Source: mutt Version: 2.4.1-1 X-Debbugs-CC: [email protected] Severity: important Tags: security upstream Forwarded: https://gitlab.com/muttmua/mutt/-/work_items/533
Hi, The following vulnerability was published for mutt. CVE-2026-107570[0]: | heap OOB write in convert_file_from_to() via a crafted Content-Type | header allows attacker to OOB write when email is used as a | template. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-107570 https://www.cve.org/CVERecord?id=CVE-2026-107570 [1] https://gitlab.com/muttmua/mutt/-/work_items/533 Please adjust the affected versions in the BTS as needed. Regards, Salvatore
