* kube-controller-manager can now start the quota controller when discovery results can only be partially determined. ([#67433](https://github.com/kubernetes/kubernetes/pull/67433), [@deads2k](https://github.com/deads2k))

    <magic priority="50">
      <match value="Article" type="string" offset="0" />
    </magic>
    <sub-class-of type="text/x-tika-text-based-message"/>
  </mime-type>

  <mime-type type="message/partial"/>

  <mime-type type="message/rfc822">
    <magic priority="50">
      <!-- these should be 100% hits...if you see this at offset=0 -->
      <match value="Relay-Version:" type="stringignorecase" offset="0"/>

updates to bypass a Validating Admission Webhook. You are only affected
by this vulnerability if you run a Validating Admission Webhook for Nodes
that denies admission based at least partially on the old state of the
Node object.

**Note**: This only impacts validating admission plugins that rely on old
values in certain fields, and does not impact calls from kubelet that go