FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

podman -- podman quadlet install --replace does not fully replace the old file

Affected packages
5.7.0	<=	podman	<	5.8.6

Details

VuXML ID	01c15468-9b7b-11f1-a75c-589cfc10a551
Discovery	2026-08-13
Entry	2026-08-18

The Podman developers report:

When running podman quadlet install --replace to replace a Quadlet file, if the original Quadlet is larger than the new Quadlet, the file would not be truncated and content from the original would be preserved.

[source]

References

CVE Name	CVE-2026-19730
URL	https://github.com/podman-container-tools/podman/releases/tag/v5.8.6
URL	https://github.com/podman-container-tools/podman/security/advisories/GHSA-fx76-2j3w-2mx6