DEBIAN-CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

CVE-2026-19730

Podman 5.8.x contains a file-write bug in the quadlet replacement flow. When using podman quadlet install --replace, the destination quadlet is opened with O_CREATE|O_WRONLY but without O_TRUNC. If the initial reflink copy fails on non-reflink-capable filesystems, the fallback path uses non-trunc...

PT-2026-71717

Name of the Vulnerable Software and Affected Versions Podman version 5.8.x Description The podman quadlet install --replace command fails to truncate existing destination files when opening them with O CREATE|O WRONLY without O TRUNC. On filesystems that do not support reflinks, such as many...