[neomutt-devel] NeoMutt 2026-05-04

[Richard Russon]

## 📖 Notes

This is a Bug-Fix Release with several security hardening fixes and stability
improvements for IMAP and the pager.

## 💎 Sponsors

- Jakub Jindra (@jindraj)
- Scott Kostyshak (@scottkosty)
- Igor Serebryany (@igor47)
- Mark Korondi (@kmARC)
- Bastian Bittorf (@bittorf)
- Nicolas Évrard (@nicoe)
- Farzad Sadeghi (@terminaldweller)
- Robert Ricci (@ricci)
- Robert Labudda
- Morgan Kelly
- Sebastian Stark (@sstark)
- 罗昭铭
- Aboudoulaye Yatera
- Marton Balazs	(@martonbalazs)
- Kirill Rekhov	(@krekhovx)
- Joonas Laine
- Anonymous (Liberapay)

Become a sponsor of NeoMutt - https://neomutt.org/sponsor

## ❤️ Thanks

Many thanks to our **new contributors**:

- Karunakar Reddy (@karnakarreddi)
- Shane Qian (@Shane-XB-Qian)

and our **regular contributors**:

- Pietro Cerutti (@gahr)
- Thomas Klausner (@0-wiz-0)
- Artur Kaminski (@diarized)
- Dennis Schön (@roccoblues)
- Carlos Henrique Lima Melara (@charles2910)
- Jörg Sommer (@jo-so)

## 🔒 Security

- Fix GSSAPI buffer underflow on short unwrapped tokens
- Reject percent-encoded NUL bytes in URL decoding
- Skip CN fallback when SAN dNSName entries exist (RFC6125)
- Cap POP3 UIDL responses to prevent OOM from a malicious server
- Harden POP host URL copy

## 🐞 Bug Fixes

- #4836 imap: fix memory leak in `msg_parse_flags`
- #4849 Fix memmove in `mutt_str_expand_tabs`
- #4850 IMAP: enhance stability with re-entrancy protection and reconnection fixes
- #4852 Say which mailcap field we are looking for
- #4853 Don't overwrite content_type
- pager: fix crash on `uncolor *`
- pager: fix wrong line index in signature syntax realloc
- pager: fix OOB read on short log lines in `display_line()`
- pager: fix off-by-one in newline restoration
- imap: fix sort for missing emails
- imap: fix crash when syncing mailbox on exit
- Fix crash in `cmd_parse_fetch()` when edata is NULL
- log: fix missing errors on startup
- Force cursor to be visible on exit

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://mailman.neomutt.org/pipermail/neomutt-devel-neomutt.org/attachments/20260504/a10f2ae5/attachment.sig>