**Affected Versions**:
  - kube-apiserver v1.32.0 - v1.32.5
  - kube-apiserver v1.33.0 - v1.33.1

**Fixed Versions**:
  - kube-apiserver v1.32.6
  - kube-apiserver v1.33.2

This vulnerability was reported by amitschendel.

// CopyObjectHandler - Copy Object
// ----------
// This implementation of the PUT operation adds an object to a bucket
// while reading the object from another source.
// Notice: The S3 client can send secret keys in headers for encryption related jobs,
// the handler should ensure to remove these keys before sending them to the object layer.
// Currently these keys are:
//   - X-Amz-Server-Side-Encryption-Customer-Key

- The underlying format of the `CPUManager` state file has changed. Upgrades should be seamless, but any third-party tools that rely on reading the previous format need to be updated. ([#84462](https://github.com/kubernetes/kubernetes/pull/84462), [@klueska](https://github.com/klueska)) [SIG Node and Testing]

### Breaking Changes

The TensorBoard dependency is no longer included by default. If you use `tf.summary.*` APIs or `tf.keras.callbacks.TensorBoard`, please install the `tensorboard` package separately (`pip install tensorboard`). Otherwise, TensorFlow will raise an ImportError.

* <DOCUMENT BREAKING CHANGES HERE>
* <THIS SECTION SHOULD CONTAIN API, ABI AND BEHAVIORAL BREAKING CHANGES>

### Known Caveats

	// executing the HTTP request.
	response, err = s.client.Do(request)
	c.Assert(err, nil)
	// validating the response status code.
	c.Assert(response.StatusCode, http.StatusOK)
	// reading the response body.
	// response body is expected to have the copied content of the first uploaded object.
	object, err := io.ReadAll(response.Body)
	c.Assert(err, nil)
	c.Assert(string(object), "hello world")
}

* On GCI, cleanup kubelet startup ([#35319](https://github.com/kubernetes/kubernetes/pull/35319), [@vishh](https://github.com/vishh))
* Add a retry when reading a file content from a container ([#35560](https://github.com/kubernetes/kubernetes/pull/35560), [@jingxu97](https://github.com/jingxu97))
* Fix cadvisor_unsupported and the crossbuild ([#35817](https://github.com/kubernetes/kubernetes/pull/35817), [@luxas](https://github.com/luxas))

labels.jobLogging=日誌記錄
labels.jobName=名稱
labels.jobStatus=狀態
labels.labelTypeIds=標籤
labels.lang=語言
labels.outputs=輸出
labels.pos=詞性
labels.purgeJobLogDay=刪除以前的作業日誌
labels.purgeUserInfoDay=刪除以前的使用者日誌
labels.reading=讀音
labels.roleTypeIds=角色ID
labels.scriptData=腳本
labels.scriptResult=結果
labels.scriptType=執行方法
labels.segmentation=分段
labels.startTime=開始時間
labels.target=目標
labels.token=令牌
labels.synonymFile=同義詞檔案

labels.jobStatus=Status
labels.labelTypeIds=Labels
labels.lang=Sprache
labels.outputs=Ausgaben
labels.pos=Wortart
labels.purgeJobLogDay=Alte Jobprotokolle löschen
labels.purgeUserInfoDay=Alte Benutzerprotokolle löschen
labels.reading=Lesen
labels.roleTypeIds=Rollen-IDs
labels.scriptData=Skript
labels.scriptResult=Ergebnis
labels.scriptType=Ausführungsmethode
labels.segmentation=Segmentierung
labels.startTime=Startzeit
labels.target=Ziel

labels.jobStatus=Status
labels.labelTypeIds=Label
labels.lang=Bahasa
labels.outputs=Output
labels.pos=Kelas Kata
labels.purgeJobLogDay=Hapus log job lama
labels.purgeUserInfoDay=Hapus log pengguna lama
labels.reading=Pembacaan
labels.roleTypeIds=ID Peran
labels.scriptData=Script
labels.scriptResult=Hasil
labels.scriptType=Metode Eksekusi
labels.segmentation=Segmentasi
labels.startTime=Waktu Mulai
labels.target=Target

labels.labelTypeIds=Etykiety
labels.lang=Język
labels.outputs=Wyjścia
labels.pos=Część mowy
labels.purgeJobLogDay=Usuń poprzednie dzienniki zadań
labels.purgeUserInfoDay=Usuń poprzednie dzienniki użytkowników
labels.reading=Odczyt
labels.roleTypeIds=ID roli
labels.scriptData=Skrypt
labels.scriptResult=Wynik
labels.scriptType=Typ wykonania
labels.segmentation=Segmentacja
labels.startTime=Godzina rozpoczęcia
labels.target=Cel