- Append the image pull error for the pods `status.containerStatuses[*].state.waiting.message` when
  in image pull back-off (`reason` is `ImagePullBackOff`) instead of the generic `Back-off pulling image…` message. ([#127918](https://github.com/kubernetes/kubernetes/pull/127918), [@saschagrunert](https://github.com/saschagrunert)) [SIG Node and Testing]

* Update Cluster Autoscaler to version 1.3.7. ([#74136](https://github.com/kubernetes/kubernetes/pull/74136), [@jkaniuk](https://github.com/jkaniuk))
* Fix watch to not send the same set of events multiple times causing watcher to go back in time ([#73845](https://github.com/kubernetes/kubernetes/pull/73845), [@wojtek-t](https://github.com/wojtek-t))

## WARNING: etcd backup strongly recommended

Before updating to 1.6, you are strongly recommended to back up your etcd data.
Please consult the installation procedure you are using (kargo, kops, kube-up,
kube-aws, kubeadm etc) for specific advice.

1.6 encourages etcd3, and switching from etcd2 to etcd3 involves a full

**Fixed Versions**:
  - kubelet v1.28.1
  - kubelet v1.27.5
  - kubelet v1.26.8
  - kubelet v1.25.13
  - kubelet v1.24.17

This vulnerability was discovered by James Sturtevant @jsturtevant and Mark Rossetti @marosset during the process of fixing CVE-2023-3676 (that original CVE was reported by Tomer Peled @tomerpeled92)

labels.logout_button=Déconnexion
labels.profile=Changer le mot de passe
labels.administration=Administration
labels.profile_button=Paramètres
labels.profile.title=Paramètres
labels.profile.update=Mettre à jour
labels.profile.back=Retour
labels.profile.placeholder_old_password=Mot de passe actuel
labels.profile.placeholder_new_password=Nouveau mot de passe
labels.profile.placeholder_confirm_new_password=Confirmer le nouveau mot de passe

labels.logout_button=Esci
labels.profile=Cambia password
labels.administration=Amministrazione
labels.profile_button=Impostazioni
labels.profile.title= Impostazioni
labels.profile.update= Aggiorna
labels.profile.back= Indietro
labels.profile.placeholder_old_password= Password attuale
labels.profile.placeholder_new_password= Nuova password
labels.profile.placeholder_confirm_new_password= Conferma nuova password
labels.top.search=Cerca

    `NullPointerException` crashes in `Deflater`.

 *  Fix: Don't crash after a web socket fails its connection upgrade. We incorrectly released
    the web socket's connections back to the pool before their resources were cleaned up.

 *  Fix: Don't infinite loop when a received web socket message has self-terminating compressed
    data.

labels.logout_button=Logout
labels.profile=Alterar senha
labels.administration=Administração
labels.profile_button=Configurações
labels.profile.title= Configurações
labels.profile.update= Atualizar
labels.profile.back= Voltar
labels.profile.placeholder_old_password= Senha atual
labels.profile.placeholder_new_password= Nova senha
labels.profile.placeholder_confirm_new_password= Confirmar nova senha
labels.top.search=Pesquisar

309B          ; disallowed_STD3_mapped ; 0020 3099     # 1.1  KATAKANA-HIRAGANA VOICED SOUND MARK
309C          ; disallowed_STD3_mapped ; 0020 309A     # 1.1  KATAKANA-HIRAGANA SEMI-VOICED SOUND MARK
309D..309E    ; valid                                  # 1.1  HIRAGANA ITERATION MARK..HIRAGANA VOICED ITERATION MARK

#### Additional Details

See the GitHub issue for more details: https://github.com/kubernetes/kubernetes/issues/112192 

#### Acknowledgements

This vulnerability was reported and fixed by Mark Rosetti (@marosset)


**CVSS Rating:** Low (3.4) [CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C)