<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="10">
<package pkgid="5927344f0e4c184b87ceaeaefa9a077a6531864332b671aa0ccea225fa18926af0cb9ae7f8f9df9e04c35551910e684a2b1401398f4916acd36861d9cf50e499" name="libopenconnect5" arch="x86_64">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="12b6659f436911cd96954e768dd6d466b00c5f1aebb25627a92ad5f6f99e28b6e0cbfcd0e81b559eee07d3a840fde6f6d909705425eb80e123eb6b4b5f2d433f" name="libopenconnect5-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="1bb4ae1bc3edf36e7b52a5635e4ba0a6cde4ff9f58665ad7c62aaea62b15b8ac9ecc907e0911a1d8787401823ca5a070d13e23455c20ea8e0709623c6b46d740" name="openconnect" arch="src">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="bjorn.lie@gmail.com" date="1528372800">- Drop pkgconfig(gconf-2.0) and pkgconfig(gtk+-2.0) BuildRequires:
  Not needed, nor used.</changelog>
  <changelog author="sckang@suse.com" date="1532001600">- Modified spec file: only add this BuildRequires on Leap/SLE 15+
  (fate#325553).
  &gt; BuildRequires:  pkgconfig(libpskc)</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547208000">- Update to 8.01:
  * Clear form submissions (which may include passwords) before
    freeing (CVE-2018-20319, bsc#1215669).
  * Allow form responses to be provided on command line.
  * Add support for SSL keys stored in TPM2.
  * Fix ESP rekey when replay protection is disabled.
  * Drop support for GnuTLS older than 3.2.10.
  * Fix --passwd-on-stdin for Windows to not forcibly open console.
  * Fix portability of shell scripts in test suite.
  * Add Google Authenticator TOTP support for Juniper.
  * Add RFC7469 key PIN support for cert hashes.
  * Add protocol method to securely log out the Juniper session.
  * Relax requirements for Juniper hostname packet response to support old gateways.
  * Add API functions to query the supported protocols.
  * Verify ESP sequence numbers and warn even if replay protection is disabled.
  * Add support for PAN GlobalProtect VPN protocol (--protocol=gp).
  * Reorganize listing of command-line options, and include information on supported protocols.
  * SIGTERM cleans up the session similarly to SIGINT.
  * Fix memset_s() arguments.
  * Fix OpenBSD build.
- Explicitely enable all the features as needed to stop build if
  something is missing
- Run tests
- Folow the library packaging guidelines</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548244800">- Update to 8.02:
  * Fix GNU/Hurd build.
  * Discover vpnc-script in default packaged location on FreeBSD/OpenBSD.
  * Support split-exclude routes for GlobalProtect.
  * Fix GnuTLS builds without libtasn1.
  * Fix DTLS support with OpenSSL 1.1.1+.
  * Add Cisco-compatible DTLSv1.2 support.
  * Invoke script with reason=attempt-reconnect before doing so.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1558267200">- Update to 8.0.3:
  * Fix Cisco DTLSv1.2 support for AES256-GCM-SHA384.
  * Fix recognition of OTP password fields.
- Verify source signature</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350400">- Use python3 to generate the web data as now it is supported
  by upstream</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572350401">- Update to 8.0.5:
  * Minor fixes to build on specific platforms
  * Includes fix for a buffer overflow with chunked HTTP handling
    (CVE-2019-16239, bsc#1151178)</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1572868800">- No need to ship hipreport-android.sh as it is intented for
  android systems only</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1578484800">- Remove tncc-wrapper.py script as it is python2 only bsc#1157446</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1588334400">- Fix CVE-2020-12105 (boo#1170452)
- Introduce subpackage for bash-completion
- Update to 8.09:
  * Add bash completion support.
  * Give more helpful error in case of Pulse servers asking for
    TNCC.
  * Sanitize non-canonical Legacy IP network addresses.
  * Fix OpenSSL validation for trusted but invalid certificates
    (CVE-2020-12105).
  * Convert tncc-wrapper.py to Python 3, and include modernized
    tncc-emulate.py as well. (!91)
  * Disable Nagle's algorithm for TLS sockets, to improve
    interactivity when tunnel runs over TCP rather than UDP.
  * GlobalProtect: more resilient handling of periodic HIP check
    and login arguments, and predictable naming of challenge forms.
  * Work around PKCS#11 tokens which forget to set
    CKF_LOGIN_REQUIRED.
- Update to 8.0.8:
  * Fix check of pin-sha256: public key hashes to be case sensitive
  * Don't give non-functioning stderr to CSD trojan scripts.
  * Fix crash with uninitialised OIDC token.
- Update to 8.0.7:
  * Don't abort Pulse connection when server-provided certificate
    MD5 doesn't match.
  * Fix off-by-one in check for bad GnuTLS versions, and add build
    and run time checks.
  * Don't abort connection if CSD wrapper script returns non-zero
    (for now).
  * Make --passtos work for protocols that use ESP, in addition
    to DTLS.
  * Convert tncc-wrapper.py to Python 3, and include modernized
    tncc-emulate.py as well.</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="273c3e517955854692246e1f088e8f2065917d01a447de183b92eb6515f708acb31d8f922ef8fe20e2d6a1e3aecbedc2a52ae6847654b6cdb39921b796c62ee6" name="openconnect" arch="x86_64">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="64aca0adb7579438aed341650bc6219ecbb8861ee536d0c79bacd64f79d9c3f0752345146ad30b0bbd4948e9d1160439bfe6b2c35e9dd8b2bb5a2d70efb1a57f" name="openconnect-bash-completion" arch="noarch">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="74f881125c44ab277fa6c4ad1e206fb2f74fcaa7bd544543b4736a796dc4dea9842056e468cf39ca2c5c12d39a31724cc455143551e564b0c86baa71c218b440" name="openconnect-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="13103f3b07ca52f57f878aa8f65acb07dabecb4afddf7e8fc7b25e1403383950fe88bcbaf8ebdda88f2ca5fa5e2cb32962173181f1e633ec3e7253f4a81f2c54" name="openconnect-debugsource" arch="x86_64">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="36cc001e65ecfd4f04496b6e698aa2b1237b20fdd73f71e0ab0560155fcb6f5487bbeac6621ccc9d0189d1710efe08107d7fef811a7980d06bb01ddceca92f8f" name="openconnect-devel" arch="x86_64">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="4df15be790f0da378f3e33c91ccdbcefde4c9cf717c92a7d42db28e569c95fb1f68e20b953d13991f13a78ee8419989993bd4f05f2398379050734a5909bc948" name="openconnect-doc" arch="noarch">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
<package pkgid="109e5d5f1f469ff06cbbddb00ee91ff0411c37e617d2e327577fc22a7178beec02a8feebc1d1d39318716600848d93928f66f524a7ac5bf5c0100fbff3e41901" name="openconnect-lang" arch="noarch">
  <version epoch="0" ver="9.12" rel="12.494"/>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1589544000">- Update to version 8.10:
  * Install bash completion script to
    ${datadir}/bash-completion/completions/openconnect.
  * Improve compatibility of csd-post.sh trojan.
  * Fix potential buffer overflow with GnuTLS describing local
    certs (CVE-2020-12823, bsc#1171862,
    gl#openconnect/openconnect!108).</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Build with --without-gnutls-version-check</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1637668800">- Import the latest version of the vpnc-script, revision
  1d35a8527e5422967514dd1d47350ff2ede55903 (boo#1140772)
  * This brings a lot of improvements for non-trivial network setups, IPv6 etc</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650283200">- Update to release 8.20:
  * Support non-AEAD ciphersuites in DTLSv1.2 with AnyConnect.
  * Emulated a newer version of GlobalProtect official clients,
    5.1.5-8; was 4.0.2-19
  * Support Juniper login forms containing both password and 2FA
    token
  * Explicitly disable 3DES and RC4, unless enabled with
  - -allow-insecure-crypto
  * Allow protocols to delay tunnel setup and shutdown (!117)
  * Support for GlobalProtect IPv6
  * SIGUSR1now causes OpenConnect to log detailed connection
    information and statistics
  * Allow --servercert to be specified multiple times in order to
    accept server certificates matching more than one possible
    fingerprint
  * Demangle default routes sent as split routes by GlobalProtect
  * Support more Juniper login forms, including some SSO forms
  * Restore compatibility with newer Cisco servers, by no longer
    sending them the X-AnyConnect-Platform header
  * Add support for PPP-based protocols, currently over TLS only.
  * Add support for two PPP-based protocols, F5 with
  - -protocol=f5 and Fortinet with --protocol=fortinet.
  * Add support for Array Networks SSL VPN.
  * Support TLSv1.3 with TPMv2 EC and RSA keys, add test cases
    for swtpm and hardware TPM.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1671105600">- Update to release 9.01:
  * Add support for AnyConnect "Session Token Re-use Anchor Protocol" (STRAP)
  * Add support for AnyConnect "external browser" SSO mode
  * Bugfix RSA SecurID token decryption and PIN entry forms, broken in v8.20
  * Support Cisco's multiple-certificate authentication
  * Revert GlobalProtect default route handling change from v8.20
  * Suppo split-exclude routes for Fortinet
  * Add webview callback and SAML/SSO support for AnyConnect, GlobalProtect</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1683547200">- Update to release 9.10:
  * Fix external browser authentication with KDE plasma-nm &lt; 5.26.
  * Always redirect stdout to stderr when spawning external browser.
  * Increase default queue length to 32 packets.
  * Fix receiving multiple packets in one TLS frame, and single packets split across multiple TLS frames, for Array.
  * Handle idiosyncratic variation in search domain separators for all protocols
  * Support region selection field for Pulse authentication
  * Support modified configuration packet from Pulse 9.1R16 servers
  * Allow hidden form fields to be populated or converted to text fields on the command line
  * Support yet another strange way of encoding challenge-based 2FA for GlobalProtect
  * Add --sni option (and corresponding C and Java API functions) to allow domain-fronting connections in censored/filtered network environments
  * Parrot a GlobalProtect server's software version, if present, as the client version (!333)
  * Fix NULL pointer dereference that has left Android builds broken since v8.20 (!389).
  * Fix Fortinet authentication bug where repeated SVPNCOOKIE causes segfaults (#514, !418).
  * Support F5 VPNs which encode authentication forms only in JSON, not in HTML.
  * Support simultaneous IPv6 and Legacy IP ("dual-stack") for Fortinet .
  * Support "FTM-push" token mode for Fortinet VPNs .
  * Send IPv6-compatible version string in Pulse IF/T session establishment
  * Add --no-external-auth option to not advertise external-browser authentication
  * Many small improvements in server response parsing, and better logging messages and documentation.</changelog>
  <changelog author="Andrea Manzini &lt;andrea.manzini@suse.com&gt;" date="1684584000">- Update to release 9.12:
  * Explicitly reject overly long tun device names.
  * Increase maximum input size from stdin (#579).
  * Ignore 0.0.0.0 as NBNS address (!446, vpnc-scripts#58).
  * Fix stray (null) in URL path after Pulse authentication (4023bd95).
  * Fix config XML parsing mistake that left GlobalProtect ESP non-working in v9.10 (!475).
  * Fix case sensitivity in GPST header matching (!474).</changelog>
  <changelog author="pgajdos@suse.com" date="1711022400">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="jan-michael.brummer1@volkswagen.de" date="1719057600">- Add 0001-GlobalProtect-Add-external-browser-with-CAS-support.patch:
  GlobalProtect: External Browser + CAS support</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1721822400">- Add explicit call to autoreconf: previously added patch touches
  the build system.</changelog>
</package>
</otherdata>