- Dynamic Resource Allocation (DRA): client-side validation of a ResourceHandle would have accepted a missing DriverName, whereas server-side validation then would have raised an error. ([#124075](https://github.com/kubernetes/kubernetes/pull/124075), [@pohly](https://github.com/pohly))

### CVE-2022-3162: Unauthorized read of Custom Resources

A security issue was discovered in Kubernetes where users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group they are not authorized to read.

**Affected Versions**:
  - kube-apiserver v1.25.0 - v1.25.3
  - kube-apiserver v1.24.0 - v1.24.7

func (h *healSequence) healItems(objAPI ObjectLayer) error {
	if h.clientToken == bgHealingUUID {
		// For background heal do nothing.
		return nil
	}

	if h.bucket == "" { // heal internal meta only during a site-wide heal
		if err := h.healDiskMeta(objAPI); err != nil {
			return err
		}
	}

	// Heal buckets and objects
	return h.healBuckets(objAPI)
}

     * Gets whether witness protocol support is enabled.
     *
     * @return true if witness is enabled
     */
    boolean isUseWitness();

    /**
     * @return whether to use SMB3 leases for client-side caching
     */
    boolean isUseLeases();

    /**
     * @return timeout for persistent handles in milliseconds
     */
    long getPersistentHandleTimeout();

    /**

		return false
	}
	for k, v := range fi.Metadata {
		if ov, ok := ofi.Metadata[k]; !ok || ov != v {
			return false
		}
	}
	return true
}

// ReplicationInfoEquals returns true if server-side replication related fields are equal, false otherwise.
func (fi FileInfo) ReplicationInfoEquals(ofi FileInfo) bool {
	switch {
	case fi.MarkDeleted != ofi.MarkDeleted,
		!fi.ReplicationState.Equal(ofi.ReplicationState):

On the other side, there are thousands of users in the chat systems, so there's a high chance you'll find someone to talk to there, almost all the time. 😄

## Sponsor the author { #sponsor-the-author }

and the program is not valid.
</p>

<p>
Multiple variables on the left-hand side of a variable declaration initialized
by single (multi-valued) expression on the right-hand side are initialized
together: If any of the variables on the left-hand side is initialized, all
those variables are initialized in the same step.
</p>

<pre>
var x = a

  internal fun removeStream(streamId: Int): Http2Stream? {
    withLock {
      val stream = streams.remove(streamId)

      // The removed stream may be blocked on a connection-wide window update.
      notifyAll()

      return stream
    }
  }

  internal fun updateConnectionFlowControl(read: Long) {
    withLock {
      readBytes.update(total = read)

    private int linkSpeed;  // In units of 1 Mbps
    private byte[] sockaddrStorage;  // Socket address
    private InetAddress address;
    private boolean ipv6;
    private boolean rssCapable;  // Receive Side Scaling
    private boolean rdmaCapable;
    
    // Capability flags
    public static final int NETWORK_INTERFACE_CAP_RSS = 0x00000001;
    public static final int NETWORK_INTERFACE_CAP_RDMA = 0x00000002;
    

- Fixed bugs in handling of server-side apply, create, and update API requests for objects containing duplicate items in keyed lists.
  - A `create` or `update` API request with duplicate items in a keyed list no longer wipes out managedFields. Examples include env var entries with the same name, or port entries with the same containerPort in a pod spec.