xorg-x11-server-21.1.11-150600.5.20.1<>,i|p9|$۟` *Q;_*ĂR/yE鏩:*2ۻ*|v9cWn{yHa'e*U`UrO8G>h a8XR'f7{ڋ,C/G79LWw ɟ-]pAGaƜ׌NAQ@="\dU$;CC)/jƞ\ԘU+TnBhb1x:Aыc?_QjD|Umrtk7>H@?@d ( *TXdh   @1 1  f1  1  1 }1 111~1pX4(44( 8 9#4:2k>(~@(B( F)QG)h1H*,1I*1X+$Y+Z, [,4 \,1]-P1^/b1c2d3 e3f3l3u3(1v3w= 1x=1y>kz@@@P@T@h@l@p@v@Cxorg-x11-server21.1.11150600.5.20.1XThis package contains the X.Org Server.i|h02-armsrv2BSUSE Linux Enterprise 15SUSE LLC MIThttps://www.suse.com/System/X11/Servers/XF86_4http://xorg.freedesktop.org/linuxaarch64 [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create xkb.conf || : PNAME=displaymanager SUBPNAME=-xorg-x11-server SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # Move SaX2 generated xorg.conf file to xorg.conf.sle11 # # Only in very rare cases a static X configuration is still # required on sle12. And, in some cases the migration from a # static sle11 X configuration to a static sle12 X configuration # is not possible at all, e.g. some video and input drivers # are no longer available on sle12. In short, trying to migrate # will result in more harm than benefit. if [ -f etc/X11/xorg.conf -a ! -f etc/X11/xorg.conf.sle11 ]; then echo "xorg.conf exists and xorg.conf.sle11 does not" if grep -q "SaX generated X11 config file" etc/X11/xorg.conf; then echo "move SaX generated xorg.conf to xorg.conf.sle11" mv etc/X11/xorg.conf etc/X11/xorg.conf.sle11 # remove dangling link (bnc#879360, comment#15) rm -f etc/X11/XF86Config # prevent %postun of NVIDIA/fglrx driver packages from restoring xorg.conf # backup or running sax2 as fallback to create a new xorg.conf (bcn#877315) rm -f etc/X11/xorg.conf.nvidia-post \ etc/X11/xorg.conf.fglrx-post chmod -x usr/sbin/sax2 fi fi /usr/sbin/update-alternatives \ --force --install /usr/lib64/xorg/modules/extensions/libglx.so libglx.so /usr/lib64/xorg/modules/extensions/xorg/xorg-libglx.so 50 exit 0if [ "$1" = 0 ] ; then "/usr/sbin/update-alternatives" --remove libglx.so /usr/lib64/xorg/modules/extensions/xorg/xorg-libglx.so fi( k; P  xh H dcF|#_ a?P)큤AAAAAA큤A큤A큤AAAAA큤AAi{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{i{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.so@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootxorg-x11-server-21.1.11-150600.5.20.1.src.rpmX11_ABI_ANSICX11_ABI_EXTENSIONX11_ABI_HAS_DPMS_GET_CAPABILITIESX11_ABI_VIDEODRVX11_ABI_XINPUTglamorglamor-egllibexa.so()(64bit)libfbdevhw.so()(64bit)libglamoregl.so()(64bit)libglx.so()(64bit)libint10.so()(64bit)libshadow.so()(64bit)libshadowfb.so()(64bit)libvgahw.so()(64bit)libwfb.so()(64bit)xf86-video-astxf86-video-cirrusxf86-video-modesettingxorg-x11-driver-inputxorg-x11-driver-videoxorg-x11-serverxorg-x11-serverxorg-x11-server(aarch-64)xorg-x11-server-glx@@@@@@@@@@@@@@@@@@@@@@@@@@@ @@@@@@@    /bin/sh/bin/sh/usr/bin/perlMesacoreutilsdiffutilsfillupgrepld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libGL.so.1()(64bit)libXau.so.6()(64bit)libXdmcp.so.6()(64bit)libXfont2.so.2()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcrypto.so.3()(64bit)libcrypto.so.3(OPENSSL_3.0.0)(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libdrm.so.2()(64bit)libepoxy.so.0()(64bit)libgbm.so.1()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.17)(64bit)libm.so.6(GLIBC_2.29)(64bit)libm.so.6(GLIBC_2.35)(64bit)libpciaccess.so.0()(64bit)libpixman-1-0libpixman-1.so.0()(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libudev.so.1()(64bit)libudev.so.1(LIBUDEV_183)(64bit)libxcvt.so.0()(64bit)libxshmfence.so.1()(64bit)pkgconfigrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternativesxkbcompxkeyboard-configxorg-x11-server-Xvfb0.243.0.4-14.6.0-14.0-15.2-14.14.3h^hW@hAg`@g@g@f@fe@eȶeȶee@eoe@e@em@e9@d(dc=@cT@cccR@c@c.cEch@ch@cb[cb[cObγbγbγby@bzSbDF@b-b@b@b@a@a@aa@a@a@aaaaay?@a`]`]`:@`9@``P@`}p`u`t6@`?z@_@_@_0@_ts@_s!_q@_l@_a@_X_G@_D@_$^)@^@^^@^W@^%@^@]@]@]@]@]]y@]i]@1@\\O\@\v{\I\A\,[@[@[@[ā@[t[i[\Z[Xf@[P}@[D[:[2*[*A[@Z@ZZԐ@ZJ@Z2@ZZ Z}@ZTZ?Z/Z@Z YY@YY@Yh@Yg`Y_wY[@Y;@Y:Y6@XX @X+X@XpXXwoXN@X,J@XW@W@W@WDB@W9@W/*@W'A@W#LW @W @W @WKWW@V@Vn@V3VVm@VxVVV&@VV@V@VV@VGVVVUVA@V0V0V7@UU@U@UUzUuUn@Ui@U0U:T!TTTԬT[@T[@Tk4T`TN3sndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.combjorn.lie@gmail.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.commgorse@suse.comdmueller@suse.comdmueller@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comtzimmermann@suse.desndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comdmueller@suse.commeissner@suse.comsndirsch@suse.combjorn.lie@gmail.comsndirsch@suse.comdmueller@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comtzimmermann@suse.detzimmermann@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comdmueller@suse.comsndirsch@suse.combjorn.lie@gmail.comismail@i10z.compatrik.jakobsson@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comtobias.klausmann@freenet.desndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.commgorse@suse.combjorn.lie@gmail.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comfcrozat@suse.combjorn.lie@gmail.combjorn.lie@gmail.combjorn.lie@gmail.comsndirsch@suse.combjorn.lie@gmail.comsndirsch@suse.comsndirsch@suse.comtobias.johannes.klausmann@mni.thm.demliska@suse.czjengelh@inai.desndirsch@suse.comsndirsch@suse.comsndirsch@suse.commsrb@suse.comsndirsch@suse.commsrb@suse.comsndirsch@suse.comtobias.johannes.klausmann@mni.thm.demsrb@suse.comtobias.johannes.klausmann@mni.thm.dejdelvare@suse.desndirsch@suse.comtiwai@suse.defcrozat@suse.comsndirsch@suse.commsrb@suse.comsndirsch@suse.commsrb@suse.comtobias.johannes.klausmann@mni.thm.demsrb@suse.commsrb@suse.commsrb@suse.commsrb@suse.comfcrozat@suse.combwiedemann@suse.comsndirsch@suse.commwilck@suse.comtobias.johannes.klausmann@mni.thm.demsrb@suse.comrbrown@suse.commsrb@suse.comtobias.johannes.klausmann@mni.thm.detobias.johannes.klausmann@mni.thm.deilya@ilya.pp.uasndirsch@suse.comsndirsch@suse.commsrb@suse.comsndirsch@suse.comsndirsch@suse.comopensuse@dstoecker.desndirsch@suse.comtobias.johannes.klausmann@mni.thm.detobias.johannes.klausmann@mni.thm.dedenis.kondratenko@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comtobias.johannes.klausmann@mni.thm.defbui@suse.comtobias.johannes.klausmann@mni.thm.dezaitor@opensuse.orgtobias.johannes.klausmann@mni.thm.detobias.johannes.klausmann@mni.thm.demstaudt@suse.comeich@suse.comeich@suse.comeich@suse.comsndirsch@suse.comsndirsch@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comtobias.johannes.klausmann@mni.thm.detobias.johannes.klausmann@mni.thm.deeich@suse.comeich@suse.comtobias.johannes.klausmann@mni.thm.delbsousajr@gmail.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comtobias.johannes.klausmann@mni.thm.deeich@suse.comeich@suse.comfcrozat@suse.comeich@suse.comeich@suse.comeich@suse.comhrvoje.senjan@gmail.comeich@suse.comsndirsch@suse.comsndirsch@suse.comsndirsch@suse.comeich@suse.comtiwai@suse.deeich@suse.comtobias.johannes.klausmann@mni.thm.detobias.johannes.klausmann@mni.thm.demsrb@suse.comantoine.belvire@laposte.netmsrb@suse.comeich@suse.comnormand@linux.vnet.ibm.commsrb@suse.comdimstar@opensuse.orgsndirsch@suse.comtobias.johannes.klausmann@mni.thm.deeich@suse.comtobias.johannes.klausmann@mni.thm.demsrb@suse.comsndirsch@suse.comledest@gmail.comsndirsch@suse.com- bsc1251958_CVE-2025-62229_0001-present-Fix-use-after-free-in-present_create_notifie.patch * Use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - bsc1251959_CVE-2025-62230_0001-xkb-Make-the-RT_XKBCLIENT-resource-private.patch bsc1251959_CVE-2025-62230_0002-xkb-Free-the-XKB-resource-when-freeing-XkbInterest.patch * Use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - bsc1251960_CVE-2025-62231_0001-xkb-Prevent-overflow-in-XkbSetCompatMap.patch * Value overflow in Xkb extension XkbSetCompatMap() (CVE-2025-62231, bsc#1251960)- U_CVE-2025-49176-os-Check-for-integer-overflow-on-BigRequest-length.patch * additional fix for CVE-2025-49176- - U_CVE-2025-49175-render-Avoid-0-or-less-animated-cursors.patch * Out-of-bounds access in X Rendering extension (Animated cursors) (CVE-2025-49175, bsc#1244082) - U_CVE-2025-49176-os-Do-not-overflow-the-integer-size-with-BigRequest.patch * Integer overflow in Big Requests Extension (CVE-2025-49176, bsc#1244084) - U_CVE-2025-49177-xfixes-Check-request-length-for-SetClientDisconnectM.patch * Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (CVE-2025-49177, bsc#1244085) - U_CVE-2025-49178-os-Account-for-bytes-to-ignore-when-sharing-input-bu.patch * Unprocessed client request via bytes to ignore (CVE-2025-49178, bsc#1244087) - U_CVE-2025-49179-record-Check-for-overflow-in-RecordSanityCheckRegist.patch * Integer overflow in X Record extension (CVE-2025-49179, bsc#1244089) - U_CVE-2025-49180-randr-Check-for-overflow-in-RRChangeProviderProperty.patch U_CVE-2025-49180-xfree86-Check-for-RandR-provider-functions.patch * Integer overflow in RandR extension (RRChangeProviderProperty) (CVE-2025-49180, bsc#1244090)- U_CVE-2022-49737-dix-Hold-input-lock-for-AttachDevice.patch * Xorg may crash when client applications use easystroke for mouse gestures (CVE-2022-49737, bsc#1239750)- U_CVE-2025-26594-0001-Cursor-Refuse-to-free-the-root-cursor.patch U_CVE-2025-26594-0002-dix-keep-a-ref-to-the-rootCursor.patch * Use-after-free of the root cursor (CVE-2025-26594, bsc#1237427) - U_CVE-2025-26595-0001-xkb-Fix-buffer-overflow-in-XkbVModMaskText.patch * Buffer overflow in XkbVModMaskText() (CVE-2025-26595, bsc#1237429) - U_CVE-2025-26596-0001-xkb-Fix-computation-of-XkbSizeKeySyms.patch * Heap overflow in XkbWriteKeySyms() (CVE-2025-26596, bsc#1237430) - U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch * Buffer overflow in XkbChangeTypesOfKey() (CVE-2025-26597, bsc#1237431) - U_CVE-2025-26598-0001-Xi-Fix-barrier-device-search.patch * Out-of-bounds write in CreatePointerBarrierClient() (CVE-2025-26598, bsc#1237432) - U_CVE-2025-26599-0001-composite-Handle-failure-to-redirect-in-compRedirect.patch U_CVE-2025-26599-0002-composite-initialize-border-clip-even-when-pixmap-al.patch * Use of uninitialized pointer in compRedirectWindow() (CVE-2025-26599, bsc#1237433) - U_CVE-2025-26600-0001-dix-Dequeue-pending-events-on-frozen-device-on-remov.patch * Use-after-free in PlayReleasedEvents() (CVE-2025-26600, bsc#1237434) - U_CVE-2025-26601-0001-sync-Do-not-let-sync-objects-uninitialized.patch U_CVE-2025-26601-0002-sync-Check-values-before-applying-changes.patch U_CVE-2025-26601-0003-sync-Do-not-fail-SyncAddTriggerToSyncObject.patch U_CVE-2025-26601-0004-sync-Apply-changes-last-in-SyncChangeAlarmAttributes.patch * Use-after-free in SyncInitTrigger() (CVE-2025-26601, bsc#1237435)- U_xkb-Fix-buffer-overflow-in-_XkbSetCompatMap.patch * Heap-based buffer overflow privilege escalation in _XkbSetCompatMap (CVE-2024-9632, bsc#1231565)- U_render-Avoid-possible-double-free-in-ProcRenderAddGl.patch * fixes regression for security fix for CVE-2024-31083 (bsc#1222312, boo#1222442, gitlab xserver issue #1659)- U_CVE-2024-31080-Xi-ProcXIGetSelectedEvents-needs-to-use-unswapped-le.patch * Xi: ProcXIGetSelectedEvents needs to use unswapped length (CVE-2024-31080, bsc#1222309) - U_CVE-2024-31081-Xi-ProcXIPassiveGrabDevice-needs-to-use-unswapped-le.patch * Xi: ProcXIPassiveGrabDevice needs to use unswapped length to send reply (CVE-2024-31081, bsc#1222310) - U_CVE-2024-31082-Xquartz-ProcAppleDRICreatePixmap-needs-to-use-unswap.patch * Xquartz: ProcAppleDRICreatePixmap needs to use unswapped length to send reply (CVE-2024-31082, bsc#1222311) - U_CVE-2024-31083-render-fix-refcounting-of-glyphs-during-ProcRenderAd.patch * render: fix refcounting of glyphs during ProcRenderAddGlyphs (CVE-2024-31083, bsc#1222312)- Release 21.1.11 also covers fixes for security issue CVE-2022-46340 and bug numbers bsc#1205874, bsc#1217765- Release 21.1.11 covers fixes for the following bug numbers, which are not mentioned in this changelog before: bsc#1218845, bsc#1218846, bsc#1216261, bsc#1216133, bsc#1216135- Release 21.1.11 supersedes the following patches still used with xorg-x11-server 21.1.4 on sle15-sp5/Leap 15.5 and not mentioned in this changelog as superseded before: * U_Xext-fix-invalid-event-type-mask-in-XTestSwapFakeInp.patch * U_bsc1216133-mi-reset-the-PointerWindows-reference-on-screen-swit.patch * U_bsc1216135-Xi-randr-fix-handling-of-PropModeAppend-Prepend.patch * U_bsc1216261-0001-mi-fix-CloseScreen-initialization-order.patch * U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch * U_bsc1216261-0003-dix-always-initialize-pScreen-CloseScreen.patch * bsc1218582-0001-dix-allocate-enough-space-for-logical-button-maps.patch * bsc1218583-0001-dix-Allocate-sufficient-xEvents-for-our-DeviceStateN.patch * bsc1218583-0002-dix-fix-DeviceStateNotify-event-calculation.patch * bsc1218583-0003-Xi-when-creating-a-new-ButtonClass-set-the-number-of.patch * bsc1218584-0001-Xi-flush-hierarchy-events-after-adding-removing-mast.patch * bsc1218585-0001-Xi-do-not-keep-linked-list-pointer-during-recursion.patch * bsc1218585-0002-dix-when-disabling-a-master-float-disabled-slaved-de.patch * U_bsc1218845-glx-Call-XACE-hooks-on-the-GLX-buffer.patch * U_bsc1218846-ephyr-xwayland-Use-the-proper-private-key-for-cursor.patch- xserver sources of this release fixes segfault in Xvnc (bsc#1219311)- no longer (build-)require obsolete Xprint/XprintUtil- Update to version 21.1.11 * This release contains fixes for the issues reported in today's security advisory: https://lists.x.org/archives/xorg/2024-January/061525.html * CVE-2023-6816 (bsc#1218582) * CVE-2024-0229 (bsc#1218583) * CVE-2024-21885 (bsc#1218584) * CVE-2024-21886 (bsc#1218585) * CVE-2024-0408 * CVE-2024-0409 - supersedes the following patches * U_xephyr-Don-t-check-for-SeatId-anymore.patch * U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch * U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patch- u_miCloseScreen_check_for_null_pScreen_dev_private.patch * miCloseScreen check for null pScreen dev private (bsc#1218176); another regression introduced by U_bsc1216261-0002-fb-properly-wrap-unwrap-CloseScreen.patch- n_xserver-optimus-autoconfig-hack.patch u_randr-Do-not-crash-if-slave-screen-does-not-have-pro.patch u_xfree86-activate-GPU-screens-on-autobind.patch * check dixPrivateKeyRegistered(rrPrivKey) before calling rrGetScrPriv() to avoid xserver crash when Xinerama is enabled (boo#1218240) - ------------------------------------------------------------------- U_bsc1217765-Xi-allocate-enough-XkbActions-for-our-buttons.patch * Out-of-bounds memory write in XKB button actions (CVE-2023-6377, ZDI-CAN-22412, ZDI-CAN-22413, bsc#1217765) - U_bsc1217766-randr-avoid-integer-truncation-in-length-check-of-Pr.patch * Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478, ZDI-CAN-22561, bsc#1217766)- Update to version 21.1.9 * This release contains fixes for CVE-2023-5367, CVE-2023-5380 and CVE-2023-5574 as reported in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-October/003430.html - adjusted u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch- Update to version 21.1.8 (CVE-2023-1393): * This release contains the fix for CVE-2023-1393 * composite: Fix use-after-free of the COW * xkbUtils: use existing symbol names instead of deleted deprecated ones - Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch: Fixed upstream - Switch back to tarball release, drop source service, add keyring and sig files.- U_xserver-composite-Fix-use-after-free-of-the-COW.patch * overlay window use-after-free (CVE-2023-1393, ZDI-CAN-19866, bsc#1209543)- Update to version xorg-server-21.1.7: * This release contains the fix for CVE-2023-0494 in today's security advisory: https://lists.x.org/archives/xorg-announce/2023-February/003320.html It also fixes a second possible OOB access during EnqueueEvent and a crasher caused by ResourceClientBits not correctly honouring the MaxClients value in the configuration file. - supersedes U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch, U_xorg-server-oob-read-enqueue-event.patch- U_Xi-fix-potential-use-after-free-in-DeepCopyPointerCl.patch * DeepCopyPointerClasses use-after-free (CVE-2023-0494, ZDI-CAN-19596, bsc#1207783)- rename u_xorg-server-oob-read-enqueue-event.patch to U_xorg-server-oob-read-enqueue-event.patch since it's already upstream- Add u_xorg-server-oob-read-enqueue-event.patch: fix an out-of-bounds read in EnqueueEvent.- Update to version xorg-server-21.1.6: * xserver 21.1.6 * Xext: fix invalid event type mask in XTestSwapFakeInput * xkb: fix some possible memleaks in XkbGetKbdByName * xkb: proof GetCountedString against request length attacks * xquartz: Fix some formatting * XQuartz: stub: Call LSOpenApplication instead of fork()/exec() - drop the following upstream patches: U_xkb-proof-GetCountedString-against-request-length-at.patch U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch- Update to version xorg-server-21.1.5: * xkb: reset the radio_groups pointer to NULL after freeing it * Xi: avoid integer truncation in length check of ProcXIChangeProperty * Xi: return an error from XI property changes if verification failed * Xext: free the screen saver resource when replacing it * Xext: free the XvRTVideoNotify when turning off from the same client * Xi: disallow passive grabs with a detail > 255 * Xtest: disallow GenericEvents in XTestSwapFakeInput * meson: Don't build COMPOSITE for XQuartz * xquartz: Move default applications list outside of the main executable * xquartz: Remove unused macro (X11LIBDIR) - drop the following upstream patches: U_0007-xkb-reset-the-radio_groups-pointer-to-NULL-after-fre.patch U_0002-Xi-return-an-error-from-XI-property-changes-if-verif.patch U_0003-Xi-avoid-integer-truncation-in-length-check-of-ProcX.patch U_0004-Xi-disallow-passive-grabs-with-a-detail-255.patch U_0005-Xext-free-the-screen-saver-resource-when-replacing-i.patch U_0006-Xext-free-the-XvRTVideoNotify-when-turning-off-from-.patch U_0001-Xtest-disallow-GenericEvents-in-XTestSwapFakeInput.patch- U_0007-xkb-reset-the-radio_groups-pointer-to-NULL-after-fre.patch * XkbGetKbdByName use-after-free (ZDI-CAN-19530, CVE-2022-4283, bsc#1206017)- U_0001-Xtest-disallow-GenericEvents-in-XTestSwapFakeInput.patch * Server XTestSwapFakeInput stack overflow (ZDI-CAN 19265, CVE-2022-46340, bsc#1205874) - U_0002-Xi-return-an-error-from-XI-property-changes-if-verif.patch * Xi: return an error from XI property changes if verification failed (no ZDI-CAN id, no CVE id, bsc#1205875) - U_0003-Xi-avoid-integer-truncation-in-length-check-of-ProcX.patch * Server XIChangeProperty out-of-bounds access (ZDI-CAN 19405, CVE-2022-46344, bsc#1205876) - U_0004-Xi-disallow-passive-grabs-with-a-detail-255.patch * Server XIPassiveUngrabDevice out-of-bounds access (ZDI-CAN 19381, CVE-2022-46341, bsc#1205877) - U_0005-Xext-free-the-screen-saver-resource-when-replacing-i.patch * Server ScreenSaverSetAttributes use-after-free (ZDI-CAN 19404, CVE-2022-46343, bsc#1205878) - U_0006-Xext-free-the-XvRTVideoNotify-when-turning-off-from-.patch * Server XvdiSelectVideoNotify use-after-free (ZDI-CAN 19400, CVE-2022-46342, bsc#1205879)- Release 21.1 covers bugfixes and JIRA tickets for bsc#1176015,bsc#1182510,bsc#1182884,bsc#1184072,bsc#1184543,bsc#1184906,bsc#1186092,bsc#1188970,bsc#1194159,bsc#1196577,bsc#1197046,bsc#1197269,bsc#1200076,fdo#574,jsc#SLE-18653,jsc#SLE-8470- Release 21.1 supersedes the following patches still used with xorg-x11-server 1.20.3 on sle15-sp4/Leap 15.4: * U_0002-DRI2-Add-another-Coffeelake-PCI-ID.patch * U_0002-Fix-crash-on-XkbSetMap.patch * U_0003-Fix-crash-on-XkbSetMap.patch * U_0003-dri2-Sync-i965_pci_ids.h-from-mesa.patch * U_0004-dri2-Set-fallback-driver-names-for-Intel-and-AMD-chi.patch * U_0005-dri2-Sync-i965_pci_ids.h-from-mesa-iris_pci_ids.h.patch * U_build-glx-Lower-gl-version-to-work-with-libglvnd.patch * U_glamor-Make-pixmap-exportable-from-gbm_bo_from_pixma.patch * U_hw_do-not-include-sys-io-with-glibc.patch * U_meson-Fix-another-reference-to-gl-9.2.0.patch * U_modesetting-Fix-broken-manpage-in-autoconf-build.patch * U_present-wnmd-Fix-use-after-free-on-CRTC-removal.patch * U_present-wnmd-Relax-assertion-on-CRTC-on-abort_vblank.patch * U_xfree86-Change-displays-array-to-pointers-array-to-f.patch * U_xfree86-Fix-NULL-pointer-dereference-crash.patch * U_xkbsetdeviceinfo.patch * u_sync-pci-ids-with-Mesa-21.2.4.patch * u_xf86-Accept-devices-with-the-simpledrm-driver.patch * u_xichangehierarchy-CVE-2020-14346.patch * u_xkb-CVE-2020-14345.patch * u_xkb-CVE-2020-14360.patch- removed N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch * meanwhile cirrus and mgag200 Kernel drivers have been rewritten multiple times and no longer have (broken) hardware cursor- u_xf86-Accept-devices-with-the-kernels-ofdrm-driver.patch * Add workaround to support ofdrm- U_xkb-proof-GetCountedString-against-request-length-at.patch * security update for CVE-2022-3550 (bsc#1204412) - U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch * security update for CVE-2022-3551 (bsc#1204416)- rename u_sync-pci-ids-with-Mesa-22.0.0.patch to u_sync-pci-ids-with-Mesa.patch (currently synced with Mesa 22.1.3)- u_sync-pci-ids-with-Mesa-22.0.0.patch * synced with Mesa 22.1.3; just adding a PCI ID for vmware was needed- Update to version 21.1 * This release fixes 2 recently reported security vulnerabilities in xkb, several regressions since 1.20.x and a number of miscellaneous bugs. - supersedes the following security patches * U_boo1194181-001-xkb-swap-XkbSetDeviceInfo-and-XkbSetDeviceInfoCheck.patch * U_boo1194179-001-xkb-rename-xkb_h-to-xkb-procs_h.patch * U_boo1194179-002-xkb-add-request-length-validation-for-XkbSetGeometry.patch - supersedes U_Fix-build-with-gcc-12.patch- U_boo1194181-001-xkb-swap-XkbSetDeviceInfo-and-XkbSetDeviceInfoCheck.patch * Out-Of-Bounds Access in CheckSetDeviceIndicators() (CVE-2022-2320, ZDI-CAN-16070, bsc#1194181) - U_boo1194179-001-xkb-rename-xkb_h-to-xkb-procs_h.patch, U_boo1194179-002-xkb-add-request-length-validation-for-XkbSetGeometry.patch * Out-Of-Bounds Access in _CheckSetSections() (CVE-2022-2319, ZDI-CAN-16062, bsc#1194179)- add n_raise_default_clients.patch- disable -z now linking for now, as there are some missing symbol issues. (boo#1197994)- u_sync-pci-ids-with-Mesa-22.0.0.patch * sync pci ids with Mesa 22.0.0- U_Fix-build-with-gcc-12.patch * render: Fix build with gcc 12 (glfdo#xorg/xserver!853).- U_xephyr-Don-t-check-for-SeatId-anymore.patch * fix mouse/keyboard focus in Xephyr (boo#1194658, github issue#1289)- fix bashisms in pre_checkins.sh (bsc#1195391)- u_xfree86-activate-GPU-screens-on-autobind.patch * Part of the original patch by Dave Airlie has landed 078277e4d92f05a90c4715d61b89b9d9d38d68ea, this contains the remainder of what was in SUSE before Xorg 21.1. (github issue#1254, boo#1192751)- Update to version 21.1.3 * This release fixes several regressions since 1.20.x and 21.1.1 + glx/dri: Filter out fbconfigs that don't have a supported pixmap format + xf86/logind: Fix compilation error when built without logind/platform bus + xf86/logind: fix missing call to vtenter if the platform device is not paused + Convert more funcs to use InternalEvent. + os: Try to discover the current seat with the XDG_SEAT var first- Update to version 21.1.2 * This release fixes 4 recently reported security vulnerabilities and several regressions. * In particular, the real physical dimensions are no longer reported by the X server anymore as it was deemed to be a too disruptive change. X server will continue to report DPI as 96. - supersedes U_hw-xfree86-Propagate-physical-dimensions-from-DRM-co.patch - supersedes U_rendercompositeglyphs.patch - supersedes U_xfixes-Fix-out-of-bounds-access-in-ProcXFixesCreateP.patch - supersedes U_Xext-Fix-out-of-bounds-access-in-SProcScreenSaverSus.patch - supersedes U_record-Fix-out-of-bounds-access-in-SwapCreateRegiste.patch- U_xfixes-Fix-out-of-bounds-access-in-ProcXFixesCreateP.patch * CVE-2021-4009/ZDI-CAN-14950 (bsc#1190487) The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request length leading to out of bounds memory write. - U_Xext-Fix-out-of-bounds-access-in-SProcScreenSaverSus.patch * CVE-2021-4010/ZDI-CAN-14951 (bsc#1190488) The handler for the Suspend request of the Screen Saver extension does not properly validate the request length leading to out of bounds memory write. - U_record-Fix-out-of-bounds-access-in-SwapCreateRegiste.patch * CVE-2021-4011/ZDI-CAN-14952 (bsc#1190489) The handlers for the RecordCreateContext and RecordRegisterClients requests of the Record extension do not properly validate the request length leading to out of bounds memory write.- U_rendercompositeglyphs.patch * X.Org Server SProcRenderCompositeGlyphs Out-Of-Bounds Access Privilege Escalation Vulnerability [CVE-2021-4008, ZDI-CAN-14192] (boo#1193030)- u_Support-configuration-files-under-run-X11-xorg.conf..patch - u_Add-udev-scripts-for-configuration-of-platform-devic.patch - u_Add-udev-rule-for-HyperV-devices.patch * Remove udev-based configuration - u_Revert-xf86-Accept-devices-with-the-simpledrm-driver.patch * Restore simpledrm workaround - u_xf86-Accept-devices-with-the-hyperv_drm-driver.patch * Add workaround to support hyperv_drm- u_pci-primary-Fix-up-primary-PCI-device-detection-for-the-platfrom-bus.patch * Fix SEGFAULT when parsing bus IDs of NULL (boo#1193250) - u_Support-configuration-files-under-run-X11-xorg.conf..patch * Support configuration files under /run. Required for generating configuration files via udev. (boo#1193250) - u_Add-udev-scripts-for-configuration-of-platform-devic.patch * Generate configuration files for platform devices (boo#1193250) - u_Revert-xf86-Accept-devices-with-the-simpledrm-driver.patch * Code has been obsoleted by udev patchset (boo#1193250) - u_Add-udev-rule-for-HyperV-devices.patch * Same as for platform devices, but on HyperV (boo#1193250)- enable build of Xorg on s390x (jira#SLE-18632)- U_hw-xfree86-Propagate-physical-dimensions-from-DRM-co.patch * reverse apply this one to go back to fixed 96 dpi (gitlab fdo/xserver issue#1241) - N_fix-dpi-values.diff * back to version for xserver < 21.1.0- Update to version 21.1.1 * s/__/@/ in inputtestdrv manpage * Make xf86CompatOutput() return NULL when there are no privates * Makefile.am: Add missing meson build files to release tarball- Update to version 21.1.0 * The meson support is now fully mature. While autotools support will still be kept for this release series, it will be dropped afterwards. * Glamor support for Xvfb. * Variable refresh rate support in the modesetting driver. * XInput 2.4 support which adds touchpad gestures. * DMX DDX has been removed. * X server now correctly reports display DPI in more cases. This may affect rendering of client applications that have their own workarounds for hi-DPI screens. * A large number of small features and various bug fixes. - updated xorg-server-provides - supersedes patches * U_Fix-segfault-on-probing-a-non-PCI-platform-device-on.patch * U_dix-window-Use-ConfigureWindow-instead-of-MoveWindow.patch * U_glamor_egl-Reject-OpenGL-2.1-early-on.patch * u_render-Cast-color-masks-to-unsigned-long-before-shifting-them.patch - refreshed patches * N_fix-dpi-values.diff * N_zap_warning_xserver.diff * u_modesetting-Fix-dirty-updates-for-sw-rotation.patch * u_randr-Do-not-crash-if-slave-screen-does-not-have-pro.patch * u_vesa-Add-VBEDPMSGetCapabilities-VBEDPMSGet.patch - disabled n_xserver-optimus-autoconfig-hack.patch, which I believe is superseded by: commit 078277e4d92f05a90c4715d61b89b9d9d38d68ea Author: Dave Airlie Date: Fri Aug 17 09:49:24 2012 +1000 xf86: autobind GPUs to the screen - added pkgconfig(libxcvt) - cvt binary moved to libxcvt0 package- Update to version 1.20.13 * bugfix release - supersedes U_present-get_crtc-should-not-return-crtc-when-its-scr.patch, U_modesetting-unflip-not-possible-when-glamor-is-not-s.patch- U_modesetting-unflip-not-possible-when-glamor-is-not-s.patch * this should fixes crashes of xfce when running under qemu (boo#1188559)- add U_present-get_crtc-should-not-return-crtc-when-its-scr.patch (bsc#1188559) https://gitlab.freedesktop.org/xorg/xserver/-/issues/1195- Update to version 1.20.12 * bugfix release- Drop U_xwayland-Allow-passing-a-fd.patch: We build xwayland in a separate package now, so no need to keep this patch here.- Fix typo in %post: xbb.conf -> xkb.conf- u_modesetting-Fix-dirty-updates-for-sw-rotation.patch * Fixes broken rotation support for DRM drivers without hardware rotation support or direct vram access (bsc#1182955)- disable build of Xwayland, which is now being built in separate xwayland package with more recent sources (boo#1182677)- Update to version 1.20.11 * bugfix release - supersedes U_Fix-XChangeFeedbackControl-request-underflow.patch, U_xkb-Fix-heap-overflow-caused-by-optimized-away-min.patch- U_Fix-XChangeFeedbackControl-request-underflow.patch * Fix XChangeFeedbackControl() request underflow (CVE-2021-3472, ZDI-CAN-1259, bsc#1180128)- reenabled LTO (boo#1133294) * u_no-lto-for-tests.patch disables LTO in test/ subtree, since "-Wl,-wrap" is not supported by LTO * added "%global _lto_cflags %{?_lto_cflags} -ffat-lto-objects"- Update to version 1.20.10: * Check SetMap request length carefully. * Fix XkbSetDeviceInfo() and SetDeviceIndicators() heap overflows * present/wnmd: Translate update region to screen space * modesetting: keep going if a modeset fails on EnterVT * modesetting: check the kms state on EnterVT * configure: Build hashtable for Xres and glvnd * xwayland: Create an xwl_window for toplevel only * xwayland: non-rootless requires the wl_shell protocol * glamor: Update pixmap's devKind when making it exportable * os: Fix instruction pointer written in xorg_backtrace * present/wnmd: Execute copies at target_msc-1 already * present/wnmd: Move up present_wnmd_queue_vblank * present: Add present_vblank::exec_msc field * present: Move flip target_msc adjustment out of present_vblank_create * xwayland: Remove pending stream reference when freeing * xwayland: use drmGetNodeTypeFromFd for checking if a node is a render one * xwayland: Do not discard frame callbacks on allow commits * present/wnmd: Remove dead check from present_wnmd_check_flip * xwayland: Check window pixmap in xwl_present_check_flip2 * present/wnmd: Can't use page flipping for windows clipped by children * xfree86: Take second reference for SavedCursor in xf86CursorSetCursor * glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling * include: Increase the number of max. input devices to 256. * Revert "linux: Make platform device probe less fragile" * Revert "linux: Fix platform device PCI detection for complex bus topologies" * Revert "linux: Fix platform device probe for DT-based PCI" - Remove included pachtes * U_xfree86_take_second_ref_for_xcursor.patch * U_Revert-linux-Fix-platform-device-probe-for-DT-based-.patch * U_Revert-linux-Fix-platform-device-PCI-detection-for-c.patch * U_Revert-linux-Make-platform-device-probe-less-fragile.patch * U_Fix-XkbSetDeviceInfo-and-SetDeviceIndicators-heap-ov.patch * U_Check-SetMap-request-length-carefully.patch- remove unneeded python2 script 'fdi2iclass.py' from xorg-x11-server-sources subpackage (boo#1179591)- U_Check-SetMap-request-length-carefully.patch * XkbSetMap Out-Of-Bounds Access: Insufficient checks on the lengths of the XkbSetMap request can lead to out of bounds memory accesses in the X server. (ZDI-CAN 11572, CVE-2020-14360, bsc#1174908) - U_Fix-XkbSetDeviceInfo-and-SetDeviceIndicators-heap-ov.patch * XkbSetDeviceInfo Heap-based Buffer Overflow: Insufficient checks on input of the XkbSetDeviceInfo request can lead to a buffer overflow on the head in the X server. (ZDI-CAN 11389, CVE-2020-25712, bsc#1177596)- n_xorg-wrapper-anybody.patch * replace default config /etc/X11/Xwrapper, which allows anybody to use the wrapper, by a patch for the code, i.e. [#] rootonly, console, anybody allowed_users=anybody [#] yes, no, auto needs_root_rights=auto is now the default without any Xwrapper config (needs_root_rights=auto was already the default before)- u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch * replaced by improved version written by Matthias Gerstner of our security team + simplified the option parsing code a bit + changed the "ignore forbidden argument" logic into an "abort on forbidden argument" logic. This is safer and avoids surprises on the user's end that could occur if the desired command line arguments aren't effective but the Xorg server is still started. + tried to adjust to the coding style present in the file (mostly the function name) + added some logic to apply the option filtering only to non-root users when Xorg is actually started as root. This should allow for full flexibility if root calls the wrapper or if the Xorg server only runs with user privileges.- U_Fix-segfault-on-probing-a-non-PCI-platform-device-on.patch, U_Revert-linux-Fix-platform-device-PCI-detection-for-c.patch, U_Revert-linux-Fix-platform-device-probe-for-DT-based-.patch, U_Revert-linux-Make-platform-device-probe-less-fragile.patch * fix Xserver startup on Raspberry Pi 3 (boo#1176203)- n_xorg-wrapper-rename-Xorg.patch * moved Xorg to Xorg.bin and Xorg.sh to Xorg (boo#1175867) - change default for needs_root_rights to auto in Xwrapper.config (boo#1175867)- reenabled SUID wrapper for TW (boo#1175867) - u_xorg-wrapper-Xserver-Options-Whitelist-Filter.patch * Xserver option whitelist filter (boo#1175867)-Add U_xfree86_take_second_ref_for_xcursor.patch: fix use-after-free when switching VTs.- Update to version 1.20.9: * Fix XRecordRegisterClients() Integer underflow * Fix XkbSelectEvents() integer underflow * Fix XIChangeHierarchy() integer underflow * Correct bounds checking in XkbSetNames() * linux: Fix platform device probe for DT-based PCI * linux: Fix platform device PCI detection for complex bus topologies * linux: Make platform device probe less fragile * fix for ZDI-11426 * xfree86: add drm modes on non-GTF panels * present: Check valid region in window mode flips * xwayland: Handle NULL xwl_seat in xwl_seat_can_emulate_pointer_warp * xwayland: Propagate damage x1/y1 coordinates in xwl_present_flip * doc: Update URLs in Xserver-DTrace.xml * xwayland: Use a fixed DPI value for core protocol * xwayland: only use linux-dmabuf if format/modifier was advertised * hw/xfree86: Avoid cursor use after free * Update URL's in man pages * xwayland: Disable the MIT-SCREEN-SAVER extension when rootless * xwayland: Hold a pixmap reference in struct xwl_present_event * randr: Check rrPrivKey in RRHasScanoutPixmap() * modesetting: Fix front_bo leak at drmmode_xf86crtc_resize on XRandR rotation * xwayland: Store xwl_tablet_pad in its own private key * xwayland: Initialise values in xwlVidModeGetGamma() * xwayland: Fix crashes when there is no pointer * xwayland: Clear private on device removal * xwayland: Free all remaining events in xwl_present_cleanup * xwayland: Always use xwl_present_free_event for freeing Present events * present/wnmd: Free flip_queue entries in present_wnmd_clear_window_flip * present/wnmd: Keep pixmap pointer in present_wnmd_clear_window_flip * xwayland: import DMA-BUFs with GBM_BO_USE_RENDERING only * xwayland: Fix infinite loop at startup * modesetting: Disable pageflipping when using a swcursor * dix: do not send focus event when grab actually does not change - Drop patches fixed upstream: * U_0001-Correct-bounds-checking-in-XkbSetNames.patch * U_0002-Fix-XIChangeHierarchy-integer-underflow.patch * U_0003-Fix-XkbSelectEvents-integer-underflow.patch * U_0004-Fix-XRecordRegisterClients-Integer-underflow.patch * U_FixForZDI-11426.patch- U_0001-Correct-bounds-checking-in-XkbSetNames.patch * Correct bounds checking in XkbSetNames() [CVE-2020-14345 / ZDI 11428, boo#1174635] - U_0002-Fix-XIChangeHierarchy-integer-underflow.patch * Fix XIChangeHierarchy() integer underflow [CVE-2020-14346 / ZDI-CAN-11429, boo#1174638] - U_0003-Fix-XkbSelectEvents-integer-underflow.patch * Fix XkbSelectEvents() integer underflow [CVE-2020-14361 / ZDI-CAN 11573, boo#1174910] - U_0004-Fix-XRecordRegisterClients-Integer-underflow.patch * Fix XRecordRegisterClients() Integer underflow [CVE-2020-14362 / ZDI-CAN-11574, boo#1174913]- U_FixForZDI-11426.patch * Leak of uninitialized heap memory form the X server to clients on pixmap allocation (ZDI-CAN-11426, CVE-2020-14347, bsc#1174633)- move xorg_pci_ids dir from /etc/X11 to /usr/share/X11 and xorg-x11-server.macros from /etc/rpm to /usr/lib/rpm/macros.d; no longer package /etc/X11/xorg.conf.d (boo#1173056)- U_glamor_egl-Reject-OpenGL-2.1-early-on.patch * GLAMOR: no longer bail out for OpenGL drivers < 2.1 (boo#1172321)- provide/obsoletes cirrus and ast usermode driver also on openSUSE (jsc#SLE-12127)- Update to version 1.20.8+0: * Revert "dri2: Don't make reference to noClientException" * dix: Check for NULL spriteInfo in GetPairedDevice * os: Ignore dying client in ResetCurrentRequest * modesetting: remove unnecessary error message, fix zaphod leases * Fix building with `-fno-common` * xwayland: clear pixmaps after creation in rootless mode * glamor: Fix a compiler warning since the recent OOM fixes. * Restrict 1x1 pixmap filling optimization to GXcopy * Add xf86OSInputThreadInit to stub os-support as well * Fix old-style definition warning for xf86OSInputThreadInit() * xwayland/glamor-gbm: Handle DRM_FORMAT_MOD_INVALID gracefully * configure: Define GLAMOR_HAS_EGL_QUERY_DRIVER when available * modesetting: Disable atomic support by default * modesetting: Explicitly #include "mi.h" * xfree86/modes: Bail from xf86RotateRedisplay if pScreen->root is NULL * xwayland: Split up xwl_screen_post_damage into two phases * xwayland: Call glamor_block_handler from xwl_screen_post_damage * xwayland: Add xwl_window_create_frame_callback helper * xwayland: Use single frame callback for Present flips and normal updates * xwayland: Use frame callbacks for Present vblank events * xwayland: Delete all frame_callback_list nodes in xwl_unrealize_window * glamor: Propagate FBO allocation failure for picture to texture upload * glamor: Error out on out-of-memory when allocating PBO for FBO access * glamor: Propagate glamor_prepare_access failures in copy helpers * glamor: Fallback to system memory for RW PBO buffer allocation - supersedes u_fno-common.patch- specfile: reenabled XFree86-VidModeExtension (boo#1164020)- u_fno-common.patch * fix build with gcc's -fno-common option (boo#1160423)- Update to version 1.20.7+0: * xserver 1.20.7 * ospoll: Fix Solaris ports implementation to build on Solaris 11.4 * os-support/solaris: Set IOPL for input thread too * Add xf86OSInputThreadInit call from common layer into os-support layer * Add ddxInputThread call from os layer into ddx layer * os-support/solaris: Drop ExtendedEnabled global variable * glamor: Only use dual blending with GLSL >= 1.30 * modesetting: Check whether RandR was initialized before calling rrGetScrPriv * Xi: return AlreadyGrabbed for key grabs > 255 * xwayland: Do flush GPU work in xwl_present_flush * modesetting: Clear new screen pixmap storage on RandR resize * xfree86/modes: Call xf86RotateRedisplay from xf86CrtcRotate * modesetting: Call glamor_finish from drmmode_crtc_set_mode * modesetting: Use EGL_MESA_query_driver to select DRI driver if possible * glamor: Add a function to get the driver name via EGL_MESA_query_driver- Build XWayland also on s390.- Update to version 1.20.6+0: * xfree86: Test presence of isastream() * present/wnmd: Relax assertion on CRTC on abort_vblank() * os: Don't crash in AttendClient if the client is gone * dix: Call SourceValidate before GetImage * mi: Add a default no-op miSourceValidate * compiler.h: Do not include sys/io.h on ARM with glibc * xfree86: Call ScreenInit for protocol screens before GPU screens * modesetting: - Implement ms_covering_randr_crtc() for ms_present_get_crtc() - Fix ms_covering_crtc() segfault with non-xf86Crtc slave- Update to version 1.20.5+24: * Fix crash on XkbSetMap - Drop unneeded obsinfo file and tweak _service.- Update to version 1.20.5+22: * miext/sync: - Make struct _SyncObject::initialized fully ABI compatible - Fix needless ABI change * xf86: Disable unused crtc functions when a lease is revoked * xwayland: - Handle the case of windows being realized before redirection - Refactor surface creation into a separate function - Separate DamagePtr into separate window data - Do not free a NULL GBM bo - Expand the RANDR screen size limits - Update screen pixmap on output resize - Reset scheduled frames after hiding tablet cursor - Check status in GBM pixmap creation - Avoid a crash on pointer enter with a grab * GLX: - Fix previous context validation in xorgGlxMakeCurrent - Set GlxServerExports::{major,minor}Version - Add a function to change a clients vendor list - Use the sending client for looking up XID's - Add a per-client vendor mapping * xsync: Add resource inside of SyncCreate, export SyncCreate * dri2: Sync i965_pci_ids.h from mesa * Xi: Use current device active grab to deliver touch events if any * Revert "present/scmd: Check that the flip and screen pixmap pitches match" * glamor: Make pixmap exportable from `gbm_bo_from_pixmap()` - Drop patches fixed upstream: * U_xwayland-Separate-DamagePtr-into-separate-window-data.patch * 0001-xsync-Add-resource-inside-of-SyncCreate-export-SyncC.patch * 0002-GLX-Add-a-per-client-vendor-mapping.patch * 0003-GLX-Use-the-sending-client-for-looking-up-XID-s.patch * 0004-GLX-Add-a-function-to-change-a-clients-vendor-list.patch * 0005-GLX-Set-GlxServerExports-major-minor-Version.patch - Switch to gitcheckout via source service, use the stable released branch but set explicit commit used in _service.- reintroduce Xvfb subpackage (boo#1151457)- Add U_xwayland-Separate-DamagePtr-into-separate-window-data.patch and U_xwayland-Allow-passing-a-fd.patch: Needed for gnome 3.34 new and experimental xwayland on demand feature. - Rebase patches with quilt.- added patches required for NVIDIA's PRIME render offload support, which is available since release 435.xx: 0001-xsync-Add-resource-inside-of-SyncCreate-export-SyncC.patch, 0002-GLX-Add-a-per-client-vendor-mapping.patch, 0003-GLX-Use-the-sending-client-for-looking-up-XID-s.patch, 0004-GLX-Add-a-function-to-change-a-clients-vendor-list.patch, 0005-GLX-Set-GlxServerExports-major-minor-Version.patch- move xorg.conf.d snippets from /etc/X11/xorg.conf.d to /usr/share/X11/xorg.conf.d (boo#1139692)- Update to version 1.20.5: Minor bugfix release to fix some input, Xwayland, glamor, and Present issues. Thanks to all who contributed fixes and testing.- Disable LTO (boo#1133294).- Add systemd-rpm-macros BuildRequire for %tmpfiles_*.- xorg-server 1.20.4 * A variety of bugfixes across the board, but primarily in Xwayland. Thanks to all who contributed with testing and fixes!- get rid of meta packages still requiring/recommending obsolete drivers packages (boo#1121525)- provide/obsolete no longer existing xf86-video-ast, xf86-video-cirrus on sle15 (bsc#1120282)- u_xfree86-Do-not-claim-pci-slots-if-fb-slot-is-already.patch * X server does not support mixing fbdev with other drivers, so claiming pci slots when a fb slot is already claimed only leads to quiting with fatal error. (bsc#1119431)- xorg-server 1.20.3 (see changelog below) superseded the following patch we used in sle15 before (bsc#1112020, CVE-2018-14665): - U_Disable-logfile-and-modulepath-when-running-with-ele.patch- U_dix-window-Use-ConfigureWindow-instead-of-MoveWindow.patch * Fix abort triggered by some uses of screensaver. (bsc#1114822)- Update to version 1.20.3 * Disable -logfile and -modulepath when running with elevated privileges (bsc#1112020) * LogFilePrep: add a comment to the unsafe format string. * xfree86: fix readlink call- Update to version 1.20.2: Lots of bugfixes all over the map especially for modesetting, glamor and xwayland!- Update n_xserver-optimus-autoconfig-hack.patch to v5. * Fixes provider auto-configuration with nvidia proprietary driver. (bsc#1103816)- Update to version 1.20.1: This bugfix release fixes several issues in RANDR, Xwayland, glamor, the modesetting driver, and elsewhere. - Packaging changes: + Adapt patch N_Install-Avoid-failure-on-wrapper-installation.patch to work with the new version + Remove patch U_Xext-shm-Refuse-to-work-for-remote-clients.patch + Remove patch U_modesetting-use-drmmode_bo_import-for-rotate_fb.patch + Remove patch u_modesetting-Fix-cirrus-24bpp-breakage.patch + Remove patch U_exa-use-picturematchformat.patch- U_exa-use-picturematchformat.patch * Fix breakage of Xfce (bsc#1102979)- fixed build on s390(x)- u_modesetting-Fix-cirrus-24bpp-breakage.patch * Fix breakage of cirrus 24bpp support on modesetting driver (bsc#1101699)- Remove /var/lib/X11 and its symlink, it is no longer needed and doesn't work with transaction-updates (FATE#325524). - Move README.compiled to another location and use tmpfiles to copy it at runtime.- U_modesetting-use-drmmode_bo_import-for-rotate_fb.patch * fixes rotation in modesetting driver (regression with xorg-server 1.20.0, fdo#106715) * might also fix boo#1099812 ...- U_xkb-Fix-heap-overflow-caused-by-optimized-away-min.patch * Fix heap overflow caused by unexpected optimization, which was possible because of relying on undefined behavior. (boo#1099113)- U_Xext-shm-Refuse-to-work-for-remote-clients.patch * Avoid access to System V shared memory segment on the X server side for clients forwarded via SSH. Also prevent them from hanging while waiting for the reply from the ShmCreateSegment request. (boo#1097227)- Remove n_add-dummy-xf86DisableRandR.patch * After upgrade to 1.20.0 the API officially no longer includes xf86DisableRandR, so there is no need to add it back.- Update to version 1.20.0: New features: + RANDR 1.6, which enables leasing RANDR resources to a client for its exclusive use (e.g. head mounted displays) + Depth 30 support in glamor and the modesetting driver + A meson-based build system, parallel to autotools + Pageflipping support for PRIME output sinks + OutputClass device matching for xorg.conf + Input grab and tablet support in Xwayland - Remove upstream patches: + u_xorg-x11-server-reproducible.patch Solved slightly different + u_os-inputthread-Force-unlock-when-stopping-thread.patch + u_xfree86-add-default-modes-for-16-9-and-16-10.patch + U_xwayland-Don-t-process-cursor-warping-without-an-xwl.patch + U_xwayland-Give-up-cleanly-on-Wayland-socket-errors.patch + U_xwayland-avoid-race-condition-on-new-keymap.patch + U_xwayland-remove-dirty-window-unconditionally-on-unre.patch + U_0001-animcur-Use-fixed-size-screen-private.patch + U_0002-animcur-Return-the-next-interval-directly-from-the-t.patch + U_0003-animcur-Run-the-timer-from-the-device-not-the-screen.patch + U_0004-animcur-Fix-transitions-between-animated-cursors.patch + U_xfree86-Remove-broken-RANDR-disabling-logic-v4.patch + U_glx-Do-not-call-into-Composite-if-it-is-disabled.patch - Adapt patches to work with the new release: + N_zap_warning_xserver.diff + N_fix_fglrx_screendepth_issue.patch + n_xserver-optimus-autoconfig-hack.patch + u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch + u_xorg-wrapper-build-Build-position-independent-code.patch- U_glx-Do-not-call-into-Composite-if-it-is-disabled.patch * Fixes crash when GLX is enabled and Composite disabled. (bnc#1079607)- n_add-dummy-xf86DisableRandR.patch * Add dummy xf86DisableRandR to fix linking with drivers that still call it. See explanation inside the patch. (bnc#1089601)- U_xfree86-Remove-broken-RANDR-disabling-logic-v4.patch * Fix crash on initialization when fbdev and modesetting are used together. (bnc#1068961) - u_randr-Do-not-crash-if-slave-screen-does-not-have-pro.patch * Fix crash when using randr when fbdev and modesetting are used together. (bnc#1068961)- Update and re-enable n_xserver-optimus-autoconfig-hack.patch. (bnc#1084411)- U_xwayland-Don-t-process-cursor-warping-without-an-xwl.patch, U_xwayland-Give-up-cleanly-on-Wayland-socket-errors.patch, U_xwayland-avoid-race-condition-on-new-keymap.patch, U_xwayland-remove-dirty-window-unconditionally-on-unre.patch: * Various crash and bug fixes in XWayland server (bgo#791383, bgo#790502).- Add u_xorg-x11-server-reproducible.patch to make build reproducible (boo#1047218)- U_0001-animcur-Use-fixed-size-screen-private.patch, U_0002-animcur-Return-the-next-interval-directly-from-the-t.patch, U_0003-animcur-Run-the-timer-from-the-device-not-the-screen.patch, U_0004-animcur-Fix-transitions-between-animated-cursors.patch * There is a bug in version 1.19 of the X.org X server that can cause an infinite recursion in the animated cursor code, which has been fixed by these patches (boo#1080312) - supersedes u_cursors-animation.patch (boo#1020061)- Added u_xfree86-add-default-modes-for-16-9-and-16-10.patch (boo#1075249) Improve user experience for users with 16:9 or 16:10 screens- Update to version 1.19.6: Another collection of fixes from master. There will likely be at east one more 1.19.x release in 2018.- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel. * Those dependencies are what xorg-x11-server really needs. Mesa-devel is too general and is a bottleneck in distribution build. (bnc#1071297)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- u_os-inputthread-Force-unlock-when-stopping-thread.patch * Prevent dead lock if terminating while on inactive VT. (bnc#1062977)- Update to version 1.19.5: One regression fix since 1.19.4, and fixes for CVE-2017-12176 through CVE-2017-12187.- Update to version 1.19.4: A collection of stability fixes from the development branch, including two minor CVEs (CVE-2017-13721, CVE-2017-13723). - Remove upstream patches: + U_Xi-Do-not-try-to-swap-GenericEvent.patch + U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch + U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch + U_dix-Disallow-GenericEvent-in-SendEvent-request.patch - Adapt patches to work with the new release: + u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch- u_cursors-animation.patch fix cursors animation (boo#1020061)- disable Xwayland for s390x again; it was wrong to enable it; there is no Wayland on s390x and will most likely never exist, since there is no gfx card on such systems and no gfx emulation either (bsc#1047173)- u_Use-better-fallbacks-to-generate-cookies-if-arc4rand.patch If arc4random_buf() is not available for generating cookies: * use getentropy(), if available (which was only recently added to glibc) * use getrandom() via syscall(), if available (there was no glibc wrapper for this syscall for a long time) * if all else fails, directly read from /dev/urandom as before, but employ O_CLOEXEC, do an OsAbort() in case the random data couldn't be read to avoid unsecure situations. Don't know if that's too hard a measure but it shouldn't actually occur except on maximum number of FDs reached (bsc#1025084)- U_Xi-Do-not-try-to-swap-GenericEvent.patch, U_Xi-Verify-all-events-in-ProcXSendExtensionEvent.patch, U_Xi-Zero-target-buffer-in-SProcXSendExtensionEvent.patch, U_dix-Disallow-GenericEvent-in-SendEvent-request.patch * Fix security issues in event handling. (bnc#1035283, CVE-2017-10971, CVE-2017-10972)- enable Xwayland also for s390x (bsc#1047173)- includes everything needed for additional sle issue entries: CVE-2017-2624, bnc#1025029, bnc#1025084, bnc#1025035- update build requirements- modesetting.ids: no longer hardcode Intel's Skylake, Broxton, and Kabylake IDs to modesetting driver; xf86-video-intel is no longer installed by default on these, so it will fallback to modesetting driver anyway; still you now can easily switch back to intel driver by installing xf86-video-intel package (boo#1042873)- Update to version 1.19.3: A couple more minor fixes, most notably a revert of a page-flipping change that regressed some drivers. - Remove upstreamd patches: + u_busfault_sigaction-Only-initialize-pointer-when-matched.patch- Update to version 1.19.2: A collection of stability fixes here across glamor, Xwayland, input, and Prime support. Also a security fix for CVE-2017-2624, a timing attack which can brute-force MIT-MAGIC-COOKIE authentication. - Remove upstream patches: + U_xfree86-Take-the-input-lock-for-xf86RecolorCursor.patch + U_xfree86-Take-the-input-lock-for-xf86ScreenCheckHWCursor.patch + U_xfree86-Take-the-input-lock-for-xf86TransparentCursor.patch- U_xfree86-Take-the-input-lock-for-xf86ScreenCheckHWCursor.patch * Add the missing input_lock() around the call into the driver's UseHWCursor() callback (bnc #1023845). - U_xfree86-Take-the-input-lock-for-xf86TransparentCursor.patch * The new input lock is missing for the xf86TransparentCursor() entry point (bnc #1023845).- U_xfree86-Take-the-input-lock-for-xf86RecolorCursor.patch * fixes random crashes in X in multihead mode if one of the monitors is vertically oriented (bnc #1023845)- N_driver-autoconfig.diff: No longer try to load "amdgpu" DDX by default for all GPUs with ATI vendor ID; this is now handled instead by an "OutputClass" section via kernel driver match, which has been added as config file to xf86-video-amdgpu driver package (bnc#1023385)- N_driver-autoconfig.diff: FGLRX does not support new x-server. This change fixes bad behavior(with empty config) when radeon ddx loads with amdgpu kernel module on SI and CIK cards, and x-server cannot start. Radeon ddx with radeon kernel module loads without any problem.- Update to version 1.19.1: First stable 1.19 release, including a few regression fixes.- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd) Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which are obsolete.- Update to final 1.19.0- Exchange xorg-x11-fonts-core Requires for Recommends. The corefonts and cursors are not strickly required as long as one have a substitute such as Adwaita installed.- Update to version 1.18.99.901: - Remove upstream pachtes: + U_glamor-Remove-the-FBO-cache.patch + U_kdrive-fix-up-NewInputDeviceRequest-implementation.patch + U_kdrive-set-evdev-driver-for-input-devices-automatica.patch + U_ephyr-don-t-load-ephyr-input-driver-if-seat-option-i.patch + U_kdrive-don-t-let-evdev-driver-overwrite-existing-dev.patch + U_ephyr-ignore-Xorg-multiseat-command-line-options.patch + U_ephyr-enable-option-sw-cursor-by-default-in-multi-se.patch + U_kdrive-introduce-input-hot-plugging-support-for-udev.patch + U_kdrive-add-options-to-set-default-XKB-properties.patch + U_config-udev-distinguish-between-real-keyboards-and-o.patch - Disable u_os-connections-Check-for-stale-FDs.patch (not applicable anymore) - Adapt patches to work with the new release: + n_xserver-optimus-autoconfig-hack.patch (disabled for now as it causes problems) - Remove X.org stack version prefix. We are already atleast at verion 7.7. Plus we are updating individual components anyway. So the stack version is misleading.- Update to version 1.18.4: Another pile of backports from the devel branch, primarily in glamor, xwayland, and the modesetting driver. - Remove included patches: + u_x86emu-include-order.patch + U_modesetting-set-driverPrivate-to-NULL-after-closing-fd.patch - Update patches to reflect upstream changes: + U_glamor-Remove-the-FBO-cache.patch- U_glamor-Remove-the-FBO-cache.patch Fixes (bsc#983743) by not keeping >1 GB of VRAM busy.- U_modesetting-set-driverPrivate-to-NULL-after-closing-fd.patch: modesetting: Avoid crash in FreeRec() by NULLing a pointer which may still be used (boo#981268).- Replace N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch by N_Disable-HW-Cursor-for-cirrus-and-mgag200-kernel-modules.patch Only disable HW cursor for cirrus and mgag200. This should fix a regression introduced by using modesetting for Intel gen9+ (boo#980124).- modesetting.ids: Add file for PCI IDs of ASICs which the modesetting rather than the native driver should be used for. This includes all Intel Gen9+ hardware (boo#978954).- removed u_exa-only-draw-valid-trapezoids.patch; no longer needed since pixman 0.32.0- removed no longer needed patch u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch, see https://lists.x.org/archives/xorg-devel/2016-April/049493.html for upstream discussion; obsoleted by upstream patch https://cgit.freedesktop.org/xorg/xserver/commit/?id=4962c8c08842d9d3ca66d254b1ce4cacc4fb3756, which is already in xorg-server 1.18.3- Add permission verification for SUID wrapper - Disable SUID wrapper per default until reviewed- n_Install-Avoid-failure-on-wrapper-installation.patch: rename to: N_Install-Avoid-failure-on-wrapper-installation.patch - u_xorg-wrapper-Drop-supplemental-group-IDs.patch: Drop supplementary group privileges. - u_xorg-wrapper-build-Build-position-independent-code.patch: Build position independent.- n_Install-Avoid-failure-on-wrapper-installation.patch: Fix up build for wrapper. - Place SUID wrapper into a separate package: xorg-x11-server-wrapper- Set configure option --enable-suid-wrapper for TW: This way, the SUID wrapper is built which allows to run the Xserver as root even though the the DM instance runs as user. This allows to support drivers which require direct HW access.- Update to version 1.18.3: A few fixes relative to 1.18.2, including one fairly important performance fix to the Present extension. - Remove U_present-Only-requeue-for-next-MSC-after-flip-failure.patch The patch is included in this release.- Add patch U_present-Only-requeue-for-next-MSC-after-flip-failure.patch Fix a hang while using the present extension Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=94515 https://bugs.freedesktop.org/show_bug.cgi?id=94596- Add automake, autoconf, libtool, c_compiler, pkgconfig(xorg-macros), pkgconfig(libudev), pkgconfig(libevdev), pkgconfig(mtdev) to Requires: of the SDK. This simplifies the build of Xserver modules.- Add support for a driver specific PCI IDs files supplementing what's in xf86VideoPtrToDriverList(). PCI ID lists may be held in /etc/X11/xorg_pci_ids (boo#972126).- Update version to 1.18.2: A big pile of updates in this one. Highlights include: * glamor is updated to use OpenGL core profiles if available, which should improve memory usage and performance on modern hardware, and got some other performance improvements for rpi and other GLES platforms * DRI2, DRI3, and Present all received correctness fixes for hangs, crashes, and other weirdness * Xwayland server has been updated to support the Xv and the xf86vidmode extensions for better compatibility, and fixed some bugs with output hotplug and pointer updates * Xwin saw improvements to window and clipboard management, and a few new keyboard layouts - Remove upstreamed patches: + U_kdrive-evdev-update-keyboard-LEDs-22302.patch- Backport upstream patches for Xephyr input hot-plugging / single-GPU multi-seat support: * U_kdrive-fix-up-NewInputDeviceRequest-implementation.patch * U_kdrive-set-evdev-driver-for-input-devices-automatica.patch * U_ephyr-don-t-load-ephyr-input-driver-if-seat-option-i.patch * U_kdrive-don-t-let-evdev-driver-overwrite-existing-dev.patch * U_ephyr-ignore-Xorg-multiseat-command-line-options.patch * U_ephyr-enable-option-sw-cursor-by-default-in-multi-se.patch * U_kdrive-introduce-input-hot-plugging-support-for-udev.patch * U_kdrive-add-options-to-set-default-XKB-properties.patch * U_kdrive-evdev-update-keyboard-LEDs-22302.patch * U_config-udev-distinguish-between-real-keyboards-and-o.patch- u_os-connections-Check-for-stale-FDs.patch Ignore file descriptor if socket or devices dies. This prevents the Xserver to loop at 100% when dbus dies (boo#954433).- Add 50-extensions.conf Disable the DGA extension by default (boo#947695).- Replaced u_confine_to_shape.diff by u_01-Improved-ConfineToShape.patch and u_02-DIX-ConfineTo-Don-t-bother-about-the-bounding-box-when-grabbing-a-shaped-window.patch.- u_pci-primary-Fix-up-primary-PCI-device-detection-for-the-platfrom-bus.patch Fix up primary device detection for the platform bus to fix the Xserver on older iMacs (boo#835975).- Update to version 1.18.1: First release in the 1.18 stable branch. Major themes are bugfixes in glamor, the modesetting driver, and the Present extension. Xwayland users may want to apply the following pair of patches in addition to this release: https://patchwork.freedesktop.org/patch/72945/raw/ https://patchwork.freedesktop.org/patch/72951/raw/ which combined fix an input issue when hotplugging monitors. Both are likely to be included in a future release unless testing discovers further problems. - Remove upstreamed patches: + ux_xserver_xvfb-randr.patch + U_systemd-logind-do-not-rely-on-directed-signals.patch + U_kdrive-UnregisterFd-Fix-off-by-one.patch + U_modesetting-should-not-reference-gbm-when-it-s-not-d.patch- u_Panning-Set-panning-state-in-xf86RandR12ScreenSetSize.patch Fix panning when configured in xorg.conf* (boo#771521).- Handle source-file-list in build not prep - N_xorg-x11-server-rpmmacros.patch: Delete: Process xorg-x11-server.macros in install- U_modesetting-should-not-reference-gbm-when-it-s-not-d.patch: fix build when gbm is not defined.- u_busfault_sigaction-Only-initialize-pointer-when-matched.patch Only initialize pointer when matched (boo#961439). - u_kdrive-UnregisterFd-Fix-off-by-one.patch -> U_kdrive-UnregisterFd-Fix-off-by-one.patch- Add test for defined macro %build_xwayland This can be used to enable the build of Xwayland and the package xorg-x11-server-wayland using a macro in projconf (boo#960487).- Split out Xwayland: * Build a package xorg-x11-server-wayland * Limit build to Factory (boo#960487).- Enable XWayland on Leap also (boo#960487)- u_kdrive-UnregisterFd-Fix-off-by-one.patch * Copy open file table correctly by avoiding an off-by-one error (boo#867483).- Update to version 1.18.0 - refreshed N_zap_warning_xserver.diff, N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch - supersedes u_fbdevhw.diff, U_linux-Add-linux_parse_vt_settings-and-linux_get_keep.patch, U_linux-Add-a-may_fail-paramter-to-linux_parse_vt_sett.patch, U_systemd-logind-Only-use-systemd-logind-integration-t.patch- Update to version 1.17.4: Minor brown-bag release. The important fix here is Martin's clientsWritable change which fixes a crash when built against xproto 7.0.28. - supersedes u_0001-os-make-sure-the-clientsWritable-fd_set-is-initializ.patch- Update to version 1.17.3: Various bugfixes across the board.  The most visible changes include fixing GLX extension setup under Xwayland and other non-Xorg servers (enabling core contexts in more scenarios), and various stability fixes to glamor and the Present extension. - supersededs the following patches: * u_randr_allow_rrselectinput_for_providerchange_and_resourcechange_events.patch * u_CloseConsole-Don-t-report-FatalError-when-shutting-down.patch - removed evdev xorg.conf.d snippet since it's meanwhile shipped with evdev driver itself (since version 2.10.0)- u_vesa-Add-VBEDPMSGetCapabilities-VBEDPMSGet.patch Add VBEDPMSGetCapabilities() and VBEDPMSGet() functions (bsc#947356, boo#947493).- Backport a few upstream fixes for systemd/VT handling (boo#939838): U_linux-Add-linux_parse_vt_settings-and-linux_get_keep.patch U_linux-Add-a-may_fail-paramter-to-linux_parse_vt_sett.patch U_systemd-logind-Only-use-systemd-logind-integration-t.patch U_systemd-logind-do-not-rely-on-directed-signals.patch- Improve conditional enablement of XWayland.- Add patch u_0001-os-make-sure-the-clientsWritable-fd_set-is-initializ.patch Prevent segmentation faults with more than 256 clients (introduced by xproto 7.0.28 increasing the max client count 256 -> 512) Fdo Bug: https://bugs.freedesktop.org/show_bug.cgi?id=91316- Update to version 1.17.2: Pick up a pile of fixes from master. Notable highlights: + Fix for CVE-2015-3164 in Xwayland + Fix int10 setup for vesa + Fix regression in server-interpreted auth + Fix fb setup on big-endian CPUs + Build fix for for gcc5 - Dropped patches: + Patch110: u_connection-avoid-crash-when-CloseWellKnownConnections-gets-called-twice.patch + Patch113: u_symbols-Fix-sdksyms.sh-to-cope-with-gcc5.patch + Patch116: U_os-XDMCP-options-like-query-etc-should-imply-listen.patch + Patch118: U_int10-Fix-error-check-for-pci_device_map_legacy.patch + Patch119: U_xwayland-enable-access-control-on-open-socket.patch + Patch120: U_os-support-new-implicit-local-user-access-mode.patch + Patch121: U_xwayland-default-to-local-user-if-no-xauth-file-given.patch + Patch2000: U_systemd-logind-filter-out-non-signal-messages-from.patch + Patch2001: U_systemd-logind-dont-second-guess-D-Bus-default-tim.patch - Changed patches to work with the new version: + Patch114: u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch- U_os-support-new-implicit-local-user-access-mode.patch, U_xwayland-default-to-local-user-if-no-xauth-file-given.patch, U_xwayland-enable-access-control-on-open-socket.patch * Prevent unauthorized local access. (bnc#934102, CVE-2015-3164)- Fix GNOME X Session for some hybrid graphics (rh#1209347): + add U_systemd-logind-filter-out-non-signal-messages-from.patch + add U_systemd-logind-dont-second-guess-D-Bus-default-tim.patch- Fix build of s390/s390x (bnc#933503)- U_int10-Fix-error-check-for-pci_device_map_legacy.patch * int10: Fix error check for pci_device_map_legacy pci_device_map_legacy returns 0 on success (bsc#932319).- Add xorg-x11-server-byte-order.patch to correctly set X_BYTE_ORDER when compiling tigervnc on ppc64 architecture. Related to bnc#926201- U_os-XDMCP-options-like-query-etc-should-imply-listen.patch * Enable listening on tcp when using -query. (bnc#924914)- Enable systemd-logind integration support: + Add pkgconfig(libsystemd-logind) and pkgconfig(dbus-1) BuildRequires. + Pass --enable-systemd-logind to configure.- u_ad-hoc-fix-for-mmap-s-truncated-offset-parameter-on-.patch * ad hoc fix for mmap's truncated offset parameter on 32bit (bnc#917385) - N_Force-swcursor-for-KMS-drivers-without-hw-cursor-sup.patch * hwcursor still considered broken in cirrus KMS ((bnc#864141, bnc#866152)- Update to version 1.17.1: Fixes for CVE 2015-0255. + xkb: Don't swap XkbSetGeometry data in the input buffer + xkb: Check strings length against request size- u_symbols-Fix-sdksyms.sh-to-cope-with-gcc5.patch Fix sdksyms.sh to work with gcc5 (bnc#916580).- Update to version 1.17.0: + Continued work to strip out stale code and clean up the server. Thousands of lines of unnecessary code have disappeared yet again. + The modesetting driver has been merged into the server code base, simplifying ongoing maintenance by coupling it to the X server ABI/API release schedule. This now includes DRI2 support (so that GLX works correctly) along with Glamor support (which handles DRI3). + Lots of Glamor improvements, including a rewrite of the core protocol rendering functions. - Remove upstream patches: + Patch130: U_BellProc-Send-bell-event-on-core-protocol-bell-when-requested.patch + Patch131: U_fb-Fix-invalid-bpp-for-24bit-depth-window.patch + Patch200: U_kdrive_extend_screen_option_syntax.patch + Patch201: U_ephyr_enable_screen_window_placement.patch + Patch202: U_ephyr_add_output_option_support.patch- Add xorg-x11-server-source package that contains patched xserver sources used to build xorg-x11-Xvnc.- Update to version 1.16.2 - Fix present_pixmap when using present_notify_msc - Fix present_notify to return right away when querying current or past msc.Xext/shm: Detach SHM segment after Pixmap is released - xkb: ignore floating slave devices when updating from master (#81885) - fb: Fix invalid bpp for 24bit depth window - supersedes U_fb-Fix-invalid-bpp-for-24bit-depth-window.patch- fix bashism in post script- XServer looks for dri.pc during configure. dri.pc is currently provided by a Mesa devel package, which is pulled in by other requirements, but it might be better to explicitly require dri.pc./bin/sh/bin/shglamorglamorglamor-eglglamor-eglxf86-video-astxf86-video-cirrusxf86-video-modesettingxf86-video-modesettingxorg-x11-driver-inputxorg-x11-driver-videoxorg-x11-serverxorg-x11-server-glxh02-armsrv2 1761639424  !"#$%*+,-./0123450.410.025.224.421.1.1121.1.1121.1.117.6_17.6_121.1.11-150600.5.20.17.6_21.1.1121.1.11-150600.5.20.121.1.117.6_21.1.1121.1.117.6_21.1.1121.1.117.6_21.1.117.6_17.6_17.6_21.1.11  libglx.soXXorggtfxorg-backtracexkb.confxorgmodulesdriversmodesetting_drv.soextensionslibglx.soxorgxorg-libglx.soinputinputtest_drv.solibexa.solibfbdevhw.solibglamoregl.solibint10.solibshadow.solibshadowfb.solibvgahw.solibwfb.soprotocol.txtxorg.conf.d10-quirks.conf50-extensions.confxorg_pci_idsmodesetting.idsfactoryvarlibxkbcompiledREADME.compiledsysconfig.displaymanager-xorg-x11-serverXorg.1.gzXserver.1.gzXvfb.1.gzgtf.1.gzexa.4.gzfbdevhw.4.gzinputtestdrv.4.gzmodesetting.4.gzxorg.conf.5.gzxorg.conf.d.5.gzxkbcompiled/etc/alternatives//usr/bin//usr/lib/tmpfiles.d//usr/lib64//usr/lib64/xorg//usr/lib64/xorg/modules//usr/lib64/xorg/modules/drivers//usr/lib64/xorg/modules/extensions//usr/lib64/xorg/modules/extensions/xorg//usr/lib64/xorg/modules/input//usr/share/X11//usr/share/X11/xorg.conf.d//usr/share/X11/xorg_pci_ids//usr/share//usr/share/factory//usr/share/factory/var//usr/share/factory/var/lib//usr/share/factory/var/lib/xkb//usr/share/factory/var/lib/xkb/compiled//usr/share/fillup-templates//usr/share/man/man1//usr/share/man/man4//usr/share/man/man5//var/lib//var/lib/xkb/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:41314/SUSE_SLE-15-SP6_Update/fdf4876f833792df2f8d31dd2685cf80-xorg-x11-server.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux cannot open `/home/abuild/rpmbuild/BUILDROOT/xorg-x11-server-21.1.11-150600.5.20.1.aarch64/etc/alternatives/libglx.so' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=2f7985edcdf4b3c02762d61a3fb327d01b904498, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=68deb4e945b106d2d79829ccf99770f5b3d13ab3, strippedPerl script text executableFORTRAN program, ASCII textdirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c38e55536361b827f902f89144dea2e78b8c8d0e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=621b3c7784d6bb2c075440993ba211640e45dfd8, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=0ccc3ba187bf492f9ed38eba974f43ecf653d6c6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a0081b6d74747c7c5fad3a6683bef19614986c59, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=efd9374e52d22a95c7d91599bf873c79bc184133, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bc4ba5fc7bae87bdc4e72fe0d8d385379396df7d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=08770278e705cc8287832118640939ad8bae6f3d, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=59a64f93b6c529767e53db7ed13983ed45d4f95f, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=74e7f8fd850dda2f241b251fbc7a8f56cd020b0a, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5f63019d48ae046ca5dfcb2c53c9450c1794f66e, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e2c6820cb738376da01ca079dd7141820a0ed96e, strippedASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)$%-59@EOV[^d R%R RRRR RR'RRRRRRRRR&RR(R!RR#R R R$R)R RRRRRRRRRRR R'RRRR&RRP R RRRR RRR RRRPR RRR#RRPR RRRP RR RRRRRRRP R RRR!RRP R RRRP RRPR RR!RRPR RRR#RR-s}6Ē3xorg-x11-fonts-coreutf-85b8746fe66b6c81b7e75e67125757a6bba5a3e33ee11a57806f24dd70d35c7fc?7zXZ !t/]"k% #4ղͰضR{?.М/-Q;AAt*6C+($U`Oƽ0Mh 4 ^VksB"=Nnd| ٝqr,Q"P0a\{ m :/ըiߖDPwk}֟Q4=}v^7i Y%y4TN=]֍bҖʴPwPz~MPXCoV W }ު΀Ɏ2k-ۃ=2v쎞QXcY{fE=nk'BDFln(Q+I!=`"KxH]5$tѲqLE]Na#i"SMV` Y`Bp3$^ ʽ}t} BFVH Sۋ$IE W$>Hɶ5v'FV>3/Z1=̊%,݊B^JmȂ&\`AM32Z X ̙~/CNZoqŸMnyi~<Nг[vWuhbC{@)@/ɱQ hx~ }UWq!CzvϮ2[hsĻ׼&b7΁ aOXH֟˪8ȼ+Mv~oy'w[$TW)"*ъ=TffG> _{u^k!7cf}q,. )r+=YNL,~% #EqGWd7->*+CĹk2/JCg l:?}5T~ -Q F. Bcc]kVdio8P|pY"L`z:YRa~,%6s{rm$&bTqs Oܢ[!<%1ɸlTחJrktuS4Fu6݉RGXYH"$=Ï "sHWtƳ7qM'C/W±W7N " +I5`iē^8c/Kښ^c 3kul+1MO]MRo)*PmC 9/e,50 B@P"fʪ38A,!w]6'($ƒn*'VIO ]Ra5k0}wKgx>@~Y!c%r:oB 2N4ٗ+{FiًkCL&2̍ 117JlPU÷&q _H#PwQb d"\f۠Do7kl-Zuzi@ΐOxY)exg__ {#h"(![*SaUG:jp?zO|{;FcX|Xځʯ7cnV6׊.IQ &8 B[f{EzjWx:\?Qnɜ\Lm%%'ܽ(8)|MTj U!m3/dEgޢr}]h I6O< >+o/P(R)mqO]6nַ!`IXx,I*3^(gZO%톛` |_HfLuv=elL+$u ~rC$|^ \^mwlJNϫeqH6[YN왵y͈c8D\]a"NSu7/WyltUQ;?|3CP:?Ωh^BV6{ S;,&8ĜG ,w+[4ybK~RlOp=.R0D4ئjЩ uj.m]ۛ$T5 D_ٯ>ԠP#f.`gl՚oQ2jX$;8B UMEK߄4@"D<2mg>EA@Jg0Ɵt9KY|Ԟ CI$;meHxn\A ELk-U[T`j%߹:&/ gD)|NY8>^qU6J>4R8 X~W5A{n(ߘ7E@+E 9@;DēWˆ5tQz.Gֹ01Ъp[BaggeƸ } (sJV'e!Zcx~Ĩ-_QL5,DAQ̪#IQuA^XkJ %q1in~8/;^8.5UШO :eʛpy܏ ItqOLgMo;bX.L!(1{  ^,+oPTcnG2_$ K It18fIf@)i1_ ~=0[JܐJ$n v$!-tH{SNjP+0˩Wn_QRf<򅲾 %|~Ae= 3ԇлAs52潚nٴ7i xvE Ha'4 fFC}$R8? ]h˞-dẋɜJdY5 `aQ ݰ Ѩc۾֧MCK\/uB v$ۅF"hUD$z=ׄ0DXK]%(v'  osr}ִ?;#TG3Hp8zb-~R]T\h. 9c?f8vtՆ"wUש=ln.3TJqn8,rd7;9{N{ʠьǟa5FaDڌBnQ%zhƆ o+BA~j^{-1 O^hk2'P$R΅jnq;GמQ^~|$_ r>ς >?IBzMq//[X55" zhn4<AHtս_i{8āSx |R$L3!hu)w\nq#UdMC GI#n*@mm+3E!OU39k8:@M"33*zFܫ~2{`T>g8cVvӺ0quz[M |Zn`'7bU.$Mldp;QH5ƌ ZQWtZ)Uȯ:<EPlFC/#X4ܦ-߂Z-D$:dP\MsvqV<П2p!"sD ̏%̏To72uBA@ƓKuΎr usH[q`NOҫ_~ZzITP4CWZ/q y)E&lNqkլ33Qc<ÆgwI@гP1dQ1Y}n+b(5E4߂\0wvf TՂns}A>u8\6-ixOߡa @MHڌq:L?„U,9"4Ibb0^ۤ$_P>xEa8s-e`a/F2p,A$PHE(`R9Xĩ8\P~Bb݅p pas]! 7YM ġ?e Laxk9S;ۑE9Cq6_RW>oZ%nRY>^ s_V"ǚWe,+~~Q!,/w\:7WZ ѳzq<_vAv4c“S+1x@L3}Q$WvdkEtVF{93F3T ʥNUb_jHI|gۥin fmFDzOA|VtƢ"ٕc3 |X s׼?EƩjݽlqDgkg4YkAx2}E@Lذ^ _~cݹaM[u:F5Dx\1{HǨmq~:-,'Jv})m4p SF$#)nMI[;ø&(-f})<\ sBxf8h_[|\//>_ L(Q/i-薻$N1""c HPvr-vb,s:_=DC uD}U耚| bu0z߾kJ vM15V|rBx<| AHp+cf?@cn)캓®JOR4=X2 M vNNEፀHďD}_fN=]PBM0ܭuL@K=ӀٚD>V4LcTX ?bEpئYD4ybִk)mNt܅xS$ӹwZص,ϙ3z&Kw9CY1}'^tJC]4IG% Ӛ3Sb7E6Q:^GnSR?1-q]:kptn!M#RiT*Vʸ~HDkҺ}K2ًQo]Yf| +:.t H#}x\Yr%ғ|f>PInYkX'|<-_ [LCQ" s{t4:Lz8"!8W ȍ5nQ pdrQuw2q@slJzDKhThQS'|a}chY7K㒳 a6~pdؗIwPэͩo%VΙ3s$ê|QF3'bty,PE9rQ %m>Fm落5VKD $BX8w˗< 1-#(TЫFLq9K178veUSy0Q{~XD"t_30H,wGE'TuՄi5 C^LA{RNVs2XKW=$ J2U|9IJY٢N69h Uim$ݙM怜#k}a5' ~*7bV>qruq<`{ E1Bm+a\^Hm*6lo(h5Ankq&ņ1S}"&}c?s×ޕK9Js;*I#.'6R-|h]"058{!\?wU8UuBWP&%/ԭi! -Iݯ7<ډ&Tġ'^ODl.z< zoiB@-jN( 7Y<]abѿ}Dzt0ESnM}JoR<K hxCS[@q_,S4m~jWip:s1)ZvXo{2a#AVz-eQ>c݀#{ OnhV2"zoX7wr+{4# 8Wwnj#+ \8`-6ǵϼz1F.a~+صtJ3k K(x_6 |̉ގ"cv|>m''\pMZ_$/}IH=q1 .li I}ڑV!`MKS\9txDrYIU|ZrFM?#UgKUPBuba^NԍŀdR@L5c/0!E #(IiQ*VG!9w!6ix ̵#fa$P6Pq'd]igPɗnyȑqY焪AWnݟ꡷pm h_8b)!0R}cԈ"CEHݟ$/G ?|9j1zl*yΫ87;ʚ#Bj \s0{2.Ra\CmJ a@6uOW3|. fO^;K;BYa- 4K qUj *?.Ջ3wi)abN .Ҳ|t/™.Cj7(Gʪ+_Nu!s0jVu+(Qpx!#z*ţwI*֕ˠ#' !n<*ݝSa9$W|y)wNB".c=gM?3S{,FC-t̑ Hh"6 F;)z{IëbWF"ث\=)"\8,\Hgԗ7JUǗ+}Mf2w \b* >ϠpLNMoՂQߦ*&OGCB{똛8^e fyC2 J͔ݱ-/A.׾@X7^+0+45 t,js] ZXK׃]j/l^2욁֞N ejNBUr~`&X[ V$ң,!1M{[}v&MUσtދ%x"Kzȥ:%{"m=[jJT*Ad1Ev6huE|Z0PٛaEJ LMqlBbB\ѺqxUa/;C?#WtRݷƤ,`p65^\CcH}"ºscCtw(F`l喖b]<ծ`Q: Ieg߳f+#YW!S V2o0 6>E MA;o*zG|cFJ+Ja %J>$ Ŷ!q$~tMZRĆeڌ@~ џ>Q|C .s[d;_U)FI \G=)z6XsY@JӊxB `7YQTMKU TOshږ(ntK\^ʠX+TvO Q\ jbcw[| lC2f:JCOvH"!"wGί#S< srOxW[%mX%sY,>G_sI*辴;XŠ}(KnМ*AX4"E@Ahh \#YDVV(/la0M]|c<hwuW!Lw4G8b K1z d`~Nv Y|Vf@5Mķ'ZHWX8_-n7sN8MjTlL?Ilas}Z}v%W #V~ AfSбʮァh ˵?g0zިRSTYH&U~Ńeh(Z..qi?@+G*}ۂ1N jSS3:",Ѕ^"5)[2Yؘ BdZU=5 ,4C# ȴO2&,Ք̴kӜpe:;2Ru6rD ,fm:V*q'SftbZ%3D"m8 G7%DU9G"/𤭴 g3O+`\[x֓2 #~(mDɁy2#$2rQ:yΣ4`@$nXd+(TUx%,qG*ԁ&6;RI?K02k3;xPf5Ή[X9~`Af2*nZ~k]Wugaʻ_Lۀ-Fyx.19P^|4y0 kK$^$nAZȅ'@/PVJE̥=R˟m |"Vj~]38zj>'I[\kHsiWmyi7x {3& ,xጜ2D͓d&ekר,'ԉOQCkx)NmJ@[L3@nx<CE6:^HZ} [VT2k7!~\rsg'mzE6yBs$FmCvl\ o-tbtaUe O._S9Ff#,k<@'ͮ"B Hxt,=Vz,6'א{Pcʴ>Wݟd, S>8/6`]DzvkAt ?.4@&R-]qRZ~1;8.b,ʥO~OUu Jj)Q)YFNOh/a{n;Z{5qo3V.9 kzh=% D 'j)2 a~2L^  [-/MiR1tRu̳kv"o^yS3vckm]lj 7z7'a>q8gap☚uO3Rk y^UwCO%M1=< :B_;dXp!YQĖX6+#Xv]K'WpSؔ(PxQM&@B}34;.G%:dב(93,iG iF밾9`d^Z. « PG-eJC=Iڇ ps+hݖ(M's|Lw8->L\uک!A l%Z͸omվY"{=%""V--͍Y1Z(q@?bkOo|yњHf~kShYzE"z Tuh8'P|ZfYFd`{9)Kej}:MUI?ޮgw5̟>M S)l:-e >28_>c0N)pe}OHy^HI[-3'lZ,vB\jþKr(=NAn?$D3W-APmHGXN\G`#el.Z%oa:LS͖Qx(sȼ(Df*6.}@AY4Wi.E:M$2o7QmJ=8X*eAAKMtž^P*@Xa-kI{{-T쮔% I.Ġp{vc[^  R{YJ1`Xʖ ho↴-H_2(gI6_PC?sѭo8r2g\x 4P4nmvV g>2ymE>@Aq0Cz|?HɁlOB,&YPd(ijwK s{+_hiwX{Ma?H$-nj5iu\pg?Yb <i%*sN[u+*̢&Н+LQCx A~ Eh5mbkb,hY$7HAG_̏zHէ c"S.By1d|[0?kk i-"#@D4mOrʤ _> ؄;VDŽ;d.N vÌ=s[X,tЂT=Pw@S sTT(!P&ʺ]=0rqp \3؆G{RRbR0QW|J_6Җe5zFjej@W Y8T3m8%bsOo$ZZBoh(O)^1ᗸXJpR W 986UȴTK)G6vF$DzεcYgGG\`rz‚,=ieJ>S5A >M1mtp6J3sٞc6/RH~H?9J~B) C}IAbYa?)@ItWY:?zFUUWHbek4"#q=CG VDY fIBk* A#65Uù_BG\Z9Y+csqa0V#;bA!Lq@D\W X;z@8(F6GߕH^PbݙnL> l/fBpXVF2k 8a _\~.]¹9 v O-+_En ";$#9]bl*w~v4h:&7M.7I6hG -GB !d \O|XĘa 5v+y=r?폄U0^Y=!43ihRV~{#CTEBVPSj8XPda޹O>`i UҘDPe@Py^A0zM^S%/{*l&vodlEK[@t8*5c"h9^m94)_a< $:1{ Z(Ѻob.KC8p ӢVQ̷5/CZIr/Ԋ=p_pp6 0z_|C aVK@Uat!ߢP 63bCu nyA%%Rޗ9EԜ. zG(# Z4kR 1t'p EM7'@fm0܎dPg)co+iOiUmW9}gt|oRc+ @+Q ~(C m  Dm179S ܝ,E 㩢0r-[+leD7,!!Z]JE̱Un+/՞ 0"{B7i \-l;rm>6#Æt]LIºrVאx\W6C(<[D$s|R>9dt/#ZƊeY #x.(xjn4,ev2&?$d8Flj~z/IړMX3eKJ]m=>*A&pW\eHunbBJ'wR@2T NP&O/o"5Bʠ 1[2$\"l!'7&Ppʎ,aė? hL?Avӭؙ"̢QuK0jE gmV |%JRXzZ!t) q'@DX~03uM}vUFE&x,B7W,MDk\NuR*<밵1[ vpx-=eQ1΢3ɓ(`[,{>ESh..MLEZ&IW3l wa5 .Xs3?A~λ~-sr *k'tK<-`o/@1_ 3ha~)D"밇#"/|&r Fڭ= #zkYL񩽦2b("eY4߯)%cM 4F&>'HÏ\Uઞ½۝+Vc"kd 5k*1Fßk묾BQAsǗQ]UKh%p.6gARm"늺 3]NEqcJZoB+ʲ[aT V4ـ"~qKQeKGF77Ak {7KN,G1E`cfá?mSQKxB T#Adרp`m}rkiJ"b@> gwi$KgD;0N[w!&j ϐOrߐg &#ִSg[QXRJy1Hh;@o@. dU-KС:.KT<D*(|NP%3py Ĩ-=rI*m29'^ւa4+Χ~eHΈ We(~xKN1Ar~S 2UD"05vC~$uYo;7I k懜&\)kz[j`&ʖON <;+qQ*l}CJP{7/..<4EI8b  kg_ aRuxTB  NZ'Iuer߶QSL,h<ñ\LW6^ EF娣}+IC'D l܄֪'i&8*tusuOR` ݹDΚ(xNAӈ{:|OGz#H}#Ewτ290xХ/J>1WaStPr[w.@rEpsshu'u~Ŧ<$5 ic6|rS[cڽ/o\oeзU7iE :f#DXǁ9ސ,X:h>ayƁ;\0 $&;? 2VȔݶ?&gJM=;:O `%O:C<8a44;X[_n{Z5 A,za{#8=QC' j%[(AeTzr&׉N`N1$5 KE[]N 9$dk>eu7U ݖG2I4@}`\J'kn,=gQsgDa8;fkО8"8׷䟼e\p lf98fBc?2cl T٥,;ʨ@!rCZz]lJbwJ1qy7#c[V;f,7Am5*7N 3kşMR{>=`k|NtD7,bV* .!ZHg Fq.@țUƨ@QFҏj+:&5=ÁoypS 3Zw(dx3Ohx6 c8L45Pp\$?5|p?k IS'_ңZ%fqJSy9geypd7{ig ^SB {_*]Z:Yzt$ /CzGmv_9/Hi6M 6fD/JqwdxNc5+Ϙ’+!<7X/V)Or~,Wq@{]H sgFŒǖR:gQyF9@Mb,֋5C<}J` n _{dΒ`fWdNBaY00*wrx>(ki>:./ @wbV&_ n䰽5`Gy-I/0vks*\ %:wG<I_"Ա߻qɏRumȳ6t5pTx 2Q`+KːK06+½4ChųݙhHY(@F % ڗ=Gz]}5:*hJĄ̏p%s6+ GA=90I{hRQP HڦW;ӹɫu%ॉ-q':Oe^خ? jOHF[$ԀuO<AI >IyKxU&.^tʤ9c05RVKem;J DŽMߌG-h߱yץH5qF Bd=D8&mr46>ӝv0YšCWoϤt A&YȎZHxś':Φ]&^CS,{ xyHp+7Фq̯x54!!lN:Ü9,Ý.ZC$[{?%U%\mZ6zA1Fo?l{0S(,x.uNqC{Odu3m"U?oxY+FL6t:/ biν4_Ph["|q\zՍsPHT5@SȒ3mD0I'D{a43[m*`A} g/XH ԬIӰz-[a'wH7 `$8Sۀ20kÝZOvp?2R{ nH-z 7t^1ǯy)cj28 R/HbP | nZD[~يv i=jI rɋ x5=/SnmY§+ b]R:Zp3'mo OVaaK3{Y?%8rztQ$0/?~ `@xtҖj[!bƢXط̊^,3)sYUCщ{hTǤ7G삛xX \ǵ`o~,HuI BքމI0G(ҟ1+hM6$KԴ쀂|7=7D!c]ܧK Sɾ1y/11J|}`c̲7 KJ>jԌr+l%xu) ECͨ %㯏|r!/Om +JY帯 GUtrl_6'VSxJY/%?xwI0wί :68 $O.wvlHۆ1w:4 ax|z_N4a& ?NI*FеO5Vӹ养4ZzzQm>^1:8N\b54$N_ދoƒɈL4h+fGm潡aYy; 7“B`FbD3kQXmvUc7>"^V+IrG\3(sM[ ֢&uf,bܲWM49}o$Y,;ڢ--j Ɨ moypOWn]iQcb>qöw YPSDo,^1Nc>[qS ;%Im= IHN Ì} ׁ>}f+y~hT'CcH\TnMz1Hrc̩FbAكɿ_ c8{&9𲴢ݯZR'F:t}c[2Nd 4*e uwP-<ۤ$s{L6U6a@䟓Y8џ$4GyqzNIk޼;g昡lRPYSL` {?TB{ {efly7yI)Ɖ9O.a|^]sd<)  E/&06i| 3hs q}Ui?y=zS7/]F VX:0h3^[s?izJ?! k3mZw4WkQb""e xa y9 50aąP]\Ԅ>T˪mQDif zTk;׸\sS;`CH~`^eG.\\ e"F S L(;Gob'!KfQcsVuc7pUjWCxZ^H vOΟ,`m6\$=+9&PH.J!@zTbfi7H#ذ8V+ӻmEX^]yGpi:K $kdxI.Iu"|qbPU^9AV, 77@H $]>AԿz(%}ET=LYL5Z6$ !QJvJNBSrh^WEQ阏aKG !) [~~Tz#>*G 5tK1s|wjcÓ# i>MMeLW7:'F9Ⓤlekb ]j2DІ mcbI{YIbk>*DыhI$nK?3ua$V9nA]m+G;C±Ù$9gZm?.oQH;#duh&*35,7$Ǧg1ME:{Pd6DNem޵gD ʑO| w٤uPA,JnaxhyZќ% +XH҇cqz|{m )Vq`tFk|sJ Ƴ+:ԚftZ5OIX{ݳ -jѳ7V"aThy AEpV#CȡcY2]RӉ^&XY!o6=rXy4+Or/t[3LtA2se|a1 k|!5G Jh" %LMز'cf!%K[̒~cWsp]"wمw~b/N.;`ߴ=sUL6=@ט`A-2Hq>sE=u5ڋvqaRl7!xtQ~sX*Ȁu@M-X>X$zO?;#V"zTRrE=p޳&ƽE#eC=;P{{#n܁AJjSEV*tb+^IQݤ[TTLFCEqEPd};uf(!!e LwxMD'.Q^6G(O'%-uC!8ZN*%arm\c=^4TK .&% M`a2xz7{8Lw-HBft_v52lAߒ%!}1?Lk[rJ~;WD$+|(o6 Gy_MvsAc'[sŝOhinR.ۊ%GLM3Ljv姢h/Y}yăզByyʮy !<~!m>tcƪ :Uy:>/< :#S5C)3#iM0AHqy)eC ><%@ÎUlolY{1 ~B8Q1_0䏝t֗!- e/b\ r{O&- #G"IDŽ9i' ؊?CsukCCY-c\do̍fd))ق;>~}Gr[ d P])n6M8۰u9$34 =~qHŲF~v5"#iVmuL~V \ ~(v;_x/V.s7nҧ.9C|4b)$M(PrhQ~Ak7Rg.ۓT~3.*oxV&6ll*M6W5ϽR#>M݅j iѾ]V4' Ly^K};lzjBD5wX@Q O‡@f)D|L:,Ju~׆m3 qSk m/:X9A$뉤3(2(TAzA+p1bmN\5Kb'yQpst㠍5EG~9"]X]Aup {#=\l郦4`Ƴ'lxEЩr c%eDnp rў'>PG@~'fKGZRbLi!F9l7>ɷ0Q捤]o+Yԓco;CnKڂhUK rg <4QZ;b̓=Ձ6i2\5hGo tGOsfc4X~"_~6> ܕКz'Peq ;Ĝ WKq* P ɭ%mk0-cq&u齉K &:x}fG3ȋz3 L{M ĺ+>,ڳ3mcq?sM2Ma>MqPKfO4\@ ~Gޕ;fWUCeDI%2Q4݈"[#TAjSRsUtet \<&zd{Ws']]M6ԟ^sUC,"*C4n͠N`2瘚)(o5޸Ǯu$:{Jl. v Gf'p "v?8|5&V*!lOM;yӠ&Jz|󷰃^l`sÛU['F9 Qy&VjD,ǡ߾ sn-ǭZނ]qIJ <7(޼-+A^D0-CQ9ŸZ̈́WkMiA.ia^-&Zb7zK]- ƹu.|zL@=_.gh8536i\(jy\hMxv| !(6:=XG-PEu1% Ut)IJܠ qYS.3yXL1 +v엑N&"Ħ䄧v(֨ 1ىŒ—r~jp;zT㒐ֺѡ/0G6-TNe PlX]Azgcj;iV|Qlj$lTPXd0!GA)!9.gpbBdǏLf[ ܫfo] JGP7|5Z|P"&~;l#ϘbRl?a/CKo':۬Ke5JBj-i @ge=]J"1Ӯd+CyK0^'F IX)+of:þEsEpG3Cxo -Et:8 kɐy99럨Hm HIY%c9,*I9iTNHU|i4Iu?bkhHv!jn}o<1ƿ LE:׵E} c\JCNm Q_w!b3 &7|΄5>tC;s8!rBByF[8λh^|/l 3MABeb$x ϳU-SD!oEWԔZ^Nf$XLWP-A2p{lXi=BL $P=!Սl{ID  O14\-Q {eOzx'2 B~ߌ\)Rc_j5eQh22}*U+!a-D(O)-Ze) 7IDI&y]m$l`?ie/U6ϐRZnlM85tl-̜St38vՌ$>ݾ=)G1=,afo&A(Jμ7?9jcMŏ|9@J~y.4-Kz>jA ]6F,|~y%)PPX쫬j 鄓bl'Hle6$az&.:~7D~GWkoZ_ ߋ&+1la=cuyK߯ ۤ=xK(ɞGH?OVE{sS #B36S_|vtheʕ['T݉^&PY``O %6fךcҖ.X] rKZP+9>Ny(:#ǐͼ;Gn}=/=zN8d QE}OC/t!sӳE]%M[T'r-'K(" 4¦RjgYW{ ,= ]X'J܂]Kb#Ta,.ro?).tH[R>4ҍ}jPJJIג1v>j$7g}#dQn[j?{+9׾u xFnݾ'l )|2*OA۫?keN(7v\5(F"Ǹ' DʣqMlNeUpBUb{u?!Ip~V֮7/vmbJCLxH?]jXeB>5Y\` cU\:s`Ax 4:=(޹AKBWdF7{EڲF;Ȉ߉M^^y%pZ d\UUG{9){_!m:oWTpWڶ-QnD*C#cx$ ٨D_=`ij^N|2? :ilPřqxO:)9R@$%pB/?YϳtF h(3I2 q8@MFq1a%]Ŧ66,7 4c"Wo+@) F7-xŞ6x7-pٍOFduf,L"jAHZߕx"ң{>GǛ buN-y=j3"KzK[B!9O2޿ z$/OE/-figraδ)t̅=4$ 2ˤVzV&ϊ;icI`'3=o4o-eI:8;7idYЭss݌+SBG"VE$Uc^Y+mK_SPpiIL8z9@sD @lU(WHEHPA;4n0Z;Np7&]dm؇<a>"gyw k`(}lψkc K4!"ۤ6/biuX֧-3(^e=xФo W%ޔӪ'C9<e ˩Z{Ds+C]գy=}-6*,hcT#ӗMO'RX-+"P<:+MU D?1qQz-vU abR I"aۑLjS,YV:%ty{hdmk:_kp uIk ԰;HϸC=@rj0 ~ 0do*A2ֽêۗ=պ@`Դo$-XpEgmh= J{=BB"D ҜPQtS68]h)dC_.+EmGKxrax?yOWo4'NѪݬqF I\x SCɟ1[nV6`8;~3g@@&(yr& x5Pr4zsPìٸ悛66juu,%)Ng)% ׯq"(PP}0SG$հ%A@. 3-h4;eJm =A8XiP x9-/w!@bA -.ԁӳ$:,TMnŁn<1Iz/@W+01j]'F4*%;%yxȟnVQ!IVAA[k1+n>y ^,@3@Kq1M6MYua ך# vq&6 ~svB+ENG%|sQ5{%R%فmS1V4m9W9ݶ%p:NL|qVH9W x( !Yzel$6ۼqѢқ`ĖI5+O~W]ɜ.PLY?4șRL 1rQ. 8  vYje*e!5(hBĘ*!/Υ@Q́>:˃Sіc~S-Of uG!QežE钙gz;d jGj>ퟹxG=N؁Cٟ tg??O4wZ"<~9̄L)ˊlj--!))6PE^%,gzJOY>t)=M`dQF}K}3s#yD$~~Mq߱Y x4 R|MZlU"?98طG;Oux`,WeD˭VtseoG!1ioih[H5aW].IA𡵾wlݞI(-d+ۢTQi3tp[s(4)wS7>cP&w-@ą= C2PM KNj-H]c[sOxrܟCι?W3ߟ--K3pvL<\:~\m35Go '}L]"guZN5͢OgZG_Rc%oX2CAY̕07k77)^LE#늹RK׮`Y7V+ >l3!Zx5o]+އXiyԢ0r _n=lKS)K^ezedsVjyJZ3Dd ;'[?W+h#D^﯆Qk+&cZϵB&Xre|›4P `cHΨs['%X3 %ߪ`@Vgu6bikR\dAI?OM#"]Z2DQ9%& “`n5=sKKR {F/VH76Z`t(C!ѩp-u -¾ӌ": * lQb6y +'3_Bc5GHCiKz`jK`26UЪ84_$OshY9UiQ\Y@s.Y?ցUs߫,h E%Ԡ)W(iڃ3XڻܩrM3ZU_R^z 胱U%.PG)e40[ƭDF5tlL> L2Nn mb51 j*r>S;(KA/MZr\}/P4GfbFS~"A7,%1nbg1f BLc '` i&ޭ{[a_:!V6Fa$)1)P^J} f`GةOȎ +Nw %v6ͯi.n;~EG 6 rVBWh2h2ѝoc'?J"pe]|U Rh9 Eb0co˹(R$z@.N(]Rc .OW*&zƿߦmSD-Cڽ-a}ޓQa]ZteDrN<ү/6ߑ?՘ơ=?hh;or"kw1)}tʼnܲ;Y\c!jyԹbn{gîKm`m&0Zq*zabg ];Bl+q gyxvd`"BY/?J$+A IaŵzF@5ZOfRb=ÏӜ5{ߣɴ7Vw!!Wt {cIHCnױ4U+77v1_4|=ڗ%yN4űg6IYSXYKY{|yUl0\-d)S>ak#"X;r0dS(%]B\V΢J )hϰ8y{祔͏4wo"^O1$@3:Ur̓S1E%a1`_ G=+.ރ^i~LG2 hm8_!>6p^uA?\;2Wfk TxspjP OF8OyGA|*@*߆MfդZ/٤x)={4H' 쐁9@Owh[g53jVG۬F,G†U3xsc[Ux)530i|zX [a~ym.ِtK;G"3N,~&!t:Ao%uw!ID.'"cʫ //EB}Hp!)i;xt6䧢{#!s̶FSyxU>Rv'}t5&q[0ot `!0q1_fUq:[ k^!7iߛSD ?<$لڡ'10جp{B@ښd/+ϞsJC(SD]S}`۪}B*P4y[Q!z9F=\ *MiF3y;Jx' =bHc{d+ܺİ庺9hk1+,oUaI97L~tZqN_QZM9N~zPG(? W`t(1LؑJ4 0LңS)";*,FwnZ(ze/Y&w 5˰lP-Y"^*2>Y~VlxdɄڨu+ڗVxaTS u_b[>-2|MZ?~O¾pRAwD³jFO$&N: y2GMd`gH@nc]'Rgq_9cDC۞K`'8/d@j  u^? =1_Yȩd,nJ+s1Fp+ gn2x/3CWz9 q7o⸂GqE"b2Z 9I[JuG:@Xz4mg1%z۝,`0M}DTnlZ~["o\}MhMIɽ+Z1loۿ2=\dKk8b@yMy82 8_D2t_&Pj JwihX9->UvFo24POm,ve#C*%{{Sz <\*\phc.䌱 7o77yD:.{]>mOӧ{þFS, 7_uV>^*95e):p dVs鰏 ?2Lv'6AHp;0zY9-zt=9Ym<>TQ`&wp {[_5lja9ȏgr `FZFg |3Ȭ5UdޝV:i\)̡ݛ>I~|6^ pG>e4DJtFF 8ʻ'"j6y%vT%y+adͭVg c X5m[خԇR_{3hVUdp5DN$On=??7LnNy#&oܽ?Fٮu2gYASdpf~JdarPr.fct7na0 _UJ\&oSS:GOC9A2/ 4Nʊh.8 QD᡼9ifyu$7i W^j>.h_wpe`AD6lDH,hќ" /U,ery68=KStiR`7RꃘQu˧!/1DG^}޷Pv)!kC@{1\#l{Fɑ"Sumob<\XzGW݀}( "UqiR6eA } M.ը4?xMoEH8LLHvza+ߵWLƧIݿqPPtobIU-IBt ] ~vLW1QMiN68%rw07+qvX>o gz!# 3ZZ(|CH&(tؠLWTMOׁ+v@ tO8UJp?d7-XM.u~|۠e=S\v/TFWpGer{Hse04ԝ'uG"%>FÑswwߩ` Yw-ήCjhd&\qB┥Avh?]ak`lbyFܛ>p׸^5jrndlaX!-:l&|QvQ>+j]qg{r `OUV?h"r`e{ɗ&AYcV 3U}y Ru=gvx*JCu%kebvN%uFNv2gjJ+^p.qLO2 Q~RYNthiA/hOFIjlF%0H\[I[K Rx;-OoS#<}6dt@#W;# i|v8ttZ+S2,2vp֫l`*4 :=(7/4 eYU!x׀ᅧ䟇c ,SyVѭ zOs;RU|-lcUQ*(V2uB/'^o >ic3۳, r 3"\8)%~;з?}Y=XkbA+.jӆl7c{,__u2NȰ|wW<7+cr -#tvY}(&:R,#JyäoGte]H1cȭqp$7#YR3n'[a.֮BGi1 |.?fnV8uqԊlrӿ8 ju`|gC5kICt9Sy ORJfNR-K?]`f])w%(Zqdҳ#2A%@,%TX GA˨KQ vM8^C/ zCsLg*v5/v>d]CBϢA2oy)tiDWE7Ok^ j!NMF@WX2V~$ s)lNA8>PvE5p`\gHgrBVbo~]_N>=$b=Cxك\0 攉Vl:cW2>i!b{(wA9T#'cg) Pj`tI+uҹ*cxZeYdbhBDEpR5/W\O )v="kiڙ 1}6cXZ(:>>ǀ( ]q Nlk|0S&茰2f\'G;J8+%F@J#ł[1ަ.^By䆎0̲$wqˠ(yr+=b8D VFӻM O!sLNǎRm rThG⭁եpaHX4YY xQbju B8?T I F~=_ iafO4W_ZTFm1^}_QkFjrI=}X4IZ\icp,~ ozE>zi̅w9;F)JIzaqhԳ"7UP$0+#L9-L%p7m+h ;j`ߌtlb췁*-bx?OX` T4c;]Դ&i'vMB1(vBu},o8U;t6zXrR !h5gp>2mu]]MgVLڐg,A(%;'.)]R[g0F_2}Cb56TXf^:42:;;i2^]h]Nh0bZƆ,tRJ&ւ* "* +4szDt3c +U7C$4+Ky5Be7UR@鎞1ZOH3 U 8"$Í'-Ui S)whipO٬. t4Qrodb#t,GOܰKV[ZU^O-F LAT&tli~scP>XkSyHQM Ħ24H;vqBXQO"l\ V^j(ٻ#u@ %ήM.oW%iT` h^sEK 3چNbyqw2M;h&^9[ ^LdozM|k a,Jċ+gkX~D3aZną8UMub兊ݢ!1ЃMhjK\һh6~5:5%if+(y\ u\o\{R+Gc=xp Y@n_(l@aa-A M: _^UYi)6LRtqZQbUYSa'ƓRo@)5 ˹t`:ni; k2sBKݥ ־K`l=pmZUV ŰPՆ?&2+ ;f OK 9e>\#!/oC`j, 6OՃb`jb:sjK6x~31 QuQW[w;)98Z>: dA n Gm ~YZXz'Qn2ـ\SrCWn[@lrfW/ xNAf.d'Q WSwLXQ8/ĔHfA Q4+m`jya{A?TMsqEo]t'ֿ'bsېv-L2U? )2n^Z[?޹h&z)r@T%_U4ݮɂM zlD ϱ[+m,~Т\&y|!J#G辪f ։%2=t-,@"z;la5T{Ry:VYGmlOyko咳&޿Pר< ?*w;#08ʜwnv Pr.$5S1a@F7ך<6lf%AV()ӌK=յ#xAfg꘎=  g*\/E~ˍȐ"Ө]f=TD__ٔ\M[@' Ŏv0Gw5+twAusn>4V~{;,"rXY-W+E=@iعD?UG)$ @4ٹ ڹl=(HM f(RH4ew G Fdb-AcixB9wz׭: f -J#hDjz/OҴws[sqWBN=HtR4?qГpS3<?JA+=ۉO)]JR ̷m0#B7v\:\{.+Htv`ǣt1:NU睶]{78XH|Z)-I,A9)9*L֓*m>k(=~,#tIS ^W)H;<ġB`S窑,ĉYPHBXy9xUoUu6 K7-tkHad-X;ME<3jhXOڜ=#\3Oat6_٘?He]Za[tI,fGfa5vO:. Ņ؋]d_ o$ui^g2]WvU o\/4(M$sNbA5u d]MckD kU ~vM|<,?}I ->tl,`FܖbC3ԑht[+6qgB}G@S6ًu2Eჿ|Nאn+lZDpi] }K*&:U[ۭeA*20yv+]DX^uM֒:=`tQAݨOHPX1jzEz*TG(Oxԉz {һ*K {vcӚ¸Q1r)K 5&ҫ*ca({Yc2pp;NL};/%[oϙ7;\5A cX%vPMLw֤6 {!4,~O6u< oo+6:c+ND~5b| @io+'DmJGc4gx Uj5xD)攘T2=rqr%dhPpmnK|$%ay~xzfNUkOT V.;Wt@tTń='њy[un  1ġ $E 솪׬Б(GF# V{3* Wl#𴖲։݅41ヂ=0'lNpWͫki'Uyp6}Uj7_󰕳0!ԋN `;ܰS*7+(t36?/^ KYo(:fgtV{@MDlP,R,ĥuOyYzAX:Eп <o-Ǔ0EftUnVQL6?t zl)1Q.q}q]ÞL<m@i vJq ,; 9#IPd.p+mBn>8.!|S3 d&{rXÈ:!\wc:ڇ۟vc7zn/pM]WEޅ~ Å7z4daLZfS]aQD@_R{ClC]o<"1F`V.8Hr v+,A_]|߁S(P hy?7p&0@ #e&Ъ&d)("i3[K?W C8=@?{e ˘|f9#Qf=$@HS(6p]GiCQ3"mI [ȨoD !=iۋ]ջ3 ,2~jȢebwtKbx U[(f*]r]ֻJZEnM|;k&ẕa$^GC3ص|7)WԮeWNůs/e$+ +=CǪޙmzH'H;$'f~SrMNc76=Nng{rރ>{.*zj+ĝV%`ݪ>r3sknANv`$b#H{"R94!*&5oUVYdy2s0Ҧ{J8[urv9 Jh XTD`-.] fn0EWMPEV36OH?@SDW:<ۢd=@@|Tpۢ釢=u:lo5Eo2wܖh2x/?QtuU]u(QPn[0߂y;@!Lu#P^#eyߩI c"C-Ag=2/fkjiFRXSߪN5[\MFLXR<"F+ +m1~l$CӚrf:TԸ;3LQQ2nUܬnb$$x*E$N.62G)BvtX+q{z2ʩ yS o0'2;a21M/|R֡FKCѺ'Tgb BW-0j" Y\ڼ~357^vAKBFHv:& +Kgz:+`Gj潸zU. kf bXB,_r*{Ã9xy6܌}Yݲgl]3՘Wt1@pޣ /Ϥ\CR,Ƀ- Qnlvvfbp >>(,}Za`y7/5x5ۘ{ /],%Zqp'r3|; &vxY=4x:@r]x UPDv NC;H\@O+:e Idй2 ~B_3Q:YYEiiSF9]gP<pʏC+G71qbn,pJ5qIw]kM2Be+ƃoC9DuK[^Sm-3XTۦ4BaOdX28$D#lD9> X9f~EfY嬺D5C%Gς(oٌ)'֡Ӻ,781  a6_e &v#:bb5gscKSøfϱ7Dxp;WUt0b x!PǤ+.ަbX@1aS;uAP^ z2G(dՄ4^  fO\.Kׁ _U {':BգO2"(P lAm~1O H۷h9®yLg5d9O2dph%dN҉%,owlB$icm~xη/h/a6d/.T5S< l+Wq㭏l.8\my8+,2%@>ɭc5|-/{gztp=~hI؋aID= :W4 + :fPlMd@@b9J[\mC7ElcI5>?5G084 +Fʝ .iR]4Xmmv5] } )l0zCK,Kh7nZ8YA p[nyAvٵ=1]JiҴ*u Ra 4>NAkt~yj=SdG+kS>[whs2MvTSDrk+³M1ui[b5e/LהĉJMH.A?!T@)6#ל9hѴPtR:_h grU" \gv b OnrgL-g/JM\4ˬ㕺`PO.0IDk߻ڶt{ZcwB3̔;2_=:w;i.`S84;D(tA~;R?d{8lUOEytu\ʱDg,> "GlP` )Ľ `呌(䡚֯})UrTjc7Gw ͩ%aճip~cAbY^'N\)6 ϶ N!9 +*AOj p#ϦgxD|MF 9S1ݘIv-0lԧ .S8$ q^Bo%Zٗڟvv+tCd*g/})"FHKXΡgVU(A"B' +$kU}=gF,~B)%Zxx ;aT-5VIRӁ|%fz_ƼzK @j(r D\>XXUp,Rhs&N`z`[H`D:畱Yz_41 9 * @Ljͩh @iΟJB}J ĤI P)ͺEK n{XYaQع6v gb~Ls܊izj`wrHoqq;zT07 ~+WQbLW5ڞsCDm7 c1dUW8(#?+be TY32=XCݨg{+)N.PUXH%oEo Y2m%.wVk7+-\8?#?ʛD{#0Y"P?Bc]7A3\UAa6l-O,WHKO],$٩ T;PV+ȯn\S+0u2BN79v1ChzIK[+@a9Ìv&Oݏ5-pz-z=>bdfQ̔;F ?\/CGTƛ6R'ʹ[1rtcۂ-w>nQo QtdNE5`{zT8pzcȸy9wz A@*p@ǣ7=$Ltb3S#x^nlrV8cG,d{zFWl,/.QZ,5N,&Sl~3@1`bhP?fgTOkլf?1y.8K.]Kɾ[Iģ$(iIRP!47.;ogDg\O^ X 3pfѦEO#:bQZH3/mU_tƖƁq sɢLqLArA'iS$ @ijxz?k~20Q; 2 =Ҿˇ¯&|-^o4fBhG%-w[InN2!yU~`=mB ~'Bz#ͷχ[F9;_K!w@{>&l98"W Ʋ5DNo O;KOdEvj'dr4U5{/hiS9/`Z5)wnT4#×')ԝ@@~g t5T'Ɯ;.yǩͿ,X1W>sq'[}͛vL)~^hB@*G*-( kw AJrZU$=y.PR _Qჸ ؘ2Ct}LA^Dos0Ĵpqɩ &X>:r͋}1(vmۥ4/v6\W%qG>O0(Wi FCQSTDK]R\CA1 W? @s첣8Cl%0XO`g^wd$ϭ."rGnY-9S6mM(!1.֕(jcˮ.Pوe#+eb\^ܽx+M*yaP/zl5: nXeptoy+&@˺#GSs=rǜzL}T% ߥ(0t%ߑHk_8mSrJ}a{sΧb8 ]E'&   vXWSݽD7 <{Dr`B=U3nv&=YF~onK?qΤxhdwyYRٔI '?p/~"^x[RJd2[<)֮W)18ovK̴XϠB34U ߕ=>\0} CE#({P`λA~JeL>p2 ͟V#4)~/axL3T9eၞ^hں7캏%;3ԧv_a(~cݼ0CFmmmm2c?U=ŧ`x};1URn'kD~&̽k*&Ч_ RъW\gXҀNÄ z: ?`p БCS)!Ȳ. H|a@[f+#g@|ޜ3\[z7xap_Ht-rCp!jdSZIkbr›nbC丮P8ZH.*u  jz_Qq7q|=;2Max_/0}C aXUi{B"zh. %5;!7%/`ֲԪ՘RVsa_|eҢ|lܰuEmD=$7榣'^(Whqfk5B)ÑKNzOΜ4(A4QQE}\5>y۾^9֟1ٖj08 molu?l} $H4a4F^0CzQSM.axkP|B;ߤ ZT;*i0"aF`+7ܹL].C5(| }fɻ:"CC#Eg66'lM+Rc֟)+V3FRؽLC]v*0nθgd@ewh95[Vy |TR6wxa$ c1&a!x]h(  ur-*DeĔvb!,z^4a wxىMi'%yL䌚w%xG4X.Gj[ l`(oͩCL4FB[OܬV ,9O`ZYQ%߆/uբ7Gx vyuVٸ$'l8rO`7SD*dX4|=A +J=QiI“W={֬-9LJ6ǿ7a c$xI9ɑjiy_yVFסN_?+Vhl㢔3?`މQ*[y H`.^P3xxsьX1 y%EnC3z+K $Yk0n _:# [RDG)#Yd9NOz6bCX#mFhQz=2&BYcy*(Q P5K̾jY?2oLT/bm곅E]^4?p9J@`)ă'| Jo9wĸ &= RgtsVEuwU )S7FWV#abmЌ<4m+*pŵt~2<. m]D8qՈ?vb&=^`wZ .5]ir*}=4pUc*֎?fF=m(mȋfT+Oِ_wT]m&F!t2!=pTܺ_*fϡ^&P}Z4%^ZIK?lYZaW cӬ[6|[V-KP3q*SIA,}i4bu | CIA%$EG&x1x䁢P?AdeٕXad|$j'u5QȦ:jvK I%^r8#=LAە9jp<!̴0R{],Snkc62dv)b^T糓tZSn%.1#ex qyjDJ0f#p~i*LwJ{t1w uݦ>aKZf0sՖNb*-Ĥ n;{gADLã8Ubc9iKǶ 2E{ܫNetMo|}yHZͤ{1PqIxgFp| y>(dBg>sfܰ]!v& _sWTC<[ x/H f̹m`I~}x͐KBʨ,n⥇V"83\*z%NoFzB͋XzJIgG)Qp֎iaXb9F_&$18;kF0FM>pC7LD/"?BߩVC:R.x5`uDƭv_yoamYى^۱-y&HR9\g>Ba kDL+|z9%s(Σo$_H{S ST#ųv^}mR! A'-F:50ն4`QS \ǎx@9mk~>+'C"$,6k"t ;f }l+(oej$D%ճa.ģXфXH:?t"+QnCu~ M|_'EK~[ᷙNcRc4-۪uwuCg ,"^pU0aEbFf*)7 "3`PA׵qȴ9i*ѿT^z,2ViJñ*į'HW}Qhlg,r[y)lj/^ I6CjT߿pJ60#qY*Ru_$oQC-iP"[;>)2x,F{:+q-@|?BA(kk UQDj ±9 nn39L{`mHz[q:nr90v1x;M1 S v%~^Oc/$^i"Gq:Rgg3 (:PD|#@:nM|ؚBDc]H GcQLO!Ž| MQG7^fZ㉁=`@wn+1UK4$GFA^ fzUFqjVb3.}]+Y#<F]"&h:;EA0T;\ |3#sm#D28^ jEc"jXE5xqaF}Ry"Gر Phzk>{3:t}M^ŷ4rS}9:p1becv!3&EL="@iș'?GBRƇ 9?Ȃ\Ic$Grtwi:_)ACQؾ}x5rӖXSL.g!q-dCH8:^77>zN~ m9[tNff׿)'V~` Vb}qB22"䈳?/X vfP5uǘR RY|y g= DIBݮřodjxinUP5>UjϯPݙVLaO}&Բ.GTA D'Axe! Zqlt8]AY[M4vL }OJ,Ys*l*z%7ɝ`g>9Y[ Qt|Nʐ6whC*Bԋ9 ~@ Iώ&ay}gWckկܙq9La,K sV tc:ih(FJZ۪.jLF+1x_+z4p.k IZ|e)mXsȀJYI63K'$Db8dR>;%ɮItJ=rL @nCn$ʣYP5\D!(q?e]1e6 4]TKwIEg" Ԁy}aq(ڡƀַ hFxhcٙ(apMJ,60*9 hk9W1%j$ύ<ґa_5dR %R'0.1:Ѻfl(тQ/e&uuoע:0+j.r| R\qSS%/Œ h-g wJ{Q.&*[͍7=lЎz͍WeM9RT o:wv&lB$T)j _DgK`V=!]BCz1Y\޻JH f=փKQPƱcYR(h֤AXŠaO6b*|*:; .b؄3Yc$R9dBpgxsE=` y׷rS Rd7^ Äғ: TkȦ Y Š!7w u?%Ѭ7k?vn&ФDo-|,igI:M?$9u7I,4͒xh%JBZE$34L_Enִⷷw *[ZF8Rq"KTpw<nB+dagHGo3]<_l@5*pn#Xwu]}x2o/fz $@vk^Ϛ3k n7,Aez<=zjbQ"MG4w)33uP~,:!Az'K]ؐccB,mY3 56I^hNJmWMu2E/Լ5NU'ox8Rܓ4A& +]{VuWUѦU=|oG8tiN dX$t9*[JJ5T:Ro7yp&Z!|afĀŁGe!jf=-Dlr~7j_#Y8}CN^ $Sw?| V! `V[F|xxKVͩ}*LPЩA,z]DU@ܶX̍TFfҊ_c PSvX6 o4B_>"2}9@o?[ݢOHuk(5>̏ܞ^S\E3=E)ZĐڃ³;ZQBDf[[ӬZc$*HW$$pu]`,׆\ `ۑD9Z52 \7,@YӪAEeE+!in僖dL&i{={s}ipPuZ*G[E298U& P'oQρR.S[aۿmڲV!`<4`'A})3t ivor!„sI ?wT($BzJm%"L>7'8/z;2-9/G \ؐ5i{Cdlqc Vl̽J"I,ķD++#?/xZt l@6=o0 :M=βwFװ}ÀʦBҽcuD+_RBZ+1+9Z(ޤa(lpC͔P 6y܄̪5n]fTi}ř `>kܣ7qz &=M e0c D\OG Gj/P8Xo&ZsқfV(RC'6!5NIbIM:qZ:WCnOtdpd\ [5aA0sdޓ&+̀*sy\F%5^eN/p =@), ɫ]hii`P_`02|GhN֢i}$u# qju*rf8ё[PXW6Ccߘ֫EEH9aKC^eiO'ѓ9;4'cg{\x죽70r 90t*vPXk='Ijxӡ&(p㝀ܙM6q@EpΎ|^5+ c 24`? wv!0Ah_G5L1H:"܀Yr]wgrR`,"~I> ٵfoƜ"e^g4a+o?_e|!c>U:T\9`"5'|-9&*=aa#%N쿈yuuU]{b#?.Gd<ә4L2 vfa=u恋k^ 9M>ej$(~f/uUIDvF !8-'OLvI$"Bæ}<ʅDyڮJʽV,?MD'N֋%8@ cC{d}cr.R*8 c*9rӞkI v/>֡,!WwJꅣNl{!NfClvmq<5ReIW|lCli;o7C[kB޺8/ĚXQfe|#g=iVLh2a8)'ʅ FbK FKIj|br8o5n,+_+؉HX/mfF^rՎLII,DfpW)qb" +;-`l.F#-$I[N,f ~9%))V5^XV4v;3q`-m g &"!b@jy*ގeI|\123+տ2eZ_MҷtLZŽ?9x^=!؀6.΃2R7vP3=j>{Z,NQre*95ƾ-AT,2d]g;C"Xz^Պсvj`  fVB`ߋ»p)Us&s>Eyإ!JUE&Ҭ+U@'Fg#Wy,?@Ey@tS]PF4>muF97L1HI`e-%V{R GH4[u'Ec'kWBoR쾳NS>Hى oRtbp Icۉ8L&Aqi푋#{].J69~`&#(`FB{O^ܑvN@LR6uKY3D\̦+ ,c"cFk!7꜏/?d &zgd61Wp)u8ͺhzcd{`JZ,ƍLF"_̣%F.Tyث,|,eob#J? lf IuZ2H)NK~Z6ڢPMhEcCLF:QN VQ:^DgOdTGTDķd ;20:AןGVt3!A>J67#od!7B4wI \=G#ZND6'5Wz2[qyxsԑ6zwի J02':QVDn[h{3]w(AmsP9(mYA)l%0{70*^Q݈J$]2хTz q1Kd:?Ri2B>\S^t !д ۔H/G9yBKL*wT"i+0o+8VTq}Tu%L[i($4=t8FAX<xgT X}UHP‹@ G'̓|^,?hf# $ o %[=YЏ3c,գ4%+d<⭏f H*",@[i<=r$h4e|K - lɻS^̇pG4wռeU@b,Y$q†}kE?_ -8[c@Nu;,66sAs#i>חh2$=s݋^}J)׬Ia"蘆OHqdsZ6Gj\e}=f\5hDV(XL#Xyv4d8ݨ q`RZG%2dJb ?d tA o4 J@qQI n(ro\n#U[`>GS0qظj3Ċ:HEp֠\l=AMy~q6L[wG:̰?qڔDe^D'JzYӤ7Dv®WGb셸 >TrwDAd (E^II?> ooFugKS<}ܿaxDU]Ι21 Jj-=k:3\+ VhPnGTT(i ׆V|Hu4nwхRһ?#[Y o@~4c)z ƎNc )ECUf I=h[nަ`XgG2%Z~-Mb[~N 9NAA=s(eS;Fqv)!'kF9 ~\n܅ӧ^Kw 6} xDӞ iC3@e:lYf&ݥ>R |C})O^5V%*`DžVf4#3[4.0D!e?I7)2*<9X;op~rMsh9w[N5HDo$/Td ժ gJd}#Tb@z* Q҃5sC1JU$Ζ2Q:H Oᵊg56ӷ{-բOؖ\I;孛dR+dQt@$]wBG9i`8!!Y A˴j/A&^e =[;6ӕvqcq{0iFeқYCȺ)Л%OoXr&bÓ{jU:w-eh3^3< ^#KWŒsk&VE@ ѫ7p\J,flpH.kp'F*滗Xw}6b65oa<9kϮʆ5CL7km0 ŧjr ?!W[vY=Zfq-˓)rkH$1;E< m{#穠i׹opZH B~E821Ժ҇ݐgɦ٬.!=,Ƈw4ll(WwP7QTe-#" rzvч,ĨхZo[sdp N%r]DraU?x|mz eM)TnmO-a-|xs5\[q_1B!;rDOӘI܁dǧgKLaQcY)zf !Y?{l9̂(J{-<ýq8o<GX rmA'TD%p;_yܘwwJYuP68r^ަ fpy&ރ'"A8/5MŮxa?IJptOAc$^]!$Y*RHy,5 cw jn=~ۻ?{D~A91@T8(٠\ˆ$EL-vq=uՔ]q%@_]wCDGy&kQWJ3;gKD=͵~&x?9x~f0.Vz| YÆ+5R$l) #2S9nZRA F^?= Z?\ BČq6?k}Z53'"j{ /S8d&4}QTnagg<d^W">&FoNS 3}OR6.7G" Esж]}#2od-dll&^f@c6gy2 ϘRBqb|YH >Yn3qc8M쓵k!E*ltv?)Cv`K4Y\8|^^PB71w] 'yvU BcX/|Uc_ Y+u[u!pZت}ʛD?B+F8Rhu?JD&ѡH:8'XԄ<["NYܯ1V%5Ge5e~6n4%*KBoNkJ$.7lEI[g?ׁlc-p lT Ww7# uhiC!@C; m+lc9/ޱP=b׫C.aA)V5j pF|"TV=?Z^We) oj}t#{:@ֺ>PPPW#}w`J;hZ*z'l|Nкx!bPl% Е酪lmbGɃ& n.1zFk{" -+-߭WHCz)|& 7,b(.±˾D.K|OMd{u x'yىpq0`'dyC<oGj9UP0!-D@(q!:l>/xg9V@١oIcBGAk@&ۄ(Pє1o|5yxwl謹y=8g%h~y5|ϋɈ+9.(p)QFG~?e2pKA^8RŔ2y:;k5Y94 ݹ۱`.y"cV-ASע]Va邼z}|8DEsj8Z !VQ˝?EǓzq~>08 4kf45 | /g!4) Sy5sV>KlH ]JKw`-*HP1l5_\J Ki`mY*;0 QoR;t\6*PdV &V9^s6TͤzhYLaɍ^ ~Z kDLQMۊnZTfD!^Dγ$pzWػlSXVRr)ѪgM%AQ=iKv|秦 \1f@[jq0P4$"YbkʨAWi\d)fx0uZXY c]LgW=oUfu4C3 %$nT2+V`h0X MQZ&B/twG4NBvX(2dL.ݛ@ +pD23W }a +&(+^" -_": ;r9h6c"}_KKlJGo*㺪p[~ϿErurw#Jߟ#aSiD𽅿z~^ֳ:<.y<W"̾/E`؏|9UfWx>XgNϰuGR n"M\tSds0l6&ws!i=,}e?Mc4.V_)L֌?2,D/8Tj|qۭ9Ic1tN,Vs'D#aIcJ|R\4A~=+JZݣ"\֧̈́}24=lqܭ #iy\ȲT JټݥDtʘAM1:DqŐ4NdFUPHF7p}7*8eDKkL[Oimm惗!Qӗ p>AXVKHrb  ihPȾ,Õ9e秢MLjqa#{YA^2֡KeI"xC)MFWiѵl>XI'],D8w컗-pJ3}b+sur=]iVi|EWL-VmR,;e `0,ʟq1ƆSЩ.>@,Mh˧/Ó#[|w;O͛&[ t.3UJ{cTuXheQq9ZRF]ՙZa^Jh墊߶&1Ot%T.`pcjG&)p,x~K{Ha1-7<5$'k\,AG(dXtKRP9vi# 0M:_oKwPJݴGZmv|Mz I /02nCٴ̦9l:T&@|.U\T7@KsgؒNnk%X֎JcK: @>>}AF1+LΪج7;#M4-plH0v Zc$_ƙM8Ijr '1 W̲C6 @pU衄&5!%cIV51 r+z8\F:i%eI~u-I(J^z!5N%آh[*65E&JGаm:b }y2kYiLoS/K2 ?1% 5&Jm{bRc&չ6~I_En[911e׭gAp;%}f,>?=Fۢ<)g>+ b.HoY11B% f-x\yH^4 MtSNkÝFw\SB2;.!=CJF,IN.&51I~卥7of?q}4856ҴLP` 0㽞=:7p4Elِ:C*&ͥ(UC s\FiV]W^_Cn*ڤʆJuߛ0hf_̡N` vT:B&CT8- ) [jrHGLxo֥JҐAD SCYsَ1/dΫa6q)fJ Xӽ.\z:ݠ!RƩs NbU܂>PBŘ10.$D|'ӡQ epɺR-$vSfI-QNQњёJ~5!ʢN|13;!#nꪊ5c+ +3|);C_J^Ƅd3FNΏ&Eycݒ)@x%{Gv.!%HH0~"9;q,B}'?bU^:rMXy+l%H0V3lWr.iՈ(-5-VO6qz#Ps60n6"|˓[]C{%CWcuisC^ӂT/">dZ0%kq >o}ȉPɘfa&̓0f9s>.>էG,U_y^!Tï(`!6(Nԝ!x߂8C9C X1~ @ƞJc^fC7ձw]9Za"@*tU[9ˇ8]kTÈ8#V~HUy,^PK[nC;QjV"HYóZWѫBRTJ9/,ysZYT mSLTL2k񘥚l^VVx82 kd Zz;j CL}d9B9>9a;+R)25NwKWU^Y! wzII-Vz 8Ue򪰝0nLjOS> ?6@_f% a(䨹e[>mچ1a">(7ԍod%hw70(["5[&SJmᙵLfAd;'B7x% oSE_GUuP.ʒ{ 1@>e=S+J}fM"M{j`>2) Jx~T|l(o+{@v>/uu4:Y2OU3scrj3b0R>VDa2"¶_1Ro!;Z{kI0K>d.E1g<}{}#iF5te uM'(`άUS 竗/n4%H?x)++{ # tѫ6_c>'{Ҏ&TgfՊ4"iFF7ydfpf''r3X[ItK?SBv&$sb@e [+lˌR|/XyF Xq}G"pek@=*MH.c Yv||=#,F@(e`'3QAE'VIպDt[-]k\ԈlAQxɈN|i7 uj,v]JXzSoXoKHA13ѽ}?!ST'cePX`)ߑh71׹1[upxæAfW uZB.4c/CLޥZ85DqΙK׾\%B~Abɽo7~/3e†'=]q2߮C*ftP1ӿGZ{h#9P h1xbI<"/{&83|5]\y0ˮp?R5Xs'Sa#Glt)i_';vv>hfdcM%T/S/I.AΫf2.yl(Bqe#W^` DƗT ɀ04nQ49fN)~Pd#n-Fug^cp%N^!OAq*:,0nsBI1{zǦ `;թOKNwQ.N2d;V֋e)ibpFߵg ?eJc]![3#]XԀ OF v@EZ%{ܖi6?EEx$Luyzw"X/TDXH]|(8d~::vlqJұb ѵM9uON `k%`XKl ?*6:HhIEY޲2QE ' F0zrZ/WH&f*QآJ\=,Pl|qnzp|5պ&KI+Va95Xȣ~Zms7TajXxQDD=;*@ţ: GmF1lCdS8٪tam߱[ ? 7.Y[˺ oߋ) =~/ -ܡ\rV`ί Ұ6u׵jy (7 NȊ1-Zgho>荦uTLZm?t DQh{5 {BOpMgBJg;Ú>-y96N'+ (/d}]\Ě Y>@9b~Y0|_JOr6#IQ謠$ $D`v?M_R)T<`wTI04л~'oq$-N85[ |jCSz~j~ߠW%s=XH7®~EB5c:FWv#J"31GS YJc92”PvqFe=}sbTgC'āP[quhzֻa`sW_E=)آEX友~CJ`CWMm *-D)Nwln[瑐| n%a/B%˞a7{EpX$< d<\\{tHV"\ [lH>snf8i=9$e$\~7>J}`CkX/1D}-N3*)Lw=Aģ/] AٳD!&{雅0'=&TΆЬKb&֑i#-'d5w1ɒ4.S:L:Pim@h+c|%i(IJmp}_tO x|qLef7[;MD2bnːz qBE?ˣW%(}]-4_ХNV `wcWzcqGhTf#>,u/'M?\yf9Cl"I*cP:=S@j CR}Zxa–͉s4=Ws҂S] S&|u S_~%o^\d_`@^* 0æ# ]#ga5#PpTBlH%–O0cf!0gu 7} =ȌW Cjzi !I;~E'8Y;_.䒼b

T 1c$ @#ZvapN uȵ5ےH7]NQ YN!j#xCңbr>iW*o*BZL -9IBhZ,Jю^؃tMb\G㞵dޙ Z>!$#|"<}0U O$/!|p5 D.X\ʇ2/!O J;pHX$65ŗjj4/Ta$5M\Su e2\C92*Et8rVyucmTg*V3Txk$a_u\FΥ- ^hZM}/XyET*Qoh((@Ɲ98ߠ=9E_C+b IΘ /Oӗ9b )yLyS i\aTgsyǂ"dv×xp GͪݖmARV opf$DK DłmaM] >%D`pO+&s_gE}&(736=9 HBw߹d9Ky(a*tv#^XE x!1^4c;5P㸮ZhQټF"Ik()s x<2InpV"~W'l{ThQ9)G:a4O/}iH>ٻMX웦1w'}iX7lU)fe^3 z_!}W)'=W!/b?TJ ,I9_Xi ;_.,=q?f%W2J;u~~wHGE ;%.!5nes(Q )XU8;l'[S^@\\'',<r>:V2w=(;*iT-IZۃ} nlq&dqTvkMe{] W0Qc-M⓫ fcRm`jI}򇉎rWv %- 7Ku* p4T2?7Ximd%Hi5:q#Ћ]o(٤76B3֔((FoSPZbjh FdՏcբ(LWt9NwmwJ(kCof : ]%\x3)>Ieuz :v!J2ȼ_0>Po DBRhvoà `Ge:2]ԄA4lGk= >jq݋]snfِ |+C%('ҙ>=ƖMSQz< hg!,cfHM$_Cߘ~io2eV0?7Plw)4fc|I΂|H`Ƈ/L5 }zG+nAUυ55K3ΑhE 8sJGA2c7^Y^S>b>i%'һs3yeBA5<4cMIFp*&mX ’HV"x E>mFlD!L-@U"#c0?rʿTKpQ%=v U#JD0uZ32oE_[|,@HN[,4 Y qi]yd#A`/M(ٺ6*=UŘ]Ɨ~HYk齥>g=mi̱VTNvfBep/NH _P]|b ooC0T0;LpV'VJi.jMW+T^K0>WdVv| .x*ŻT!!슂Y!\v|MU#CUenfGV[aCcY=WX ?ka,{;uf@VD8ՙ-..;:CAG1 5q#!ĩbg]T`6 +ZSvm4:0O ګ.˥|LJ4} N72 ũ ͟E7sȸD+|v`a16΃) Z3FJnyC}p"[HE&`[DSyY ̸W(g~@s8K˟%z+ۨkaA E25tIernnq4hTR@)y O9aɈ#Dh[ 3!./O:),"˨v5e1j@3eEȅF#Cl 3D?8_i4H違_crIEpe80Qt9=:ű|JwU,DufL= D^gŦL,R9s}Sf:>GGo>N8"SLPNZyn`[ ;eT=3[\:Trك y6z≐_+!ͷw=.uצ ۬"(Bc Uc!&WE:m F%g.P8s WӫNm#7I[.[Aĕ(66S)*Tl!ަcv1P9OW<Ȫ9!jsJy@ bUc߂C:\ChCʯeݰG`h ulQxۗbm3鎕I$īh娷n>] #΋}\eE**qr' βRXs  %'4Vz{}@!o &\ Z;5x nceS 0nW 6 p,iJ ,q\ʕW`J xtTv;& ;b~(Z۶ڪ9o<< źLӉ&r2Qha]d=_ J5^BF/o&5XdjDy;^P?Mbv(71b,m%Y$WtIYHjZEL.Bk#`̬f,Sz,e:;3R$%ÃCl6!c)"s6=#ў՝];!ݔjWVw/P[]OP>9󗔎+&(FʪW'L >8͐C Ee=AKCe$2$PKD2ąbʭU{\/Pv'0|`4H]0ЮZTlF=i6gK!~KeH^u?1QJbs9]e^嚿']hL[ސ4?˹k z0:qEZTsAD|[1MnO%9 _2eKл?=g'(K ϗ]6( ^4peˆ",D-^ Y=&ҜhVGVROTa`bȘ!/9L({+^sI }ki2o·嫹-@G尩.ELJR|-A5naP9UB9hh FrxQha6⊬MbW ׋D6=,a01̦[Xh( j1Bpİ]tr܍NBlҐR+#:,e |T"P%<}bT62z*G[g Oʗ V]0:a}}+wư R q 3n&GQrÐ#~w/3df̟0[k龩Il|5-=6 E:MOu ^Lh TP!1+=ћp|e8[cΓ,j#E^-! :%w2?N&Ss}(R7[zYVֿT^eYi{vTOZQXLQ(g6R $}{<"ȽR]%X}sgTtY`dG3]&,IlB!ҵk581t`ߨ5>]S'`c 9Ĥ),|_L{65Д@TNH'(0&FL.*a[!sȚ;WS`/$}k+AC]K8[{`H܅}\LS'ۡ$T!:)`ouk+ȮLAd!fG*`D]GxP͙uU ]G6_luKwZ\]̐Ssn+(g+@ZV嬵xH 5IRS=0`ǬZo*+ngo MC<&{|$8BHT,% :AN|(& <-1*7o]`~`s^ ?-uK "1{ɘNkG *P(vEd}0lW5 J,Ґ*S#^pॱRg訐<(|!B,Ϝ);nqc2ŝf#Bo'JaLkr6CF``P9]Ond#s/X-=!$nCΡ8޻E!cJdfXGuܓ&*ɶD9rH8E哙%<>1h%BoYJ+r]iFS@큵Cz`V͠-z̰~(}-iWXÔUι3 u)HՍb. F1l !Pz}K>a>vz/6| '޿Dg~s'jzԾE $BR\/5J֎Al,477o|;zA,]z1Lr^Q٠ +dcItg'yMcϲ ӣC*ͺ T.T6CSܯG^lugu:Q&qܠK(Cbax0D1Z0lmS"O.sk&z=[EtIW:i "2S$DX 3gwE%:7Onҥ\5Y'P6ϋzNNF<D -6c>|F]-hjdzi j[j ;;≺ڪ }2.6_TXK" &̽ I %SYiQbfbZ_85oթ?O=.Alڝ3Ös{nmʋϳߣ)ad |;AF' TQ5׻IȂ>,%Xb|׫ئ2xi:&b4$'5dE&M}x\~zKKGR,6/ŞPb>*&GxC茢"Qf>[B5" Q@ɽA\!ǭO0y`x,w7ͷɀ%?I_+x7&BꁧcH]a`=$6$%D}s8<`5#BuSk}?;ɊC1g5z6oCw۾=d 2eK/VNRGndX6jJL=*VhԂ cԿƯ.6L?7֢珽݄DMiq4Ǚ6pVR.5Kηi~x.'tYKXm_2&cuJB?91-X@ 1%qr1O{kgHYuIhDXl#p>mOI"EB-QUv GFS* K}9»"VE=s#ob>ʍ{UG,AvGnzzurr5rJ+Zl+u]1q"(\+/1_l>9x)pGrCR\i@]ˣv0 LZ`Za8 IX4̓,eAj7Pqiz:OPL3Ɠ1;,[ Zp$?< %aIqR|*ޕiUi!"GQ?7*.cc,g4D]Am N)'&K^Fؓk;0Ϟ1WWpc)K!iyEUw_* żxahw[X^ @TXyXHFc`nÉS]5”p*@{}ƐʔCoeu`lUv_ a0O!$ UL:UYo[C6ZXVa Եc bZ=%h"χk $$/`_Vm(非TA g`mQ;i&Xn95"[߄ʏJ{/3얟v̕~3Oc*dw jJ(잋,[!+LK8=+[s&zs0vr$Jr%'wP`XI/_&8촉žeC` |q=.ҺѱWi8X jwٲ8EL1CvCZnY!UxmML<ƜNϒ(+pjPtXN$8 Lz^՗ %G Y7p;%tU9!MNi(Ѓz{2zKuJ'7jŶ:2j&ͧt,+gkڒGvij86iU:biOV4'^mzz?7RoLQQL>Ahb WhíT@+pʻ 9mV0">Xv9tg DXri1DZO Vʹ`{rE '"GHѽbOfN;AQ!;N+U#Ҥ屸p-#ɎKd!vIn.mnC*7U氿*Z Lut @kj! 6˒g:Ux}e_gcؕa7h4#&9@+O b5srFGMTY%=5D#-ʶ4'w!J-v!1̒8~vQo/?㩣|]ag$#(&QwY\V6佰&F!Z е ::A$f.']nc䂐oZ*;{Xo 4B8/شyvӬAw-x5,h-e(qc E1,ؤjGVmX!#>3\neܣHuzjkǙSF1M";N$*(V-lEVd =Osd w|vPY {Mz|)9 /5 ˢQ+͝n3XFZs+Mw B0~aY}$} ǡF %+hluH_$ʾs|;}l*O1dp%tjHPK{Y$q!W (.N |Fx@ܯj2\g UK)SL onsLQ׉J+N2@DmÁGcaN">`~5Vjd^29lPvFi)a2`PĉGфLYJ_w-1!Z^1AUwL^$^EKoۍ! %#~_Q"g%(YlsB V9(}lK%{@Ouj"t`eKV92vj,Svӌ^⩖I|m{M`sN`!8TAJDTgGL2Oُ{uwzJ`ꖢD/\F)k]9`ͼrb]9.E[&PDKóa"ef2cGE\kwvGFԃ.9:5 TxhS2'x%<|7EN>E,"/sIK|t^_mZ6V)6+ K·ɏ֨@c,70&wGA6V7Caf[>z$k=_Pc ƍZr+ZniZ^|MJM D/,s@w*ԝ[!_9(7Хc~YlHO>#a 1ށhRbd@(Sei:lg l4J=@E4K|9AAI@Jj8[#vG#%1BA-iȁJHT>]]@@\rIjke-KЏűٍiMetL[4k$SnjCՋ՟ExڶI 0%(元SAslg}/DUl8In3vor i) 0/9 iUI . JL6l"cU, N7<:8W,6MH҂lI$O3 HtCQeLMw4 RIYgx¨GZM&6*|HCo-j'gGNw4r\,>m+3:j?#@u`#f.Β9Atքu\ǎp죈BVݏes9D 8Zߟh0 7do$ʑ#/ȱ/1)6Q6&OsS$'ׄ<&9 qBЂ" ]3\vYE'bA7Eͤ/dd4FD?(b.M;)SB[`8w 4++InV)C-B1Bw-Wi`3 z/j}(lm87MѦo|Ūd,p3gQШq~ RGV. cid, y$8r[%e޿žI>.@FX)e.ōߣl4iC e_0^0zq 1+7b)anȯR.ͮ3(Mvts٥ag Ʊ* 0rIS~p&s7[hT=_GZCA9 `UwC(ki ~ ;HI/=$x ۆA仳%|>ԇcOj+ohEMxr_Lo?+>ޮ+bwwoi߼On+邗B;K! [#P^z:A3~ %$-ӗ-^#KNU~Jܡ@b~(6Aë \.*Ջa(}fTnKv4Qg_ZM4Km%wZp&KW H+z#p;,ڰŒ^[]JNrZтE+so )sgx1Lmv~uj[^MNw>Ԅ&=Cƭ-mGـtPG(oNCoֺ܉x?zѻU+ thNG߭a5WPl4UE|:aeVx{7StM@&~k=mzq#8Z#;aM饵e>'\ҦD:;pӲ!AA)("[" T앾|$ͲnFzr9C{oDLBc)$ 4p)+;U[[܂r)VNd1/'cd̛z6~M/!^Uy{M7H]aS]2fS YP,§b܊gGf/˄K]ߩ@h5S Adm}dˉ>ܴ~RTtASkG'o|:~6Q6)RWW@$ oU_0"@a`BB;گ0]zsua^v{V TJulbk䃩D Q~*M\>oi|6Bo*)zn?2m($)%ȹfHXsSp |[<[eo4XRl?t}#vO -,rt1YRw (,\+F03(4MV_<;d9͵#$yF%!D@qL]%urvw zV+s%_XwLt5 i0DqTjgNP4Nj!{;s`G*֍! w5HkUP[1"א9O-wxF/ 5"51nN:4;FE۰v$=X2  2/Dz}RL blgƒxmj`yT ]蒗"r  `Y]r(Rx>Zm,Υ+o] *YVOLR<ťWfC2G6Y2Vo`ORIFYgmi:{0|?W.C^e-`C6ؕ G送UswStEfDn,;+Ku0ױ}.fnkru|Qr UIc†a\R O1'_Öq߹Y"M{S>MwӴϯ?^Kb?vuo06\EXtOMYwTxBHx>s:콵j:x侦bp;鎙*hX8v%eV8"KpU<, spŗ3R ;:ZIϥ_^ uޓS @F '50ޔWͳGHp뭞35ԚTCjpȜx$|ʡ7,>K\2eeZfQLkI䍷*fqX __@62nXޟ41:s5W>eJTI6wRIŐA"hokJ igIOi!=Wؙh;y v )vyj>hgLβ l26~9+A'\l`\#+%R)ZSz˻ɔ罱d%E:5f] yK54 ^\>̵6]&A񚍢=F* %2EX]F-_$ppLqA=˛S^J?tI~Eo{ V^Bd*=?z,m^o„uUy ]XV!)l#kOjAi(x04̼@-f]K#k/iݩn/)(֝mYok3au?,`]{&hbsnu|V^޵S _=s 3W,gLi}u8&"*Cd.; XBYPЀ'bǒr2N J @l qZ}I'S#=4d` @?>chrw8 ('iY&=[ϛzRRmދ O:AAy75&iStS4BRT@KMvc`v>zoЧcbNW$R<^(^Kpܜ>&X؊dR`|uSrf!Sٕ4 4|u.Sn~BN؄: SoKg49kBqZV22h,`V0*UFZ($3\xӐHk%ʼ˞k{ʀ#:4/2k3q!=R"3nh9 yZ5Ӷ7ϓY H_C =PTsNG#">^nF=ȓw*zE0 _ j8O i$R]}=IYKgܨT+iBKW_4c5ZL$nfE%5xF\A7v<_ =(;AD~?yܷ7:Z8\ј{{9وt5߻ /[c\L@ ,}!6_P+&fo{8/q5qVB6tHm5]\w.Ȟ  =76?&dAۻddP>83U94\5 [:;ȸ'm2dH\:VԝEϪ22hnoEZTĆ/ōv>+W/;"w;hww<1/;kRٗh{o?|y2#9%zlyUv_9@,fs M>' ylfj-A>;qLҹͬo'o53_vVRLK =-]'>]5Es-1Qy: b%R/BXٜgL ZUZMh~'8%Ra9t}JA~ہxR6f*N'caVٱ4JvAW&r' lj &tV[.VC7tuThn@RajjT)g@@YzX@Z6 lzG9B)$FD2{Q)}bA=/o''dsKez/F5&|M20V>PSf#jKC!J OH(9QMRNRj}\pV8Zjy8"GٱɵQ[U57glǭ@3#6+Bn^aF2.xZ?稐 +et5s`G;6&Fy kKUScx/,W. ( p*^L?~O; O"$:Fhx^vWFu`RSOXj@A*ܙlI?wi(*H)Mk2["&\񼩔XE u&P`Q#t*$uG+>Ќ< }CVPLL9j+ 4Q3u,j RF-Ur*tɜ% &>B͛_$sY ZdE^L}B9ei-[?hZ^rt{9$Ѹ}Z=w@ޱ4Ҷ⾖kOuץHuE lS1~=\5a4hrhDSΰ nl&m, ܦԺ'ޡh`*(Ȫ,}cl.&#zF1v͠FwlPh~[}8cϸ9(6&#R "3 '[V(1 /a >gX7…W 7?kBk ߜ%N'ae ;|WiTH6*MQPӏw[VN⫹=KJlh`s|6+[᩟ NIEusP@[]x:N1$v]Nhq\Ӄׄ-{EW B<7BtXf1@y?<t3]p`Cߊ0O}eq ;]g[}[ QwJlW+Np~[Y"BrC)!Ӑ_G:ٲ~cA&(+"~ rz9/[ꉗH]fJcT$Kɩ ;5 +ݵQ:ФC{Յ7jhnspI{(n^&ƌ8ڱx,Tlo niUO^q{J`t]T>:]Y WgpsEC`&ήvX֬KhksB0:QįT6G!q4NI\߇hѫN+}!J(xwˈ{! (3tXɑ.lyp}8i|?"Js.Гmg瘥y+aNb ISG2r#6e)X慡%\hL{< hyc;+ GǗG?qFKJG %6_YRfcZ?s:'~MXPNs5 ޓ.?BG.pc~H-_L.ԢT6OhĎ 5T[oU59$ 6J/. k-9KnѳhVqj&8~ܑM;l ĝ=5> WlG=ʐSN#}wبx'Qeet? {Nn~ |Tr<|h]jr37QD{;cux}CjG% '>`YyoyC9[Ql6n=Pwzg,qp ^O#j$>:Ru;6bch+`=B8a`;ϙsZ I '9H ܭQHАʦ%+x"4ֿ-!s&u;}EbuU_Ob\3wk ?˕,q%-| w[Ny%K3Dŗ12Dǂ[!_5%Jl_|O>]=WIY_Ze/@UZO%氇PDNUv`?3/vQxB vFmؽdcvg<5 NrM7/Wd2=b/k'X^ 3+F;czɯjx2%b-O;R7b_ɎhT:KGXt%꺦{c"TPH_Ru vwI3Aն4 jDvy{7V EzrDXL34|<03s=!ܖM1}8<ґХJH{`gc\s|BX<ؑ!\j 68 3GSRTGGM/`JO@#A3Zi魻?~E0DϛF#\^ۺiR pI6@AT5p{87UZbVV$fJi)ī>Ĩpkc qǒ LPp}opoz^S ,`F;Wn:.\Dt|nIs `3 jnS&F=ņ0'Ҙ%Ԏoy)s_A>QNZe%yNqZ^$E,=@.|M4&eF2)HdDIc͍#ju6^]; RG=.{M1aX6kƨ;'QDF嵧uֲm5yߩ$kn9t_;HBgt:P%x%\Ԕ>O~}ԷL,W׻aGWtb7ChmLa:~eA MVu;|{`F -٧}c?Tn5# HA@%s<[KD繳cHk(A63ܞ%'Ӫ{f=Ćy@!Eu2}3*-@k@>0 '6\c^`=YhƂ24F8dgbЭ[#`hghʘ#Bg] ;俢ngZ٨z0?M)cc0q 3! kM52PgrLX⣧=E4aM*Hgy#|gwx΁TRp&ME)y'Bث}WYͯf]9&ߕy'+n!nk?I7ķOͣ n~iUۄJB{nB5'D(hXZ(t2{*8g\<[]p*c@ kylH|dDZ61KA&ȼ0ze$to%cRboY\rxvQŽ@6ʚڊ9?Z!X1cbN\Q.֖3=#x_*Z b+D[<5BkLW%oZO@y' drД<ӼhcAMs9Ӈb#GwST+t&M}k @Y68'q{aPbZm/֎&~PRR0"q애%-f0ZM C_U=TOsY9P)4P^K>+NC-U65D q}VkI h0^g,fs U|eY:ޏ{0~τ%PEi\$DυpaL}R{WAY!R'լH*]>[-Plї?}T8Q_&vHzrҳdߢp[7e娱_qLDPׄtPx ' `J>B72cژuiAe iXRz20(&Ng{gZF-h^ !ǭ ;oEH+C- >7]Qw× p\DgW3CS3|-1vii[WԘgJ1n&e5WT~sq_ڮ u@*MD9Ԭ>N/S,nxNHS^^WBbևnR)n_\DzUp:MhSB)cpRAO!ȔVx)ÓT,O~ FC-AGT#%qBW8y*u ~_8$tsÏo z$/*8u엥HYuP.a}vTz_`W Ҷlz;;q&+k.yV}d^:!BQnb1?e/,r>pЗwV}ُQBT>mL[C? 1\ Oh,+.TZ/JeGz9 zT"[VsГN +:/_7!5I$[0MÞO [oMqVW e^.sE P[_L4 1[ciZ6Yu-~XLZJ2~'Sʗtdr(L]Rqʐ6^ A*DĢT3n{V܋u *UQYY!)Yjh؛F o(~0HE!`Ee:~-prVtC9֢`dx, kTUԳ5hIaz G=<֗Xo_ ?ql2Z 59nDrN0O\mAa!{|I>lU5Hɣfu]B\/R%+EFbg_sFR\36fT&Qhh=qñշ04$Qg3J膕H? I-^_ 0oK+$՟khq̱6{o<'yy+U+h-bZ*Zu|o)ά,@ҌQWdQa[`#zScUOF^%.wxKpCN/:fʼn &bKp,=F4 \fj*F ϭ5I"$ݐL 'BqV0\71G.ˁ?f$4?\xXRRH8ɗ zgw2[+ LU$q 'y#xU{8alcu7j`dv-=JoIDNAȯDžϒ|O79mo=l$ ._K/y$`X*8Zl]G=}˯SF$xN~_p4<f"ˊDV->W\ |I*!>XLG<ᝣlMPEd\VTJvfi,|cDg٩v--P2_Y\0E4~)ݓ1*H_q3;,eG8@7}oY$d91 0KpIX*e4,K% * U5qš@syǀF`WS1}Xn,OPSjԒEZz; 8=\_y-u0<8l*,oǵ 6զez:,%s!p z(@}wJ@.͐2 & c{)؏յ `\0봅@(߇A^0d+H,o.etiYqc YZ