(guۓ}iN+s(u2y}!+?}ƐCk5P'y!,(HIs')#_ `7y͝ ̓?"̝f i9^ L X"+#@jiA PSu&L" œo=v,\q;8U\D۹RpOxX%Gk0vmguXhJ0ISГ T[[?hYL*'ObJAԅI07+ӡi ({Cq,>&Cȩ+1̛/|*.Xtl\ =rweE(_XȻ-P>&|٨Wl< G+lؘ y#pcBO mN2+ٴ{- Ǩ%n(ov_Zvse/*ӛC', -6EwTsLE(7si$M($6mB5o ھ+SreGnO0d܃mcvT R$5*Hv.~+h6I #2YO 9<=XA91(2+-~j[⥹ȈEO-ߺRU 8hҭP/IߡYZR04$u2 S_@eq g\^q?L];G%7b ʉD|KԞ{Ps3 &E .e~d x{3K#S'}Ze'$^rת 5˓5DΤ6] RhI&zkcVa%u$]*=ǻZ #1nBBt%_{bL`U 2İ⊃|;̀ ~cb51m̷y"B Wa\1wF(r7p/E:xXjjqӿ\kDCH%ۤX D3 $G &\%VDVֆ\͡ʠFN^?!Mvc,u?4g5gp +9_ +%<&5&=ƻ9 [0#}kg?nׁLa{9o*!3X%hz#2 uecC;$Zd9X~fL0?D\'Ax"~4 k;ލM`?tpQ0KU[9x0T077 Mu j*8q/e ÍNēǀC,dfҏthgEy4o&9Xbn䄊"CucrDQ诡 ^SʐGڊiۙuh>*ҭ 9p4XK>lcڣLvi-aߨ^;Ю=㊀ r5oeƐjZBTٽkM'G^QNlua6 E5y?!S40Tu{%Uݓ6m,Go7G}3waO~4WGBs 1es̜Ze]@pJY^t(63RCAA^`sG8gθ,勶ìxYva_WHhRU&D [ъOqB z7]FU'2R5 ]s]sNp0C6g0{;DZď:UCjQԨ ]<9WrgQFtu+v]`UT1܌rUV2f?O>DA $R߼K:qDBгƓlcZ+ɯv\cBR0SvlA}X]rXNՆgFHPH*RaBG.u:)\J\/j6)$vX}*wD<̩zn ^jʊu/yR"0p1iV9h]oB7WC904'3GLS`42A]jqC[wu$9[w+fJgQnP-` =Ck\XWYYOuSuoS xXOm-&2-$dBtkDJ(~ h@{SDUX^@vI|xڻũt޻I#c.c:B׵ϲ[G/wq P'ƻh]1޻}{JvgȖHw.b#)Ql<ԕ !>>9:y*PThxxoPv bFnD71KrahgF &VUڃ%`YeK@jdU( " ow:c͢O &F"eU#{aHL{< O"wT@I YԬށ- !S8i$*jnHkj|&.xq0@!UtC$P W  |cy?oRy曽Ƃa)uXJ&>CDԊDhC|,4IڜU sQghDLWו?ܷ*wd+4@xwp!}̦AB _RUr-Jdv+tp#*2̹!fn596r WbBrG2%Ei=hpa fZ+E }.d&nD[2ȱ)J_3c\($ã,O~  灊qb(m6Zި!殍U%ͳ]EujJU_}fNx9U̧-kte E 1'O!})\j~ZynC ҏ~.`7u4ݔ;m?$"ҿ'gvO1\dqw}: ڊ(kjE}c'Zywąؾ|9q8S,숴\Rv8 |\9'Z_E(1&rkno6+`0,ZV?.(8Hʖ s8=Hї%V𯌷һf~"^>uA}KZܖ=.dnc\K JZHb{ua=(дbf&iVy3Jv&\蟏c;OפQs.*! ce=*튙xrw4I@iGLEd0O0Y09.)E},;( a+.aD#k=VntmH{3p6Z8e!}N ?VڞLޖ̻nґ!*]!cgmZfjDu?T6Za}V=6b e[ds\)Te;q3Y}*//$, 7[mpB[顪xbCbx,gKigϠ\eL4DSpLRi7ld%ݢIg{1弉"Y81C;8Ⱦayowg#>s%õ(ENRT%==-½oc֦^XT B$d%u,[ra|! |AZ5l`ZIuSgb-i4ѥRIwH( $f֚"t5~a'O`7sΡzjq\q*J`W{HaH^E{?ܔ@blXP6+^Gڶ^N΄7=/s6s{wdTtYЖR : &K@Wިu"[> zJF!NW8υfjFb *3U.Ϧ@+C7O 㾳յU sH8TN ]gҠfrlMnď]iDkj: 5 RV\q,vU>ཚ ?z_i1Cɧ76Ѵ%G@ 3 0|~r* `îA$kb%Ί5s;,=e aCӼģ!칋zp]vC/=idbe4=ɸgŞEC%K!?ihm7ɪ3uMǤݫ.4e*w>`ʖJ)DvP"~nL /l²(r^f9F(;m*)\75q ;l>ܔ,oNU"]#AF7|ŎFcU\RU&HItBx:%~\@Oj l̯u"֕xοMK?5R$A?0,WmTƀqAQ~ÙE2 kzeq'LڄA\UMI+lN ˭6{3Y=՜Z8<!]6"Y εE<Ťvs~! -W_Kg]GK 5j hom/=J5 83f cg!&OZk)i(~L0F&k^yV6<: #;S$̈́#/QyJU=S ۝@aW-Zp[2X nMTOJh :f1fQt97S <9n`R˳tOo#@aǭGxDs15:%ZfD8)teM(y[G H@_>,{eyKjg$/𶃻A6<]Gy?pZшc9"7.~7ʇ@ ofT^DjZ5e<8v^.檗qP\D<⩘WW Ł>sc]JšF܊>B cF%ƹwNT`W) in [+@gdjwYҘ)e-q=E&l[k]MDF;Dl g\Z ;U~eO2ՌvZYP}tZy=n׀׎B1}G SkV^fWaY)i7^곫S*ZM' 4:UFT luYk}:LHD~< #w}OlXWexgQjД9ncH#ʇk,_| :/V08zMު+Ura<*`èo|%;|6FR0Ldq*ڒcKOs"֭[d!N/<櫆FXc^w/SY?Ո7a4MYuNJ*aoA/=Q>H4$~L;֧!A &v,5vLG?j"] &dgS?qQ]g;jl 3?NiD_l Q2tpV5dPl>h̲UigZ\.գ];U SQyc+Zyw#4W@H'O;t $fK)lK s" W)ݗ>*RtŽRMWMQF̏--6e`OG3nD5+;X^9 Dlm6=ɢ.N]@INy8G8#X3fۈIh؛'ϲ#NÓ!e$Fd?kqEN{A=AٮԂf]8^ęfcg 80yvru60(h >=D\eIQ,m! +?"<0{wQf}'PH}A 6Ws81>Z=}:Rw w5ܬ}.FeW<::˴Z'J̥&jkiSDwaTnw,,23urww]oE]RpaȨ/'0OYז4! O#9MsJ~ %(~:X45(7ݔ4Hg'C#P1E%4'(SA46P76,֐~J_du+ h6nbZ=" ,\{㚳땖Q>f6 x$\WNʚʱISB̷ BU3+$8ӊnxlMn}i4![Dwt "+Tўn܃8AIMIڇ\Mٷ##}.P4:aO\"IRI\b4[#ca~1L(hsN;bs[u <ɐ|xYbQClm{Dft0$N׾V^E\ t7<WH÷%0ϏϦ]S8=ܯwKzA{'O\1dze[ f <ލN,&9c$D8Z&e!kҧ.;R0;G!3"//blk%+|BzDl9{*WL*U~z!gvgJ@[d,~v{\,^`{!U]n dNzfzߏhFA[>ߪΫo5dl'p\_ˎ/|*cRim {*=/WXPO媇L--' ̈'7ْ:ze3DY{D}71) zjb]?s@,_\[ gSqA';}29̤{g ǭ?Eݶɉf{PyA yޏTOIc@@0$Wڪ7Ⱦz Va+7>fN0a/ie/k]rzPQzYQH1Zr!kL2yݻMVwl Sلhz9}?8YCFdY"T :vMM]6pTA bCtQR*CvQ@,YVJFw:윾*Iv>ߖE#UaMҝdPg,izNji'k,fAX{iw¹^Q$X_4Ao3QCm Z@ɠ^ή17Rs\0Ќ*bl6xQ)2)Kf.aCV͗j tƍ[>r K'Y`/VF x9.̦eƔ8cjCd7fטrZ=GS,@Ⱦr⅛sYCoh)!$)ɗ)ƨ٠:wayޫL5(&ЁȞ|la|ŅÞKyq֧@>ah.kG8 4XZveiits஑/ay4ՁN[#=d^}rD ښq"T~c0d{,%"ρ$e4pU Up}$81 unT>50:ft{Rz:jA@1;Zv?`jlʆE{W>^̩iUy%3m'LRtrLn}0"Ĉ{N"=LXI~ԅn} ⩍)pyif |t4hyC-w=M$ff)kj& )s 0Y6Bq@`>ѻ N^rr#[pN[Xڬ׋?$OjC;zUt˃E_0"wy͘؜uݷn[I]>!ElS4hV4œ?UҬb{GꤳFjB ߡ }nA2&,`\Fh]$&+1X~Qܜ 3Ig|& hAJ?0JQJWfɫfRY$cǷ&@qj>V)ηs5>/9Y9(%]}5e} 4w}NMÜ/LdAU*{|l/-t3?Ѽa#.MOOUL|C@%m&TYs2K#SSB/݃+$k>jpc9`⃶x1kAaEaܫ/UkrM> {5U2e{CDg]bo8vSֆ]i[nXQty>L6_)%@x4J9wAazυhҔ`ǤZ@N3ִlδt>@ iNը~)|d>] F{r9o e5rѨ~(H[Ac/x F))K$0 k_9bl[xσ]%~Ѽl84&j a*&r۳BϑfPfx+;p *aXu5|D))PGO^U>!g-ov˚\w?qLqvޕsҧS\6u[8&[f|H~ǖ,yz& vF^s_vI+r52F| ߾ \Yu\GǍyu 1FxZjU1)>H)c}DZޘfD>86Љv/LSOEOE0Ƥ$OA&le4MEK?h:+58k^^}Or2SLnɘ{֜,Hם܁H݃'c)xZNMK9 KCFZGBziKruZ½%:>+ճbLMLGj ATmJkӓ`>u(GbNI7 ! 0ReOnq;e=e"nv ˷XIǶ5jSO_;euLFlj%N#18D~AM}K~ yc&eÜ+uk%n*qYFd ,~y1QkR-O:|\vsFH'іOhJe$BVڋٵ߃ 2\SO`UTY(u پޜ'6mrt ۼoZ*gVKh6%Mz&sd8AE! w8J}H/Z+⶙OO<+E3 Nԇ5^0ױ\xY~B"'$dc+2Bi=u%>(Uoь}Su2[!5Zh0l;S0CMi^U3( =͞fd%sѹ_~|*㘋'u?EjzѦ E|<0!^Z|٥em}hbZjC7aQAlHLI5oT(K0M1eMpw^:t''@f I̲{: ŗyڭd%;| P} K_'"' t#¥ro+jn)ߠ3}vs*w&⍏i R BX[ 1"C \  }߹(o.8j^T:CC dN e0 /av&/M[/eNjǟCGqQ&pk8BD쥗~W"TS/=ZV.CS\[y;r οívC*}LՐx$KQy-[vfmR* Hb[۸H2MS;P7.(Cg,Wh\(G)VRE4{m 麫lKFޯѦ0J: H ,8,钇C"4gmCo**7blRkB{;Ped .覥*EX ?\(mˌ?| 5i;K R^#Lg/ahѵS~ s]FE"f\ +PFENuzt]0 iѤFaf§xu<[C*~Ҫ=ڞ08OUYXϤ>ulmCWyԢ-/yp%C-lc@ƙE0LτYx/Q}am6l]U.,ђAEPq,a/E~Cy𒟝ic-dpB?|eyE)Z4$zq .FΑ4ލ$r2p2b]7F )O邔KcI>W XyiE4[6l~3mmUh!x{хd\BXpQ;*DV=oS!GFys8Ѥ^-Fc;ʏɌڌٛvWɦ? 7yka5h{G!l<>]{2\|J'qm-1HaJM=<>Ύ? pI5 Te"E?mXOb81f1} 8UF\u9ɭdnmnV GZ54Ln:XnBe QnE:?@Md>XqB+@ ժt`& E\;EvI'G^ϿJgedLlvz$Z'T"8&apQ I} k ^YT $V,: tmƒ7?ƴ|;EbPDCWn #燯7DlItq@š9ԋFt[(xΜ@ ;{NªHlk8!®}Q[ Q%Q g 򹾋zPNl)#H3k i))Џhd/WUIz$C=+UgjYXH omcFo|DHZdj4LDx;ӻtLceo.EI7r!'&Nl^#EoX0(6x!FIӏ +#a|l^ˤP*jH|wE@hJ7`FRbq PFeN!n$'D&IyaWt2h0L^b {qN\\,:d8̩XnM(@m&V Y~ܖ}ŴZԅ? g 3''( ict f\%zˋŽSQFvR @JoٜtuHZlБm7=/״Y&9Tg"uQ| !HF:ܠ mj[UUS!׷Ө +aox-.&Nc*O!*tJԞ-2$w<p'@^ h:8'F"mM"3)Z$Md\~JIu(@hyq'-f1 ka.̀H7STTq\Yr][P܍ ks N9\T PeX{P@qsdH-YvqbdC?abJΝa7! !,-fPEv4/z$`qBuSs!!d<ЪfU6}qy5>zI'pR U!Y-DR\y tlتV  7$4Gsg|A#׈(?ԹawRz@UA ;eyU{t}$jR륓=4:&y,sA-H;~& Fv⣃ՠh>u:1*C$7-)xۀ̑J:qREܑ[ڭ DjKy=Qt&h-)D I0a(סH1y}CZ\ݣ@cUSat" ]Al 6  !AHsYnFo"3lm!I}  ./*2,6~[ cs~ch26:Rr Efph `ߎF_ꥊcS9"^{G11y4J]`ԝ#kU:@; :$q H  {~N9b]ʺ:PT-chI GBm^t* ^@iyW10JGWD1YM{h|d! s?=9t}lH(J mW/Y%nb`g}]. Nl:Z0v a!>rLbz/kGf' @NKBrYJa]Bq ~\~secjI e_AÛ]XJe!,3=7fi&E3 h=fc>zUz8nz~)8"ԇ=y:U Eo!0dX(X!#~X$Nky}ӐqQ1QsN!݈NM A ( U ݮʐ+fңnny0ipX_ &24.IQi%p\5hS? kٕJ FE;M7a$Isyvv]9 ;i?u/0ŎKQd|W;lx8Rhz _'Vr]GBZ>ڼU$K<'a,c_-H}j7z{S4F=-O 5fϿ։Ňo%t'˴F 2Hc0lBD!ʱ߭?aEFLJͬ=~IYv5 *b|ahxOpb !4Cqxf?W>4ZSeawk62& k9&-)Ѹ2ggt]v*-j7-ֻE-_nX\L_Cw> QET摽e+c8e__t3y7U~.ݷjb~,0G!,RMߛK4geg9Ծjt~^V=}jc9j#8d wZ=]RCtr`C.UdކomksQ)'ىs8IZ@iȒ$;W*`D{?\R[ TxD33Њ6[\_ q/&Yyo_PduoGm ᇓǍbA1'oy;Z; t6JͷY@с[qQL!IBW0˸rj,Y aΣ}Z8l/9_(,IyZ-^RunN s?Kkvm;lV@ )@P7+HfP VOٞZil>=i1$h(NsowSL׋^;h=7$QmCrОan4PmEw\_N\fC}qW2xA<j9lr96݁2G=0536\,ލOGj7_lBj+.p,KO't1PzVJX÷&Ie>{PŽ*&f5^J4U>Қ4uW'`C%F磻J`H+3]$:K,G }%PHmCFs 76ϯC~g5R3~*|=왱4|tC6 Rk 6:4ҽPEUTiB͝CxJk!|ꆼNwQ&R'HjG vUEoyMsX~]hKbv&a*c% )SN5ngܺE)mIbR+w[U2HEa)Q,Z@UOv%?Q^ n&ף$CV~Fp-^.GȖﴋ,~W!&y痍k4NșľKٔRo0LrV$ك/՟Y9 CCPuQЩ^jZV޾w/+s~Wu+"jչ-n$4'lnZ\a#t/' _T0bKVY?o* ǹ5k.!I(B!zMmdouN/"kR-^]VgM3{YV%'TNNG9DlU"%t?{lZ,Xtړ+~9Z-h"fZB)ʿW`*o{򸐠M a0T?IOr Yh")J߷Z(MYD,A~9WbnY3!n2qbԷ Q]ƢU 7aMP605n(bѿ$]t/iNdAtyIYׂ?;^PC m#r>ᣔYk W3hj,(C aTS93#t3-[^)T`K:hls}ivw( 3=^X9 8K̸jQ G^Peijkq,MA|ԉ:^jpjQUU$U5硎0>v?\=z!KpFvGx;YcbH 0%TIxI1uˊ3?e_bJ?m܇dD &)fs+^L>/A ۣ:*Pό,wsc|:E0рrpjEYwLd尃exIqb#,2-̾z.c⻃5 Z%ܡ3&FIZ"i=6/jte{Xuwg=VaAN$%)X L1r 3I0Ijl͉oYa;Ԅec=+EdHbRp;pbP˘J"/iZf() mj(ȸ8#~Se1Wrh9ʺ"XE5li |NefrL&ůJ"<\XA>a[́ "p !?Rp[:+e$Q'}Lufe1hfEf\hE?A Ul#ш}%ȃ'dς ;Wx=%ֽqܻ}p&;9KXҕX6π6OyAB @+%KЁJ9MbF!|]Cbk=RJzP]!"o] eŞs* ƖN[SUN~b0e:{V5w ˿sikB‹IK^ߔhyveS}>q0KVmO1z6q"C 8<` 6@} J٫hy"X tրDWCQV? ⶸ.+зǮF9 )Ȍ@\@}ToٕBM8Fɽx~2&LݺqBsP*U{X@5wR)VM PEGnqUNY)E-hh˺s嘮_> R'ި7b1<ɚ,~"*i{OjrW$+"Mؕ T/LJ,ڢ*&pg rE> jYP' u$2\.,'-DF|{F&ayP=PA]=7(2d`ɇV>C2lC-` {yЇ2k;( ȝlq-ÅF} <%+22;[,b  #L@b8Ve!cM4w My⸖Zٔm5^ FOsZtc{ чd}l_?Fܢ#bm%k4SjсW?7Ȥqb$57i~$^{:& ヘNS+ab/.C}qB9:ǕӂHjZq`p3̞TxRgrPLpy8R;joxJp̖G+|bFMepʀzb/IAc]L# )',Y`C.^ 숑QhEJC_Ymc<.I 5^e~P5hvzo*lg7r.OfL[fqSQ*F.iH㭦-8U$Qsϡ9?:s[-94}6@J?/@pb“HֿcW7_x3ypxx8AKѽ4oI)4 pu;+k T v֭;޴ Pk&dFOn= 13@&(XNY 7"_؇k.N']6)_18Cb>iօlp^y'F!H2\g)PLZhZ?lvF{ral/m(Z)fU%2p5Pt7[z X `vRURP_'_4`Y??)8} ZK]36Hz * MrIbp/2[ >$ܮh䎹 R"l1Wc M%7à U4׎4A>7U<|]#Bz#vCsVofrډ]D%=UsZWf)PU12\>Q39WjWx'btFxwh[ suSExB:ms<PT{h~;#Km.8ʓIbcZ,2.essVai4eQeCsUaҰ8<=5jc7Î>`=%8OZo4[7&;F%$-AOǬ&XJ]»5/ 3ny_MJ(&EMCC*LDݹIj# }gjuτzA )K,՚*ӛ/@š:T]a5#σcٚbhBNXvnKKjoD)xw|+(8N\/S^35K~K ?/I'(1}K WtzҾB#6-6A `ӾWG' 9Y"Q&Z3&q( v{_ [_aWk4AT-v_өL҄F?(wr=w7UqfQ|nc& $x$f%^t`bT([+A e76z1!-#C [Y&!rx[jEVw3¿nR BC8.f}V{Dܹ' R `jV͐!UM)Gʤfpӆ1-&}MxLdc/_{Ԕ)@y+Zo}>?%|f' "T4Lf%\,drR+EҁpD ՐEtC]A#3XϿҌ\~dߴ8c4Lۜ`#﫛C23!c˼29;9OI6(2hs桤~x6lV#>ӎ!7`۟Zf_B(dx2S4m2{|up&&텯k:+avJؐjrv}mM> Vkm12uQ7j@nrT2`Mx %Q &j-> RЏeٮZLujRta^8.#*Vu` 5}Ipr4/7fp_>[!iȐQJ 4S\dbvQ^ObL2l_1xAkESJ}T6(_W;R#C3)!H',Os?Bp<7>}2!AߤNWnYViWtSG=qxԸ~q5 8gj~tZ6ٕ*/d^SP&4ѕwip59g[j<&2z' ۈ4Ll+J,w9pO@m}4?-KwT'TZIz50Jq5|;BOH=hA?d_ H~0C =dNlNShe" p}w /:IMgw#haXcam>9"1n|l ]ܢ;:qa& pEjoڋKy8o:_jrMU7^ }4Ŋخm&)_<[2g[[cA=v bP(V&([#Nq?. lf*HLuqe<r,2(۱efk!_NԴWekȘ ъ&ˋEx `l2* NOI+8G)ԛnyh"QzQ!}Jt\M)HLȥ<ȧ[2~Hs-w`Gf jK 30b"N?/[A[_?1ƔOۤZáWR52f@ʹhRmćCG!׾e{LڪF4*lS/pHKe"/;fm6߽l- jBAFy݊f+Yq%`-ɸa;mMe?dru%jN{Eg<;H5eN$,Cou&Cawp QQ|X+Cp)@c`|$YŏVдL-Iw>.j&*!q"gMߩhƫ:#JIdZi6ȩ格z{z*  `踍5bNX -@T9 9_+o4aMK,m GUu HB?|]gT$kK)!0"ł$BOakA$$%TT!|ō|@Y ?P{ɞ(m'<~000 \!LH8Txf>F]Cr=;a|?JG87 Tmj]ZZ<" <[!է`g1U DK&ZB +C`0>:P_ϴ /23J7C¸l%ghPYnQ ,ӳy~/VFs!43\*ғ+wpɪ'XfSNJ:uVҭۮMNL\iriuS׾X$^ߺ%)Uu7a T,iSQҞW^bC!~ ;&hYx*?C89`V*l?xsrJRU3a#ě .5 GES?L /ȓQWkyGi]"4yx^]3 F+hjϡ(ΦqCyv}Rn# $os2͔f(5\O!p"W _pjNV1?79'A5EMdȏdA_3M ['.|ڝ厙)J-)fߗ"K~ C]_:M7u-A & ĨY)(OE$_x=^NXq! YgF*/4JI&EO.)S_̚kN^ϙ%Y&T#!5lK;7IdJ:!o2v|?;3Fވ3$甶 YZ