Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package istioctl for openSUSE:Factory checked in at 2026-10-24 22:04:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/istioctl (Old) and /work/SRC/openSUSE:Factory/.istioctl.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "istioctl" Sat Oct 24 22:04:57 2026 rev:58 rq:1392196 version:1.31.3 Changes: -------- --- /work/SRC/openSUSE:Factory/istioctl/istioctl.changes 2026-10-16 20:12:44.674874216 +0200 +++ /work/SRC/openSUSE:Factory/.istioctl.new.2252680/istioctl.changes 2026-10-24 22:06:49.311130267 +0200 @@ -1,0 +2,20 @@ +Fri Oct 23 16:16:01 UTC 2026 - Johannes Kastl <[email protected]> + +- update to 1.31.3: + * Security update + https://istio.io/latest/news/security/istio-security-2026-008/ + - Removed trust in the compromised eMudhra intermediate CA + certificates. The CA bundle in the ubuntu-based and + distroless images no longer includes emSign ECC Root CA - G3. + - CVE-2026-111943: Updated Go to 1.26.10, which rejects + certificate chains that contain any of the compromised + eMudhra intermediate keys in istiod, istioctl, and + pilot-agent. + - Updated rustls-webpki in ztunnel to 0.103.16, which rejects + certificate chains that contain any of the compromised + eMudhra intermediate keys. + * Changes + - Fixed istioctl bug-report --duration not filtering logs when + used without --end-time. + +------------------------------------------------------------------- Old: ---- istioctl-1.31.2.obscpio New: ---- istioctl-1.31.3.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ istioctl.spec ++++++ --- /var/tmp/diff_new_pack.jvjrTA/_old 2026-10-24 22:06:50.396175934 +0200 +++ /var/tmp/diff_new_pack.jvjrTA/_new 2026-10-24 22:06:50.401176144 +0200 @@ -17,7 +17,7 @@ Name: istioctl -Version: 1.31.2 +Version: 1.31.3 Release: 0 Summary: CLI for the istio servic mesh in Kubernetes License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.jvjrTA/_old 2026-10-24 22:06:50.451178248 +0200 +++ /var/tmp/diff_new_pack.jvjrTA/_new 2026-10-24 22:06:50.456178459 +0200 @@ -3,7 +3,7 @@ <param name="url">https://github.com/istio/istio.git</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">refs/tags/1.31.2</param> + <param name="revision">refs/tags/1.31.3</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">disable</param> <param name="filename">istioctl</param> ++++++ istioctl-1.31.2.obscpio -> istioctl-1.31.3.obscpio ++++++ ++++ 2250 lines of diff (skipped) ++++++ istioctl.obsinfo ++++++ --- /var/tmp/diff_new_pack.jvjrTA/_old 2026-10-24 22:06:53.055287847 +0200 +++ /var/tmp/diff_new_pack.jvjrTA/_new 2026-10-24 22:06:53.061288100 +0200 @@ -1,5 +1,5 @@ name: istioctl -version: 1.31.2 -mtime: 1792070362 -commit: e2f3a7949a358af7dd901a6f9ccd6ecdd7270271 +version: 1.31.3 +mtime: 1792626053 +commit: edd80bca5f71bd564711ef43ccd085acb545a6b4 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/istioctl/vendor.tar.gz /work/SRC/openSUSE:Factory/.istioctl.new.2252680/vendor.tar.gz differ: char 135, line 1
