erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-09-17 13:17:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
spiegel_podman/pkg/domain
History
Paul Holzinger 43fbde4e66
kube play: don't follow volume symlinks onto the host 
For ConfigMap and Secret kube play volumes podman populates the data
from the yaml. However the volume content is not controlled by us and we
can be tricked following a symlink to a file on the host instead.

Fixes: CVE-2025-9566

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-04 16:18:35 +02:00
..
entities Switch common, storage and image to monorepo. 2025-09-01 12:33:04 +02:00
filters Switch common, storage and image to monorepo. 2025-09-01 12:33:04 +02:00
infra kube play: don't follow volume symlinks onto the host 2025-09-04 16:18:35 +02:00
utils Switch common, storage and image to monorepo. 2025-09-01 12:33:04 +02:00