Accepted rlottie 0.1+dfsg-2+deb11u2 (source) into oldoldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 07 Jul 2026 16:48:09 +0300
Source: rlottie
Architecture: source
Version: 0.1+dfsg-2+deb11u2
Distribution: bullseye-security
Urgency: medium
Maintainer: Nicholas Guriev <guriev-ns@ya.ru>
Changed-By: Nicholas Guriev <guriev-ns@ya.ru>
Closes: 994614 1138916 1138917 1138918 1138919 1138920 1139179
Changes:
 rlottie (0.1+dfsg-2+deb11u2) bullseye-security; urgency=medium
 .
   * Apply fixes and improve stability.
   * Backported patches:
     - Atomic-render.patch
     - Avoid-assertion-failures.patch (closes: #1138916, fixes: CVE-2026-8916)
     - Check-empty-frames.patch
     - Finite-loop-in-VBezier-tAtLength.patch
     - Fix-heap-buffer-overflow-from-short-truncation.patch
     - Fixed-signed-shift-issue.patch (closes: #1139179, fixes: CVE-2026-10305)
     - Fixed-vpath-potential-issue.patch (closes: #1138919, fixes: CVE-2026-47319)
     - Ignore-unspecified-type.patch
     - Init-keyframe.patch
     - Limit-recursion-in-LOTLayerItem.patch (closes: #1138920, fixes: CVE-2026-47320)
     - No-cyclic-structures.patch (closes: #1138917, fixes: CVE-2026-47306)
     - No-deadlock.patch
     - Positive-points.patch
     - Reject-reversed-frames.patch
     - Stop-VBezier-length-overflow.patch
   * Amended patches:
     - Check-buffer-length.patch
     - Fortify-FreeType-raster.patch (closes: #1138918, fixes: CVE-2026-47318)
   * Replace Zero-corrupt-point.patch with Empty-animation-data.patch based on
     Subhransu Mohanty's commit (closes: #994614).
Checksums-Sha1:
 d9f8353e14011adfdeda1e8849439fe377e3cf84 2055 rlottie_0.1+dfsg-2+deb11u2.dsc
 b5c6a1fbed15d57b45f8321aa2fd9fa10dd376f9 2899072 rlottie_0.1+dfsg.orig.tar.xz
 38ab4696e86c6998d913928ad62cc3c1acf007e6 23244 rlottie_0.1+dfsg-2+deb11u2.debian.tar.xz
 47df17f5afed2a9d5262e1e7f3479198e0ef3d05 5813 rlottie_0.1+dfsg-2+deb11u2_source.buildinfo
Checksums-Sha256:
 9f18016740e03ac438e11fab0bf0dac0a83695cfecd5a141d92c5ecc6eb1ee6e 2055 rlottie_0.1+dfsg-2+deb11u2.dsc
 23ef230681bfec7ed6f2d1e3918fed9456874392594297f9a5b70e0bc58a80eb 2899072 rlottie_0.1+dfsg.orig.tar.xz
 a2943ec39a3ce94afe7e075cf495c407f87c31ce30375ed23610031b7a2a216b 23244 rlottie_0.1+dfsg-2+deb11u2.debian.tar.xz
 17ecce46e5b8f017bb91a62456b4430f51fe2a2414912045f981b94b2791cff9 5813 rlottie_0.1+dfsg-2+deb11u2_source.buildinfo
Files:
 8c5823174f65f518548dbd42d9cbc5b7 2055 libs optional rlottie_0.1+dfsg-2+deb11u2.dsc
 4a1a9402dd50e0f917b01b762c98a7c8 2899072 libs optional rlottie_0.1+dfsg.orig.tar.xz
 abe04a996297b205a5ddd72a37f41392 23244 libs optional rlottie_0.1+dfsg-2+deb11u2.debian.tar.xz
 59d3101dc0d2d6635d8b4326aea8ee81 5813 libs optional rlottie_0.1+dfsg-2+deb11u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmpP4LgACgkQnUbEiOQ2
gwKhnA/9EQXJCB5CEbwXpd3Oj2sD27/Y8+pP6BspVzv7kIMig3+8EjeOXALs9L4I
/lNu2DtO2RQ8/zx/OlS1LLpCUVSR/dXBuHIezbVL/GpTz/8YgQjaySTQMM4lJf/7
ylVWgS//E5Vs5Fsac2nHM9tO6jRLmS8HhW5xDFLqy0jfzWI2oTMDFcoGMIuaaXti
80mWb7h/oW9+a5ohArb+6JziOjYwpEmx39c+nzD4+KUfmyJSKVv+gd/J4msJm5df
WQJcTNJrMBlvwCdPwO7/YCaBBb9Lik0QqZLW3XkdpBKKD8wF7FWhvMV8P5Xu4j5L
7t95LpbpEccYbToyVjOrpEelvCpHpRVDS36X6Ol2/MN086UWUoHkLSU1ZxPR0dRP
kZ6yMYSL4hPcJ5/ylYYT6jzRckKlfHPbyqhxuaOm3qqcqcbfA6QpSYvpD7RPmqvA
eaczoRQw0LYWMRFE8NYYy9wrZ0r0DI2uhJzJeYiraOPl/UlN/q8McS/QCzx6e3uf
cd9Y+LMhigOTfmbfCHoBaJW5pjyUg+RmX4IklFz9aOeIMPCv6ap7KM2O1cgn3sSw
PF0U7bROQoH/bfS+KvjszodR/e2RIjdmKzaBGyAQcLSBIXk6AFzGiLnO8xu4AHCs
oHj91HZ9kRena5lVuvmDL1WPoTPIR4ntE6vKeTx619onc/3Osr0=
=Uptg
-----END PGP SIGNATURE-----