CVS commit: [pkgsrc-2026Q3] pkgsrc/mail/mutt

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Sun Oct 11 01:21:08 UTC 2026

Modified Files:
        pkgsrc/mail/mutt [pkgsrc-2026Q3]: Makefile distinfo

Log Message:
Pullup ticket #7271 - requested by tron
mail/mutt: Security fix

Revisions pulled up:
- mail/mutt/Makefile                                            1.302
- mail/mutt/distinfo                                            1.130

---
   Module Name: pkgsrc
   Committed By:        tron
   Date:                Fri Oct  9 17:37:08 UTC 2026

   Modified Files:
        pkgsrc/mail/mutt: Makefile distinfo

   Log Message:
   mail/mutt: Update to version 2.4.3

   This release fixes two bugs.  One of them is for CVE-2026-107570, fixing an
   OOB heap write.  This is triggered by a specially crafted Content-Header li=
   ne
   in an email that is used as a template for a new email, via <resend-message=
   >.
   Thanks to Calif.io, in collaboration with Anthropic for sending me a detail=
   ed
   write up and suggested patch.

   The full set of changes are:

   7752d93f  Fix OOB heap write in convert_file_from_to().
   4364e5b0  Fix mutt_signed_handler() goodsig setting.


To generate a diff of this commit:
cvs rdiff -u -r1.301 -r1.301.2.1 pkgsrc/mail/mutt/Makefile
cvs rdiff -u -r1.129 -r1.129.2.1 pkgsrc/mail/mutt/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/mutt/Makefile
diff -u pkgsrc/mail/mutt/Makefile:1.301 pkgsrc/mail/mutt/Makefile:1.301.2.1
--- pkgsrc/mail/mutt/Makefile:1.301     Sun Aug 30 11:35:24 2026
+++ pkgsrc/mail/mutt/Makefile   Sun Oct 11 01:21:08 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.301 2026/08/30 11:35:24 tron Exp $
+# $NetBSD: Makefile,v 1.301.2.1 2026/10/11 01:21:08 maya Exp $
 
-DISTNAME=              mutt-2.4.2
+DISTNAME=              mutt-2.4.3
 CATEGORIES=            mail
 MASTER_SITES=          http://ftp.mutt.org/pub/mutt/
 

Index: pkgsrc/mail/mutt/distinfo
diff -u pkgsrc/mail/mutt/distinfo:1.129 pkgsrc/mail/mutt/distinfo:1.129.2.1
--- pkgsrc/mail/mutt/distinfo:1.129     Sun Aug 30 11:35:24 2026
+++ pkgsrc/mail/mutt/distinfo   Sun Oct 11 01:21:08 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.129 2026/08/30 11:35:24 tron Exp $
+$NetBSD: distinfo,v 1.129.2.1 2026/10/11 01:21:08 maya Exp $
 
-BLAKE2s (mutt-2.4.2.tar.gz) = 91f0927ed5e921613007faf2151fd96654f725c8d3201c4c4d651bcab2b05574
-SHA512 (mutt-2.4.2.tar.gz) = ade2034c38fb331249a1c1b78d48e97f3ee5ba13c43e98adb4cf2776742c9c5d0df4db59f0de2642b396302bbe47eb00ab0cc6988f63e2ff684cb20d56a8c560
-Size (mutt-2.4.2.tar.gz) = 5628705 bytes
+BLAKE2s (mutt-2.4.3.tar.gz) = 7cec6f221abc5bf8f3087096fb88346a53dcb88186fae3586c5b12c0c3755a5f
+SHA512 (mutt-2.4.3.tar.gz) = 5513e7d7885c6d1958437a21e2e62288fb9374ae95b7b421de356e64d699467657987b9d9108c554d763420271be0d8c7da06f86e537edb2e870efdd14f66261
+Size (mutt-2.4.3.tar.gz) = 5631939 bytes
 SHA1 (patch-Makefile.in) = 646eab10790053fff80bf8012ea85f40412b330c
 SHA1 (patch-color.c) = 36ba13d3fb1a034ed464397c61679bdb8e2cc2e5
 SHA1 (patch-configure) = 214197f399431f25ca57e2567be88e7b4fb02e9a