Well, I do understand of iputils background (I'm an upstream maintainer). But I'm not really the expert on openSUSE packaging and upgrading (I use Tumbleweed myself), thus I'm not sure how I can help. Although version in Tumbleweed does not require CAP_NET_RAW since last year (https://build.opensuse.org/request/show/840044 and #1174504), Leap 15.3 inherits quite old version s20161105, where we still used CAP_NET_RAW instead of ICMP_PROTO (although ICMP_PROTO is supported by kernel thus it could be used). But I guess this error is due using cap_net_raw+ep instead of just cap_net_raw+p. See related bug #1140993 and change in Tumbleweed in "Fri Jul 26 06:19:44 UTC 2019": - With new permissions package both clockdiff and ping have capabilities cap_net_raw+p instead of cap_net_raw+ep (boo#1140993), also ping6 does not try to set permissions on links (boo#1140991)