Your message dated Sat, 17 Oct 2026 14:33:54 +0000
with message-id <[email protected]>
and subject line Bug#1150407: fixed in mutt 2.2.13-1+deb13u2
has caused the Debian Bug report #1150407,
regarding mutt: CVE-2026-107570
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1150407: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1150407
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: mutt
Version: 2.4.1-1
X-Debbugs-CC: [email protected]
Severity: important
Tags: security upstream
Forwarded: https://gitlab.com/muttmua/mutt/-/work_items/533
Hi,
The following vulnerability was published for mutt.
CVE-2026-107570[0]:
| heap OOB write in convert_file_from_to() via a crafted Content-Type
| header allows attacker to OOB write when email is used as a
| template.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-107570
https://www.cve.org/CVERecord?id=CVE-2026-107570
[1] https://gitlab.com/muttmua/mutt/-/work_items/533
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: mutt
Source-Version: 2.2.13-1+deb13u2
Done: Moritz Mühlenhoff <[email protected]>
We believe that the bug you reported is fixed in the latest version of
mutt, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Moritz Mühlenhoff <[email protected]> (supplier of updated mutt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 09 Oct 2026 20:03:14 +0200
Source: mutt
Architecture: source
Version: 2.2.13-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Mutt maintainers <[email protected]>
Changed-By: Moritz Mühlenhoff <[email protected]>
Closes: 1150407
Changes:
mutt (2.2.13-1+deb13u2) trixie-security; urgency=medium
.
* CVE-2026-107570 (Closes: #1150407)
Checksums-Sha1:
4bc957a01dc06df952308d1319ad713bae4e3b4b 2320 mutt_2.2.13-1+deb13u2.dsc
957df1684a46fe1b99adff96b8fe1d87b49aeffd 5539130 mutt_2.2.13.orig.tar.gz
b4e68589d11261d3303f1f75135815954d521ee4 833 mutt_2.2.13.orig.tar.gz.asc
13619d7730f2a83178b230635a3075712d30c682 63856
mutt_2.2.13-1+deb13u2.debian.tar.xz
d53191f12314d02f63581d4a916d77ee142f3203 8797
mutt_2.2.13-1+deb13u2_amd64.buildinfo
Checksums-Sha256:
fcd0e7c7358a9767c24fc81ffc7b18aac74ab4761f93e5402bfc05d43c1d3a97 2320
mutt_2.2.13-1+deb13u2.dsc
eb23faddc1cc97d867693f3a4a9f30949ad93765ad5b6fdae2797a4001c58efb 5539130
mutt_2.2.13.orig.tar.gz
325a2d86a1bc50f3b2007678a9ac744893beea88c934d5e11d77a1e62510df63 833
mutt_2.2.13.orig.tar.gz.asc
82ba323c6a64b9bd52f2adac36f58a118cbf74422526621a3f4a8ef216e75af0 63856
mutt_2.2.13-1+deb13u2.debian.tar.xz
c729759a6ded2e091e2f56209456b818f392ccb00f27bfbadb6b6905a005f8d7 8797
mutt_2.2.13-1+deb13u2_amd64.buildinfo
Files:
9d6ae337e2de94cb3160b573387a0868 2320 mail optional mutt_2.2.13-1+deb13u2.dsc
0d33c808d5556c283c01542c7730ccbd 5539130 mail optional mutt_2.2.13.orig.tar.gz
7db9e9e896df59849ef0442e4ea4b2b4 833 mail optional mutt_2.2.13.orig.tar.gz.asc
c915bac5242670d661f9ce95b7c6cb22 63856 mail optional
mutt_2.2.13-1+deb13u2.debian.tar.xz
9b6037531b418dbbe6755898d721fc14 8797 mail optional
mutt_2.2.13-1+deb13u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=ioBj
-----END PGP SIGNATURE-----
pgpjSIozirvVo.pgp
Description: PGP signature
--- End Message ---
