## Important Security Information

This release contains changes that address the following vulnerabilities:

### CVE-2024-5321: Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes
where BUILTIN\Users may be able to read container logs and NT
AUTHORITY\Authenticated Users may be able to modify container logs.

**Affected Versions**:

/** Example: "0x00,0x08",TLS_RSA_EXPORT_WITH_DES40_CBC_SHA,Y,N,[RFC4346] */
val IANA_CSV_PATTERN = "\"0x(\\w\\w),0x(\\w\\w)\",(\\w+).*".toRegex()

fun parseIanaCsvRow(s: String): SuiteId? {
  if (s.contains("Reserved") || s.contains("Unassigned")) return null
  val matcher = IANA_CSV_PATTERN.matchEntire(s) ?: return null
  val id = (matcher.groupValues[1] + matcher.groupValues[2]).decodeHex()
  return SuiteId(id, matcher.groupValues[3])
}

	errs := g.Wait()

	var poolErrs []error
	for poolIdx := 0; poolIdx < sys.poolsCount; poolIdx++ {
		perPoolErrs := make([]error, 0, len(sys.peerClients))
		for i, client := range sys.peerClients {
			if slices.Contains(client.GetPools(), poolIdx) {
				perPoolErrs = append(perPoolErrs, errs[i])
			}
		}
		quorum := len(perPoolErrs) / 2
		poolErrs = append(poolErrs, reduceWriteQuorumErrs(ctx, perPoolErrs, bucketOpIgnoredErrs, quorum))

        String toStringResult = queryParseException.toString();
        assertNotNull(toStringResult);
        assertTrue(toStringResult.contains("QueryParseException"));
        assertTrue(toStringResult.contains("ParseException"));
    }

    assertTrue(entrySet.contains(immutableEntry(10, 'X')));
    assertTrue(entrySet.contains(immutableEntry(20, 'X')));
    assertFalse(entrySet.contains(immutableEntry(15, 'X')));
    entrySet = row.tailMap(15).entrySet();
    assertFalse(entrySet.contains(immutableEntry(10, 'X')));
    assertTrue(entrySet.contains(immutableEntry(20, 'X')));
    assertFalse(entrySet.contains(immutableEntry(15, 'X')));
  }

            assertTrue("Exception message should mention unregistered class: " + message,
                    message != null && (message.contains("not registered") || message.contains("Class is not registered")
                            || message.contains("unregistered")));
        }
    }

    /**
     * Security test: Custom class should be rejected.

        smb.command = ServerMessageBlock.SMB_COM_ECHO;
        smb.errorCode = 0;
        smb.mid = 1;
        String str = smb.toString();
        assertTrue(str.contains("command=SMB_COM_ECHO"));
        assertTrue(str.contains("errorCode=0"));
        assertTrue(str.contains("mid=1"));
    }

    @Test
    void testToStringUnknownCommand() {
        smb.command = (byte) 0xFF; // Unknown command
        smb.errorCode = 0;

     */
    protected boolean isTrustedProxy(final String ip) {
        final Set<String> trustedProxies = ComponentUtil.getFessConfig().getRateLimitTrustedProxiesAsSet();
        final boolean trusted = trustedProxies.contains(ip);
        if (logger.isDebugEnabled() && trusted) {
            logger.debug("Trusted proxy detected: ip={}", ip);
        }
        return trusted;
    }

    /**

        SimpleCircuitBreaker.Statistics stats = circuitBreaker.getStatistics();
        String str = stats.toString();

        assertNotNull(str);
        assertTrue(str.contains("test"));
        assertTrue(str.contains("CLOSED"));
        assertTrue(str.contains("100.00%"));
    }

    @Test
    @DisplayName("Test mixed success and failure pattern")
    void testMixedPattern() throws Exception {
        // Success

    throwIf(closed);
    return options.contains(TestOption.AVAILABLE_ALWAYS_ZERO) ? 0 : in.available();
  }

  @Override
  public void close() throws IOException {
    closed = true;
    throwIf(CLOSE_THROWS);
    in.close();
  }

  private void throwIf(TestOption option) throws IOException {
    throwIf(options.contains(option));
  }