openconnect (9.21-5) unstable; urgency=medium

  * Team upload.
  * Refresh symbols

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Thu, 30 Jul 2026 10:45:24 +0200

openconnect (9.21-4) unstable; urgency=medium

  * Team upload
  * Update dependencies for ports
  * Add patch to sync master latest fixes
  * Add upstream proposed patch to fix PaloAlto (Closes: #1141490)
  * Fix old fsf address lintian warning
  * Update std-version to 4.7.4, no changes required

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Thu, 30 Jul 2026 10:15:32 +0200

openconnect (9.21-3) unstable; urgency=medium

  * sed s/pidof/procps/g

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 29 Jul 2026 20:28:38 +0200

openconnect (9.21-2) unstable; urgency=medium

  * Runtime-depend on pidof, used in some
    internal scripts (Closes: #1136543)
  * Add back testsuite and dependencies on control file
  * Drop R^3: no, default now

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 29 Jul 2026 19:49:51 +0200

openconnect (9.21-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/9.21'
  * Drop patches, now all upstream

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 29 Jul 2026 19:23:37 +0200

openconnect (9.12-3.3) unstable; urgency=medium

  * Non-maintainer upload.
  * Remove myself from uploaders

 -- Luca Boccassi <bluca@debian.org>  Tue, 06 Jan 2026 13:23:13 +0100

openconnect (9.12-3.2) unstable; urgency=medium

  * Non-maintainer upload.
  * use the unsigned printf qualifier for size_t : fixes MinGW{32,64} build
  * Use RFC9266 'tls-exporter' channel bindings for Cisco STRAP with TLSv1.3
    (Closes: #1099497)

 -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 23 Dec 2025 22:29:05 +0100

openconnect (9.12-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  [ Luca Boccassi ]
  * d/copyright: update Upstream-Contact to mailing list

  [ Lee Garrett ]
  * Patch: Respect path in AnyConnect/OpenConnect XML form handling (Closes:
    #1119239)

 -- Lee Garrett <debian@rocketjump.eu>  Tue, 28 Oct 2025 20:54:32 +0100

openconnect (9.12-3) unstable; urgency=medium

  * Disable autopkgtest and remove test build dependencies (Closes:
    #1075772)

 -- Luca Boccassi <bluca@debian.org>  Sun, 04 Aug 2024 13:24:52 +0100

openconnect (9.12-2) unstable; urgency=medium

  [ Samuel Thibault ]
  * d/control: Generalize hurd-i386 into hurd-any.

  [ Luca Boccassi ]
  * Enable ELF metadata stamping
  * Switch from pkg-config to pkgconf
  * d/control: bump Standards-Version to 4.7.0, no changes
  * Remove build-depends on uid-wrapper and socket-wrapper to avoid
    autoremoval
  * Drop build dependnecy on libgcrypt-20-dev, not needed (Closes:
    #1071946)

 -- Luca Boccassi <bluca@debian.org>  Sat, 01 Jun 2024 12:14:22 +0100

openconnect (9.12-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/9.12'
    For a full list of changes see the upstream changelog at:
    https://www.infradead.org/openconnect/changelog.html
  * Drop all patches, merged upstream
  * Update symbols file

 -- Luca Boccassi <bluca@debian.org>  Tue, 13 Jun 2023 23:41:20 +0100

openconnect (9.01-3) unstable; urgency=medium

  * Bump Standards-Version to 4.6.2, no changes
  * Backport patch to fix connection to Pulse server v9.1R16 (Closes:
    #1031906)

 -- Luca Boccassi <bluca@debian.org>  Sat, 25 Feb 2023 18:46:29 +0000

openconnect (9.01-2) unstable; urgency=medium

  * Backport patch to fix SSO with anyconnect v2
    (Closes: #1025961) (LP: #1993901)
  * Add Build-Depends and Suggests on xdg-utils for embedded SSO
    (Closes: #1025961)
  * Bump Standards-Version to 4.6.1, no changes
  * Drop ancient NEWS file

 -- Luca Boccassi <bluca@debian.org>  Thu, 15 Dec 2022 01:17:36 +0000

openconnect (9.01-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/9.01'
  * Drop 0001-support-AnyConnect-single-sign-on-v2.patch, merged upstream
  * Update symbols file for v9.01
  * Skip libtss2 and ocserv on more architectures where they are not
    available

 -- Luca Boccassi <bluca@debian.org>  Sat, 30 Apr 2022 14:22:43 +0100

openconnect (8.20-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster

  [ Luca Boccassi ]
  * Update upstream source from tag 'upstream/8.20'
    For a full list of changes see the upstream changelog at:
    https://www.infradead.org/openconnect/changelog.html
  * Update symbols file for 8.20
  * Drop patches merged upstream
  * Refresh SAML patch
  * autopkgtest: skip unavailable swtpm key in auth-certificate test
  * autopkgtest: run new tests
  * Update descriptions to include new VPNs

 -- Luca Boccassi <bluca@debian.org>  Mon, 21 Feb 2022 00:42:45 +0000

openconnect (8.10-8) unstable; urgency=medium

  * Add dependency on libpskc-dev to libopenconnect-dev
  * Backport patch to fix GP IPv6 split tunnel
  * Bump copyright year ranges in d/copyright
  * Update dep-3 headers to fix Lintian Warning
  * Override very-long-line-length-in-source-file
  * Override Lintian warning about symbols file

 -- Luca Boccassi <bluca@debian.org>  Wed, 02 Feb 2022 11:24:06 +0000

openconnect (8.10-7) unstable; urgency=medium

  * Disable build-time tests (Closes: #974836)
  * Build-depend on libpskc-dev (Closes: #847980)

 -- Luca Boccassi <bluca@debian.org>  Fri, 28 Jan 2022 13:57:59 +0000

openconnect (8.10-6) unstable; urgency=medium

  * Backport support for IPv6 in GlobalProtect

 -- Luca Boccassi <bluca@debian.org>  Fri, 28 Jan 2022 11:11:21 +0000

openconnect (8.10-5) unstable; urgency=medium

  * Backport patch to stop sending X-AnyConnect-Platform header

 -- Luca Boccassi <bluca@debian.org>  Tue, 04 Jan 2022 13:34:50 +0000

openconnect (8.10-4) unstable; urgency=medium

  * Update SAML patch. Correctly detect termination on Anyconnect + Google
    SAML. Also restore backward compatibility for legacy CLI based
    workflow. (Closes: #1001555)

 -- Luca Boccassi <bluca@debian.org>  Thu, 30 Dec 2021 23:59:51 +0000

openconnect (8.10-3) unstable; urgency=medium

  * Backport patch to support SAML SSO
  * Bump year range in d/copyright
  * Bump Standards-Version to 4.6.0, no changes
  * Bump debhelper-compat to 13
  * Switch from FTP to HTTPS in debian/watch
  * Update Lintian override

 -- Luca Boccassi <bluca@debian.org>  Fri, 10 Dec 2021 23:59:51 +0000

openconnect (8.10-2) unstable; urgency=medium

  * Build-depend on python3:any to allow cross-compilation. Thanks Helmut!
    (Closes: #972646)

 -- Luca Boccassi <bluca@debian.org>  Thu, 29 Oct 2020 18:11:44 +0000

openconnect (8.10-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/8.10'
    - Fixes buffer overflow in certificate handling (CVE-2020-12823)
      (Closes: #960620)
  * Drop all patches, merged upstream

 -- Luca Boccassi <bluca@debian.org>  Thu, 14 May 2020 18:51:18 +0100

openconnect (8.09-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/8.09'
  * Install python scripts to handle HIP reports for Juniper's VPN
  * Backport patches to fix and install bash completion script
  * Backport patch to install tncc-emulate python script
  * Drop as-needed from d/rules, it's default in bullseye

 -- Luca Boccassi <bluca@debian.org>  Sat, 02 May 2020 12:21:50 +0100

openconnect (8.08-1) unstable; urgency=medium

  * Update upstream source from tag 'upstream/8.06'
  * Update libopenconnect5.symbols for 8.06
  * Update upstream source from tag 'upstream/8.07'
  * Build with --without-gnutls-version-check
  * Update upstream source from tag 'upstream/8.08'

 -- Luca Boccassi <bluca@debian.org>  Mon, 06 Apr 2020 18:35:43 +0100

openconnect (8.05-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Use secure URI in Homepage field.
  * Update standards version to 4.4.1, no changes needed.

  [ Luca Boccassi ]
  * Update upstream source from tag 'upstream/8.05' (Closes: #935198)
  * Drop patches, merged upstream in v8.05
  * Build-depend on Python3, v8.05 can build documentation with it now
    (Closes: #937197)
  * Set Rules-Requires-Root: no
  * Bump Standards-Version to 4.5.0, no changes
  * Add myself to Uploaders
  * Addn Lintian override for hipreport-android.sh
  * Drop rules for dbgsym migration
  * Add libopenconnect.la to d/not-installed

 -- Luca Boccassi <bluca@debian.org>  Thu, 19 Mar 2020 19:13:13 +0000

openconnect (8.02-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Close HTTPS connection on failure returns from process_http_response()
  * Fix buffer overflow with chunked HTTP handling (CVE-2019-16239)
    (Closes: #940871)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 18 Jan 2020 23:37:24 +0100

openconnect (8.02-1) unstable; urgency=medium

  [ Mike Miller ]
  * New upstream version 8.02
  * d/p/fix-ftbfs-ipv6-tclass-undeclared.patch: Drop patch, applied upstream
  * d/u/signing-key.asc: Use export-minimal to compact upstream release
    signing key
  * d/watch: Bump format version to 4
  * Add autopkgtest to run the upstream test suite

  [ Daniel Lenski ]
  * Update package descriptions to reflect multi-protocol support

 -- Mike Miller <mtmiller@debian.org>  Fri, 25 Jan 2019 23:11:38 -0800

openconnect (8.01-1) unstable; urgency=medium

  * New upstream version 8.01 (Closes: #918529)
  * Drop patches applied upstream or no longer needed
    - d/p/add-logout-juniper.patch, applied upstream
    - d/p/fix-tests-shell-syntax.patch, applied upstream
    - d/p/softhsm2-module-workaround.patch, no longer needed
  * d/libopenconnect5.{shlibs,symbols}: Update for new release
  * d/libopenconnect5.symbols: Add Build-Depends-Package field
  * d/openconnect.install: Include usr/libexec/openconnect shell scripts
  * d/copyright: Refresh copyright information for new upstream release
  * Add Build-Depends on libgcrypt20-dev, libtasn1-6-dev, and libtss2-dev
  * Update Build-Depends on ocserv (>= 0.12.1-2) to fix failing unit tests
    (Closes: #917715)
  * Add Build-Depends on locales-all <!nocheck> for new test
  * Add Build-Depends on debhelper-compat, delete d/compat
  * Bump debhelper compatibility level to 12
  * d/rules:
    - Build with --disable-dsa-tests to skip DSA keys in unit tests
    - Drop unsupported dh --list-missing option
    - Include /usr/share/dpkg/pkg-info.mk for package version
    - Drop cruft trying to save and restore generated source files
    - Drop obsolete configure options --disable-static and --with-system-cafile
  * d/clean: Delete autogenerated version.c on clean
  * d/s/options: Ignore changes to tokens as a side effect of running tests
  * Bump Standards-Version to 4.3.0, no changes needed

 -- Mike Miller <mtmiller@debian.org>  Thu, 10 Jan 2019 11:54:02 -0800

openconnect (7.08-3) unstable; urgency=medium

  * d/p/add-logout-juniper.patch: New patch, add logout to Juniper VPN.
    Thanks to Daniel Lenski (LP: #1655279)

 -- Mike Miller <mtmiller@debian.org>  Sun, 25 Feb 2018 15:00:56 -0800

openconnect (7.08-2) unstable; urgency=medium

  * d/p/fix-ftbfs-ipv6-tclass-undeclared.patch: New patch, fix FTBFS on GNU/Hurd
  * d/control, d/rules: Migrate to automatic dbgsym packages
  * Bump debhelper compatibility level to 11
  * d/copyright: Bump copyright to 2018 for debian/*
  * d/control:
    - Mention Pulse Connect and Juniper in Description (Closes: #881338)
    - Update Vcs-* fields for migration to salsa.d.o
    - Bump Standards-Version to 4.1.3, no changes needed

 -- Mike Miller <mtmiller@debian.org>  Fri, 23 Feb 2018 15:28:37 -0800

openconnect (7.08-1) unstable; urgency=medium

  * New upstream version 7.08
    - Fix MTU detection (Closes: #847135)
  * d/libopenconnect5.{shlibs,symbols}: Update for new release
  * d/p/juniper-content-length.patch: Drop, applied upstream
  * d/p/fix-tests-shell-syntax.patch: Fix test suite shell bashisms
  * d/p/softhsm2-module-workaround.patch: Hard-code Debian location of
    libsofthsm2.so
  * d/control:
    - Add Build-Depends: libsocket-wrapper, libuid-wrapper, ocserv, openssl, and
      softhsm2 for test suite
    - Add Build-Depends: libpcsclite-dev to enable Yubikey support
      (LP: #1649227)
    - Add Build-Depends: dpkg-dev (>= 1.17.14) for build profiles support
    - Drop obsolete Build-Depends: liboath-dev
    - Reorder fields according to "cme fix dpkg-control"
  * Bump debhelper compatibility level to 10
  * Drop explicit dependency on dh-autoreconf and disabling silent rules, now
    enabled by default

 -- Mike Miller <mtmiller@debian.org>  Sat, 24 Dec 2016 10:50:15 -0800

openconnect (7.07-2) unstable; urgency=medium

  * d/rules: Build with --as-needed to remove indirect lib dependencies
  * d/control: Add Depends: liblz4-dev for libopenconnect-dev (Closes: 846706)
  * d/control: Use canonical repository URL for Vcs-Browser
  * d/copyright: Refresh copyright information
  * d/copyright: Update Format using "cme fix dpkg-copyright"

 -- Mike Miller <mtmiller@debian.org>  Thu, 08 Dec 2016 15:05:19 -0800

openconnect (7.07-1) unstable; urgency=medium

  * New upstream release.
    - Fix spelling of "sí" in Spanish translation. (Closes: #792073)
    - Fix handling of KMP message with --juniper. (Closes: #833466)
  * Add Build-Depends on libkrb5-dev, enables GSSAPI support. (Closes: #830905)
  * d/p/juniper-content-length.patch: Add Content-Length header to mimic
    official pulse client. (Closes: #845184)
  * Update libopenconnect5 shlibs and symbols files.
  * debian/rules: Update list of distributed files to back up and restore.
  * Use https URI for Vcs-* control fields.
  * Bump Standards-Version to 3.9.8. No changes needed.

 -- Mike Miller <mtmiller@debian.org>  Fri, 25 Nov 2016 12:22:01 -0800

openconnect (7.06-2) unstable; urgency=medium

  * Upload to unstable.

 -- Mike Miller <mtmiller@debian.org>  Mon, 25 May 2015 17:32:01 -0400

openconnect (7.06-1) experimental; urgency=medium

  * New upstream release. (Closes: #776235)
  * Bump libopenconnect soname (3 -> 5) and update symbols file.
  * Add Build-Depends on liblz4-dev for LZ4 compression.
  * debian/rules:
    - Update list of distributed files to back up and restore.
    - Ensure version.c gets the right upstream or Debian version string.
    - Allow build rules to work on a git snapshot tree.
  * debian/copyright: Refresh for new upstream release.
  * Bump Standards-Version to 3.9.6. No changes needed.

 -- Mike Miller <mtmiller@debian.org>  Sun, 05 Apr 2015 23:12:29 -0400

openconnect (6.00-2) unstable; urgency=medium

  * 01_fix-double-free.patch: Fix double free when PKCS#11 token does
    not include CA certs. (Closes: #781240) Thanks to Laurent Bigonville.

 -- Mike Miller <mtmiller@debian.org>  Thu, 26 Mar 2015 08:34:14 -0400

openconnect (6.00-1) unstable; urgency=medium

  * New upstream release, upload to unstable.
    - Fix regression breaking PKCS#11 token support. (Closes: #744214,
      LP: #1308054)
  * doc-remove-footer.patch: Remove, applied upstream.
  * Update libopenconnect3 shlibs and symbols files.

 -- Mike Miller <mtmiller@debian.org>  Tue, 08 Jul 2014 22:33:31 -0400

openconnect (5.99-2) experimental; urgency=medium

  * Build against GnuTLS 3.x, drop OpenSSL. (Closes: #742755)
    - Add Build-Depends on libgnutls28-dev rather than libgnutls-dev.
    - Drop Build-Depends on libssl-dev.
    - Remove OpenSSL-specific private function from libopenconnect3.symbols.
    - fix-gnutls-2.x-build.patch: Drop patch no longer needed when building
      against GnuTLS 3.x.
  * Add Depends on liboath-dev for libopenconnect-dev.
  * Add Build-Depends on libstoken-dev for RSA software token support.
  * Build openconnect-dbg and libopenconnect3-dbg debug symbol packages.
  * debian/rules: Back up and restore upstream files touched by dh-autoreconf.
  * debian/upstream/signing-key.asc: Store upstream PGP signing key in
    ASCII-armored format.
  * Run wrap-and-sort on debian/control and debian/*.install.

 -- Mike Miller <mtmiller@debian.org>  Thu, 03 Apr 2014 09:14:07 -0400

openconnect (5.99-1) experimental; urgency=medium

  * New upstream release.
  * Bump libopenconnect soname (2 -> 3) and update symbols file.
  * doc-remove-footer.patch: Refresh patch from upstream git commit.
  * fix-gnutls-2.x-build.patch: Cherry-pick from upstream git to fix building
    against GnuTLS 2.x.
  * debian/copyright: Refresh for new upstream release.

 -- Mike Miller <mtmiller@debian.org>  Thu, 06 Mar 2014 22:50:40 -0500

openconnect (5.03-1) unstable; urgency=medium

  * New upstream release.

 -- Mike Miller <mtmiller@debian.org>  Tue, 11 Feb 2014 22:43:03 -0500

openconnect (5.02-1) unstable; urgency=medium

  * New upstream release.
    - Temporarily disable XML POST if an authgroup dropdown exists.
      (LP: #1229195)
  * doc-remove-footer.patch: Remove footer from HTML doc template, it
    links to images from www.w3.org.
  * debian/control: Use lowercase for package synopsis.
  * debian/copyright: Fix some omissions in the copyright listing.
  * debian/rules: No need to explicitly set CFLAGS/CPPFLAGS/LDFLAGS.
  * debian/watch: Add support for verification of PGP signature on
    upstream release.
  * Use my @debian.org address.
  * Bump Standards-Version to 3.9.5. No changes needed.

 -- Mike Miller <mtmiller@debian.org>  Sun, 12 Jan 2014 15:30:14 -0500

openconnect (5.01-1) unstable; urgency=low

  * New upstream release.
    - Fix abuse of realloc() causing memory leaks. (Closes: #700805)
    - Fix compatibility with certain connection forms. (Closes: #708207)
    - Improve error handling when server closes connection. (Closes: #708928)
  * Update shlibs and symbols files for libopenconnect2.
  * debian/rules: Do not check for broken DTLS in OpenSSL, it has been
    patched in the Debian openssl package.
  * Add Build-Depends on liboath-dev.
  * Add missing explicit dependency on zlib1g-dev
    - Add Build-Depends on zlib1g-dev.
    - Add Depends on zlib1g-dev to libopenconnect-dev.

 -- Mike Miller <mtmiller@ieee.org>  Sun, 02 Jun 2013 11:18:58 -0400

openconnect (4.99-2) unstable; urgency=low

  * Upload to unstable.

 -- Mike Miller <mtmiller@ieee.org>  Tue, 07 May 2013 19:46:22 -0400

openconnect (4.99-1) experimental; urgency=low

  * New upstream release (5.00 beta release).
  * Update symbols file for libopenconnect2.
  * Bump Standards-Version to 3.9.4. No changes needed.
  * Remove obsolete DM-Upload-Allowed control field.
  * Canonicalize Vcs-* control fields.

 -- Mike Miller <mtmiller@ieee.org>  Fri, 15 Feb 2013 09:14:15 -0500

openconnect (4.07-1) experimental; urgency=low

  * New upstream release.

 -- Mike Miller <mtmiller@ieee.org>  Sat, 01 Sep 2012 10:07:59 -0400

openconnect (4.06-1) experimental; urgency=low

  * New upstream release.
  * debian/patches/01-Check-for-system-CA-certificate-file-for-GnuTLS.patch:
    Remove, applied upstream.

 -- Mike Miller <mtmiller@ieee.org>  Mon, 23 Jul 2012 23:30:35 -0400

openconnect (4.05-1) experimental; urgency=low

  * New upstream release.
  * Use dh-autoreconf to regenerate the build system.
  * debian/patches/01-Check-for-system-CA-certificate-file-for-GnuTLS.patch:
    Cherry-pick from upstream to allow configuring the default CA certificate
    path.
  * Configure with the path to the ca-certificates bundle.
  * Add Recommends: ca-certificates to libopenconnect2 to use its provided
    certificates by default.
  * Build-depend on groff for building HTML docs.

 -- Mike Miller <mtmiller@ieee.org>  Sat, 21 Jul 2012 15:29:27 -0400

openconnect (4.04-1~exp1) experimental; urgency=low

  * New upstream release. (Closes: #677939)
  * Remove 01_man-vpnc-script-path.patch, applied upstream.
  * Bump libopenconnect soname (1 -> 2) and update symbols file.
  * Build against GnuTLS.
    - Build-depend on libgnutls-dev (>= 2.12.16).
    - Build-depend on libp11-kit-dev.
    - Still build-depend on libssl-dev for openconnect executable only.
  * Enable verbose build (V=1) for more useful build logs.
  * Bump debhelper compatibility to version 9.
  * Set Multi-Arch: same and update library install paths for multiarch.

 -- Mike Miller <mtmiller@ieee.org>  Tue, 10 Jul 2012 23:21:17 -0400

openconnect (3.20-4) unstable; urgency=low

  * debian/patches/03_fix-abuse-of-realloc.patch: Backport patch from upstream
    to fix possible memory leaks on realloc. (Closes: #700805)

 -- Mike Miller <mtmiller@ieee.org>  Thu, 28 Feb 2013 23:42:31 -0500

openconnect (3.20-3) unstable; urgency=low

  * debian/patches/02_CVE-2012-6128.patch: Backport patch from upstream to fix
    buffer overflow (CVE-2012-6128). (Closes: #700794)

 -- Mike Miller <mtmiller@ieee.org>  Sun, 17 Feb 2013 11:56:35 -0500

openconnect (3.20-2) unstable; urgency=low

  * Depend on vpnc-scripts for routing and DNS configuration. (Closes:
    #566193)
  * Add 01_man-vpnc-script-path.patch to fix man page to match the
    default vpnc-script path in Debian.
  * Add DM-Upload-Allowed flag.

 -- Mike Miller <mtmiller@ieee.org>  Wed, 06 Jun 2012 08:45:27 -0400

openconnect (3.20-1) unstable; urgency=low

  * New upstream release.
  * Update debian/copyright for 2012.
  * Update libopenconnect1.symbols for versioned shared library ABI.

 -- Mike Miller <mtmiller@ieee.org>  Thu, 17 May 2012 22:06:31 -0400

openconnect (3.18-1) unstable; urgency=low

  * New upstream release

 -- Mike Miller <mtmiller@ieee.org>  Wed, 02 May 2012 21:02:47 -0400

openconnect (3.17-1) unstable; urgency=low

  * New upstream release
    - Simplify install path for HTML docs
    - Add required configuration path to vpnc script
  * Use dpkg-buildflags for compiler options, support hardened build
  * Add Vcs-* fields for the git repository

 -- Mike Miller <mtmiller@ieee.org>  Sat, 21 Apr 2012 08:48:41 -0400

openconnect (3.16-1) unstable; urgency=low

  * New upstream release
    - Fix FTBFS on kfreebsd and hurd (Closes: #667996)
  * Build and install HTML docs, copy the upstream changelog
  * Fix Homepage address
  * Remove debian/TODO, contents all done

 -- Mike Miller <mtmiller@ieee.org>  Mon, 09 Apr 2012 21:27:54 -0400

openconnect (3.15-2) unstable; urgency=low

  * Fix minimum version for shared library symbol

 -- Mike Miller <mtmiller@ieee.org>  Sat, 31 Mar 2012 09:38:14 -0400

openconnect (3.15-1) unstable; urgency=low

  * New maintainer
  * New upstream release (Closes: #619967, #637362)
    - Package new shared library, remove static library
    - Remove fix-link.patch, already in 3.15
  * Update description from upstream homepage (Closes: #521831)
  * Update debian/copyright to machine-readable format 1.0
  * Clean up package dependencies
    - Add deps on libssl-dev and libxml2-dev for -dev package
    - Add libproxy to build-deps and library deps
  * Bump Standards-Version to 3.9.3

 -- Mike Miller <mtmiller@ieee.org>  Wed, 28 Mar 2012 22:49:19 -0400

openconnect (3.02-2) unstable; urgency=low

  * Upload to unstable.

 -- Ross Burton <ross@debian.org>  Wed, 11 May 2011 11:55:34 +0100

openconnect (3.02-1) experimental; urgency=low

  * New upstream release
  * Add patch from upstream to fix linking on Debian

 -- Ross Burton <ross@debian.org>  Wed, 11 May 2011 11:55:34 +0100

openconnect (2.25-0.1+squeeze2) stable-security; urgency=high

  * debian/patches/02_CVE-2012-6128.patch: Backport patch from upstream to fix
    buffer overflow (CVE-2012-6128).

 -- Mike Miller <mtmiller@ieee.org>  Wed, 13 Feb 2013 19:55:03 -0500

openconnect (2.25-0.1+squeeze1) stable-security; urgency=high

  * Apply patch from upstream to fix buffer overflow (CVE-2012-3291)

 -- Mike Miller <mtmiller@ieee.org>  Thu, 14 Jun 2012 02:56:51 -0400

openconnect (2.25-0.1) unstable; urgency=low

  * Non-maintainer upload.
  * New upstream release (Closes: #566188)
    - always verify SSL server certificates (Closes: #590873)

 -- Dominic Hargreaves <dom@earth.li>  Sat, 28 Aug 2010 11:21:16 +0100

openconnect (2.22-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix kFreeBSD detection (Closes: #577004) using patch from Petr Salinger

 -- Christoph Egger <christoph@debian.org>  Sat, 17 Jul 2010 16:06:33 -0400

openconnect (2.22-1) unstable; urgency=low

  * New upstream release

 -- Rob Bradford <robster@debian.org>  Thu, 25 Mar 2010 16:11:35 +0000

openconnect (2.01-1) unstable; urgency=low

  * New upstream release.

 -- Ross Burton <ross@debian.org>  Wed, 24 Jun 2009 19:17:44 +0100

openconnect (2.00-1) unstable; urgency=low

  * New upstream release.
  * Add fixes from upstream up to rev d45d92

 -- Ross Burton <ross@debian.org>  Tue, 16 Jun 2009 15:32:46 +0100

openconnect (1.40-1) unstable; urgency=low

  * New upstream release.

 -- Ross Burton <ross@debian.org>  Wed, 27 May 2009 15:50:36 +0100

openconnect (1.00-1) unstable; urgency=low

  * New upstream release
    - Remove leak.patch
  * Reword the description

 -- Ross Burton <ross@debian.org>  Wed, 18 Mar 2009 10:45:13 +0000

openconnect (0.99-2) unstable; urgency=low

  * Add patch from upstream to fix chronic memory leak.

 -- Ross Burton <ross@debian.org>  Fri, 06 Feb 2009 15:50:54 +0000

openconnect (0.99-1) unstable; urgency=low

  * New upstream release.
  * Update copyright information
  * Add watch file
  * Add Homepage field

 -- Ross Burton <ross@debian.org>  Thu, 15 Jan 2009 13:26:25 +0000

openconnect (0.98-3) unstable; urgency=low

  * Bump Standards
  * Add misc:Depends
  * Remove vpnc wrapper and depends

 -- Ross Burton <ross@debian.org>  Wed, 14 Jan 2009 12:21:50 +0000

openconnect (0.98-2) unstable; urgency=low

  * Disable the GTK+ UI, so that Network Manager support works.

 -- Ross Burton <ross@debian.org>  Wed, 14 Jan 2009 11:22:20 +0000

openconnect (0.98-1) unstable; urgency=low

  * New upstream release.
  * Add more netmasks (thanks Shane Bryan)

 -- Ross Burton <ross@debian.org>  Sat, 15 Nov 2008 11:55:18 +0000

openconnect (0.96-1) unstable; urgency=low

  * New upstream release.
  * Enable the GTK+ passcode dialog

 -- Ross Burton <ross@debian.org>  Tue, 28 Oct 2008 09:29:21 +0000

openconnect (0.95.1-2) unstable; urgency=low

  * Install the NM helper into the correct location.

 -- Ross Burton <ross@debian.org>  Fri, 24 Oct 2008 16:15:20 +0100

openconnect (0.95.1-1) unstable; urgency=low

  * Initial packaging.

 -- Ross Burton <ross@debian.org>  Thu, 23 Oct 2008 12:01:37 +0100
