GO-2026-6588
podman quadlet install --replace does not fully replace the old file in github.com/containers/podman
At a glance
- Published
- Updated
- CVE
- CVE-2026-19730
- Aliases
- GHSA-fx76-2j3w-2mx6
Description
podman quadlet install --replace does not fully replace the old file in github.com/containers/podman
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/containers/podman | introduced 0 |
| Go · github.com/containers/podman/v2 | introduced 0 |
| Go · github.com/containers/podman/v3 | introduced 0 |
| Go · github.com/containers/podman/v4 | introduced 0 |
| Go · github.com/containers/podman/v5 | introduced 5.7.0, fixed 5.8.6 |
References
- https://github.com/podman-container-tools/podman/security/advisories/GHSA-fx76-2j3w-2mx6 ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-19730 ADVISORY
- https://access.redhat.com/errata/RHSA-2026:69961 WEB
- https://access.redhat.com/errata/RHSA-2026:70201 WEB
- https://access.redhat.com/security/cve/CVE-2026-19730 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2508234 WEB
- https://github.com/podman-container-tools/podman/commit/0ea4eaee70b7458bcc99d875529761faf5172651 WEB
- https://github.com/podman-container-tools/podman/commit/a38a9b7d20915c55e6f3c451101ae72d6da33742 WEB
- https://github.com/podman-container-tools/podman/commit/d3adfdeec7d5c9eee5a6978df3bee62a866c958d WEB
- https://github.com/podman-container-tools/podman/commit/d4fe9154ec6e32a02d5fcd096c4a27c38f2040f4 WEB
- https://github.com/podman-container-tools/podman/issues/29013 WEB
- https://github.com/podman-container-tools/podman/pull/27980 WEB
- https://github.com/podman-container-tools/podman/releases/tag/v5.8.6 WEB
- https://github.com/podman-container-tools/podman/releases/tag/v6.0.0 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |