**Affected Versions**:
  - kube-apiserver v1.31.0 - v1.31.11
  - kube-apiserver v1.32.0 - v1.32.7
  - kube-apiserver v1.33.0 - v1.33.3

**Fixed Versions**:
  - kube-apiserver v1.31.12
  - kube-apiserver v1.32.8
  - kube-apiserver v1.33.4

This vulnerability was reported by Paul Viossat.

  - [Changelog since v1.17.1](#changelog-since-v1171)
- [v1.17.1](#v1171)
  - [Downloads for v1.17.1](#downloads-for-v1171)
    - [Client Binaries](#client-binaries-16)
    - [Server Binaries](#server-binaries-16)
    - [Node Binaries](#node-binaries-16)
  - [Changelog since v1.17.0](#changelog-since-v1170)
    - [Other notable changes](#other-notable-changes)
- [v1.17.0](#v1170)

that could allow a user with the ability to query a node's '/logs' endpoint
to execute arbitrary commands on the host.

**Affected Versions**:
  - kubelet <= v1.29.12
  - kubelet <= v1.30.8
  - kubelet <= v1.31.4
  - kubelet = v1.32.0

**Fixed Versions**:
  - kubelet 1.29.13
  - kubelet 1.30.9
  - kubelet 1.31.5
  - kubelet 1.32.1

	VREDSUMVS	V1, V2, V3			// d7a12002
	VREDSUMVS	V1, V2, V0, V3			// d7a12000
	VREDMAXUVS	V1, V2, V3			// d7a1201a
	VREDMAXUVS	V1, V2, V0, V3			// d7a12018
	VREDMAXVS	V1, V2, V3			// d7a1201e
	VREDMAXVS	V1, V2, V0, V3			// d7a1201c
	VREDMINUVS	V1, V2, V3			// d7a12012
	VREDMINUVS	V1, V2, V0, V3			// d7a12010
	VREDMINVS	V1, V2, V3			// d7a12016
	VREDMINVS	V1, V2, V0, V3			// d7a12014

    return copyOf(singletonMap(k1, v1));
  }

  public static <K extends Comparable<? super K>, V> ImmutableSortedMap<K, V> of(
      K k1, V v1, K k2, V v2) {
    return new Builder<K, V>(Ordering.natural()).put(k1, v1).put(k2, v2).build();
  }

  public static <K extends Comparable<? super K>, V> ImmutableSortedMap<K, V> of(
      K k1, V v1, K k2, V v2, K k3, V v3) {

### Changed
- github.com/gogo/protobuf: [v1.3.1 → v1.3.2](https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2)
- github.com/kisielk/errcheck: [v1.2.0 → v1.5.0](https://github.com/kisielk/errcheck/compare/v1.2.0...v1.5.0)
- golang.org/x/net: 13f9640 → 69a7880
- golang.org/x/sys: fde4db3 → 5cba982

### Removed
_Nothing has changed._



# v1.18.17


## Downloads for v1.18.17

### Source Code

<!-- BEGIN MUNGE: GENERATED_TOC -->
- [v1.12.10](#v11210)
  - [Downloads for v1.12.10](#downloads-for-v11210)
    - [Client Binaries](#client-binaries)
    - [Server Binaries](#server-binaries)
    - [Node Binaries](#node-binaries)
  - [Changelog since v1.12.9](#changelog-since-v1129)
    - [Other notable changes](#other-notable-changes)
- [v1.12.9](#v1129)
  - [Downloads for v1.12.9](#downloads-for-v1129)
    - [Client Binaries](#client-binaries-1)

        runJavaBinaryCompatibilityCheck(v1, v2) {
            assertNotBinaryCompatible()
            block()
        }

    internal
    fun checkBinaryCompatible(v1: File.() -> Unit = {}, v2: File.() -> Unit = {}, block: CheckResult.() -> Unit = {}): CheckResult =
        runBinaryCompatibilityCheck(v1, v2) {

- github.com/aws/smithy-go: [v1.20.3 → v1.22.3](https://github.com/aws/smithy-go/compare/v1.20.3...v1.22.3)
- github.com/containerd/containerd/api: [v1.8.0 → v1.9.0](https://github.com/containerd/containerd/compare/api/v1.8.0...api/v1.9.0)
- github.com/containerd/ttrpc: [v1.2.6 → v1.2.7](https://github.com/containerd/ttrpc/compare/v1.2.6...v1.2.7)

	VN	V2, V1, V0              // e70210000068
	VNC	V2, V1, V0              // e70210000069
	VO	V2, V1, V0              // e7021000006a
	VX	V2, V1, V0              // e7021000006d
	VN	V16, V1                 // e71010000468
	VNC	V16, V1                 // e71010000469
	VO	V16, V1                 // e7101000046a
	VX	V16, V1                 // e7101000046d
	VNOT	V16, V1                 // e7101000046b