Hello community, here is the log from the commit of package openconnect for openSUSE:Factory checked in at 2020-05-08 23:01:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openconnect (Old) and /work/SRC/openSUSE:Factory/.openconnect.new.2738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openconnect" Fri May 8 23:01:03 2020 rev:35 rq:800574 version:8.09 Changes: -------- --- /work/SRC/openSUSE:Factory/openconnect/openconnect.changes 2020-01-11 14:37:35.057126492 +0100 +++ /work/SRC/openSUSE:Factory/.openconnect.new.2738/openconnect.changes 2020-05-08 23:01:08.729346704 +0200 @@ -1,0 +2,36 @@ +Fri May 1 20:35:28 UTC 2020 - Martin Hauke <[email protected]> + +- Fix CVE-2020-12105 (boo#1170452) +- Introduce subpackage for bash-completion +- Update to 8.0.9: + * Add bash completion support. + * Give more helpful error in case of Pulse servers asking for + TNCC. + * Sanitize non-canonical Legacy IP network addresses. + * Fix OpenSSL validation for trusted but invalid certificates + (CVE-2020-12105). + * Convert tncc-wrapper.py to Python 3, and include modernized + tncc-emulate.py as well. (!91) + * Disable Nagle's algorithm for TLS sockets, to improve + interactivity when tunnel runs over TCP rather than UDP. + * GlobalProtect: more resilient handling of periodic HIP check + and login arguments, and predictable naming of challenge forms. + * Work around PKCS#11 tokens which forget to set + CKF_LOGIN_REQUIRED. +- Update to 8.0.8: + * Fix check of pin-sha256: public key hashes to be case sensitive + * Don't give non-functioning stderr to CSD trojan scripts. + * Fix crash with uninitialised OIDC token. +- Update to 8.0.7: + * Don't abort Pulse connection when server-provided certificate + MD5 doesn't match. + * Fix off-by-one in check for bad GnuTLS versions, and add build + and run time checks. + * Don't abort connection if CSD wrapper script returns non-zero + (for now). + * Make --passtos work for protocols that use ESP, in addition + to DTLS. + * Convert tncc-wrapper.py to Python 3, and include modernized + tncc-emulate.py as well. + +------------------------------------------------------------------- Old: ---- openconnect-8.05.tar.gz openconnect-8.05.tar.gz.sig New: ---- openconnect-8.09.tar.gz openconnect-8.09.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openconnect.spec ++++++ --- /var/tmp/diff_new_pack.y7OHmf/_old 2020-05-08 23:01:11.457352277 +0200 +++ /var/tmp/diff_new_pack.y7OHmf/_new 2020-05-08 23:01:11.461352285 +0200 @@ -18,7 +18,7 @@ %define libname libopenconnect5 Name: openconnect -Version: 8.05 +Version: 8.09 Release: 0 Summary: Open client for Cisco AnyConnect VPN License: LGPL-2.1-or-later @@ -90,6 +90,19 @@ This packages provides documentation and help files for openconnect +%package bash-completion +Summary: Bash Completion for %{name} +Group: Productivity/Networking/Security +Requires: %{name} = %{version} +Requires: bash-completion +Supplements: (openconnect and bash-completion) +BuildArch: noarch + +%description bash-completion +Bash completion script for %{name}. + + + %lang_package %prep @@ -117,6 +130,10 @@ # remove py2 only script due to python2 removal rm %{buildroot}%{_libexecdir}/%{name}/tncc-wrapper.py install -D -m0644 %{SOURCE1} %{buildroot}/%{_sysconfdir}/openconnect/vpnc-script +# +install -d %{buildroot}%{_datadir}/bash-completion/completions/ +mv %{buildroot}/etc/bash_completion.d/openconnect.bash %{buildroot}%{_datadir}/bash-completion/completions/openconnect.bash + find %{buildroot} -type f -name "*.la" -delete -print %find_lang %{name} @@ -155,6 +172,9 @@ %doc %{_docdir}/%{name}/images/*.svg %doc %{_docdir}/%{name}/inc/*.tmpl +%files bash-completion +%{_datadir}/bash-completion/completions/openconnect.bash + %files lang -f %{name}.lang %changelog ++++++ openconnect-8.05.tar.gz -> openconnect-8.09.tar.gz ++++++ ++++ 205537 lines of diff (skipped)
