- Fixed a 1.32 regression kube-proxy, when using a Service with External or LoadBalancer IPs on UDP services , was consuming a large amount of CPU because it was not filtering by the Service destination port and trying to delete all the UDP entries associated to the service. ([#130484](https://github.com/kubernetes/kubernetes/pull/130484), [@aojea](https://github.com/aojea)) [SIG Network]

* kubectl cp now safely allows unpacking of symlinks that may point outside the destination directory ([#82384](https://github.com/kubernetes/kubernetes/pull/82384), [@tallclair](https://github.com/tallclair))

### API Change

* kubectl cp now safely allows unpacking of symlinks that may point outside the destination directory ([#82384](https://github.com/kubernetes/kubernetes/pull/82384), [@tallclair](https://github.com/tallclair))

        assertArrayEquals(largeTestData, decompressed);
    }

    @Test
    @DisplayName("Test compression ratio estimation")
    public void testCompressionRatioEstimation() {
        double ratio = compressionService.estimateCompressionRatio(testData, CompressionService.COMPRESSION_LZ77);
        assertTrue(ratio >= 0.0 && ratio <= 1.0);

    /**
     * Get the value for the key 'ldap.attr.destinationIndicator'. <br>
     * The value is, e.g. destinationIndicator <br>
     * comment: LDAP attribute for destination indicator.
     * @return The value of found property. (NotNull: if not found, exception but basically no way)
     */
    String getLdapAttrDestinationIndicator();

    /**

* CRI now defines mounting behavior. If the host path doesn't exist, the runtime should return an error. If the host path is a symlink, the runtime should follow the symlink and mount the real destination to the container. ([#61460](https://github.com/kubernetes/kubernetes/pull/61460), [@feiskyer](https://github.com/feiskyer))

### SIG OpenStack

   * registry suffixes, since domain name registries collectively control all internet domain names.
   *
   * <p>For considerations on whether the public suffix or registry suffix designation is more
   * suitable for your application, see <a
   * href="https://github.com/google/guava/wiki/InternetDomainNameExplained">this article</a>.
   *

labels.dict_synonym_link_delete=Elimina
labels.dict_synonym_link_details=Dettagli
labels.dict_synonym_link_download=Scarica
labels.dict_synonym_link_upload=Carica
labels.dict_synonym_source=Sorgente
labels.dict_synonym_target=Destinazione
labels.dict_synonym_button_download=Scarica
labels.dict_synonym_button_upload=Carica
labels.dict_synonym_file=File sinonimi
labels.dict_stemmeroverride_configuration=Lista override stemmer

        } catch (IOException e) {
            throw new CIFSException("LZ77+Huffman decompression failed", e);
        }
    }

    /**
     * Counts the number of unique bytes in the data (for entropy estimation).
     */
    private int countUniqueBytes(byte[] data) {
        boolean[] seen = new boolean[256];
        int count = 0;

        for (byte b : data) {
            int index = b & 0xFF;