Advisories » MGASA-2026-0517

Updated mutt package fixes a security vulnerability

Publication date: 17 Oct 2026
Modification date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-107570

Description

When an email is processed as a template, an out-of-bounds write
vulnerability in the convert_file_from_to () function can be triggered
by a specially crafted Content-Type header (CVE-2026-107570).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36502
• https://www.openwall.com/lists/oss-security/2026/10/09/21
• https://www.cve.org/CVERecord?id=CVE-2026-107570

SRPMS

10/core

• mutt-2.4.3-1.mga10