A security issue was discovered in kube-apiserver that could allow an attacker controlled aggregated API server to redirect client traffic to any URL.  This could lead to the client performing unexpected actions as well as leaking the client's credentials to third parties. 

There is no mitigation from this issue.  Cluster admins should take care to secure aggregated API servers and should not grant access to mutate `APIService`s to untrusted parties.

outside of the FIPS 140-3 module for any other use. // // In particular, as documented, Counter does not support the derivation // function, or personalization strings which are necessary for safely using // this DRBG for generic purposes without leaking sensitive values. type Counter struct { // c is instantiated with K as the key and V as the counter. c aes.CTR reseedCounter uint64 } const ( keySize = 256 / 8 SeedSize = keySize + aes.BlockSize reseedInterval = 1 << 48 maxRequestSize = (1 << 19)...

1F930         ; valid                  ;      ; NV8    # 9.0  PREGNANT WOMAN
1F931..1F932  ; valid                  ;      ; NV8    # 10.0 BREAST-FEEDING..PALMS UP TOGETHER
1F933..1F93E  ; valid                  ;      ; NV8    # 9.0  SELFIE..HANDBALL
1F93F         ; valid                  ;      ; NV8    # 12.0 DIVING MASK

s[0] = byteorder.BEUint64(x[24:]) s[1] = byteorder.BEUint64(x[16:]) s[2] = byteorder.BEUint64(x[8:]) s[3] = byteorder.BEUint64(x[:]) // Ensure s is in the range [0, ord(G)-1]. Since 2 * ord(G) > 2²⁵⁶, we can // just conditionally subtract ord(G), keeping the result if it doesn't // underflow. t0, b := bits.Sub64(s[0], 0xf3b9cac2fc632551, 0) t1, b := bits.Sub64(s[1], 0xbce6faada7179e84, b) t2, b := bits.Sub64(s[2], 0xffffffffffffffff, b) t3, b := bits.Sub64(s[3], 0xffffffff00000000, b) tMask := b -...

pkg net/http/httputil, method (*ClientConn) Do(*http.Request) (*http.Response, error)
pkg net/http/httputil, method (*ClientConn) Hijack() (net.Conn, *bufio.Reader)
pkg net/http/httputil, method (*ClientConn) Pending() int
pkg net/http/httputil, method (*ClientConn) Read(*http.Request) (*http.Response, error)
pkg net/http/httputil, method (*ClientConn) Write(*http.Request) error