### CVE-2024-5321: Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes
where BUILTIN\Users may be able to read container logs and NT
AUTHORITY\Authenticated Users may be able to modify container logs.

**Affected Versions**:
  - kubelet <= 1.27.15
  - kubelet <= 1.28.11
  - kubelet <= 1.29.6
  - kubelet <= 1.30.2 

**Fixed Versions**:

pkg debug/gosym, method (*Table) LineToPC(string, int) (uint64, *Func, error)
pkg debug/gosym, method (*Table) LookupFunc(string) *Func
pkg debug/gosym, method (*Table) LookupSym(string) *Sym
pkg debug/gosym, method (*Table) PCToFunc(uint64) *Func
pkg debug/gosym, method (*Table) PCToLine(uint64) (string, int, *Func)
pkg debug/gosym, method (*Table) SymByAddr(uint64) *Sym

      <name>Model</name>
      <superClass>ModelBase</superClass>
      <description>
        The {@code &lt;project>} element is the root of the descriptor.
        The following table lists all of the possible child elements.
      </description>
      <version>3.0.0+</version>
      <fields>

        <field xml.transient="true">
          <name>pomFile</name>
          <version>4.1.0+</version>

    </magic>
    <glob pattern="*.wri"/>
  </mime-type>

  <mime-type type="application/x-mysql-db">
  </mime-type>
  <mime-type type="application/x-mysql-table-definition">
    <_comment>MySQL Table Definition (Format)</_comment>
    <!-- Glob is normally .frm, but that's already taken -->
    <magic priority="40">
      <match value="0xfe0107" type="string" offset="0"/>

    * as the certificates expiration approaches.

* Bump up glbc version to 0.9.0-beta.1 ([#40565](https://github.com/kubernetes/kubernetes/pull/40565), [@bprashanth](https://github.com/bprashanth))
* Enable lazy inode table and journal initialization for ext3 and ext4 ([#38865](https://github.com/kubernetes/kubernetes/pull/38865), [@codablock](https://github.com/codablock))

gReliableVal","position","scrollboxSizeVal","offsetWidth","measure","round","parseFloat","reliableTrDimensionsVal","backgroundClip","clearCloneStyle","boxSizingReliable","pixelPosition","reliableMarginLeft","scrollboxSize","reliableTrDimensions","table","trChild","trStyle","height","parseInt","borderTopWidth","borderBottomWidth","offsetHeight","cssPrefixes","emptyStyle","vendorProps","finalPropName","final","cssProps","capName","vendorPropName","rdisplayswap","cssShow","visibility","cssNormalTra...

- Kubeadm: upgrade plan now prints a table indicating the state of known component configs prior to upgrade ([#88124](https://github.com/kubernetes/kubernetes/pull/88124), [@rosti](https://github.com/rosti)) [SIG Cluster Lifecycle]

- The kubelet now creates an iptables chain named `KUBE-IPTABLES-HINT` in
  the `mangle` table. Containerized components that need to modify iptables
  rules in the host network namespace can use the existence of this chain
  to more-reliably determine whether the system is using iptables-legacy or

- Scheduler's assumed pods have 2min instead...