Your message dated Thu, 30 Jul 2026 08:33:45 +0000
with message-id <[email protected]>
and subject line Bug#1141490: fixed in openconnect 9.21-4
has caused the Debian Bug report #1141490,
regarding openconnect: Updated PaloAlto PAN-OS 11.1.13+ requires a change due
to CVE-2026-0257 mitigation
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1141490: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141490
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openconnect
Version: 9.12-3+deb13u2
Severity: important
Tags: patch upstream
Hello,
Updated Palo Alto servers require a patch to work correctly. Currently cookies
being resent are not trusted anymore, leading to multiple authentication steps
to get in.
Upstream fixed the issue with
https://gitlab.com/openconnect/openconnect/-/commit/77e061a2f15f32cdbacbc308f66f84a508569744
and I'm going to update Trixie package with this patch for my own (and team)
personal use.
Would you be interested in a debdiff ? Or maybe a PR if the package is hosted
on Salsa ?
Imho, this fix should be backported to Debian stable.
Best regards, Adam.
-- System Information:
Debian Release: 13.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.12.94+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=sh: 0: getcwd() failed:
No such file or directory
UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages openconnect depends on:
ii libc6 2.41-12+deb13u3
ii libgnutls30t64 3.8.9-3+deb13u4
ii libopenconnect5 9.12-3+deb13u2
ii libproxy1v5 0.5.9-1
ii libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u2
ii vpnc-scripts 0.1~git20220510-1
Versions of packages openconnect recommends:
ii python3 3.13.5-1
ii python3-asn1crypto 1.5.1-3
ii python3-mechanize 1:0.4.10+ds-4
ii python3-netifaces 0.11.0-2+b6
Versions of packages openconnect suggests:
ii bash-completion 1:2.16.0-7
ii xdg-utils 1.2.1-2
-- debconf information:
sh: 0: getcwd() failed: No such file or directory
--- End Message ---
--- Begin Message ---
Source: openconnect
Source-Version: 9.21-4
Done: Gianfranco Costamagna <[email protected]>
We believe that the bug you reported is fixed in the latest version of
openconnect, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Gianfranco Costamagna <[email protected]> (supplier of updated
openconnect package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Jul 2026 10:15:32 +0200
Source: openconnect
Built-For-Profiles: noudeb
Architecture: source
Version: 9.21-4
Distribution: unstable
Urgency: medium
Maintainer: Mike Miller <[email protected]>
Changed-By: Gianfranco Costamagna <[email protected]>
Closes: 1141490
Changes:
openconnect (9.21-4) unstable; urgency=medium
.
* Team upload
* Update dependencies for ports
* Add patch to sync master latest fixes
* Add upstream proposed patch to fix PaloAlto (Closes: #1141490)
* Fix old fsf address lintian warning
* Update std-version to 4.7.4, no changes required
Checksums-Sha1:
fdd8327fcc91d8ff7d4a9f2668af2786f8d779b3 2811 openconnect_9.21-4.dsc
270a2d8fae3bf217d9a5e4c37f4d857b2e918b7e 43192 openconnect_9.21-4.debian.tar.xz
1478f7073a181e4498814dcbe4e68138c8c188ba 13579
openconnect_9.21-4_source.buildinfo
Checksums-Sha256:
48f3487ea6a2ab007cec6126db51a284cf6ca7a5b04cb5f639f9358b5e9bddcc 2811
openconnect_9.21-4.dsc
ad970fe594238e92569d5fb00ef4ae0a0e53fe44cf3e47f9b4b21245ac3784c0 43192
openconnect_9.21-4.debian.tar.xz
58947fd0cdf6c3afa651da17eb206af280649154ea3095340d20f1d82f560eb0 13579
openconnect_9.21-4_source.buildinfo
Files:
86f12cfaa1c4749e296471122320c833 2811 net optional openconnect_9.21-4.dsc
62fdf4dfd0667d36b400198420773189 43192 net optional
openconnect_9.21-4.debian.tar.xz
f9f21836365127259a9ace1b56077e10 13579 net optional
openconnect_9.21-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=McUK
-----END PGP SIGNATURE-----
pgpkmpMjrEWM5.pgp
Description: PGP signature
--- End Message ---
