an "AdminAccess" field which should be used instead of the corresponding field in the `DeviceRequest` field when dealing with an allocation. If a device is only allocated for admin access, allocating it again for normal usage is now supported, as originally intended. To allow admin access, starting with 1.32 the `DRAAdminAccess` feature gate must be enabled. ([#127266](https://github.com/kubernetes/kubernetes/pull/127266), [@pohly](https://github.com/pohly)) [SIG API Machinery, Apps, Auth, Etcd, Network,...

  - kubelet v1.26.8
  - kubelet v1.25.13
  - kubelet v1.24.17

This vulnerability was discovered by James Sturtevant @jsturtevant and Mark Rossetti @marosset during the process of fixing CVE-2023-3676 (that original CVE was reported by Tomer Peled @tomerpeled92)


**CVSS Rating:** High (8.8) [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

  requiring you to reapply the manual edits.
  * This issue does not affect clusters that were already running Kubernetes v1.6.4 or higher.
  * This issue does not affect Health Checks that were left in the configuration
    [originally set by the GLBC Ingress Controller](https://github.com/kubernetes/ingress-nginx/tree/0.9.0-beta.1/controllers/gce#health-checks).

## Downloads for v1.6.5


filename | sha256 hash
-------- | -----------

org.tt
org.tw
org.ua
org.ug
org.uk
org.uy
org.uz
org.vc
org.ve
org.vi
org.vn
org.vu
org.ws
org.ye
org.yt
org.za
org.zm
org.zw
organic
origins
oristano.it
orkanger.no
orkdal.no
orland.no
orsites.com
orskog.no
orsta.no
orx.biz
os.hedmark.no
os.hordaland.no
osaka
osaka.jp
osakasayama.osaka.jp

ext-align:left;background-color:#fff}[tabindex="-1"]:focus:not(:focus-visible){outline:0!important}hr{box-sizing:content-box;height:0;overflow:visible}h1,h2,h3,h4,h5,h6{margin-top:0;margin-bottom:.5rem}p{margin-top:0;margin-bottom:1rem}abbr[data-original-title],abbr[title]{text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;fon...

org.tt
org.tw
org.ua
org.ug
org.uk
org.uy
org.uz
org.vc
org.ve
org.vi
org.vn
org.vu
org.ws
org.ye
org.yt
org.za
org.zm
org.zw
organic
origins
oristano.it
orkanger.no
orkdal.no
orland.no
orsites.com
orskog.no
orsta.no
orx.biz
os.hedmark.no
os.hordaland.no
osaka
osaka.jp
osakasayama.osaka.jp

  <mime-type type="audio/adpcm">
    <glob pattern="*.adp"/>
  </mime-type>

  <mime-type type="audio/amr">
    <glob pattern="*.amr"/>
    <magic priority="40">
      <!-- Specific match for the original AMR format -->
      <match value="#!AMR\n" type="string" offset="0"/>
      <!-- General match for AMR subtypes we don't have entries for -->
      <match value="#!AMR" type="string" offset="0"/>
    </magic>

* [alpha] Building on the 1.7 work to allow encryption of resources such as secrets, a mechanism to store resource encryption keys in external Key Management Systems (KMS) was introduced. This complements the original file-based storage and allows integration with multiple KMS. A Google Cloud KMS plugin was added and will be usable once the Google side of the integration is complete.

     */
    String getApiDashboardResponseHeaders();

    /**
     * Get the value for the key 'api.cors.allow.origin'. <br>
     * The value is, e.g. * <br>
     * comment: Allowed origins for CORS.
     * @return The value of found property. (NotNull: if not found, exception but basically no way)
     */
    String getApiCorsAllowOrigin();

    /**

### Other (Cleanup or Flake)