Hello community, here is the log from the commit of package openconnect.1657 for openSUSE:12.3:Update checked in at 2013-05-21 15:03:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3:Update/openconnect.1657 (Old) and /work/SRC/openSUSE:12.3:Update/.openconnect.1657.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openconnect.1657" Changes: -------- New Changes file: --- /dev/null 2013-05-15 01:32:43.420028506 +0200 +++ /work/SRC/openSUSE:12.3:Update/.openconnect.1657.new/openconnect.changes 2013-05-21 15:03:13.000000000 +0200 @@ -0,0 +1,246 @@ +------------------------------------------------------------------- +Mon Apr 29 21:09:47 UTC 2013 - [email protected] +- Fix bnc#817152 +- Update to version 4.09 + * Fix overflow on HTTP request buffers (CVE-2012-6128) + * Fix connection to servers with round-robin DNS with two-stage + auth/connect. + * Impose minimum MTU of 1280 bytes. + * Fix some harmless issues reported by Coverity. + * Improve "Attempting to connect..." message to be explicit + when it's connecting to a proxy. +- Update to version 4.07 + * Fix segmentation fault when invoked with -p argument. + * Fix handling of write stalls on CSTP (TCP) socket. +- Update to version 4.06 + * Fix default CA location for non-Fedora systems with old GnuTLS. + * Improve error handing when vpnc-script exits with error. + * Handle PKCS#11 tokens which won't list keys without login. +- Update to version 4.05 + * Use correct CSD script for Mac OS X. + * Fix endless loop in PIN cache handling with multiple PKCS#11 + tokens. + * Fix PKCS#11 URI handling to preserve all attributes. + * Don't forget key password on GUI reconnect. + * Fix GnuTLS v3 build on OpenBSD. +- Update to version 4.04 + * Fix GnuTLS password handling for PKCS#8 files. +- Update to version 4.03 + * Fix --no-proxy option. + * Fix handling of requested vs. received MTU settings. + * Fix DTLS MTU for GnuTLS 3.0.21 and newer. + * Support more ciphers for OpenSSL encrypted PEM keys, with + GnuTLS. + * Fix GnuTLS compatibilty issue with servers that insist on + TLSv1.0 or non-AES ciphers (RH#836558). +- Update to version 4.02 + * Fix build failure due to unconditional inclusion of + <gnutls/dtls.h>. +- Update to version 4.01 + * Add support for OpenSSL's odd encrypted PKCS#1 files, for + GnuTLS. + * Fix repeated passphrase retry for OpenSSL. + * Add keystore support for Android. + * Support TPM, and also additional checks on PKCS#11 certs, + even with GnuTLS 2.12. + * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12. +- Update to version 4.00 + * Add support for OpenSSL's odd encrypted PKCS#1 files, for GnuTLS. + * Fix repeated passphrase retry for OpenSSL. + * Add keystore support for Android. + * Support TPM, and also additional checks on PKCS#11 certs, even with GnuTLS 2.12. + * Fix library references to OpenSSL's ERR_print_errors_cb() when built against GnuTLS v2.12. + +------------------------------------------------------------------- +Tue Jun 19 08:30:53 UTC 2012 - [email protected] + +- license update: LGPL-2.1+ + No LGPL-2.1 "only" licenses found. Fedora also uses LGPL-2.1 "or later" + as license + +------------------------------------------------------------------- +Mon Jun 18 17:49:29 UTC 2012 - [email protected] + +- Fixes buffer overflow security vulnerability. See: + * CVE-2012-3291 + * BNC#767616 +- Update to version 3.99 + * Enable native TPM support when built with GnuTLS. + * Enable PKCS#11 token support when built with GnuTLS. + * Eliminate all SSL library exposure through libopenconnect. + * Parse split DNS information, provide $CISCO_SPLIT_DNS + environment variable to vpnc-script. + * Attempt to provide new-style MTU information to server (on + Linux only, unless specified on command line). + * Allow building against GnuTLS, including DTLS support. + * Add --with-pkgconfigdir= option to configure for FreeBSD's + benefit (fd#48743). +- Update to version 3.20 + * Cope with non-keepalive HTTP response on authentication success + * Fix progress callback with incorrect cbdata which caused KDE + crash. +- Update to version 3.19 + * Add --config option for reading options from file. + * Improve OpenSSL DTLS compatibility to work on Ubuntu 10.04. + * Flush progress logging output promptly after each message. + * Add symbol versioning for shared library (on sane platforms). + * Add openconnect_set_cancel_fd() function to allow clean + cancellation. + * Fix corruption of URL in openconnect_parse_url() if it + specifies a port number. + * Fix inappropriate exit() calls from library code. + * Library namespace cleanup — all symbols now have the prefix + openconnect_ on platforms where symbol versioning works. + * Fix --non-inter option so it still uses login information from + command line. +- Update to version 3.18 + * Fix autohate breakage with --disable-nls... hopefully. + * Fix buffer overflow in banner handling. +- Update to version 3.17 + * Work around time() brokenness on Solaris. + * Fix interface plumbing on Solaris 10. + * Provide asprintf() function for (unpatched) Solaris 10. + * Make vpnc-script mandatory, like it is for vpnc + * Don't set Legacy IP address on tun device; let vpnc-script do + it. + * Detect OpenSSL even without pkg-config. + * Stop building static library by default. + * Invoke vpnc-script with "pre-init" reason to load tun module if + necessary. +- Update to version 3.16 + * Fix build failure on Debian/kFreeBSD and Hurd. + * Fix memory leak of deflated packets. + * Fix memory leak of zlib state on CSTP reconnect. + * Eliminate memcpy() calls on packets from DTLS and tunnel device + * Use I_LINK instead of I_PLINK on Solaris to plumb interface for + Legacy IP. + * Plumb interface for IPv6 on Solaris, instead of expecting + vpnc-script to do it. + * Refer to vpnc-script and help web pages in openconnect output. + * Fix potential crash when processing libproxy results. + * Be more conservative in detecting libproxy without pkg-config. +- Add optional libproxy-devel buildrequires +- Add new mandatory vpnc buildrequires +- Package new documentation in doc package +- Remove static devel libraries since this is the new upstream + default + +------------------------------------------------------------------- +Thu Jan 5 14:10:20 UTC 2012 - [email protected] + +- Update to version 3.15 + * Fix for reading multiple packets from Solaris tun device. + * Call bindtextdomain() to ensure that translations are found in install path. +- Update to version 3.14 + * Move executable to $prefix/sbin. + * Fix build issues on OSX, OpenIndiana, DragonFlyBSD, OpenBSD, FreeBSD & NetBSD. + * Fix non-portable (void *) arithmetic. + * Make more messages translatable. + * Attempt to make NLS support more portable (with fewer dependencies). +- Update to version 3.13 + * Add --cert-expire-warning option. + * Give visible warning when server dislikes client SSL certificate. + * Add localisation support. + * Fix build on Debian systems where dtls1_stop_timer() is not available. + * Fix libproxy detection. + * Enable a useful set of compiler warnings by default. + * Fix various minor compiler warnings. +- Update to version 3.12 + * Fix DTLS compatibility with ASA firmware 8.4.1(11) and above. + * Fix build failures on GNU Hurd, on systems with ancient OpenSSL, and on Debian. + * Add --pid-file option. + * Print SHA1 fingerprint with server certificate details. +- spec file changes + * Package language files in a lang package + * Since the binary is in /usr/sbin, keep the manual as man8 + * Package .a file in -devel package and have -devel package provide -devel-static + +------------------------------------------------------------------- +Thu Aug 25 10:24:05 UTC 2011 - [email protected] + +- Simplified man file installation +- Cleaned up spec file formatting + +------------------------------------------------------------------- +Mon Aug 8 14:28:45 UTC 2011 - [email protected] + +- Changed manuals to man1 + +------------------------------------------------------------------- +Sun Aug 7 23:05:10 UTC 2011 - [email protected] + +- Removed %{?_smp_mflags} + +------------------------------------------------------------------- +Sun Aug 7 18:40:53 UTC 2011 - [email protected] + +- Removed unneeded libopenconnect.la file. +- Minor formatting changes to several spec file macros + +------------------------------------------------------------------- +Sun Aug 7 16:11:47 UTC 2011 - [email protected] + +- Added upstream url to Source0: tag +- Switched back to original tar.gz file + +------------------------------------------------------------------- +Sun Aug 7 13:50:57 UTC 2011 - [email protected] + +- Fixed license name +- Fixed spec file header +- Switched to %make_install macro +- Added %doc macro for manual files +- Removed norootforbuild + + +------------------------------------------------------------------- +Sun Aug 7 09:20:18 UTC 2011 - [email protected] ++++ 49 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:12.3:Update/.openconnect.1657.new/openconnect.changes New: ---- openconnect-4.08.tar.gz openconnect.changes openconnect.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openconnect.spec ++++++ # # spec file for package openconnect # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: openconnect Version: 4.08 Release: 0 Summary: Open client for Cisco AnyConnect VPN License: LGPL-2.1+ Group: Productivity/Networking/Security Url: http://www.infradead.org/openconnect.html Source0: ftp://ftp.infradead.org/pub/%{name}/%{name}-%{version}.tar.gz BuildRequires: libproxy-devel BuildRequires: openssl-devel BuildRequires: pkg-config BuildRequires: vpnc BuildRequires: pkgconfig(dbus-1) BuildRequires: pkgconfig(gconf-2.0) BuildRequires: pkgconfig(gtk+-2.0) BuildRequires: pkgconfig(libxml-2.0) Requires: vpnc BuildRoot: %{_tmppath}/%{name}-%{version}-build %description This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols. AnyConnect is supported by the ASA5500 Series, by IOS 12.4(9)T or later on Cisco SR500, 870, 880, 1800, 2800, 3800, 7200 Series and Cisco 7301 Routers, and probably others. %package devel Summary: Development files and headers for %{name} Group: Development/Libraries/C and C++ Requires: %{name} = %{version} Recommends: pkg-config %description devel This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols. AnyConnect is supported by the ASA5500 Series, by IOS 12.4(9)T or later on Cisco SR500, 870, 880, 1800, 2800, 3800, 7200 Series and Cisco 7301 Routers, and probably others. This packages provides development files and headers needed to build packages against openconnect %package doc Summary: Documentation for %{name} Group: Development/Libraries/C and C++ Recommends: %{name} = %{version} %description doc This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols. AnyConnect is supported by the ASA5500 Series, by IOS 12.4(9)T or later on Cisco SR500, 870, 880, 1800, 2800, 3800, 7200 Series and Cisco 7301 Routers, and probably others. This packages provides documentation and help files for openconnect %prep %setup -q %lang_package %build %configure --docdir=%{_docdir}/%{name}/ make %install %make_install rm %{buildroot}%{_libdir}/libopenconnect.la %find_lang %{name} %post -p /sbin/ldconfig %postun -p /sbin/ldconfig %clean rm -rf %{buildroot} %files %defattr(-,root,root) %{_libdir}/libopenconnect.so.* %{_mandir}/man8/* %{_sbindir}/openconnect %files devel %defattr(-,root,root) %{_includedir}/openconnect.h %{_libdir}/libopenconnect.so %{_libdir}/pkgconfig/openconnect.pc %files doc %defattr(-,root,root) %doc AUTHORS COPYING.LGPL TODO %{_docdir}/%{name}/ %files lang -f %{name}.lang %defattr(-,root,root) %changelog -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
