[master] fix security advisory 2025-002

[dhawton]

Description

Reviewers

• Ambient
• Docs
• Installation
• Networking
• Performance and Scalability
• Extensions and Telemetry
• Security
• Test and Release
• User Experience
• Developer Infrastructure
• Localization/Translation

[dhawton]

/cherry-pick release-1.27

[istio-testing]

In response to a cherrypick label: #16942 failed to apply on top of branch "release-1.27":

Applying: fix sec adv
Using index info to reconstruct a base tree...
M	content/en/news/security/istio-security-2025-002/index.md
Falling back to patching base and 3-way merge...
Auto-merging content/en/news/security/istio-security-2025-002/index.md
CONFLICT (content): Merge conflict in content/en/news/security/istio-security-2025-002/index.md
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config advice.mergeConflict false"
Patch failed at 0001 fix sec adv

[istio-testing]

In response to a cherrypick label: new issue created for failed cherrypick: #16950

[istio-testing]

@dhawton: #16942 failed to apply on top of branch "release-1.27":

Applying: fix sec adv
Using index info to reconstruct a base tree...
M	content/en/news/security/istio-security-2025-002/index.md
Falling back to patching base and 3-way merge...
Auto-merging content/en/news/security/istio-security-2025-002/index.md
CONFLICT (content): Merge conflict in content/en/news/security/istio-security-2025-002/index.md
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config advice.mergeConflict false"
Patch failed at 0001 fix sec adv

In response to this:

/cherry-pick release-1.27

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[istio-testing]

@dhawton: new issue created for failed cherrypick: #16951

In response to this:

/cherry-pick release-1.27

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.