erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-10-25 15:27:38 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
spiegel_podman/pkg
History
Paul Holzinger 54bde8aa5c kube play: don't follow volume symlinks onto the host 
For ConfigMap and Secret kube play volumes podman populates the data
from the yaml. However the volume content is not controlled by us and we
can be tricked following a symlink to a file on the host instead.

Fixes: CVE-2025-9566

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-17 08:40:37 -04:00
..
annotations fix a number of godot issues 2022-03-22 13:04:35 +01:00
api compat,build: handle docker's preconfigured cacheTo,cacheFrom 2023-01-05 22:44:01 +00:00
auth pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
autoupdate pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
bindings (Temporary) Emergency CI fix: quay search is broken 2024-02-02 13:45:52 -05:00
channel pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
checkpoint pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
copy pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
criu Fix spelling of GetCriuVersion 2022-06-27 12:57:44 +01:00
ctime golangci-lint: enable nolintlint 2022-06-14 16:29:42 +02:00
domain kube play: don't follow volume symlinks onto the host 2025-09-17 08:40:37 -04:00
env pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
errorhandling libpod/runtime: switch to golang native error wrapping 2022-07-04 15:39:00 +02:00
inspect pkg/inspect: remove unused ImageResult type 2022-05-24 16:07:39 +02:00
k8s.io Fix spelling "read only" -> "read-only" 2022-07-02 08:37:43 +02:00
lookup enable gocritic linter 2022-04-26 18:12:22 +02:00
machine check memory test based on range 2022-08-10 16:46:05 -04:00
namespaces Fix spelling "setup" -> "set up" and similar 2022-06-22 18:39:21 +02:00
parallel pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
ps libpod: switch to golang native error wrapping 2022-07-05 16:06:32 +02:00
rootless pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
rootlessport go fmt: use go 1.18 conditional-build syntax 2022-03-18 09:11:53 +01:00
seccomp pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
servicereaper go fmt: use go 1.18 conditional-build syntax 2022-03-18 09:11:53 +01:00
signal Implement CatchAll and StopCatch in signal_common.go 2022-06-27 13:27:12 +01:00
specgen health check: add on-failure actions 2022-09-27 10:40:36 +02:00
specgenutil health check: add on-failure actions 2022-09-27 10:40:36 +02:00
systemd podman generate systemd --new: allow -h hostname 2022-08-10 16:46:05 -04:00
terminal move golang.org/x/crypto/ssh/terminal to golang.org/x/term 2022-04-22 12:40:52 +02:00
timetype enable gocritic linter 2022-04-26 18:12:22 +02:00
trust Preserve all unknown PolicyRequirement fields on (podman image trust set) 2022-10-25 23:31:38 +02:00
util pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00