- [CVE-2022-3162: Unauthorized read of Custom Resources](#cve-2022-3162-unauthorized-read-of-custom-resources)
    - [CVE-2022-3294: Node address isn't always verified when proxying](#cve-2022-3294-node-address-isnt-always-verified-when-proxying)
  - [Dependencies](#dependencies-1)
    - [Added](#added-1)
    - [Changed](#changed-1)
    - [Removed](#removed-1)
- [v1.22.15](#v12215)

    /**
     * Determines if the given address string represents an IPv6 address.
     * This method validates the address using InetAddress to ensure it's a valid IPv6 address.
     *
     * @param address the IP address string to check
     * @return true if the address is a valid IPv6 address, false otherwise
     */
    public static boolean isIPv6Address(final String address) {
        if (address == null) {
            return false;

    InetAddress address = InetAddress.getByName("255.255.255.254");
    assertFalse(InetAddresses.isMaximum(address));

    address = InetAddress.getByName("255.255.255.255");
    assertTrue(InetAddresses.isMaximum(address));

    address = InetAddress.getByName("ffff:ffff:ffff:ffff:ffff:ffff:ffff:fffe");
    assertFalse(InetAddresses.isMaximum(address));

        NbtAddress[] addresses = new NbtAddress[2];
        // Create dummy NbtAddress objects for testing toString
        addresses[0] = new NbtAddress(mockRecordName, 0xC0A80101, false, 0); // 192.168.1.1
        addresses[1] = new NbtAddress(mockRecordName, 0x0A000005, true, 1); // 10.0.0.5
        addrEntryField.set(nameQueryResponse, addresses);

        String expectedContains = ",addrEntry=[";

import okhttp3.Dns

/**
 * A network that always resolves two IP addresses per host. Use this when testing route selection
 * fallbacks to guarantee that a fallback address is available.
 */
class DoubleInetAddressDns : Dns {
  override fun lookup(hostname: String): List<InetAddress> {
    val addresses = Dns.SYSTEM.lookup(hostname)
    return listOf(addresses[0], addresses[0])
  }

    /**
     * Resolves the given host name to an array of IP addresses.
     * The host name is first converted to ASCII using IDN before resolution.
     * IPv6 addresses in bracket notation (e.g., [::1] or [2001:db8::1]) are
     * handled specially by removing the brackets before resolution.
     *
     * @param host the host name to resolve
     * @return an array of IP addresses for the host

    val other = MockWebServer()
    val addressA = InetAddress.getByAddress("localhost", byteArrayOf(127, 0, 0, 1))
    val addressB = InetAddress.getByAddress("localhost", byteArrayOf(127, 0, 0, 2))
    other.use {
      other.start(addressA, 0)

      // Same address is okay.
      other.start(addressA, 0)

      // Same address with bound port is okay.
      other.start(addressA, other.port)

//
// Usage:
//
//	go tool addr2line binary
//
// Addr2line reads hexadecimal addresses, one per line and with optional 0x prefix,
// from standard input. For each input address, addr2line prints two output lines,
// first the name of the function containing the address and second the file:line
// of the source code corresponding to that address.
//
// This tool is intended for use only by pprof; its interface may change or

     * <ul>
     * <li>nested properties should be defined by a dot, i.e. "user.address.street"</li>
     * <li>indexed properties (java.util.List or array instance) should be contains <code>(\\w+)\\[(\\d+)\\]</code>
     * pattern, i.e. "user.addresses[1].street"</li>
     * <li>mapped properties should be contains <code>(\\w+)\\((.+)\\)</code> pattern,
     *  i.e. "user.addresses(myAddress).street"</li>
     * </ul>
     *

                        this.addresses = new UniAddress[1];
                        this.addresses[0] = this.ctx.getNameServiceClient().getByName(server);
                    }
                    final String address = queryLookup(query, "address");
                    if (address != null && address.length() > 0) {
                        final byte[] ip = java.net.InetAddress.getByName(address).getAddress();