Merge pull request kubernetes-sigs#2054 from andyzhangx/CVE-2025-4563-1.26

[release-1.26] fix: CVE-2025-4563

Author: andyzhangx

go.mod

@@ -37,7 +37,7 @@ require (
 	k8s.io/client-go v0.32.4
 	k8s.io/component-base v0.32.4
 	k8s.io/klog/v2 v2.130.1
-	k8s.io/kubernetes v1.32.2
+	k8s.io/kubernetes v1.32.6
 	k8s.io/mount-utils v0.32.2
 	k8s.io/pod-security-admission v0.31.1
 	k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979
@@ -221,7 +221,7 @@ replace (
 	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.2
 	k8s.io/kubectl => k8s.io/kubectl v0.32.2
 	k8s.io/kubelet => k8s.io/kubelet v0.32.2
-	k8s.io/kubernetes => k8s.io/kubernetes v1.32.2
+	k8s.io/kubernetes => k8s.io/kubernetes v1.32.6
 	k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.32.2
 	k8s.io/metrics => k8s.io/metrics v0.32.2
 	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.2

go.sum

@@ -511,8 +511,8 @@ k8s.io/kubectl v0.32.2 h1:TAkag6+XfSBgkqK9I7ZvwtF0WVtUAvK8ZqTt+5zi1Us=
 k8s.io/kubectl v0.32.2/go.mod h1:+h/NQFSPxiDZYX/WZaWw9fwYezGLISP0ud8nQKg+3g8=
 k8s.io/kubelet v0.32.2 h1:WFTSYdt3BB1aTApDuKNI16x/4MYqqX8WBBBBh3KupDg=
 k8s.io/kubelet v0.32.2/go.mod h1:cC1ms5RS+lu0ckVr6AviCQXHLSPKEBC3D5oaCBdTGkI=
-k8s.io/kubernetes v1.32.2 h1:mShetlA102UpjRVSGzB+5vjJwy8oPy8FMWrkTH5f37o=
-k8s.io/kubernetes v1.32.2/go.mod h1:tiIKO63GcdPRBHW2WiUFm3C0eoLczl3f7qi56Dm1W8I=
+k8s.io/kubernetes v1.32.6 h1:tp1gRjOqZjaoFBek5PN6eSmODdS1QRrH5UKiFP8ZByg=
+k8s.io/kubernetes v1.32.6/go.mod h1:REY0Gok66BTTrbGyZaFMNKO9JhxvgBDW9B7aksWRFoY=
 k8s.io/mount-utils v0.32.2 h1:aDwp+ucWiVnDr/LpRg88/dsXf/vm6gI1VZkYH3+3+Vw=
 k8s.io/mount-utils v0.32.2/go.mod h1:Kun5c2svjAPx0nnvJKYQWhfeNW+O0EpzHgRhDcYoSY0=
 k8s.io/pod-security-admission v0.32.2 h1:zDfAb/t0LbNU3z0ZMHtCb1zp8x05gWCGhmBYpUptm9A=

vendor/k8s.io/kubernetes/pkg/apis/core/validation/validation.go

@@ -1691,7 +1691,7 @@ k8s.io/kubelet/pkg/apis/pluginregistration/v1
 k8s.io/kubelet/pkg/apis/podresources/v1
 k8s.io/kubelet/pkg/apis/podresources/v1alpha1
 k8s.io/kubelet/pkg/apis/stats/v1alpha1
-# k8s.io/kubernetes v1.32.2 => k8s.io/kubernetes v1.32.2
+# k8s.io/kubernetes v1.32.6 => k8s.io/kubernetes v1.32.6
 ## explicit; go 1.23.0
 k8s.io/kubernetes/pkg/api/legacyscheme
 k8s.io/kubernetes/pkg/api/service
@@ -2052,7 +2052,7 @@ sigs.k8s.io/yaml/goyaml.v2
 # k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.2
 # k8s.io/kubectl => k8s.io/kubectl v0.32.2
 # k8s.io/kubelet => k8s.io/kubelet v0.32.2
-# k8s.io/kubernetes => k8s.io/kubernetes v1.32.2
+# k8s.io/kubernetes => k8s.io/kubernetes v1.32.6
 # k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.32.2
 # k8s.io/metrics => k8s.io/metrics v0.32.2
 # k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.2