diff --git a/3rdparty/utfcpp b/3rdparty/utfcpp
index 819011bb..2d8e20b2 160000
--- a/3rdparty/utfcpp
+++ b/3rdparty/utfcpp
@@ -1 +1 @@
-Subproject commit 819011bb01628fe1aa2f1da9f2c842a48fd5680b
+Subproject commit 2d8e20b22dcb3e9b3c4f52103182ebda949c6089
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bf893df6..2cf8d38e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,23 @@
+TagLib 2.3.2 (Sep 5, 2026)
+==========================
+
+ * MP3: Fix parsing of per-frame unsynchronized ID3v2 frames.
+ * MP3: Accept iTunes ID3 frames with space padded ID3v2.2 ID.
+ * MP4: More tolerant handling of `covr` atom with wrong flags.
+ * MP4: Support additional codecs (AC3, DTS, EAC3, FLAC, Opus).
+ * Ogg: Support Vorbis comments from a multiplexed stream.
+ * WMA: Improve property interface for ASF files.
+ * RIFF: Support RF64 and BW64 64-bit extensions.
+ * Matroska: Fix file scanning with fast read style.
+ * Matroska: Load attachment data lazily on demand.
+ * Matroska: Read the segment title without audio properties.
+ * Verify values parsed from files to prevent resource exhaustion, denial of
+   service attacks and out of range conversions by crafted input for various
+   file formats (AIFF, APE, DSDIFF, FLAC, MP3, MP4, MPC, Matroska, Ogg, SHN,
+   WMA, XM).
+ * Fix data races in lazily initialized shared caches, test thread safety.
+ * Use `Requires.private` for zlib with `pkg-config`.
+
 TagLib 2.3.1 (Jul 20, 2026)
 ===========================