CVE-2025-58183 is an unbounded allocation vulnerability in archive/tar
when parsing GNU sparse map files. tar.Reader does not set a maximum
size on the number of sparse region data blocks in GNU tar pax 1.0
sparse files.

This update brings tar-split to v0.12.2 which includes the fix that
caps sparse block data to 1 MiB (same limit as PAX headers).

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2407258
CVE: CVE-2025-58183
Signed-off-by: Sascha Grunert <[email protected]>

…e-1.32

[release-1.32] OCPBUGS-63772: Fix CVE-2025-58183: Update tar-split to v0.12.2

Fixes an issue where empty network namespace paths cause CNI teardown
failures, preventing pod deletion and creating stuck pods. This happens when
infra containers die, leaving NetNsPath() returning empty strings that CNI
plugins cannot handle.

The failure cascade: dead infra container → empty NetNS → CNI failure →
StopPodSandbox failure → stuck pod → systemd cgroup conflicts → new pod
creation failures. Observed in MicroShift environments.

Signed-off-by: Sohan Kunkerkar <[email protected]>

…9472-to-release-1.32

[release-1.32] OCPBUGS-63432: server: Fix network cleanup failures when NetNS path is empty

Signed-off-by: Kubernetes Release Robot <[email protected]>

Bump version to 1.32.11