# libxpm security updates

Patch Radar has 19 security fixes for libxpm, closing 7 CVEs. The newest is DEBIAN-CVE-2026-94287 (1:3.5.20-1), released September 28, 2026.

- Web page: https://patchblox.com/security/product/linux/libxpm
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-94287](https://patchblox.com/security/data/fix/linux/debian-cve-2026-94287.md) | Sep 28, 2026 | Debian 14 1:3.5.20-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-4367](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4367.md) | May 15, 2026 | Debian 14 1:3.5.19-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-4367](https://patchblox.com/security/data/fix/linux/debian-cve-2026-4367.md) | May 15, 2026 | Debian 13.5 (trixie) 1:3.5.17-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-43789](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43789.md) | Oct 12, 2023 | Debian 12.15 (bookworm) 1:3.5.12-1.1+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-43789](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43789.md) | Oct 12, 2023 | Debian 13.5 (trixie) 1:3.5.17-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-43789](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43789.md) | Oct 12, 2023 | Debian 14 1:3.5.17-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-43788](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43788.md) | Oct 10, 2023 | Debian 13.5 (trixie) 1:3.5.17-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-43788](https://patchblox.com/security/data/fix/linux/debian-cve-2023-43788.md) | Oct 10, 2023 | Debian 14 1:3.5.17-1 | Routine | 1 | 0 |
| [DSA-5516-1](https://patchblox.com/security/data/fix/linux/dsa-5516-1.md) | Oct 5, 2023 | Debian 12.15 (bookworm) 1:3.5.12-1.1+deb12u1 | Routine | 1 | 0 |
| [DSA-5516-1](https://patchblox.com/security/data/fix/linux/dsa-5516-1.md) | Oct 5, 2023 | Debian 11.6 (bullseye) 1:3.5.12-1.1+deb11u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-46285](https://patchblox.com/security/data/fix/linux/debian-cve-2022-46285.md) | Feb 7, 2023 | Debian 13.5 (trixie) 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-46285](https://patchblox.com/security/data/fix/linux/debian-cve-2022-46285.md) | Feb 7, 2023 | Debian 12.15 (bookworm) 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-46285](https://patchblox.com/security/data/fix/linux/debian-cve-2022-46285.md) | Feb 7, 2023 | Debian 14 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-4883](https://patchblox.com/security/data/fix/linux/debian-cve-2022-4883.md) | Feb 7, 2023 | Debian 12.15 (bookworm) 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-4883](https://patchblox.com/security/data/fix/linux/debian-cve-2022-4883.md) | Feb 7, 2023 | Debian 13.5 (trixie) 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-4883](https://patchblox.com/security/data/fix/linux/debian-cve-2022-4883.md) | Feb 7, 2023 | Debian 14 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-44617](https://patchblox.com/security/data/fix/linux/debian-cve-2022-44617.md) | Feb 6, 2023 | Debian 12.15 (bookworm) 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-44617](https://patchblox.com/security/data/fix/linux/debian-cve-2022-44617.md) | Feb 6, 2023 | Debian 13.5 (trixie) 1:3.5.12-1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-44617](https://patchblox.com/security/data/fix/linux/debian-cve-2022-44617.md) | Feb 6, 2023 | Debian 14 1:3.5.12-1.1 | High | 1 | 0 |

---

Data as of 2026-11-06T17:00:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo