## Changelog since v1.15.1

* Fix CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal ([#80436](https://github.com/kubernetes/kubernetes/pull/80436))
* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750))

### CLI

- Fix CVE-2019-11249: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal ([#80436](https://github.com/kubernetes/kubernetes/pull/80436), [@M00nF1sh](https://github.com/M00nF1sh))

hardware support for AES-GCM. // // Each input is zero-padded to 128-bit before being absorbed. func ghash(out, H *[gcmBlockSize]byte, inputs ...[]byte) { // productTable contains the first sixteen powers of the key, H. // However, they are in bit reversed order. var productTable [16]gcmFieldElement // We precompute 16 multiples of H. However, when we do lookups // into this table we'll be using bits from a field element and // therefore the bits will be in the reverse order. So normally one // would...

hardware support for AES-GCM. // // Each input is zero-padded to 128-bit before being absorbed. func ghash(out, H *[gcmBlockSize]byte, inputs ...[]byte) { // productTable contains the first sixteen powers of the key, H. // However, they are in bit reversed order. var productTable [16]gcmFieldElement // We precompute 16 multiples of H. However, when we do lookups // into this table we'll be using bits from a field element and // therefore the bits will be in the reverse order. So normally one // would...