diff --git a/vim-9.0.1488.tar.gz b/vim-9.0.1488.tar.gz
deleted file mode 100644
index 76fea9a..0000000
--- a/vim-9.0.1488.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2cc2e46df25127f804e69cae4adfbf8bc531fd85535ea5a87b7474738348b7ad
-size 17010102
diff --git a/vim-9.0.1504.tar.gz b/vim-9.0.1504.tar.gz
new file mode 100644
index 0000000..cbc5b4e
--- /dev/null
+++ b/vim-9.0.1504.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:35564632155dde1e7b2cc2607588244035e1406caba8fda24bbe36f8712325f3
+size 17008872
diff --git a/vim.changes b/vim.changes
index 7d85947..d0a59e9 100644
--- a/vim.changes
+++ b/vim.changes
@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Tue May  2 09:11:18 UTC 2023 - Ondřej Súkup <mimi.vx@gmail.com>
+
+- Updated to version 9.0.1504, fixes the following problems
+- fixes boo#1210996 - CVE-2023-2426
+  * xchacha20v2 crypt header is platform dependent.
+  * Crypt with libsodium is not tested on CI.
+  * The ModeChanged event may be triggered too often.
+  * Wrong scrolling with ls=0 and :botright split.
+  * Using uninitialized memory when argument is missing.
+  * Popup menu position wrong in window with toolbar.
+  * Crash when recovering from corrupted swap file.
+  * GTK3: hiding the mouse pointer does not work. (Rory O’Kane)
+  * Test restoring register with wrong value.
+  * The ruler percentage can't be localized.
+  * In a terminal window the cursor may jump around. (Kenny Stauffer)
+  * Using uninitialized memory with fuzzy matching.
+  * The falsy operator is not tested properly.
+  * Crash with nested :try and :throw in catch block.
+  * No test for deleting the end of a long wrapped line.
+  * Luau files are not recognized.
+  * No error when calling remote_startserver() with an empty string.
+
 -------------------------------------------------------------------
 Wed Apr 26 09:20:58 UTC 2023 - Ondřej Súkup <mimi.vx@gmail.com>
 
diff --git a/vim.spec b/vim.spec
index d248eae..dd9d8b3 100644
--- a/vim.spec
+++ b/vim.spec
@@ -17,7 +17,7 @@
 
 
 %define pkg_version 9.0
-%define patchlevel 1488
+%define patchlevel 1504
 %define patchlevel_compact %{patchlevel}
 %define VIM_SUBDIR vim90
 %define site_runtimepath %{_datadir}/vim/site