erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-09-19 22:27:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/pkg
History
Paul Holzinger c5f3e589b8 [v5.2-rhel] kube play: don't follow volume symlinks onto the host 
For ConfigMap and Secret kube play volumes podman populates the data
from the yaml. However the volume content is not controlled by us and we
can be tricked following a symlink to a file on the host instead.

Fixes: CVE-2025-9566

Fixes: https://issues.redhat.com/browse/OCPBUGS-61265, https://issues.redhat.com/browse/OCPBUGS-61266

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-09-08 18:36:57 -04:00
..
annotations [v5.2] update golangci-lint to 1.60.1 2024-08-21 12:06:44 -04:00
api [v5.2-rhel] Fix HealthCheck log destination, count, and size defaults 2025-03-14 20:21:57 +01:00
auth Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
autoupdate [v5.2] update golangci-lint to 1.60.1 2024-08-21 12:06:44 -04:00
bindings [v5.2] golangci-lint: remove most skip dirs 2024-08-21 12:06:44 -04:00
channel bump golangci-lint to v1.50.1 2022-12-15 13:39:56 +01:00
checkpoint restore: fix container restore into pod 2024-06-20 13:24:53 +01:00
copy Bump Go module to v5 2024-02-08 09:35:39 -05:00
criu chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
ctime chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
domain [v5.2-rhel] kube play: don't follow volume symlinks onto the host 2025-09-08 18:36:57 -04:00
emulation chore: delete obsolete // +build lines 2024-01-04 11:53:38 +02:00
env pkg/env.Join(): don't modify passed-in maps 2024-02-29 11:47:44 -05:00
errorhandling Fix typos 2023-02-11 18:23:24 +01:00
farm Fix name for builder in farm connection 2024-07-17 22:31:48 -04:00
fileserver Bump Go module to v5 2024-02-08 09:35:39 -05:00
inspect Bump Go module to v5 2024-02-08 09:35:39 -05:00
k8s.io Bump Go module to v5 2024-02-08 09:35:39 -05:00
lookup Cease using deprecated runc userlookup 2024-02-02 11:02:43 -05:00
machine machine init: fix tls check 2025-06-23 18:04:31 +02:00
namespaces Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
parallel Bump Go module to v5 2024-02-08 09:35:39 -05:00
ps podman ps: fix racy pod name query 2024-07-18 17:34:26 +02:00
rctl Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
rootless pkg/rootless: simplify reexec for container code 2024-07-08 13:28:31 +02:00
seccomp pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
signal refacto: unknown signal return signal number without prefix 2024-02-28 19:45:03 +01:00
specgen [v5.2-rhel] Fix HealthCheck log destination, count, and size defaults 2025-03-14 20:21:57 +01:00
specgenutil Merge pull request #24216 from Honny1/dev/jrodak/healthcheck-log 2024-11-01 18:15:42 +00:00
specgenutilexternal Quadlet container mount - support non key=val options 2023-09-27 16:20:00 +03:00
systemd [v5.2-rhel] Add --health-max-log-count, --health-max-log-size, 2024-10-09 22:31:01 +02:00
terminal Fix Lint on Windows and enable the job 2024-02-20 08:06:18 -05:00
timetype Replace strings.SplitN with strings.Cut 2024-01-11 13:50:15 +00:00
trust pkg/trust: use fileutils.(Le|E)xists 2024-04-19 09:52:14 +02:00
util [v5.2] set !remote build tags where needed 2024-08-21 12:06:44 -04:00