* Adds TCPCloseWaitTimeout option to kube-proxy for sysctl nf_conntrack_tcp_timeout_time_wait ([#35919](https://github.com/kubernetes/kubernetes/pull/35919), [@bowei](https://github.com/bowei))
* Fix how we iterate over active jobs when removing them for Replace policy ([#36161](https://github.com/kubernetes/kubernetes/pull/36161), [@soltysh](https://github.com/soltysh))

**Affected Versions**:

- kubelet v1.20 - v1.21
- kubelet v1.22.0 - v1.22.13
- kubelet v1.23.0 - v1.23.10
- kubelet v1.24.0 - v1.24.4

**How do I mitigate this vulnerability?**

There are no known mitigations to this vulnerability.

**Fixed Versions**:

- kubelet v1.22.14
- kubelet v1.23.11
- kubelet v1.24.5
- kubelet v1.25.0

horten.no
hosp.uk
hospital
host
hostedpi.com
hosting
hosting-cluster.nl
hostyhosting.io
hot
hotel.hu
hotel.lk
hotel.tz
hotels
hotelwithflight.com
hotmail
house
how
hoyanger.no
hoylandet.no
hr
hr.eu.org
hra.health
hrsn.dev
hs.kr
hsbc
ht
httpbin.org
hu
hu.eu.org
hu.net
hughes
huissier-justice.fr
hungry.jp

    <glob pattern="*.wp5"/>
    <glob pattern="*.wp6"/>
    <glob pattern="*.w60"/>
    <glob pattern="*.wp61"/>
    <glob pattern="*.wpt"/>

  </mime-type>
  <!-- TODO: figure out how to identify earlier versions -->
  <mime-type type="application/vnd.wordperfect;version=4.2">
    <sub-class-of type="application/vnd.wordperfect"/>
    <magic priority="50">

  * Plugins

      * Introduces the ability to extend kubectl by adding third-party plugins. Developer preview, please refer to the documentation for instructions about how to use it. ([#37499](https://github.com/kubernetes/kubernetes/pull/37499), [@fabianofranz](https://github.com/fabianofranz))

- Kubeadm: fix a bug when using external CA mode and trying to upgrade to 1.29 using "kubeadm upgrade apply". Show a warning that kubeadm cannot sign the new "super-admin.conf" as the host does not have a CA and show some instructions on how to manually migrate to the separate "admin.conf" and "super-admin.conf" kubeconfig files. ([#124682](https://github.com/kubernetes/kubernetes/pull/124682), [@neolit123](https://github.com/neolit123)) [SIG Cluster Lifecycle]

### Cluster Federation

#### [alpha] Federated Jobs

Federated Jobs that are automatically deployed to multiple clusters
are now supported. Cluster selection and weighting determine how Job
parallelism and completions are spread across clusters. Federated Job
status reflects the aggregate status across all underlying cluster
jobs.

#### [alpha] Federated Horizontal Pod Autoscaling (HPA)

					ExpiryLCConfig: &configStr,
					UpdatedAt:      time.Now(),
				})
				if err != nil {
					return errSRBucketMetaError(err)
				}
			}
		}
	}

	// Order matters from now on how the information is
	// synced to remote sites.

	// Policies should be synced first.
	{
		// Replicate IAM policies on local to all peers.
		allPolicyDocs, err := globalIAMSys.ListPolicyDocs(ctx, "")

- The new `-gce-zones` flag on the `e2e.test` binary instructs tests that check for information about how the cluster interacts with the cloud to limit their queries to the provided zone list. If not specified, the current behavior of asking the cloud provider for all available zones in multi zone clusters is preserved. ([#98787](https://github.com/kub...

horten.no
hosp.uk
hospital
host
hostedpi.com
hosting
hosting-cluster.nl
hostyhosting.io
hot
hotel.hu
hotel.lk
hotel.tz
hotels
hotelwithflight.com
hotmail
house
how
hoyanger.no
hoylandet.no
hr
hr.eu.org
hra.health
hrsn.dev
hs.kr
hsbc
ht
httpbin.org
hu
hu.eu.org
hu.net
hughes
huissier-justice.fr
hungry.jp