The following PR fixes bounds checking of large JSON patches in KubeAPI server. Before that sending/applying large (1 MB) patches were not possible. The PR has been already backported to the master branch 
Verified in 4.1.0-0.nightly-2019-11-26-194052 env using the verification steps of bug 1775736.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.