-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Jul 2026 14:01:02 +0300 Source: rlottie Binary: librlottie-dev librlottie0-1 librlottie0-1-dbgsym Architecture: amd64 Version: 0.1+dfsg-4.2+deb13u2 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Nicholas Guriev Description: librlottie-dev - library for rendering vector based animations and art (developmen librlottie0-1 - library for rendering vector based animations and art Closes: 1138919 1138920 1139179 Changes: rlottie (0.1+dfsg-4.2+deb13u2) trixie; urgency=medium . * Fix off-by-one error in Fortify-FreeType-raster.patch. * Add Fixed-vpath-potential-issue.patch to fix CVE-2026-47319. (Closes: #1138919) * Add Limit-recursion-in-LOTLayerItem.patch to fix CVE-2026-47320. (Closes: #1138920) * New Fixed-signed-shift-issue.patch probably fixes CVE-2026-10305. (Closes: #1139179) * New Fix-heap-buffer-overflow-from-short-truncation.patch. Checksums-Sha1: 66e1a8848e7bf4b6aa9728f07e9334f8e6d2ff76 21188 librlottie-dev_0.1+dfsg-4.2+deb13u2_amd64.deb 610afa0976cf61cb93092860893b9a66ca9231e8 2057168 librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_amd64.deb d19d3d6986d5e90c240b5b9fad54b68182e37179 117248 librlottie0-1_0.1+dfsg-4.2+deb13u2_amd64.deb 88dc46b132b3217923e3a0cbc0a3f9f9fb039c10 7488 rlottie_0.1+dfsg-4.2+deb13u2_amd64-buildd.buildinfo Checksums-Sha256: daaac1dddeea47bb5c25c4f5d843d146c46a9c1e8dd42b2dc073c8df94922013 21188 librlottie-dev_0.1+dfsg-4.2+deb13u2_amd64.deb b901ff3231be854f45aae9482542d65a754ab3148864157b3f5af5fc811d6263 2057168 librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_amd64.deb b62efaa9e6105a638b68e1d14b58a22ce4491b802581d55c7350c0d10919bb3e 117248 librlottie0-1_0.1+dfsg-4.2+deb13u2_amd64.deb ab9678b346d2e46556a3110e35f13689067bd56593bd0add93a083f6a6153f2f 7488 rlottie_0.1+dfsg-4.2+deb13u2_amd64-buildd.buildinfo Files: 86120b8043b3b13a9160ddc2fb971776 21188 libdevel optional librlottie-dev_0.1+dfsg-4.2+deb13u2_amd64.deb e01b0593eb9baf2310c9a4ab5813c3b8 2057168 debug optional librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_amd64.deb 5c82d183c6130ab617bfa0ff4c5fdba6 117248 libs optional librlottie0-1_0.1+dfsg-4.2+deb13u2_amd64.deb 292373761c4df602e1a032a302336d1d 7488 libs optional rlottie_0.1+dfsg-4.2+deb13u2_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmpI3RkACgkQGNGWmfrq ILESVA/+Kt5SeridaW4nnXqAJh2civ51emg/ZkmSECrPY3Nh1XfjYcBUhQM7PxLL dxQ3lqHehY6ETFf6+DPZeAoHSgK1TCMrLPwMMdbKZvAUQQJiUmVnkn5Ms6+MbhL6 dyhHiEzb4/tXFDISn6qExGvWJS3JbusQ08hLlWms+pRkcm+r6nyDKZGbZRZ9+1B0 48a1ZMEZ3BnLUxrZBMxiTgYl8NvNXpgA4/AZewHZtbk3F3UoZ5I3/BCitR2xbs7U yYTiUFctnIpoHNz9tgWnPY36aEx06qB8nDPOA3tDi59jLD/J/AjGQPbmSx/qaLnT +9AlU6gDaYxNNX2maYtgBEfow0zti2jvH2HgKo+Ka+jHIpj5k2hrkN7iJWa2+elM FcDbY0+umaK22zAZhJOEGe0qug+C1PM8+CBeb7UosyOX3PPdoOw07BlLs9DvIPRQ dx6lYrMclHFZrnZCAwHoJfNgmxM1Sd330h6ezYpTrjkA4RA36t2wlvRHqIY4VLMl ECxClQNzDQbHLTZoauezNHGH4j9J8PocXVRByQuU40fNfQExM1AFEV4S4dvjAasi D4TS/jGodXsC7XF5pMm6d2Mj4gRRGRFKh5wbUqA7XNRZL2Uzlhn8DSIVJUmG/iD7 y++yFhY2iX0I2RVtOCiXXONJNwWOhdNKI+jc5QaJAGIIr7Jsszg= =wz0m -----END PGP SIGNATURE-----