Merge pull request #2152 from andyzhangx/CVE-2025-5187-1.26

[release-1.26] fix: CVE-2025-5187

Author: andyzhangx

go.mod

@@ -31,14 +31,14 @@ require (
 	golang.org/x/sync v0.14.0
 	google.golang.org/grpc v1.67.1
 	google.golang.org/protobuf v1.36.5
-	k8s.io/api v0.32.4
-	k8s.io/apimachinery v0.32.4
-	k8s.io/apiserver v0.32.4
-	k8s.io/client-go v0.32.4
-	k8s.io/component-base v0.32.4
+	k8s.io/api v0.32.8
+	k8s.io/apimachinery v0.32.8
+	k8s.io/apiserver v0.32.8
+	k8s.io/client-go v0.32.8
+	k8s.io/component-base v0.32.8
 	k8s.io/klog/v2 v2.130.1
-	k8s.io/kubernetes v1.32.6
-	k8s.io/mount-utils v0.32.2
+	k8s.io/kubernetes v1.32.8
+	k8s.io/mount-utils v0.32.8
 	k8s.io/pod-security-admission v0.31.1
 	k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979
 	sigs.k8s.io/cloud-provider-azure v1.29.1-0.20250430201754-d0603ee5c5a7
@@ -176,18 +176,18 @@ require (
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/apiextensions-apiserver v0.0.0 // indirect
-	k8s.io/cloud-provider v0.32.4 // indirect
-	k8s.io/component-helpers v0.32.4 // indirect
-	k8s.io/controller-manager v0.32.4 // indirect
-	k8s.io/cri-api v0.32.2 // indirect
+	k8s.io/cloud-provider v0.32.8 // indirect
+	k8s.io/component-helpers v0.32.8 // indirect
+	k8s.io/controller-manager v0.32.8 // indirect
+	k8s.io/cri-api v0.32.8 // indirect
 	k8s.io/cri-client v0.0.0 // indirect
 	k8s.io/csi-translation-lib v0.0.0 // indirect
 	k8s.io/dynamic-resource-allocation v0.0.0 // indirect
-	k8s.io/kms v0.32.4 // indirect
+	k8s.io/kms v0.32.8 // indirect
 	k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f // indirect
 	k8s.io/kube-scheduler v0.0.0 // indirect
 	k8s.io/kubectl v0.31.1 // indirect
-	k8s.io/kubelet v0.32.4 // indirect
+	k8s.io/kubelet v0.32.8 // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0 // indirect
 	sigs.k8s.io/cloud-provider-azure/pkg/azclient/cache v0.6.1 // indirect
 	sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
@@ -196,36 +196,36 @@ require (
 
 replace (
 	github.com/pmezard/go-difflib => github.com/pmezard/go-difflib v1.0.0 // indirect
-	k8s.io/api => k8s.io/api v0.32.2
-	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.32.2
-	k8s.io/apimachinery => k8s.io/apimachinery v0.32.2
-	k8s.io/apiserver => k8s.io/apiserver v0.32.2
-	k8s.io/cli-runtime => k8s.io/cli-runtime v0.32.2
-	k8s.io/client-go => k8s.io/client-go v0.32.2
-	k8s.io/cloud-provider => k8s.io/cloud-provider v0.32.2
-	k8s.io/cluster-bootstrap => k8s.io/cluster-bootstrap v0.32.2
-	k8s.io/code-generator => k8s.io/code-generator v0.32.2
-	k8s.io/component-base => k8s.io/component-base v0.32.2
-	k8s.io/component-helpers => k8s.io/component-helpers v0.32.2
-	k8s.io/controller-manager => k8s.io/controller-manager v0.32.2
-	k8s.io/cri-api => k8s.io/cri-api v0.32.2
-	k8s.io/cri-client => k8s.io/cri-client v0.32.2
-	k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.32.2
-	k8s.io/dynamic-resource-allocation => k8s.io/dynamic-resource-allocation v0.32.2
-	k8s.io/endpointslice => k8s.io/endpointslice v0.32.2
-	k8s.io/externaljwt => k8s.io/externaljwt v0.32.2
-	k8s.io/kms => k8s.io/kms v0.32.2
-	k8s.io/kube-aggregator => k8s.io/kube-aggregator v0.32.2
-	k8s.io/kube-controller-manager => k8s.io/kube-controller-manager v0.32.2
-	k8s.io/kube-proxy => k8s.io/kube-proxy v0.32.2
-	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.2
-	k8s.io/kubectl => k8s.io/kubectl v0.32.2
-	k8s.io/kubelet => k8s.io/kubelet v0.32.2
-	k8s.io/kubernetes => k8s.io/kubernetes v1.32.6
-	k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.32.2
-	k8s.io/metrics => k8s.io/metrics v0.32.2
-	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.2
-	k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.32.2
-	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.32.2
-	k8s.io/sample-controller => k8s.io/sample-controller v0.32.2
+	k8s.io/api => k8s.io/api v0.32.8
+	k8s.io/apiextensions-apiserver => k8s.io/apiextensions-apiserver v0.32.8
+	k8s.io/apimachinery => k8s.io/apimachinery v0.32.8
+	k8s.io/apiserver => k8s.io/apiserver v0.32.8
+	k8s.io/cli-runtime => k8s.io/cli-runtime v0.32.8
+	k8s.io/client-go => k8s.io/client-go v0.32.8
+	k8s.io/cloud-provider => k8s.io/cloud-provider v0.32.8
+	k8s.io/cluster-bootstrap => k8s.io/cluster-bootstrap v0.32.8
+	k8s.io/code-generator => k8s.io/code-generator v0.32.8
+	k8s.io/component-base => k8s.io/component-base v0.32.8
+	k8s.io/component-helpers => k8s.io/component-helpers v0.32.8
+	k8s.io/controller-manager => k8s.io/controller-manager v0.32.8
+	k8s.io/cri-api => k8s.io/cri-api v0.32.8
+	k8s.io/cri-client => k8s.io/cri-client v0.32.8
+	k8s.io/csi-translation-lib => k8s.io/csi-translation-lib v0.32.8
+	k8s.io/dynamic-resource-allocation => k8s.io/dynamic-resource-allocation v0.32.8
+	k8s.io/endpointslice => k8s.io/endpointslice v0.32.8
+	k8s.io/externaljwt => k8s.io/externaljwt v0.32.8
+	k8s.io/kms => k8s.io/kms v0.32.8
+	k8s.io/kube-aggregator => k8s.io/kube-aggregator v0.32.8
+	k8s.io/kube-controller-manager => k8s.io/kube-controller-manager v0.32.8
+	k8s.io/kube-proxy => k8s.io/kube-proxy v0.32.8
+	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.8
+	k8s.io/kubectl => k8s.io/kubectl v0.32.8
+	k8s.io/kubelet => k8s.io/kubelet v0.32.8
+	k8s.io/kubernetes => k8s.io/kubernetes v1.32.8
+	k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.32.8
+	k8s.io/metrics => k8s.io/metrics v0.32.8
+	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.8
+	k8s.io/sample-apiserver => k8s.io/sample-apiserver v0.32.8
+	k8s.io/sample-cli-plugin => k8s.io/sample-cli-plugin v0.32.8
+	k8s.io/sample-controller => k8s.io/sample-controller v0.32.8
 )

go.sum

@@ -473,50 +473,50 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.32.2 h1:bZrMLEkgizC24G9eViHGOPbW+aRo9duEISRIJKfdJuw=
-k8s.io/api v0.32.2/go.mod h1:hKlhk4x1sJyYnHENsrdCWw31FEmCijNGPJO5WzHiJ6Y=
-k8s.io/apiextensions-apiserver v0.32.2 h1:2YMk285jWMk2188V2AERy5yDwBYrjgWYggscghPCvV4=
-k8s.io/apiextensions-apiserver v0.32.2/go.mod h1:GPwf8sph7YlJT3H6aKUWtd0E+oyShk/YHWQHf/OOgCA=
-k8s.io/apimachinery v0.32.2 h1:yoQBR9ZGkA6Rgmhbp/yuT9/g+4lxtsGYwW6dR6BDPLQ=
-k8s.io/apimachinery v0.32.2/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
-k8s.io/apiserver v0.32.2 h1:WzyxAu4mvLkQxwD9hGa4ZfExo3yZZaYzoYvvVDlM6vw=
-k8s.io/apiserver v0.32.2/go.mod h1:PEwREHiHNU2oFdte7BjzA1ZyjWjuckORLIK/wLV5goM=
-k8s.io/client-go v0.32.2 h1:4dYCD4Nz+9RApM2b/3BtVvBHw54QjMFUl1OLcJG5yOA=
-k8s.io/client-go v0.32.2/go.mod h1:fpZ4oJXclZ3r2nDOv+Ux3XcJutfrwjKTCHz2H3sww94=
-k8s.io/cloud-provider v0.32.2 h1:8EC+fCYo0r0REczSjOZcVuQPCMxXxCKlgxDbYMrzC30=
-k8s.io/cloud-provider v0.32.2/go.mod h1:2s8TeAXhVezp5VISaTxM6vW3yDonOZXoN4Aryz1p1PQ=
-k8s.io/component-base v0.32.2 h1:1aUL5Vdmu7qNo4ZsE+569PV5zFatM9hl+lb3dEea2zU=
-k8s.io/component-base v0.32.2/go.mod h1:PXJ61Vx9Lg+P5mS8TLd7bCIr+eMJRQTyXe8KvkrvJq0=
-k8s.io/component-helpers v0.32.2 h1:2usSAm3zNE5yu5DdAdrKBWLfSYNpU4OPjZywJY5ovP8=
-k8s.io/component-helpers v0.32.2/go.mod h1:fvQAoiiOP7jUEUBc9qR0PXiBPuB0I56WTxTkkpcI8g8=
-k8s.io/controller-manager v0.32.2 h1:/9XuHWEqofO2Aqa4l7KJGckJUcLVRWfx+qnVkdXoStI=
-k8s.io/controller-manager v0.32.2/go.mod h1:o5uo2tLCQhuoMt0RfKcQd0eqaNmSKOKiT+0YELCqXOk=
-k8s.io/cri-api v0.32.2 h1:7DuaOHpOcXweZeBUbRdK0iCroxctGp73VwgrA0u7kho=
-k8s.io/cri-api v0.32.2/go.mod h1:DCzMuTh2padoinefWME0G678Mc3QFbLMF2vEweGzBAI=
-k8s.io/cri-client v0.32.2 h1:vjowJUyu14IbmifqCKJHE9rK/BPSfkXvltqN42W1Zuo=
-k8s.io/cri-client v0.32.2/go.mod h1:fRZhmmZW16Qviln8hfy+e8dd2wP/n9B6TiGxLE3zBe0=
-k8s.io/csi-translation-lib v0.32.2 h1:aLzAyaoJUc5rgtLi8Xd4No1tet6UpvUsGIgRoGnPSSE=
-k8s.io/csi-translation-lib v0.32.2/go.mod h1:PlOKan6Vc0G6a+giQbm36plJ+E1LH+GPRLAVMQMSMcY=
-k8s.io/dynamic-resource-allocation v0.32.2 h1:6wP8/GGvhhvTJLrzwPSoMJDnspmosFj1CKmfrAH6m5U=
-k8s.io/dynamic-resource-allocation v0.32.2/go.mod h1:+3qnQfvikLHVZrdZ0/gYkRiV96weUR9j7+Ph3Ui/hYU=
+k8s.io/api v0.32.8 h1:PhuKPnqsaXYuwmLXRLAmdDJ9EZ2R2kEbOZTq4UE3lGc=
+k8s.io/api v0.32.8/go.mod h1:gdRZQ4zXGawr9YrJ5OjTl7aR3TD0mTowtFsqFtpCDXo=
+k8s.io/apiextensions-apiserver v0.32.8 h1:iYIIaZmn/BMTwzGYRZnYZysaKB4t2TL3O+0yhmbXE2U=
+k8s.io/apiextensions-apiserver v0.32.8/go.mod h1:GTGskWgcBo/7boX33zcS8JY6vaG4s728AdbQPxtheVk=
+k8s.io/apimachinery v0.32.8 h1:95I+2jX71Tev+C+UlhNbmKfv+A/TQII42HLskiHZpBg=
+k8s.io/apimachinery v0.32.8/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
+k8s.io/apiserver v0.32.8 h1:QRXnrAxVsKMHW9BinWwhbD0oh78yE817UlLVTTYa3wY=
+k8s.io/apiserver v0.32.8/go.mod h1:tqqhcCOS8MRUiNncD7DNsyRWXw04AUJSRISTX4D3FsQ=
+k8s.io/client-go v0.32.8 h1:BkSFWUtRz/BbE3DJF98KPg7ix6lwMnIQ9DnHw3iWiSw=
+k8s.io/client-go v0.32.8/go.mod h1:vGkCzRxZ7BuRX2zdW7+kOwCdcgOkq9omDWb26wk/sE0=
+k8s.io/cloud-provider v0.32.8 h1:9OBBY3IvBDPYUaFXikmAoiuv8kg/A2Ffa3NRMAa+Ssk=
+k8s.io/cloud-provider v0.32.8/go.mod h1:/SMmo4ZY4hU8CMypLd4ftRfpyY8vR33f3VF2UAo1Rk0=
+k8s.io/component-base v0.32.8 h1:Ez5yxl4Apas9m0gUQfwD60GbMyhfHPbvaYzQkpBDE6k=
+k8s.io/component-base v0.32.8/go.mod h1:zrTYhjPNFrItmyFEPiRIL9pgZa4jIgOUyOwrEL7xb10=
+k8s.io/component-helpers v0.32.8 h1:Z5g8jnqE+RCndqbfG5hKsrPGTFAecAjn9NphUKIN+ko=
+k8s.io/component-helpers v0.32.8/go.mod h1:vTx1Mk59REzJV28uHMxm/uXRAD/XSB5XJbjt2Ic37CA=
+k8s.io/controller-manager v0.32.8 h1:+Hi8eIx1xu0qA55kreJ1b9jjrjAnBPC/wIHJWgRdl5o=
+k8s.io/controller-manager v0.32.8/go.mod h1:VVliUUeC4M1DX1IFiOEHy2Ssi0GU9AnQpgcJlpO6u50=
+k8s.io/cri-api v0.32.8 h1:06o5iDF1Y1qB1CppUxvVz+dg+0xinfDXYG7Te2pkMm0=
+k8s.io/cri-api v0.32.8/go.mod h1:DCzMuTh2padoinefWME0G678Mc3QFbLMF2vEweGzBAI=
+k8s.io/cri-client v0.32.8 h1:FP32+Hy1G7b2cFmwIZuu9n5Drm72dJxcdbx2+cO/vuE=
+k8s.io/cri-client v0.32.8/go.mod h1:1rwOCsN9CgksxDZEYRxQDqx3zsaT/Gk5bh9k2qVwBBA=
+k8s.io/csi-translation-lib v0.32.8 h1:ebElR+pEKMcYgrfd32vR2AP+K7T+C9UBpNoL4RG9GWw=
+k8s.io/csi-translation-lib v0.32.8/go.mod h1:d9PtcJUR/Cbqwp5wK4VxsBBE8SkoHQ6GxMaXZxyswoE=
+k8s.io/dynamic-resource-allocation v0.32.8 h1:SYm436xE2NoAgnPYeC0H2qjdRK+KGIb16m18tLow/ZA=
+k8s.io/dynamic-resource-allocation v0.32.8/go.mod h1:rTYXQH8nATZUz4RnspREOfA9H5/usYU5D0gMAIG7kOg=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
 k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
-k8s.io/kms v0.32.2 h1:7Ff23ht7W40gTcDwUC8G5WjX5W/nxD8WxbNhIYYNZCI=
-k8s.io/kms v0.32.2/go.mod h1:Bk2evz/Yvk0oVrvm4MvZbgq8BD34Ksxs2SRHn4/UiOM=
+k8s.io/kms v0.32.8 h1:Yy3W8dA4VjnxGMZrXGlFpaKIHlkSVltS+UWydpvxPTc=
+k8s.io/kms v0.32.8/go.mod h1:Bk2evz/Yvk0oVrvm4MvZbgq8BD34Ksxs2SRHn4/UiOM=
 k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f h1:GA7//TjRY9yWGy1poLzYYJJ4JRdzg3+O6e8I+e+8T5Y=
 k8s.io/kube-openapi v0.0.0-20241105132330-32ad38e42d3f/go.mod h1:R/HEjbvWI0qdfb8viZUeVZm0X6IZnxAydC7YU42CMw4=
-k8s.io/kube-scheduler v0.32.2 h1:vBm6iIjWaD10OPmtkt/503LTKvrN8dWVceeBcpKj/ns=
-k8s.io/kube-scheduler v0.32.2/go.mod h1:dD5yuYpnsCfgZmzvncUNPdvXGJXA1hw3gXq7DH3+aCQ=
-k8s.io/kubectl v0.32.2 h1:TAkag6+XfSBgkqK9I7ZvwtF0WVtUAvK8ZqTt+5zi1Us=
-k8s.io/kubectl v0.32.2/go.mod h1:+h/NQFSPxiDZYX/WZaWw9fwYezGLISP0ud8nQKg+3g8=
-k8s.io/kubelet v0.32.2 h1:WFTSYdt3BB1aTApDuKNI16x/4MYqqX8WBBBBh3KupDg=
-k8s.io/kubelet v0.32.2/go.mod h1:cC1ms5RS+lu0ckVr6AviCQXHLSPKEBC3D5oaCBdTGkI=
-k8s.io/kubernetes v1.32.6 h1:tp1gRjOqZjaoFBek5PN6eSmODdS1QRrH5UKiFP8ZByg=
-k8s.io/kubernetes v1.32.6/go.mod h1:REY0Gok66BTTrbGyZaFMNKO9JhxvgBDW9B7aksWRFoY=
-k8s.io/mount-utils v0.32.2 h1:aDwp+ucWiVnDr/LpRg88/dsXf/vm6gI1VZkYH3+3+Vw=
-k8s.io/mount-utils v0.32.2/go.mod h1:Kun5c2svjAPx0nnvJKYQWhfeNW+O0EpzHgRhDcYoSY0=
-k8s.io/pod-security-admission v0.32.2 h1:zDfAb/t0LbNU3z0ZMHtCb1zp8x05gWCGhmBYpUptm9A=
-k8s.io/pod-security-admission v0.32.2/go.mod h1:yxMPB3i1pGMLfxbe4BiWMuowMD7cdHR32y4nCj4wH+s=
+k8s.io/kube-scheduler v0.32.8 h1:umW+6cem48eeTz/6Fr1yG29hsiobKU025O+p3CqgRd0=
+k8s.io/kube-scheduler v0.32.8/go.mod h1:pfg94rFOwXr447eChSZE+UhNHfuQbQ2U0EFfEpUWqwM=
+k8s.io/kubectl v0.32.8 h1:X6I2Rmd+RZvtu+BRplREUTkIYgUc87s87m/kZsbKC7s=
+k8s.io/kubectl v0.32.8/go.mod h1:RbwOkKZdxIFzhFIxXY3on/n6aaSXCc353iJ0IXb4DvU=
+k8s.io/kubelet v0.32.8 h1:9N4DRmcNFBNnS62Nf8If7wiCtkaSrR7tTsXPe0DC0aI=
+k8s.io/kubelet v0.32.8/go.mod h1:8cRHXzRmXftGJrvR3e32jGiqStzVrK6hPgoQqdjvEAE=
+k8s.io/kubernetes v1.32.8 h1:NePHsWPIT9NQZ9w5QT/chJMuwjFFGGZxalvD6FlOjlw=
+k8s.io/kubernetes v1.32.8/go.mod h1:REY0Gok66BTTrbGyZaFMNKO9JhxvgBDW9B7aksWRFoY=
+k8s.io/mount-utils v0.32.8 h1:xe/0LiH2URGPM4dTyhvivRdUiUfyssPeUODRekw3Pxg=
+k8s.io/mount-utils v0.32.8/go.mod h1:Kun5c2svjAPx0nnvJKYQWhfeNW+O0EpzHgRhDcYoSY0=
+k8s.io/pod-security-admission v0.32.8 h1:nSyjXGZWq9CWr4ehXxNTIlC6I8P0f9aIqcz+9DCFw1Y=
+k8s.io/pod-security-admission v0.32.8/go.mod h1:7K7eUD7UYYlJrdtyrdiDmZbyTWZVgw64gsVzc9IFL/g=
 k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97RvvF3a8J3fP/Lg=
 k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.0 h1:CPT0ExVicCzcpeN4baWEV2ko2Z/AsiZgEdwgcfwLgMo=