From kevin at 8t8.us  Sun Apr 26 04:34:17 2026
From: kevin at 8t8.us (Kevin J. McCarthy)
Date: Sun, 26 Apr 2026 12:34:17 +0800
Subject: mutt 2.3.2 released
Message-ID: <ae2VyXO80nCO2JLC@qinghai>

Hello Mutt Users,

I've just released version 2.3.2.  Instructions for downloading are available
at <http://www.mutt.org/download.html>, or the tarball can be directly
downloaded from <http://ftp.mutt.org/pub/mutt/>.  Please take the time to
verify the signature file against my public key[1].

Please note that my public key expired a few weeks ago, however I
updated the expiration date.  If you are receiving an expired key
notice, please refresh your keyring, or just import my key again from
one of the sources below.

This release fixes an assortment of issues, including a possible segv in
the GPGME code.  For more details see the commits:

834c5a2e  Fix IMAP auth_cram MD5 digest of secret to use memcpy().
12f54fe3  Check for embedded nul in url_pct_decode().
f547a849  Fix imap_auth_gss() security level size check and buf_size type.
fdc04a17  Fix infinite loop in gpgme data_object_to_stream().
ebfa2969  Fix NULL dereference in show_sig_summary().

Thanks to evilrabbit for reporting issues.  And thanks to my fellow 
mutt-dev'ers for helping discuss, review code, and test the fixes.

-Kevin

[1]
My public key is available at:
    - my personal website: https://8t8.us/configs/80316BDA.asc.pubkey
    - the mutt website: http://www.mutt.org/keys/kevin.key
    - The keys.openpgp.org network
      https://keys.openpgp.org/vks/v1/by-fingerprint/8975A9B33AA37910385C5308ADEF768480316BDA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.mutt.org/pipermail/mutt-announce/attachments/20260426/67452ee3/attachment.sig>