This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed . - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image . - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks .