Source: parted Version: 3.7-1 Severity: important Tags: security upstream X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerabilities were published for parted. CVE-2026-89085[0]: | heap buffer overflow in _init_fats / fat_table_read CVE-2026-89088[1]: | heap buffer overflow in duplicate_legacy_root_dir If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-89085 https://www.cve.org/CVERecord?id=CVE-2026-89085 [1] https://security-tracker.debian.org/tracker/CVE-2026-89088 https://www.cve.org/CVERecord?id=CVE-2026-89088 [2] https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html [3] https://gitweb.git.savannah.gnu.org/gitweb/?p=parted.git;a=commit;h=73301c6915781c2eee66d0b1cc9d41a70bf901d6 Please adjust the affected versions in the BTS as needed. Regards, Salvatore
