[DSA 6563-1] mutt security update

{
  "id": "da9d90897100caa9e34429406cb4b31dbbce34bf8fb472c1f4cd4fcfb3bbe878",
  "url": "https://lists.debian.org/debian-security-announce/2026/msg00477.html",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[DSA 6563-1] mutt security update",
    "summary": "Incorrect parsing of Content-Type headers in Mutt could cause denial of service or potentially arbitrary code execution. The issue is fixed for Debian stable (trixie); users are advised to upgrade.",
    "evidence": "For the stable distribution (trixie), this problem has been fixed in version 2.2.13-1+deb13u2.",
    "products": [
      {
        "name": {
          "value": "mutt",
          "evidence": "Package : mutt"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.2.13-1+deb13u2",
            "evidence": "this problem has been fixed in version 2.2.13-1+deb13u2"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [
      {
        "cve": "CVE-2026-107570",
        "product": "mutt",
        "evidence": "Package : mutt CVE ID : CVE-2026-107570 It was discovered that incorrect parsing of Content-Type headers in the Mutt mail user agent could result in denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), this problem has been fixed in version 2.2.13-1+deb13u2."
      }
    ],
    "related_cves": [
      {
        "value": "CVE-2026-107570",
        "evidence": "CVE ID : CVE-2026-107570"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-debian-dsa",
  "document_id": 23407,
  "published_at": "2026-10-15T00:00:00+00:00"
}