* SECURITY UPDATE: heap buffer overflow/underflow scrolling without valid screen - debian/patches/CVE-2022-2206.patch: re-clamp cmdline_row/msg_row after a terminal resize shrinks Rows, in check_shellsize() in src/term.c. - CVE-2022-2206 * SECURITY UPDATE: illegal memory access when 'spellfile' has a very long file name - debian/patches/CVE-2021-3928.patch: check that preword is not empty before backing up a pointer into it in suggest_trie_walk() in src/spellsuggest.c. - CVE-2021-3928 * SECURITY UPDATE: using freed memory with ]d/[d/]D/[D/]i/[i/]I/[I - debian/patches/CVE-2022-1898.patch: copy the identifier found under the cursor before passing it to find_pattern_in_path(), in nv_brackets() in src/normal.c. - CVE-2022-1898 * SECURITY UPDATE: using freed memory when 'spellfile' triggers a SpellFileMissing autocmd that wipes out the buffer - debian/patches/CVE-2022-3352.patch: disallow deleting the current buffer while spell_load_lang() runs, in src/spell.c. - CVE-2022-3352 * SECURITY UPDATE: use-after-free with autocommands that change the window layout while editing another file - debian/patches/CVE-2023-4733.patch: invalidate the old window pointer after autocommands may have closed it, in do_ecmd() in src/ex_cmds.c. - CVE-2023-4733