Hello community,
here is the log from the commit of package NetworkManager-applet for
openSUSE:Factory checked in at 2017-06-30 18:40:10
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/NetworkManager-applet (Old)
and /work/SRC/openSUSE:Factory/.NetworkManager-applet.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "NetworkManager-applet"
Fri Jun 30 18:40:10 2017 rev:7 rq:506738 version:1.8.2
Changes:
--------
---
/work/SRC/openSUSE:Factory/NetworkManager-applet/NetworkManager-applet.changes
2017-05-31 12:14:16.658683348 +0200
+++
/work/SRC/openSUSE:Factory/.NetworkManager-applet.new/NetworkManager-applet.changes
2017-06-30 18:40:12.640287683 +0200
@@ -1,0 +2,37 @@
+Fri Jun 23 19:50:06 UTC 2017 - dims...@opensuse.org
+
+- Update to version 1.8.2:
+ + It is now possible to secure the connections that use TLS, TTLS
+ and PEAP authentications by specifying a Domain name to verify
+ the remote certificate subject against.
+ + The TTLS and PEAP EAP methods now utilize the certificate
+ chooser that is capable of choosing an object from a PKCS#11
+ token.
+ + When activating a VPN connection, the routes to the VPN server
+ are now added whichever device has a default route regardless
+ of its kind.
+ + The applet now lists the Wi-Fi network connection profiles even
+ if they are enslaved to another connection.
+ + Fixed a crash after editing a connection with 802.1x security
+ setting.
+- Changes from version 1.8.0:
+ + Warn editor users if certificates have wrong SELinux labels.
+ + Added a PKCS#11 capable certificate chooser to EAP-TLS.
+ + Request Wi-Fi scan when showing the menu and update the scan
+ result list dynamically.
+ + Prevent the use from opening a file open dialog if they don't
+ have permission to edit connections (e.g. in the login manager
+ session) (CVE-2017-6590).
+ + Fix broken libnma's pygobject library.
+ + Add version macros to libnma..
+ + Updated translations.
+- Pass --without-selinux to configure.
+- Replace pkgconfig(libsecret-unstable) BuildRequires with
+ pkgconfig(libsecret-1), following upstream.
+- Add pkgconfig(gcr-3) and pkgconfig(gck-1) BuildRequires: new
+ dependencies for the PKCS#11 enabled certificate chooser.
+- Drop nm-applet-dialog-check-permissions.patch: fixed upstream.
+- Rebase
+ NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch.
+
+-------------------------------------------------------------------
Old:
----
network-manager-applet-1.4.6.tar.xz
nm-applet-dialog-check-permissions.patch
New:
----
network-manager-applet-1.8.2.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ NetworkManager-applet.spec ++++++
--- /var/tmp/diff_new_pack.TUvbQO/_old 2017-06-30 18:40:15.511883776 +0200
+++ /var/tmp/diff_new_pack.TUvbQO/_new 2017-06-30 18:40:15.515883215 +0200
@@ -26,21 +26,19 @@
%define sover 0
%define _name network-manager-applet
Name: NetworkManager-applet
-Version: 1.4.6
+Version: 1.8.2
Release: 0
Summary: GTK+ tray applet for use with NetworkManager
License: GPL-2.0+
Group: System/GUI/GNOME
Url: https://gnome.org/projects/NetworkManager
-Source:
http://download.gnome.org/sources/network-manager-applet/1.4/network-manager-applet-%{version}.tar.xz
+Source:
http://download.gnome.org/sources/network-manager-applet/1.8/%{_name}-%{version}.tar.xz
# PATCH-NEEDS-REBASE nm-applet-private-connection.patch boo#751211 bgo#646187
dims...@opensuse.org -- Create private connections if the user is not
authorised. Allows to create wifi connections without root access. Patch under
discussion upstream. (WAS: PATCH-FIX-UPSTREAM)
Patch0: nm-applet-private-connection.patch
# PATCH-NEEDS-REBASE nm-applet-probe-radius-server-cert.patch bsc#574266
g...@suse.com -- Probe the RADIUS server certificate. (WAS: PATCH-FIX-UPSTREAM)
Patch1: nm-applet-probe-radius-server-cert.patch
# PATCH-FEATURE-SLE nm-applet-migration-tool.patch bsc#952123 sck...@suse.com
-- Build migration tool on SLE to migrate old VPN configurations
Patch2: nm-applet-migration-tool.patch
-# PATCH-FIX-UPSTREAM nm-applet-dialog-check-permissions.patch bsc#1028792
CVE-2017-6590 sck...@suse.com -- Check permissions before showing 802.1x wifi
new-connection dialog
-Patch3: nm-applet-dialog-check-permissions.patch
# PATCH-FIX-OPENSUSE
NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch bsc#1003069
h...@suse.com -- Make sure secrets default to agent-owned (encrypted keyring).
Patch4:
NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch
# Needed for patch0 - disabled since patch0 is disabled.
@@ -52,22 +50,24 @@
# Needed by Patch0.
BuildRequires: polkit-devel
BuildRequires: update-desktop-files
-BuildRequires: pkgconfig(NetworkManager) >= 1.3
+BuildRequires: pkgconfig(NetworkManager) >= 1.7
%if %{with appindicator}
BuildRequires: pkgconfig(appindicator3-0.1)
%endif
BuildRequires: pkgconfig(dbusmenu-gtk3-0.4) >= 16.04.0
+BuildRequires: pkgconfig(gck-1) >= 3.14
+BuildRequires: pkgconfig(gcr-3) >= 3.14
BuildRequires: pkgconfig(gobject-introspection-1.0)
BuildRequires: pkgconfig(gtk+-3.0) >= 3.4
BuildRequires: pkgconfig(gudev-1.0) >= 147
BuildRequires: pkgconfig(iso-codes)
BuildRequires: pkgconfig(jansson) >= 2.3
-BuildRequires: pkgconfig(libnm) >= 1.3
-BuildRequires: pkgconfig(libnm-glib) >= 1.3
-BuildRequires: pkgconfig(libnm-glib-vpn) >= 1.3
-BuildRequires: pkgconfig(libnm-util) >= 1.3
+BuildRequires: pkgconfig(libnm) >= 1.7
+BuildRequires: pkgconfig(libnm-glib) >= 1.7
+BuildRequires: pkgconfig(libnm-glib-vpn) >= 1.7
+BuildRequires: pkgconfig(libnm-util) >= 1.7
BuildRequires: pkgconfig(libnotify)
-BuildRequires: pkgconfig(libsecret-unstable)
+BuildRequires: pkgconfig(libsecret-1) >= 0.18
BuildRequires: pkgconfig(mm-glib)
Requires: NetworkManager >= 0.9.3
Requires: nma-data
@@ -179,7 +179,6 @@
translation-update-upstream
%patch2 -p1
%endif
-%patch3 -p1
%patch4 -p1
%build
@@ -188,6 +187,7 @@
%configure \
--disable-static \
--disable-maintainer-mode \
+ --without-selinux \
%if %{with appindicator}
--with-appindicator
%else
++++++ NetworkManager-gnome-bsc1003069-default-agent-owned-secrets.patch ++++++
--- /var/tmp/diff_new_pack.TUvbQO/_old 2017-06-30 18:40:15.567875901 +0200
+++ /var/tmp/diff_new_pack.TUvbQO/_new 2017-06-30 18:40:15.571875338 +0200
@@ -1,8 +1,8 @@
-diff --git a/src/libnm-gtk/nm-ui-utils.c b/src/libnm-gtk/nm-ui-utils.c
-index df2301d..edd1ff4 100644
---- a/src/libnm-gtk/nm-ui-utils.c
-+++ b/src/libnm-gtk/nm-ui-utils.c
-@@ -864,8 +864,10 @@ nma_utils_setup_password_storage (GtkWidget *passwd_entry,
+Index: network-manager-applet-1.8.2/src/libnm-gtk/nm-ui-utils.c
+===================================================================
+--- network-manager-applet-1.8.2.orig/src/libnm-gtk/nm-ui-utils.c
++++ network-manager-applet-1.8.2/src/libnm-gtk/nm-ui-utils.c
+@@ -868,8 +868,10 @@ nma_utils_setup_password_storage (GtkWid
gtk_menu_attach_to_widget (GTK_MENU (popup_menu), passwd_entry, NULL);
/* Initialize active item for password-storage popup menu */
@@ -15,67 +15,37 @@
else
secret_flags = initial_flags;
-diff --git a/src/wireless-security/eap-method-leap.c
b/src/wireless-security/eap-method-leap.c
-index 565c68a..e52b23f 100644
---- a/src/wireless-security/eap-method-leap.c
-+++ b/src/wireless-security/eap-method-leap.c
-@@ -238,7 +238,7 @@ eap_method_leap_new (WirelessSecurity *ws_parent,
+Index: network-manager-applet-1.8.2/src/wireless-security/eap-method-leap.c
+===================================================================
+--- network-manager-applet-1.8.2.orig/src/wireless-security/eap-method-leap.c
++++ network-manager-applet-1.8.2/src/wireless-security/eap-method-leap.c
+@@ -241,7 +241,7 @@ eap_method_leap_new (WirelessSecurity *w
/* Create password-storage popup menu for password entry under entry's
secondary icon */
if (connection)
s_8021x = nm_connection_get_setting_802_1x (connection);
-- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x,
parent->password_flags_name,
-+ nma_utils_setup_password_storage (widget,
NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x,
parent->password_flags_name,
+- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x,
method->password_flags_name,
++ nma_utils_setup_password_storage (widget,
NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x,
method->password_flags_name,
FALSE, secrets_only);
widget = GTK_WIDGET (gtk_builder_get_object (parent->builder,
"show_checkbutton_eapleap"));
-diff --git a/src/wireless-security/eap-method-simple.c
b/src/wireless-security/eap-method-simple.c
-index bffe179..a2156fa 100644
---- a/src/wireless-security/eap-method-simple.c
-+++ b/src/wireless-security/eap-method-simple.c
-@@ -343,7 +343,7 @@ eap_method_simple_new (WirelessSecurity *ws_parent,
+Index: network-manager-applet-1.8.2/src/wireless-security/eap-method-simple.c
+===================================================================
+--- network-manager-applet-1.8.2.orig/src/wireless-security/eap-method-simple.c
++++ network-manager-applet-1.8.2/src/wireless-security/eap-method-simple.c
+@@ -340,7 +340,7 @@ eap_method_simple_new (WirelessSecurity
/* Create password-storage popup menu for password entry under entry's
secondary icon */
if (connection)
s_8021x = nm_connection_get_setting_802_1x (connection);
-- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x,
parent->password_flags_name,
-+ nma_utils_setup_password_storage (widget,
NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x,
parent->password_flags_name,
+- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x,
method->password_flags_name,
++ nma_utils_setup_password_storage (widget,
NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x,
method->password_flags_name,
FALSE, flags &
EAP_METHOD_SIMPLE_FLAG_SECRETS_ONLY);
g_signal_connect (method->password_entry, "notify::secondary-icon-name",
-diff --git a/src/wireless-security/eap-method-tls.c
b/src/wireless-security/eap-method-tls.c
-index 815e6a8..3e64570 100644
---- a/src/wireless-security/eap-method-tls.c
-+++ b/src/wireless-security/eap-method-tls.c
-@@ -584,7 +584,7 @@ eap_method_tls_new (WirelessSecurity *ws_parent,
- ws_parent);
-
- /* Create password-storage popup menu for password entry under entry's
secondary icon */
-- nma_utils_setup_password_storage (widget, 0, (NMSetting *) s_8021x,
parent->password_flags_name,
-+ nma_utils_setup_password_storage (widget,
NM_SETTING_SECRET_FLAG_AGENT_OWNED, (NMSetting *) s_8021x,
parent->password_flags_name,
- FALSE, secrets_only);
-
- widget = GTK_WIDGET (gtk_builder_get_object (parent->builder,
"show_checkbutton_eaptls"));
-diff --git a/src/wireless-security/wireless-security.c
b/src/wireless-security/wireless-security.c
-index 17eaab5..ffbb931 100644
---- a/src/wireless-security/wireless-security.c
-+++ b/src/wireless-security/wireless-security.c
-@@ -551,8 +551,10 @@ ws_802_1x_fill_connection (WirelessSecurity *sec,
-
- /* Get previous pasword flags, if any. Otherwise default to agent-owned
secrets */
- s_8021x = nm_connection_get_setting_802_1x (connection);
-- if (s_8021x)
-- nm_setting_get_secret_flags (NM_SETTING (s_8021x),
eap->password_flags_name, &secret_flags, NULL);
-+ if (s_8021x) {
-+ if (!nm_setting_get_secret_flags (NM_SETTING (s_8021x),
eap->password_flags_name, &secret_flags, NULL))
-+ secret_flags = NM_SETTING_SECRET_FLAG_AGENT_OWNED;
-+ }
- else
- secret_flags = NM_SETTING_SECRET_FLAG_AGENT_OWNED;
-
-diff --git a/src/wireless-security/ws-leap.c b/src/wireless-security/ws-leap.c
-index 0ca97b2..9cee65d 100644
---- a/src/wireless-security/ws-leap.c
-+++ b/src/wireless-security/ws-leap.c
-@@ -179,7 +179,7 @@ ws_leap_new (NMConnection *connection, gboolean
secrets_only)
+Index: network-manager-applet-1.8.2/src/wireless-security/ws-leap.c
+===================================================================
+--- network-manager-applet-1.8.2.orig/src/wireless-security/ws-leap.c
++++ network-manager-applet-1.8.2/src/wireless-security/ws-leap.c
+@@ -185,7 +185,7 @@ ws_leap_new (NMConnection *connection, g
sec);
/* Create password-storage popup menu for password entry under entry's
secondary icon */
@@ -84,11 +54,11 @@
FALSE, secrets_only);
if (wsec)
-diff --git a/src/wireless-security/ws-wep-key.c
b/src/wireless-security/ws-wep-key.c
-index 0309042..e47c6dd 100644
---- a/src/wireless-security/ws-wep-key.c
-+++ b/src/wireless-security/ws-wep-key.c
-@@ -278,7 +278,7 @@ ws_wep_key_new (NMConnection *connection,
+Index: network-manager-applet-1.8.2/src/wireless-security/ws-wep-key.c
+===================================================================
+--- network-manager-applet-1.8.2.orig/src/wireless-security/ws-wep-key.c
++++ network-manager-applet-1.8.2/src/wireless-security/ws-wep-key.c
+@@ -282,7 +282,7 @@ ws_wep_key_new (NMConnection *connection
/* Create password-storage popup menu for password entry under entry's
secondary icon */
if (connection)
setting = (NMSetting *)
nm_connection_get_setting_wireless_security (connection);
@@ -97,11 +67,11 @@
FALSE, secrets_only);
if (connection) {
-diff --git a/src/wireless-security/ws-wpa-psk.c
b/src/wireless-security/ws-wpa-psk.c
-index 1495707..edd21d7 100644
---- a/src/wireless-security/ws-wpa-psk.c
-+++ b/src/wireless-security/ws-wpa-psk.c
-@@ -201,7 +201,7 @@ ws_wpa_psk_new (NMConnection *connection, gboolean
secrets_only)
+Index: network-manager-applet-1.8.2/src/wireless-security/ws-wpa-psk.c
+===================================================================
+--- network-manager-applet-1.8.2.orig/src/wireless-security/ws-wpa-psk.c
++++ network-manager-applet-1.8.2/src/wireless-security/ws-wpa-psk.c
+@@ -203,7 +203,7 @@ ws_wpa_psk_new (NMConnection *connection
/* Create password-storage popup menu for password entry under entry's
secondary icon */
if (connection)
setting = (NMSetting *)
nm_connection_get_setting_wireless_security (connection);
++++++ network-manager-applet-1.4.6.tar.xz ->
network-manager-applet-1.8.2.tar.xz ++++++
++++ 358210 lines of diff (skipped)
