* Fix CVE-2019-11247: API server allows access to custom resources via wrong scope ([#80750](https://github.com/kubernetes/kubernetes/pull/80750))

See also the [security announcement for this release](https://groups.google.com/forum/#!topic/kubernetes-security-announce/vUtEcSEY6SM).

# v1.15.1

[Documentation](https://docs.k8s.io)

## Downloads for v1.15.1


filename | sha512 hash
-------- | -----------

pkg mime/multipart, type FileHeader struct, Filename string
pkg mime/multipart, type FileHeader struct, Header textproto.MIMEHeader
pkg mime/multipart, type Form struct
pkg mime/multipart, type Form struct, File map[string][]*FileHeader
pkg mime/multipart, type Form struct, Value map[string][]string
pkg mime/multipart, type Part struct
pkg mime/multipart, type Part struct, Header textproto.MIMEHeader

* The `NodeRestriction` admission plugin limits the `Node` and `Pod` objects a kubelet can modify. In order to be limited by this admission plugin, kubelets must use credentials in the `system:nodes` group, with a username in the form `system:node:<nodeName>`. Such kubelets will only be allowed to modify their own `Node` API object, and only modify `Pod` API objects that are bound to their node. ([#45929](https://github.com/kubernetes/kubernetes/pull/45929), [@liggitt](https://...

    *   The view role includes read permissions on poddisruptionbudget.policy resources.
*   RBAC rules can now match the same subresource on any resource using the form `*/(subresource)`. For example, `*/scale` matches requests to `replicationcontroller/scale`. ([#53722](https://github.com/kubernetes/kubernetes/pull/53722),[ @deads2k](https://github.com/deads2k))

    * A distributed claim allows the OIDC provider to delegate a claim to a
    * separate URL.  Distributed claims are of the form as seen below, and are
    * defined in the OIDC Connect Core 1.0, section 5.6.2.
    * For details, see:
    * http://openid.net/specs/openid-connect-core-1_0.html#AggregatedDistributedClaims

	//TODO: FNSTSW AX                       // dfe0
	//TODO: FNSTSW (BX)                     // dd3b
	//TODO: FNSTSW (R11)                    // 41dd3b
	FPATAN                                  // d9f3
	FPREM                                   // d9f8
	FPREM1                                  // d9f5
	FPTAN                                   // d9f2
	FRNDINT                                 // d9fc