ECHO-9e0d-9055-5bf6

See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-9e0d-9055-5bf6.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-9e0d-9055-5bf6
Upstream
Withdrawn
2026-04-05T18:15:03Z
Published
2026-03-09T02:30:05Z
Modified
2026-09-15T03:33:45Z
Summary
The vulnerability is in do_pnm2png() in contrib/pngminus/pnm2png.c, which isn't built by any package exported by debian. This file is not declared in any header, nor referenced in any build-system file, nor included in Debian's packaging rules or .install files.
Details
References

Affected packages

Echo / libpng1.6

Package

Name
libpng1.6
Purl
pkg:deb/echo/libpng1.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.6.56-1+e1

Database specific

source
"https://advisory.echohq.com/osv/ECHO-9e0d-9055-5bf6.json"