ECHO-9CD8-33F8-0F42 Debian's poppler links against libjpeg which is unaffected by this vulnerability. The vulnerable code is in Poppler's internal JPEG decoder which Debian does not use. https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319

Bulletin has no description...