-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Jul 2026 14:01:02 +0300 Source: rlottie Binary: librlottie-dev librlottie0-1 librlottie0-1-dbgsym Architecture: arm64 Version: 0.1+dfsg-4.2+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-conova-03) Changed-By: Nicholas Guriev Description: librlottie-dev - library for rendering vector based animations and art (developmen librlottie0-1 - library for rendering vector based animations and art Closes: 1138919 1138920 1139179 Changes: rlottie (0.1+dfsg-4.2+deb13u2) trixie; urgency=medium . * Fix off-by-one error in Fortify-FreeType-raster.patch. * Add Fixed-vpath-potential-issue.patch to fix CVE-2026-47319. (Closes: #1138919) * Add Limit-recursion-in-LOTLayerItem.patch to fix CVE-2026-47320. (Closes: #1138920) * New Fixed-signed-shift-issue.patch probably fixes CVE-2026-10305. (Closes: #1139179) * New Fix-heap-buffer-overflow-from-short-truncation.patch. Checksums-Sha1: 04ffe8b1db28683ff59f1f92481b7a633d84f12e 21180 librlottie-dev_0.1+dfsg-4.2+deb13u2_arm64.deb 47a65f2d0f9183983b25a249059746f0ad28bfa8 2011224 librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_arm64.deb 322c73662c6004d9fe48ac179cae1172273c9a77 107916 librlottie0-1_0.1+dfsg-4.2+deb13u2_arm64.deb bc787716527b517cff86173efb30288ac3a2e96a 7472 rlottie_0.1+dfsg-4.2+deb13u2_arm64-buildd.buildinfo Checksums-Sha256: d094c96ca125f534bbd851969490f6da19b5c89165b7357bc355911914bdca83 21180 librlottie-dev_0.1+dfsg-4.2+deb13u2_arm64.deb 5c13d7f619e3cc984cf936ad1ef5ed307ae505acdf69a930488c430b19e524ea 2011224 librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_arm64.deb cbb244052016d19801d030aa6264249f9c31b41462e8fd7a916da6b49168cb7c 107916 librlottie0-1_0.1+dfsg-4.2+deb13u2_arm64.deb cbb3a9531de6beb000f897097d882784ddf2abaca16e0cf7611fb4738e4bc66b 7472 rlottie_0.1+dfsg-4.2+deb13u2_arm64-buildd.buildinfo Files: 57dcb507e331caff0c74b03fb3dd7675 21180 libdevel optional librlottie-dev_0.1+dfsg-4.2+deb13u2_arm64.deb 105e5a21760beb543eba9159f63082d1 2011224 debug optional librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_arm64.deb 3268c470339df25a13feab54b0336ad9 107916 libs optional librlottie0-1_0.1+dfsg-4.2+deb13u2_arm64.deb 789b914b168854687ffe40bb000d33c3 7472 libs optional rlottie_0.1+dfsg-4.2+deb13u2_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmpI3OgACgkQXVp1sEH/ 1mLE6xAAsEFBT9OK4cb4Dow3yv6fayfCDmiVFhwr85GaiiyDXvCsfYr9WsGfSD34 X2+XcuMBA8zpyusRRx1igGGByHXoUYww5oJPpGi8N8vS1OjnCojojE6BJTTnDzm0 QbvUuSUDglsSP79FWmshapShlOgebx1wb0wc13E4+TKs8JoPGJDX4jhlxXWNnngA VPjzuCRlF2VmshcZCENkY2gAp8wx+bKC+2FEsqIZXMBTMSkQVsBc7cZyp6KWjb2A +34kaUhdT0z1aA0IVZpfmy0dWGGgUUI/o+btjp100vPx/E0iVqNU/POAfys3gFkz rhLKQaBvTKlSCnAQt4T2WFJPO40AgpVLinuAmZogHSUJaaqm+D83EKlOKD2XRnFF hPDDh2vcSdB8y7PwJx6PPXG+8i5sXL6kB7u2y/lJMaCw6Wf7rMgITMU/4F0njuER O5a7E4vXT9I2PTHvHSQl9ZMESJhqgzACfSTcItIHhcLNxflmuB4ClJKHOoifrDCq yOtUgTvUHFveYPnh9Hif6pcW1UmUF+LLo0F6MjF8JgRy5jsBI0uISr76rrBVdx2V tBtmhHk2GHKJoVEQ29LgLyQASbFKSBa0rBjUlH4/ymp8KSJd8/P3dseIIaec/Tn5 gEL1m2yBorbIqIgPyABq9QnP9FA5x4hQFpKrgC8WPoaE+JrdK14= =ISvA -----END PGP SIGNATURE-----