Paul Holzinger c5f3e589b8 [v5.2-rhel] kube play: don't follow volume symlinks onto the host ... For ConfigMap and Secret kube play volumes podman populates the data from the yaml. However the volume content is not controlled by us and we can be tricked following a symlink to a file on the host instead. Fixes: CVE-2025-9566 Fixes: https://issues.redhat.com/browse/OCPBUGS-61265, https://issues.redhat.com/browse/OCPBUGS-61266 Signed-off-by: Paul Holzinger <pholzing@redhat.com> Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>		2025-09-08 18:36:57 -04:00
..
entities	[v5.2-rhel] Fix HealthCheck log destination, count, and size defaults	2025-03-14 20:21:57 +01:00
filters	Replace golang.org/x/exp/slices with slices from std	2024-04-23 11:16:40 +02:00
infra	[v5.2-rhel] kube play: don't follow volume symlinks onto the host	2025-09-08 18:36:57 -04:00
utils	Merge pull request #21583 from Luap99/scp-port	2024-02-12 21:35:56 +00:00