Hello community, here is the log from the commit of package NetworkManager-applet for openSUSE:Factory checked in at 2017-06-30 18:40:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/NetworkManager-applet (Old) and /work/SRC/openSUSE:Factory/.NetworkManager-applet.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "NetworkManager-applet" Fri Jun 30 18:40:10 2017 rev:7 rq:506738 version:1.8.2 Changes: -------- --- /work/SRC/openSUSE:Factory/NetworkManager-applet/NetworkManager-applet.changes 2017-05-31 12:14:16.658683348 +0200 +++ /work/SRC/openSUSE:Factory/.NetworkManager-applet.new/NetworkManager-applet.changes 2017-06-30 18:40:12.640287683 +0200 @@ -1,0 +2,37 @@ +Fri Jun 23 19:50:06 UTC 2017 - dimstar@opensuse.org + +- Update to version 1.8.2: + + It is now possible to secure the connections that use TLS, TTLS + and PEAP authentications by specifying a Domain name to verify + the remote certificate subject against. + + The TTLS and PEAP EAP methods now utilize the certificate + chooser that is capable of choosing an object from a PKCS#11 + token. + + When activating a VPN connection, the routes to the VPN server + are now added whichever device has a default route regardless + of its kind. + + The applet now lists the Wi-Fi network connection profiles even + if they are enslaved to another connection. + + Fixed a crash after editing a connection with 802.1x security + setting. +- Changes from version 1.8.0: + + Warn editor users if certificates have wrong SELinux labels. + + Added a PKCS#11 capable certificate chooser to EAP-TLS. + + Request Wi-Fi scan when showing the menu and update the scan + result list dynamically. + + Prevent the use from opening a file open dialog if they don't + have permission to edit connections (e.g. in the login manager + session) (CVE-2017-6590). + + Fix broken libnma's pygobject library. + + Add version macros to libnma.. + + Updated translations. +- Pass --without-selinux to configure. +- Replace pkgconfig(libsecret-unstable) BuildRequires with + pkgconfig(libsecret-1), following upstream. +- Add pkgconfig(gcr-3) and pkgconfig(gck-1) BuildRequires: new + dependencies for the PKCS#11 enabled certificate chooser. +- Drop nm-applet-dialog-check-permissions.patch: fixed upstream. +- Rebase + NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch. + +------------------------------------------------------------------- Old: ---- network-manager-applet-1.4.6.tar.xz nm-applet-dialog-check-permissions.patch New: ---- network-manager-applet-1.8.2.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ NetworkManager-applet.spec ++++++ --- /var/tmp/diff_new_pack.TUvbQO/_old 2017-06-30 18:40:15.511883776 +0200 +++ /var/tmp/diff_new_pack.TUvbQO/_new 2017-06-30 18:40:15.515883215 +0200 @@ -26,21 +26,19 @@ %define sover 0 %define _name network-manager-applet Name: NetworkManager-applet -Version: 1.4.6 +Version: 1.8.2 Release: 0 Summary: GTK+ tray applet for use with NetworkManager License: GPL-2.0+ Group: System/GUI/GNOME Url: https://gnome.org/projects/NetworkManager -Source: http://download.gnome.org/sources/network-manager-applet/1.4/network-manager-applet-%{version}.tar.xz +Source: http://download.gnome.org/sources/network-manager-applet/1.8/%{_name}-%{version}.tar.xz # PATCH-NEEDS-REBASE nm-applet-private-connection.patch boo#751211 bgo#646187 dimstar@opensuse.org -- Create private connections if the user is not authorised. Allows to create wifi connections without root access. Patch under discussion upstream. (WAS: PATCH-FIX-UPSTREAM) Patch0: nm-applet-private-connection.patch # PATCH-NEEDS-REBASE nm-applet-probe-radius-server-cert.patch bsc#574266 glin@suse.com -- Probe the RADIUS server certificate. (WAS: PATCH-FIX-UPSTREAM) Patch1: nm-applet-probe-radius-server-cert.patch # PATCH-FEATURE-SLE nm-applet-migration-tool.patch bsc#952123 sckang@suse.com -- Build migration tool on SLE to migrate old VPN configurations Patch2: nm-applet-migration-tool.patch -# PATCH-FIX-UPSTREAM nm-applet-dialog-check-permissions.patch bsc#1028792 CVE-2017-6590 sckang@suse.com -- Check permissions before showing 802.1x wifi new-connection dialog -Patch3: nm-applet-dialog-check-permissions.patch # PATCH-FIX-OPENSUSE NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch bsc#1003069 hpj@suse.com -- Make sure secrets default to agent-owned (encrypted keyring). Patch4: NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch # Needed for patch0 - disabled since patch0 is disabled. @@ -52,22 +50,24 @@ # Needed by Patch0. BuildRequires: polkit-devel BuildRequires: update-desktop-files -BuildRequires: pkgconfig(NetworkManager) >= 1.3 +BuildRequires: pkgconfig(NetworkManager) >= 1.7 %if %{with appindicator} BuildRequires: pkgconfig(appindicator3-0.1) %endif BuildRequires: pkgconfig(dbusmenu-gtk3-0.4) >= 16.04.0 +BuildRequires: pkgconfig(gck-1) >= 3.14 +BuildRequires: pkgconfig(gcr-3) >= 3.14 BuildRequires: pkgconfig(gobject-introspection-1.0) BuildRequires: pkgconfig(gtk+-3.0) >= 3.4 BuildRequires: pkgconfig(gudev-1.0) >= 147 BuildRequires: pkgconfig(iso-codes) BuildRequires: pkgconfig(jansson) >= 2.3 -BuildRequires: pkgconfig(libnm) >= 1.3 -BuildRequires: pkgconfig(libnm-glib) >= 1.3 -BuildRequires: pkgconfig(libnm-glib-vpn) >= 1.3 -BuildRequires: pkgconfig(libnm-util) >= 1.3 +BuildRequires: pkgconfig(libnm) >= 1.7 +BuildRequires: pkgconfig(libnm-glib) >= 1.7 +BuildRequires: pkgconfig(libnm-glib-vpn) >= 1.7 +BuildRequires: pkgconfig(libnm-util) >= 1.7 BuildRequires: pkgconfig(libnotify) -BuildRequires: pkgconfig(libsecret-unstable) +BuildRequires: pkgconfig(libsecret-1) >= 0.18 BuildRequires: pkgconfig(mm-glib) Requires: NetworkManager >= 0.9.3 Requires: nma-data @@ -179,7 +179,6 @@ translation-update-upstream %patch2 -p1 %endif -%patch3 -p1 %patch4 -p1 %build @@ -188,6 +187,7 @@ %configure \ --disable-static \ --disable-maintainer-mode \ + --without-selinux \ %if %{with appindicator} --with-appindicator %else ++++++ NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch ++++++ --- /var/tmp/diff_new_pack.TUvbQO/_old 2017-06-30 18:40:15.567875901 +0200 +++ /var/tmp/diff_new_pack.TUvbQO/_new 2017-06-30 18:40:15.571875338 +0200 @@ -1,8 +1,8 @@ -diff --git a/src/libnm-gtk/nm-ui-utils.c b/src/libnm-gtk/nm-ui-utils.c -index df2301d..edd1ff4 100644 ---- a/src/libnm-gtk/nm-ui-utils.c -+++ b/src/libnm-gtk/nm-ui-utils.c -@@ -864,8 +864,10 @@ nma_utils_setup_password_storage (GtkWidget *passwd_entry, +Index: network-manager-applet-1.8.2/src/libnm-gtk/nm-ui-utils.c +=================================================================== +--- network-manager-applet-1.8.2.orig/src/libnm-gtk/nm-ui-utils.c ++++ network-manager-applet-1.8.2/src/libnm-gtk/nm-ui-utils.c +@@ -868,8 +868,10 @@ nma_utils_setup_password_storage (GtkWid gtk_menu_attach_to_widget (GTK_MENU (popup_menu), passwd_entry, NULL); /* Initialize active item for password-storage popup menu */ @@ -15,67 +15,37 @@ else secret_flags = initial_flags; -diff --git a/src/wireless-security/eap-method-leap.c b/src/wireless-security/eap-method-leap.c -index 565c68a..e52b23f 100644 ---- a/src/wireless-security/eap-method-leap.c -+++ b/src/wireless-security/eap-method-leap.c -@@ -238,7 +238,7 @@ eap_method_leap_new (WirelessSecurity *ws_parent, +Index: network-manager-applet-1.8.2/src/wireless-security/eap-method-leap.c +=================================================================== +--- network-manager-applet-1.8.2.orig/src/wireless-security/eap-method-leap.c ++++ network-manager-applet-1.8.2/src/wireless-security/eap-method-leap.c +@@ -241,7 +241,7 @@ eap_method_leap_new (WirelessSecurity *w /* Create password-storage popup menu for password entry under entry's secondary icon */ if (connection) s_8021x = nm_connection_get_setting_802_1x (connection); -- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x, parent->password_flags_name, -+ nma_utils_setup_password_storage (widget, NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x, parent->password_flags_name, +- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x, method->password_flags_name, ++ nma_utils_setup_password_storage (widget, NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x, method->password_flags_name, FALSE, secrets_only); widget = GTK_WIDGET (gtk_builder_get_object (parent->builder, "show_checkbutton_eapleap")); -diff --git a/src/wireless-security/eap-method-simple.c b/src/wireless-security/eap-method-simple.c -index bffe179..a2156fa 100644 ---- a/src/wireless-security/eap-method-simple.c -+++ b/src/wireless-security/eap-method-simple.c -@@ -343,7 +343,7 @@ eap_method_simple_new (WirelessSecurity *ws_parent, +Index: network-manager-applet-1.8.2/src/wireless-security/eap-method-simple.c +=================================================================== +--- network-manager-applet-1.8.2.orig/src/wireless-security/eap-method-simple.c ++++ network-manager-applet-1.8.2/src/wireless-security/eap-method-simple.c +@@ -340,7 +340,7 @@ eap_method_simple_new (WirelessSecurity /* Create password-storage popup menu for password entry under entry's secondary icon */ if (connection) s_8021x = nm_connection_get_setting_802_1x (connection); -- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x, parent->password_flags_name, -+ nma_utils_setup_password_storage (widget, NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x, parent->password_flags_name, +- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x, method->password_flags_name, ++ nma_utils_setup_password_storage (widget, NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x, method->password_flags_name, FALSE, flags & EAP_METHOD_SIMPLE_FLAG_SECRETS_ONLY); g_signal_connect (method->password_entry, "notify::secondary-icon-name", -diff --git a/src/wireless-security/eap-method-tls.c b/src/wireless-security/eap-method-tls.c -index 815e6a8..3e64570 100644 ---- a/src/wireless-security/eap-method-tls.c -+++ b/src/wireless-security/eap-method-tls.c -@@ -584,7 +584,7 @@ eap_method_tls_new (WirelessSecurity *ws_parent, - ws_parent); - - /* Create password-storage popup menu for password entry under entry's secondary icon */ -- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x, parent->password_flags_name, -+ nma_utils_setup_password_storage (widget, NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x, parent->password_flags_name, - FALSE, secrets_only); - - widget = GTK_WIDGET (gtk_builder_get_object (parent->builder, "show_checkbutton_eaptls")); -diff --git a/src/wireless-security/wireless-security.c b/src/wireless-security/wireless-security.c -index 17eaab5..ffbb931 100644 ---- a/src/wireless-security/wireless-security.c -+++ b/src/wireless-security/wireless-security.c -@@ -551,8 +551,10 @@ ws_802_1x_fill_connection (WirelessSecurity *sec, - - /* Get previous pasword flags, if any. Otherwise default to agent-owned secrets */ - s_8021x = nm_connection_get_setting_802_1x (connection); -- if (s_8021x) -- nm_setting_get_secret_flags (NM_SETTING (s_8021x), eap->password_flags_name, &secret_flags, NULL); -+ if (s_8021x) { -+ if (!nm_setting_get_secret_flags (NM_SETTING (s_8021x), eap->password_flags_name, &secret_flags, NULL)) -+ secret_flags = NM_SETTING_SECRET_FLAG_AGENT_OWNED; -+ } - else - secret_flags = NM_SETTING_SECRET_FLAG_AGENT_OWNED; - -diff --git a/src/wireless-security/ws-leap.c b/src/wireless-security/ws-leap.c -index 0ca97b2..9cee65d 100644 ---- a/src/wireless-security/ws-leap.c -+++ b/src/wireless-security/ws-leap.c -@@ -179,7 +179,7 @@ ws_leap_new (NMConnection *connection, gboolean secrets_only) +Index: network-manager-applet-1.8.2/src/wireless-security/ws-leap.c +=================================================================== +--- network-manager-applet-1.8.2.orig/src/wireless-security/ws-leap.c ++++ network-manager-applet-1.8.2/src/wireless-security/ws-leap.c +@@ -185,7 +185,7 @@ ws_leap_new (NMConnection *connection, g sec); /* Create password-storage popup menu for password entry under entry's secondary icon */ @@ -84,11 +54,11 @@ FALSE, secrets_only); if (wsec) -diff --git a/src/wireless-security/ws-wep-key.c b/src/wireless-security/ws-wep-key.c -index 0309042..e47c6dd 100644 ---- a/src/wireless-security/ws-wep-key.c -+++ b/src/wireless-security/ws-wep-key.c -@@ -278,7 +278,7 @@ ws_wep_key_new (NMConnection *connection, +Index: network-manager-applet-1.8.2/src/wireless-security/ws-wep-key.c +=================================================================== +--- network-manager-applet-1.8.2.orig/src/wireless-security/ws-wep-key.c ++++ network-manager-applet-1.8.2/src/wireless-security/ws-wep-key.c +@@ -282,7 +282,7 @@ ws_wep_key_new (NMConnection *connection /* Create password-storage popup menu for password entry under entry's secondary icon */ if (connection) setting = (NMSetting *) nm_connection_get_setting_wireless_security (connection); @@ -97,11 +67,11 @@ FALSE, secrets_only); if (connection) { -diff --git a/src/wireless-security/ws-wpa-psk.c b/src/wireless-security/ws-wpa-psk.c -index 1495707..edd21d7 100644 ---- a/src/wireless-security/ws-wpa-psk.c -+++ b/src/wireless-security/ws-wpa-psk.c -@@ -201,7 +201,7 @@ ws_wpa_psk_new (NMConnection *connection, gboolean secrets_only) +Index: network-manager-applet-1.8.2/src/wireless-security/ws-wpa-psk.c +=================================================================== +--- network-manager-applet-1.8.2.orig/src/wireless-security/ws-wpa-psk.c ++++ network-manager-applet-1.8.2/src/wireless-security/ws-wpa-psk.c +@@ -203,7 +203,7 @@ ws_wpa_psk_new (NMConnection *connection /* Create password-storage popup menu for password entry under entry's secondary icon */ if (connection) setting = (NMSetting *) nm_connection_get_setting_wireless_security (connection); ++++++ network-manager-applet-1.4.6.tar.xz -> network-manager-applet-1.8.2.tar.xz ++++++ ++++ 358210 lines of diff (skipped)