ECHO-139c-e746-d4e7

See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-139c-e746-d4e7.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-139c-e746-d4e7
Upstream
Withdrawn
2025-12-09T15:30:04Z
Published
2025-09-15T01:08:47Z
Modified
2026-09-15T03:33:35Z
Summary
Debian's poppler links against libjpeg which is unaffected by this vulnerability. The vulnerable code is in Poppler's internal JPEG decoder which Debian does not use. https://security-tracker.debian.org/tracker/CVE-2017-2814 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319
Details
References

Affected packages

Echo / poppler

Package

Name
poppler
Purl
pkg:deb/echo/poppler

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
25.03.0-5+deb13u2+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-139c-e746-d4e7.json"