CVS commit: pkgsrc/mail/mutt

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Fri Oct  9 17:37:08 UTC 2026

Modified Files:
        pkgsrc/mail/mutt: Makefile distinfo

Log Message:
mail/mutt: Update to version 2.4.3

This release fixes two bugs.  One of them is for CVE-2026-107570, fixing an
OOB heap write.  This is triggered by a specially crafted Content-Header line
in an email that is used as a template for a new email, via <resend-message>.
Thanks to Calif.io, in collaboration with Anthropic for sending me a detailed
write up and suggested patch.

The full set of changes are:

7752d93f  Fix OOB heap write in convert_file_from_to().
4364e5b0  Fix mutt_signed_handler() goodsig setting.


To generate a diff of this commit:
cvs rdiff -u -r1.301 -r1.302 pkgsrc/mail/mutt/Makefile
cvs rdiff -u -r1.129 -r1.130 pkgsrc/mail/mutt/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/mutt/Makefile
diff -u pkgsrc/mail/mutt/Makefile:1.301 pkgsrc/mail/mutt/Makefile:1.302
--- pkgsrc/mail/mutt/Makefile:1.301     Sun Aug 30 11:35:24 2026
+++ pkgsrc/mail/mutt/Makefile   Fri Oct  9 17:37:07 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.301 2026/08/30 11:35:24 tron Exp $
+# $NetBSD: Makefile,v 1.302 2026/10/09 17:37:07 tron Exp $
 
-DISTNAME=              mutt-2.4.2
+DISTNAME=              mutt-2.4.3
 CATEGORIES=            mail
 MASTER_SITES=          http://ftp.mutt.org/pub/mutt/
 

Index: pkgsrc/mail/mutt/distinfo
diff -u pkgsrc/mail/mutt/distinfo:1.129 pkgsrc/mail/mutt/distinfo:1.130
--- pkgsrc/mail/mutt/distinfo:1.129     Sun Aug 30 11:35:24 2026
+++ pkgsrc/mail/mutt/distinfo   Fri Oct  9 17:37:07 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.129 2026/08/30 11:35:24 tron Exp $
+$NetBSD: distinfo,v 1.130 2026/10/09 17:37:07 tron Exp $
 
-BLAKE2s (mutt-2.4.2.tar.gz) = 91f0927ed5e921613007faf2151fd96654f725c8d3201c4c4d651bcab2b05574
-SHA512 (mutt-2.4.2.tar.gz) = ade2034c38fb331249a1c1b78d48e97f3ee5ba13c43e98adb4cf2776742c9c5d0df4db59f0de2642b396302bbe47eb00ab0cc6988f63e2ff684cb20d56a8c560
-Size (mutt-2.4.2.tar.gz) = 5628705 bytes
+BLAKE2s (mutt-2.4.3.tar.gz) = 7cec6f221abc5bf8f3087096fb88346a53dcb88186fae3586c5b12c0c3755a5f
+SHA512 (mutt-2.4.3.tar.gz) = 5513e7d7885c6d1958437a21e2e62288fb9374ae95b7b421de356e64d699467657987b9d9108c554d763420271be0d8c7da06f86e537edb2e870efdd14f66261
+Size (mutt-2.4.3.tar.gz) = 5631939 bytes
 SHA1 (patch-Makefile.in) = 646eab10790053fff80bf8012ea85f40412b330c
 SHA1 (patch-color.c) = 36ba13d3fb1a034ed464397c61679bdb8e2cc2e5
 SHA1 (patch-configure) = 214197f399431f25ca57e2567be88e7b4fb02e9a