Version in base suite: 9.12-3 Base version: openconnect_9.12-3 Target version: openconnect_9.12-3+deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/o/openconnect/openconnect_9.12-3.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/o/openconnect/openconnect_9.12-3+deb13u1.dsc changelog | 12 ++++++++ copyright | 2 - gbp.conf | 1 patches/dont-default-form-action.patch | 46 +++++++++++++++++++++++++++++++++ patches/series | 1 5 files changed, 61 insertions(+), 1 deletion(-) gpgv: Signature made Tue Oct 28 20:55:23 2025 UTC gpgv: using RSA key D847C62510A9C2FF242CE02CD604A1C4823EE0F8 gpgv: Note: signatures using the SHA1 algorithm are rejected gpgv: WARNING: signing subkey D604A1C4823EE0F8 has an invalid cross-certification gpgv: Can't check signature: General error dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmppe04wexf/openconnect_9.12-3+deb13u1.dsc: no acceptable signature found diff -Nru openconnect-9.12/debian/changelog openconnect-9.12/debian/changelog --- openconnect-9.12/debian/changelog 2024-08-04 12:24:52.000000000 +0000 +++ openconnect-9.12/debian/changelog 2025-10-28 20:47:04.000000000 +0000 @@ -1,3 +1,15 @@ +openconnect (9.12-3+deb13u1) trixie; urgency=medium + + * Non-maintainer upload. + [ Luca Boccassi ] + * d/copyright: update Upstream-Contact to mailing list + + [ Lee Garrett ] + * Patch: Respect path in AnyConnect/OpenConnect XML form handling (Closes: #1119239) + * Update debian/gbp.conf to match debian/trixie branch + + -- Lee Garrett Tue, 28 Oct 2025 21:47:04 +0100 + openconnect (9.12-3) unstable; urgency=medium * Disable autopkgtest and remove test build dependencies (Closes: diff -Nru openconnect-9.12/debian/copyright openconnect-9.12/debian/copyright --- openconnect-9.12/debian/copyright 2024-03-28 11:59:35.000000000 +0000 +++ openconnect-9.12/debian/copyright 2025-10-28 20:39:41.000000000 +0000 @@ -1,6 +1,6 @@ Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: OpenConnect -Upstream-Contact: David Woodhouse +Upstream-Contact: openconnect-devel@lists.infradead.org Source: ftp://ftp.infradead.org/pub/openconnect/ Files: * diff -Nru openconnect-9.12/debian/gbp.conf openconnect-9.12/debian/gbp.conf --- openconnect-9.12/debian/gbp.conf 2024-03-28 11:59:35.000000000 +0000 +++ openconnect-9.12/debian/gbp.conf 2025-10-28 20:40:45.000000000 +0000 @@ -1,4 +1,5 @@ [DEFAULT] +debian-branch = debian/trixie pristine-tar = True sign-tags = True diff -Nru openconnect-9.12/debian/patches/dont-default-form-action.patch openconnect-9.12/debian/patches/dont-default-form-action.patch --- openconnect-9.12/debian/patches/dont-default-form-action.patch 1970-01-01 00:00:00.000000000 +0000 +++ openconnect-9.12/debian/patches/dont-default-form-action.patch 2025-10-28 20:36:08.000000000 +0000 @@ -0,0 +1,46 @@ +Description: Fix URI patch on subsequent requests + Use the full URI (including "usergroup" or path) as specified in --server for + all requests during authentication instead of only the first one +Author: Stefan Bühler +Origin: upstream, https://gitlab.com/openconnect/openconnect/-/merge_requests/560 +Bug: https://gitlab.com/openconnect/openconnect/-/issues/737 +Reviewed-by: Lee Garrett +Last-Update: 2025-10-28 +--- +This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ +diff --git a/auth.c b/auth.c +index 317fc21..e245b48 100644 +--- a/auth.c ++++ b/auth.c +@@ -455,13 +455,15 @@ static int parse_auth_node(struct openconnect_info *vpninfo, xmlNode *xml_node, + + /* defaults for new XML POST */ + form->method = strdup("POST"); +- form->action = strdup("/"); + + xmlnode_get_prop(xml_node, "method", &form->method); + xmlnode_get_prop(xml_node, "action", &form->action); + +- if (!form->method || !form->action || +- strcasecmp(form->method, "POST") || !form->action[0]) { ++ /* - expect unset action (reuse current URL) or non-empty action="..." ++ * - expect unset method (defaults to "POST") or explicit method="POST" ++ */ ++ if ((form->action && !form->action[0]) || ++ !form->method || strcasecmp(form->method, "POST")) { + vpn_progress(vpninfo, PRG_ERR, + _("Cannot handle form method='%s', action='%s'\n"), + form->method, form->action); +diff --git a/www/changelog.xml b/www/changelog.xml +index 49a50b3..1ba207f 100644 +--- a/www/changelog.xml ++++ b/www/changelog.xml +@@ -15,7 +15,7 @@ +
    +
  • OpenConnect HEAD +
      +-
    • No changelog entries yet
      • ++
    • Use the full URI (including "usergroup" or path) as specified in --server for all requests during authentication instead of only the first one (!560).
      • +

    +
    • +
  • OpenConnect v9.12 diff -Nru openconnect-9.12/debian/patches/series openconnect-9.12/debian/patches/series --- openconnect-9.12/debian/patches/series 1970-01-01 00:00:00.000000000 +0000 +++ openconnect-9.12/debian/patches/series 2025-10-28 20:36:08.000000000 +0000 @@ -0,0 +1 @@ +dont-default-form-action.patch