Paul Holzinger 75ffb356d8 [v5.6-rhel] kube play: don't follow volume symlinks onto the host ... For ConfigMap and Secret kube play volumes podman populates the data from the yaml. However the volume content is not controlled by us and we can be tricked following a symlink to a file on the host instead. Fixes: CVE-2025-9566 Fixes: https://issues.redhat.com/browse/RHEL-113140, https://issues.redhat.com/browse/RHEL-113151 Signed-off-by: Paul Holzinger <pholzing@redhat.com> Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>		2025-09-08 17:06:14 -04:00
..
entities	feat: add Podman artifact support to Go bindings and remote clients	2025-08-08 09:21:45 -04:00
filters	Merge pull request #24791 from arsenalzp/issue_24664	2025-04-08 12:55:09 +00:00
infra	[v5.6-rhel] kube play: don't follow volume symlinks onto the host	2025-09-08 17:06:14 -04:00
utils	Add type and annotations to artifact add	2025-01-31 09:53:03 -06:00