Package: openconnect
Version: 9.12-3+deb13u2
Severity: important
Tags: patch upstream

Hello,

Updated Palo Alto servers require a patch to work correctly. Currently cookies
being resent are not trusted anymore, leading to multiple authentication steps
to get in.

Upstream fixed the issue with
https://gitlab.com/openconnect/openconnect/-/commit/77e061a2f15f32cdbacbc308f66f84a508569744
and I'm going to update Trixie package with this patch for my own (and team)
personal use.

Would you be interested in a debdiff ? Or maybe a PR if the package is hosted
on Salsa ?

Imho, this fix should be backported to Debian stable.

Best regards, Adam.


-- System Information:
Debian Release: 13.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.94+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=sh: 0: getcwd() failed: 
No such file or directory
UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openconnect depends on:
ii  libc6            2.41-12+deb13u3
ii  libgnutls30t64   3.8.9-3+deb13u4
ii  libopenconnect5  9.12-3+deb13u2
ii  libproxy1v5      0.5.9-1
ii  libxml2          2.12.7+dfsg+really2.9.14-2.1+deb13u2
ii  vpnc-scripts     0.1~git20220510-1

Versions of packages openconnect recommends:
ii  python3             3.13.5-1
ii  python3-asn1crypto  1.5.1-3
ii  python3-mechanize   1:0.4.10+ds-4
ii  python3-netifaces   0.11.0-2+b6

Versions of packages openconnect suggests:
ii  bash-completion  1:2.16.0-7
ii  xdg-utils        1.2.1-2

-- debconf information:
sh: 0: getcwd() failed: No such file or directory

  • Bug#1141490: openconnect: Updated PaloAlto PAN-OS 11.1.13+ req... Adam Cecile

Reply via email to