Skip to content

libxslt and libxml2 update breaks openconnect

Description:

The today update broke Openconnect (Open client for Cisco AnyConnect VPN) which was unable to successfully connect to the company's vpn server.

The only error message was a cryptic "'-' file not found".

Workaround

After investigation it seems that libxml2 was the culprit. Revert it and libxslt to the previous installed versions solved the problem:

sudo pacman -U /var/cache/pacman/pkg/libxslt-1.1.39-2-x86_64.pkg.tar.zst sudo pacman -U /var/cache/pacman/pkg/libxml2-2.12.7-1-x86_64.pkg.tar.zst

Detailed explanation:

When the openconnect client tries to connect, it runs a csd-post.sh script (from openconnect package). That script make calls to xmlstarlet to extract some information from the received xml. But with the update of the libxml2 and libxslt package, xmlstarlet aborts and emits the cryptic "'-' file not found" error message. With downgrading these two packages, xmlstarlet works as expected and openconnect too.

Additional info:

  • package version(s): openconnect 1:9.12-1, libxml2 2.13.0-1, libxlt 1.1.40-1

Steps to reproduce:

  1. Perform a system update (pacman -Syyu)
  2. Try to connect with openconnect
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information