Upstream 1.5.23

Relevant patches from upstream, mostly translation updates. Notably, the CVE-2014-0467 patch "Fix buffer overrun caused by not updating a string length after address expansion" is left out because the code is already correct in mutt-kz AFAICS.