### CVE-2022-3172: Aggregated API server can cause clients to be redirected (SSRF)

A security issue was discovered in kube-apiserver that could allow an attacker controlled aggregated API server to redirect client traffic to any URL.  This could lead to the client performing unexpected actions as well as leaking the client's credentials to third parties. 

- Fixes regression in logging spurious stack traces when proxied connections are closed by the backend ([#82588](https://github.com/kubernetes/kubernetes/pull/82588), [@liggitt](https://github.com/liggitt))

## Notable Features

10is-a-libertarian\nis-a-llama\ris-a-musician\u000eis-a-nascarfan\nis-a-nurse\u000cis-a-painter\u0014is-a-personaltrainer\u0011is-a-photographer\u000bis-a-player\u000fis-a-republican\ris-a-rockstar\u000eis-a-socialist\u000cis-a-student\u000cis-a-teacher\u000bis-a-techie\u000eis-a-therapist\u0010is-an-accountant\u000bis-an-actor\ris-an-actress\u000fis-an-anarchist\u000cis-an-artist\u000eis-an-engineer\u0011is-an-entertainer\u000cis-certified\u0007is-gone\ris-into-anime\u000cis-into-cars\u0010is-i...

- Trace output in apiserver logs is more organized and comprehensive. Traces are nested, and for all non-long running request endpoints, the entire filter chain is instrumented (e.g. authentication check is included). ([#88936](https://github.com/kubernetes/kubernetes/pull/88936), [@jpbet...

* 🔨 Fix `FastAPI People` workflow. PR [#14951](https://github.com/fastapi/fastapi/pull/14951) by [@YuriiMotov](https://github.com/YuriiMotov).
* 👷 Do not run codspeed with coverage as it's not tracked. PR [#14966](https://github.com/fastapi/fastapi/pull/14966) by [@tiangolo](https://github.com/tiangolo).

### CVE-2022-3172: Aggregated API server can cause clients to be redirected (SSRF)

A security issue was discovered in kube-apiserver that could allow an attacker controlled aggregated API server to redirect client traffic to any URL.  This could lead to the client performing unexpected actions as well as leaking the client's credentials to third parties. 

pkg time, type ParseError struct, Message string
pkg time, type ParseError struct, Value string
pkg time, type ParseError struct, ValueElem string
pkg time, type Ticker struct
pkg time, type Ticker struct, C <-chan Time
pkg time, type Time struct
pkg time, type Timer struct
pkg time, type Timer struct, C <-chan Time
pkg time, type Weekday int
pkg time, var Local *Location

public key, pub. If the hash is longer // than the bit-length of the private key's curve order, the hash will be // truncated to that length. // // The inputs are not considered confidential, and may leak through timing side // channels, or if an attacker has control of part of the inputs. func Verify[P Point[P]](c *Curve[P], pub *PublicKey, hash []byte, sig *Signature) error { if pub.curve != c.curve { return errors.New("ecdsa: public key does not match curve") } fips140.RecordApproved() fipsSelfTest()...

public key, pub. If the hash is longer // than the bit-length of the private key's curve order, the hash will be // truncated to that length. // // The inputs are not considered confidential, and may leak through timing side // channels, or if an attacker has control of part of the inputs. func Verify[P Point[P]](c *Curve[P], pub *PublicKey, hash []byte, sig *Signature) error { if pub.curve != c.curve { return errors.New("ecdsa: public key does not match curve") } fips140.RecordApproved() fipsSelfTest()...