fips140.RecordNonApproved() } origLen := len(in) in = h.inner.Sum(in) if h.marshaled { if err := h.outer.(marshalable).UnmarshalBinary(h.opad); err != nil { panic(err) } } else { h.outer.Reset() h.outer.Write(h.opad) } h.outer.Write(in[origLen:]) return h.outer.Sum(in[:origLen]) } func (h *HMAC) Write(p []byte) (n int, err error) { return h.inner.Write(p) } func (h *HMAC) Size() int { return h.outer.Size() } func (h *HMAC) BlockSize() int { return h.inner.BlockSize() } func (h *HMAC) Reset() { if...

- Fix route conflicted operations when updating multiple routes together ([#88209](https://github.com/kubernetes/kubernetes/pull/88209), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]

- Fix route conflicted operations when updating multiple routes together ([#88209](https://github.com/kubernetes/kubernetes/pull/88209), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]

* Allow node IPAM controller to configure IPAMFromCluster mode to use IP aliases instead of routes in GCP. ([#59688](https://github.com/kubernetes/kubernetes/pull/59688), [@jingax10](https://github.com/jingax10))

r\u000chs-heilbronn\u0009in-berlin\u0006in-brb\u0009in-butter\u0006in-dsl\u0006in-vpn\u000cinternet-dns\u000biservschule\nisteingeek\u0007istmein\nkeymachine\u0009l-o-g-i-n\u000clcube-server\nlebtimnetz\nleitungsen\nmein-iserv\nmy-gateway\u0009my-router\rmyhome-server\u0003rub\u000fruhr-uni-bochum\u0009schuldock\u000eschulplattform\u000bschulserver\u0005spdns\u000cspeedpartner\u0009svn-repos\ntaifun-dns\ntest-iserv\rtraeumtgerade\u000cvirtual-user\u000bvirtualuser\u000ewebspaceconfig\u000cxenonc...

$color-stop: 50%, $end-color: $red) {\n  background-image: linear-gradient($start-color, $mid-color $color-stop, $end-color);\n  background-repeat: no-repeat;\n}\n@mixin gradient-radial($inner-color: $gray-700, $outer-color: $gray-800) {\n  background-image: radial-gradient(circle, $inner-color, $outer-color);\n  background-repeat: no-repeat;\n}\n@mixin gradient-striped($color: rgba($white, .15), $angle: 45deg) {\n  background-image: linear-gradient($angle, $color 25%, transparent 25%, transparent 50%, $color...

- Fix route conflicted operations when updating multiple routes together ([#88209](https://github.com/kubernetes/kubernetes/pull/88209), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]

  - kubelet <= v1.19.14

**Fixed Versions**:
  - kubelet v1.22.2
  - kubelet v1.21.5
  - kubelet v1.20.11
  - kubelet v1.19.15

This vulnerability was reported by Fabricio Voznika and Mark Wolters of Google.

**CVSS Rating:** High (8.8) [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

## Changes by Kind

- Fix: Route controller should update routes with NodeIP changed ([#116361](https://github.com/kubernetes/kubernetes/pull/116361), [@lzhecheng](https://github.com/lzhecheng)) [SIG Cloud Provider]

- Fix: Route controller should update routes with NodeIP changed ([#116362](https://github.com/kubernetes/kubernetes/pull/116362), [@lzhecheng](https://github.com/lzhecheng)) [SIG Cloud Provider]