mutt 2.3.2 released
"Kevin J. McCarthy" <[email protected]> Sun, 26 Apr 2026 12:34:17 +0800
| Newsgroups | gmane.mail.mutt.announce |
|---|---|
| Message-ID | <ae2VyXO80nCO2JLC@qinghai> |
--dfsfhHkWBpCDI+4N
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hello Mutt Users,
I've just released version 2.3.2. Instructions for downloading are availab=
le
at <http://www.mutt.org/download.html>, or the tarball can be directly
downloaded from <http://ftp.mutt.org/pub/mutt/>. Please take the time to
verify the signature file against my public key[1].
Please note that my public key expired a few weeks ago, however I
updated the expiration date. If you are receiving an expired key
notice, please refresh your keyring, or just import my key again from
one of the sources below.
This release fixes an assortment of issues, including a possible segv in
the GPGME code. For more details see the commits:
834c5a2e Fix IMAP auth_cram MD5 digest of secret to use memcpy().
12f54fe3 Check for embedded nul in url_pct_decode().
f547a849 Fix imap_auth_gss() security level size check and buf_size type.
fdc04a17 Fix infinite loop in gpgme data_object_to_stream().
ebfa2969 Fix NULL dereference in show_sig_summary().
Thanks to evilrabbit for reporting issues. And thanks to my fellow=20
mutt-dev'ers for helping discuss, review code, and test the fixes.
-Kevin
[1]
My public key is available at:
- my personal website: https://8t8.us/configs/80316BDA.asc.pubkey
- the mutt website: http://www.mutt.org/keys/kevin.key
- The keys.openpgp.org network
https://keys.openpgp.org/vks/v1/by-fingerprint/8975A9B33AA37910385C53=
08ADEF768480316BDA
--dfsfhHkWBpCDI+4N
Content-Type: application/pgp-signature; name=signature.asc
-----BEGIN PGP SIGNATURE-----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=ZMyJ
-----END PGP SIGNATURE-----
--dfsfhHkWBpCDI+4N--