Paul Holzinger b026d9272c [v4.4.1-rhel] kube play: don't follow volume symlinks onto the host ... For ConfigMap and Secret kube play volumes podman populates the data from the yaml. However the volume content is not controlled by us and we can be tricked following a symlink to a file on the host instead. Fixes: CVE-2025-9566 Fixes: https://issues.redhat.com/browse/RHEL-113150, https://issues.redhat.com/browse/RHEL-113143, https://issues.redhat.com/browse/OCPBUGS-61271, https://issues.redhat.com/browse/OCPBUGS-61267 Signed-off-by: Paul Holzinger <pholzing@redhat.com> Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>		2025-09-09 20:00:21 -04:00
..
entities	Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)	2023-01-27 16:46:28 +01:00
filters	Merge pull request #16820 from rhatdan/names	2023-01-07 09:38:19 -05:00
infra	[v4.4.1-rhel] kube play: don't follow volume symlinks onto the host	2025-09-09 20:00:21 -04:00
utils	Replace deprecated ioutil	2022-09-20 15:34:27 -04:00