Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package istioctl for openSUSE:Factory checked in at 2026-09-22 15:51:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/istioctl (Old) and /work/SRC/openSUSE:Factory/.istioctl.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "istioctl" Tue Sep 22 15:51:31 2026 rev:56 rq:1379565 version:1.31.1 Changes: -------- --- /work/SRC/openSUSE:Factory/istioctl/istioctl.changes 2026-09-21 12:07:02.995733501 +0200 +++ /work/SRC/openSUSE:Factory/.istioctl.new.383539/istioctl.changes 2026-09-22 15:52:24.157204432 +0200 @@ -1,0 +2,15 @@ +Tue Sep 22 04:43:15 UTC 2026 - Johannes Kastl <[email protected]> + +- update to 1.31.1: + * Istio CVEs + - GHSA-qm8v-g4f9-qhjx (CVSS score 6.8, Moderate): BackendTLSPolicy + fails open to plaintext on sidecar proxies when its CA reference + is unresolved. + * Fixed istioctl analyze building Kubernetes clients directly from + istio-system multicluster secrets without sanitizing the + kubeconfig, which could allow a crafted secret to run an exec + credential plugin (or read local files via other unsafe auth + fields) on the machine running istioctl. The kubeconfig is now + sanitized the same way istiod already sanitizes these secrets. + +------------------------------------------------------------------- Old: ---- istioctl-1.31.0.obscpio New: ---- istioctl-1.31.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ istioctl.spec ++++++ --- /var/tmp/diff_new_pack.908C1w/_old 2026-09-22 15:52:27.256332843 +0200 +++ /var/tmp/diff_new_pack.908C1w/_new 2026-09-22 15:52:27.258332926 +0200 @@ -17,7 +17,7 @@ Name: istioctl -Version: 1.31.0 +Version: 1.31.1 Release: 0 Summary: CLI for the istio servic mesh in Kubernetes License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.908C1w/_old 2026-09-22 15:52:27.301334708 +0200 +++ /var/tmp/diff_new_pack.908C1w/_new 2026-09-22 15:52:27.304334832 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/istio/istio.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/1.31.0</param> + <param name="revision">refs/tags/1.31.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">disable</param> <param name="filename">istioctl</param> ++++++ istioctl-1.31.0.obscpio -> istioctl-1.31.1.obscpio ++++++ ++++ 15438 lines of diff (skipped) ++++++ istioctl.obsinfo ++++++ --- /var/tmp/diff_new_pack.908C1w/_old 2026-09-22 15:52:30.155452967 +0200 +++ /var/tmp/diff_new_pack.908C1w/_new 2026-09-22 15:52:30.160453174 +0200 @@ -1,5 +1,5 @@ name: istioctl -version: 1.31.0 -mtime: 1787834720 -commit: eed52ebb66ade45214088877b0f82855d954060d +version: 1.31.1 +mtime: 1789588467 +commit: 190ae921b848ec010b8be4457533837ed8fce258 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/istioctl/vendor.tar.gz /work/SRC/openSUSE:Factory/.istioctl.new.383539/vendor.tar.gz differ: char 13, line 1
