NetHack 3.6.5 released

[nhdevteam]

The NetHack DevTeam is announcing the release of NetHack 3.6.5 on 
January 27, 2020. NetHack 3.6.5 is the official release of NetHack that 
follows NetHack 3.6.4.

This release primarily corrects security issues present in NetHack 
versions 3.6.0, 3.6.1, 3.6.2, 3.6.3 and 3.6.4. For details about the 
security issues please see https://www.nethack.org/security.

You are encouraged to update to NetHack 3.6.5 as soon as possible.

Here's a brief synopsis of the handful of bug fixes included in NetHack 
3.6.5:

- fix accessing mons[-1] when trying to gate in a non-valid demon
- fix accessing mons[-1] when monster figures out if a tin cures stoning
- have string_for_opt() return empty_optstr on failure
- ensure existing callers of string_for_opt() check return value before
   using it
- fix potential buffer overflow in add_menu_coloring()
- fix potential buffer overflow in sym_val()
- fix potential buffer overflow in pline(), raw_printf(), and
   config_error_add()
- fix potential buffer overflow in choose_windows()
- use vsnprintf instead of vsprintf in pline.c where possible
- Windows: includes a fix from a 3.6.4 post-release update where
   OPTIONS=map_mode:fit_to_screen could cause a game start failure
- Windows: users with C-locale unmappable names could get game start
   failure

All of the fixes have been incrementally published on the public Git 
repository for the game. A more complete list can be found in the game's 
sources in doc/fixes36.5. As usual, a warning that some entries in that 
file may also be "spoilers".

Existing saved games and bones files from 3.6.0 through to 3.6.4 should 
work with 3.6.5, assuming that the same build configuration options were 
used.

The following command can be used on most platforms to help confirm the 
location of various files that NetHack may use:
     nethack --showpaths

As with all releases of the game, we appreciate your feedback. Please 
submit any bugs using the problem report form. Also, please check the 
"known bugs" list before you log a problem - somebody else may have 
already found it.

Happy NetHacking!