# mxml security updates

Patch Radar has 6 security fixes for mxml, closing 4 CVEs. The newest is DEBIAN-CVE-2026-110604 (4.0.6-3), released October 27, 2026.

- Web page: https://patchblox.com/security/product/linux/mxml
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-110604](https://patchblox.com/security/data/fix/linux/debian-cve-2026-110604.md) | Oct 27, 2026 | Debian 14 4.0.6-3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-112094](https://patchblox.com/security/data/fix/linux/debian-cve-2026-112094.md) | Oct 27, 2026 | Debian 14 4.0.6-3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-88385](https://patchblox.com/security/data/fix/linux/debian-cve-2026-88385.md) | Oct 1, 2026 | Debian 14 4.0.6-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-5037](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5037.md) | Mar 29, 2026 | Debian 14 4.0.4-4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-5037](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5037.md) | Mar 29, 2026 | Debian 13.5 (trixie) 3.3.1-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-5037](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5037.md) | Mar 29, 2026 | Debian 12.15 (bookworm) 3.3.1-1+deb13u1~deb12u1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo