Revisions of openconnect
Ismail Dönmez (namtrac)
accepted
request 799557
from
Martin Hauke (mnhauke)
(revision 83)
- Fix CVE-2020-12105 (boo#1170452) - Introduce subpackage for bash-completion - Update to 8.0.9: * Add bash completion support. * Give more helpful error in case of Pulse servers asking for TNCC. * Sanitize non-canonical Legacy IP network addresses. * Fix OpenSSL validation for trusted but invalid certificates (CVE-2020-12105). * Convert tncc-wrapper.py to Python 3, and include modernized tncc-emulate.py as well. (!91) * Disable Nagle's algorithm for TLS sockets, to improve interactivity when tunnel runs over TCP rather than UDP. * GlobalProtect: more resilient handling of periodic HIP check and login arguments, and predictable naming of challenge forms. * Work around PKCS#11 tokens which forget to set CKF_LOGIN_REQUIRED. - Update to 8.0.8: * Fix check of pin-sha256: public key hashes to be case sensitive * Don't give non-functioning stderr to CSD trojan scripts. * Fix crash with uninitialised OIDC token. - Update to 8.0.7: * Don't abort Pulse connection when server-provided certificate MD5 doesn't match. * Fix off-by-one in check for bad GnuTLS versions, and add build and run time checks. * Don't abort connection if CSD wrapper script returns non-zero (for now). * Make --passtos work for protocols that use ESP, in addition to DTLS.
buildservice-autocommit
accepted
request 761851
from
Tomáš Chvátal (scarabeus_iv)
(revision 82)
baserev update by copy to link target
Tomáš Chvátal (scarabeus_iv)
committed
(revision 81)
- Remove tncc-wrapper.py script as it is python2 only bsc#1157446
Tomáš Chvátal (scarabeus_iv)
committed
(revision 80)
- Remove tncc-wrapper.py script as it is python2 only
buildservice-autocommit
accepted
request 745098
from
Tomáš Chvátal (scarabeus_iv)
(revision 79)
baserev update by copy to link target
Tomáš Chvátal (scarabeus_iv)
committed
(revision 78)
- No need to ship hipreport-android.sh as it is intented for android systems only
Tomáš Chvátal (scarabeus_iv)
accepted
request 743817
from
Tomáš Chvátal (scarabeus_iv)
(revision 77)
- Update to 8.0.5: * Minor fixes to build on specific platforms - Use python3 to generate the web data as now it is supported by upstream
buildservice-autocommit
accepted
request 704146
from
Tomáš Chvátal (scarabeus_iv)
(revision 76)
baserev update by copy to link target
Tomáš Chvátal (scarabeus_iv)
accepted
request 704049
from
Martin Hauke (mnhauke)
(revision 75)
- Update to 8.0.3: * Fix Cisco DTLSv1.2 support for AES256-GCM-SHA384. * Fix recognition of OTP password fields. - Verify source signature
buildservice-autocommit
accepted
request 667958
from
Tomáš Chvátal (scarabeus_iv)
(revision 74)
baserev update by copy to link target
Tomáš Chvátal (scarabeus_iv)
accepted
request 667955
from
David Liedke (dliedke)
(revision 73)
Update to 8.02:
Tomáš Chvátal (scarabeus_iv)
accepted
request 664649
from
Tomáš Chvátal (scarabeus_iv)
(revision 72)
- Update to 8.01: * Clear form submissions (which may include passwords) before freeing (CVE-2018-20319). * Allow form responses to be provided on command line. * Add support for SSL keys stored in TPM2. * Fix ESP rekey when replay protection is disabled. * Drop support for GnuTLS older than 3.2.10. * Fix --passwd-on-stdin for Windows to not forcibly open console. * Fix portability of shell scripts in test suite. * Add Google Authenticator TOTP support for Juniper. * Add RFC7469 key PIN support for cert hashes. * Add protocol method to securely log out the Juniper session. * Relax requirements for Juniper hostname packet response to support old gateways. * Add API functions to query the supported protocols. * Verify ESP sequence numbers and warn even if replay protection is disabled. * Add support for PAN GlobalProtect VPN protocol (--protocol=gp). * Reorganize listing of command-line options, and include information on supported protocols. * SIGTERM cleans up the session similarly to SIGINT. * Fix memset_s() arguments. * Fix OpenBSD build. - Explicitely enable all the features as needed to stop build if something is missing - Run tests - Folow the library packaging guidelines
buildservice-autocommit
accepted
request 624073
from
Ismail Dönmez (namtrac)
(revision 71)
baserev update by copy to link target
Ismail Dönmez (namtrac)
accepted
request 623935
from
Jonathan Kang (JonathanKang)
(revision 70)
- Modified spec file: only add this BuildRequires on Leap/SLE 15+ (fate#325553). > BuildRequires: pkgconfig(libpskc)
buildservice-autocommit
accepted
request 615653
from
mrdocs
(revision 69)
baserev update by copy to link target
mrdocs
accepted
request 614897
from
Bjørn Lie (iznogood)
(revision 68)
- Drop pkgconfig(gconf-2.0) and pkgconfig(gtk+-2.0) BuildRequires: Not needed, nor used.
buildservice-autocommit
accepted
request 598054
from
Ismail Dönmez (namtrac)
(revision 67)
baserev update by copy to link target
Ismail Dönmez (namtrac)
accepted
request 596976
from
Frederic Crozat (fcrozat)
(revision 66)
- Add BuildRequires pkgconfig(libpcsclite/libpskc) to enable liboath (TOTP/HOTP) and yubikey support.
buildservice-autocommit
accepted
request 555605
from
mrdocs
(revision 65)
baserev update by copy to link target
mrdocs
accepted
request 555267
from
Dominique Leuenberger (dimstar)
(revision 64)
- Add explicit python2-base and python2-xml BuildRequires: the buildsystem checks for python2 and disables building the documentation if not found. Buildinf the documentation in plus depends on the xml modules. So far we relied on other packages pulling in python2 for us. The package that pulled in python2/python2-xml so far used to be gtk2-devel. But no more.
Displaying revisions 21 - 40 of 103