| Release | Version |
|---|---|
| bookworm | 3.5-3 |
| trixie | 3.6-5 |
| forky | 3.8-2 |
| sid | 3.8-2 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-89088 | vulnerable | vulnerable (no DSA) | fixed | fixed | heap buffer overflow in duplicate_legacy_root_dir |
| CVE-2026-89085 | vulnerable | vulnerable (no DSA) | fixed | fixed | heap buffer overflow in _init_fats / fat_table_read |