CVE-2022-3278: fix crash when using NUL in buffer that uses :source;
don't get a next line when skipping over NL in evalnextnon_blank()
(eval.c, upstream patch 9.0.0552)
CVE-2023-48234: fix overflow when getting count for normal z command;
break out of nvzet() count loop when n > LONGMAX/10 (normal.c,
upstream patch 9.0.2109)
CVE-2023-48236: fix overflow in getnumber() when using z= with a
large count; return 0 when n > INTMAX/10 (misc1.c, upstream patch
9.0.2111)
CVE-2025-26603: fix use-after-free in strtoreg() when redirecting
:display to a clipboard register; skip the active redir register
including the * and + clipboard fallbacks to register 0 (register.c,
upstream patch 9.1.1115)