-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Jul 2026 14:01:02 +0300 Source: rlottie Binary: librlottie-dev librlottie0-1 librlottie0-1-dbgsym Architecture: riscv64 Version: 0.1+dfsg-4.2+deb13u2 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-04) Changed-By: Nicholas Guriev Description: librlottie-dev - library for rendering vector based animations and art (developmen librlottie0-1 - library for rendering vector based animations and art Closes: 1138919 1138920 1139179 Changes: rlottie (0.1+dfsg-4.2+deb13u2) trixie; urgency=medium . * Fix off-by-one error in Fortify-FreeType-raster.patch. * Add Fixed-vpath-potential-issue.patch to fix CVE-2026-47319. (Closes: #1138919) * Add Limit-recursion-in-LOTLayerItem.patch to fix CVE-2026-47320. (Closes: #1138920) * New Fixed-signed-shift-issue.patch probably fixes CVE-2026-10305. (Closes: #1139179) * New Fix-heap-buffer-overflow-from-short-truncation.patch. Checksums-Sha1: 5a0383dec96469586ca831f9e576861723d10cbb 21184 librlottie-dev_0.1+dfsg-4.2+deb13u2_riscv64.deb 257527d067e798a13c476dc53c219fc2a00728a8 1804760 librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_riscv64.deb 3a7326b015584cb5b177d66a4ca29c88e483fed3 119456 librlottie0-1_0.1+dfsg-4.2+deb13u2_riscv64.deb 16163f044c81d2270378cb9b819352eefce5d366 7438 rlottie_0.1+dfsg-4.2+deb13u2_riscv64-buildd.buildinfo Checksums-Sha256: 99f94ba7e84b8c1e104f12239657f143815e1879b2e0439f57192403d6b9e408 21184 librlottie-dev_0.1+dfsg-4.2+deb13u2_riscv64.deb db91521981d2fa0494e9f17a6995990c684005fd031ca4fafd368e191defbd40 1804760 librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_riscv64.deb c8d5257c05b9bd97bdd7f67b93124b08d3a57e99f97383fad2b30fb3b5d3ff42 119456 librlottie0-1_0.1+dfsg-4.2+deb13u2_riscv64.deb e69b900140edf6517ba03aa79a649b3c3e21f3b216113a0f1a85cdb045cd8caf 7438 rlottie_0.1+dfsg-4.2+deb13u2_riscv64-buildd.buildinfo Files: a607ecdea638486009e8399e424995d6 21184 libdevel optional librlottie-dev_0.1+dfsg-4.2+deb13u2_riscv64.deb 5c885e40c2938ba95e6b961cf54b12f1 1804760 debug optional librlottie0-1-dbgsym_0.1+dfsg-4.2+deb13u2_riscv64.deb 91bbd75a0c649e9515e72046ecf6680c 119456 libs optional librlottie0-1_0.1+dfsg-4.2+deb13u2_riscv64.deb 0735b904758a24fae8caf9ac30dd231f 7438 libs optional rlottie_0.1+dfsg-4.2+deb13u2_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpWtAFYomK/29mcYCqTndZcwOQoMFAmpI4GwACgkQqTndZcwO QoNpwQ//cqNL4q5X3bbb7cbu63MfygtDYK2fLe+923sKNZ8nSWRqPktgqMIOIJI4 zg4M/NSdgizZx2NoW5OEh0jRLqV6IaIyo1D7zDk2NaVf/5fm1ic/SJwP9jlKDLtD jtevtG3WDbGYk+fbgqLD4xmbiDaVN8XmBhsKD4i2gXihnu3Z6BxnfyaDbKfHoPgd sXX5v15pbBdihllk9f8caOPr9hFBnFx4aegcdH/WtR/bpnl608TaLi3cYA7btOaL DTMHKu3Pp4gBfbf22iTE2OiiDFA4xb8yWEbSuwfPKfXK22GQKMMJInI2J2pWPnJN JwYdRcCsKVz7DRVCgHCf1jBjf7GK2JOyjGDnU8+Vd6Lom/2oTSyI6r97Q455nxCV CKbGthe85SjO2oFuZ2UNtgV/jbtuUYFml16fh1Q5ghDYSJ44wAIIuEekRnJsC3Cf Yg04san7hS2z7uBcV3aUBiRHsSxWPIgY5qgaHLhD10VHpdlX5nZ1KfG6YwlozUib yyFUBnMg21E6d7+4QVPQbliDMrfXJnVbmsyWkG1m7bYAIng7Zsv9IAMRH3FQSyvp bF7mEuwz+ZiIl/0CHq8ab5PpT3RQuhpHn4pafZZc2yhAcfx5sWxwD+CK5R7nr8W4 DJqh4IOPRFUIwZHTrE2DHzZjFLYOXWY8ST8mTNj0wzZBAnTtK1A= =0y63 -----END PGP SIGNATURE-----