rlottie - Debian Package Tracker

general

source: rlottie (main)
version: 0.1+dfsg-5
maintainer: Nicholas Guriev (DMD) (DM)
arch: any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.1+dfsg-2
o-o-sec: 0.1+dfsg-2+deb11u2
oldstable: 0.1+dfsg-4+deb12u2
old-p-u: 0.1+dfsg-4+deb12u2
stable: 0.1+dfsg-4.2+deb13u2
testing: 0.1+dfsg-5
unstable: 0.1+dfsg-5

versioned links

0.1+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.1+dfsg-2+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.1+dfsg-4+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.1+dfsg-4.2+deb13u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.1+dfsg-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

librlottie-dev
librlottie0-1

action needed

7 security issues in sid high

There are 7 open security issues in sid.

7 important issues:

CVE-2026-15551:
CVE-2026-18772:
CVE-2026-19517:
CVE-2026-19518:
CVE-2026-19587:
CVE-2026-19588:
CVE-2026-82797:

Created: 2026-07-14 Last update: 2026-09-01 18:30

7 security issues in forky high

There are 7 open security issues in forky.

7 important issues:

CVE-2026-15551:
CVE-2026-18772:
CVE-2026-19517:
CVE-2026-19518:
CVE-2026-19587:
CVE-2026-19588:
CVE-2026-82797:

Created: 2026-07-14 Last update: 2026-09-01 18:30

7 security issues in bookworm high

There are 7 open security issues in bookworm.

7 important issues:

CVE-2026-15551:
CVE-2026-18772:
CVE-2026-19517:
CVE-2026-19518:
CVE-2026-19587:
CVE-2026-19588:
CVE-2026-82797:

Created: 2026-07-14 Last update: 2026-09-01 18:30

7 security issues in bullseye high

There are 7 open security issues in bullseye.

7 important issues:

CVE-2026-15551: Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .
CVE-2026-18772: Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
CVE-2026-19517: Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
CVE-2026-19518: Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.
CVE-2026-19587: Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
CVE-2026-19588: Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
CVE-2026-82797: Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with Nested Payloads. This issue affects rlottie: before 8de0d9e6ca80ffef654965505981727b9fa06a51.

Created: 2026-07-14 Last update: 2026-09-01 05:00

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 7e33a8adaa4e61c90e1ee8573f2dd665b0083291
Author: Nicholas Guriev <nicholas@guriev.su>
Date:   Tue Sep 1 10:31:13 2026 +0300

    Apply reported security fixes
    
    Closes: #1143933, #1144473, #1144646

commit 99ec891bb10faefc8b47747934ca516e5126fda2
Author: Nicholas Guriev <nicholas@guriev.su>
Date:   Thu Jul 2 08:05:31 2026 +0300

    New Fix-heap-buffer-overflow-from-short-truncation.patch

https://salsa.debian.org/api/v4/projects/debian%2Frlottie API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2026-07-02 Last update: 2026-09-01 13:33

lintian reports 3 warnings normal

Lintian reports 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2024-08-29 Last update: 2026-06-12 23:30

7 low-priority security issues in trixie low

There are 7 open security issues in trixie.

7 issues left for the package maintainer to handle:

CVE-2026-15551: (needs triaging)
CVE-2026-18772: (needs triaging)
CVE-2026-19517: (needs triaging)
CVE-2026-19518: (needs triaging)
CVE-2026-19587: (needs triaging)
CVE-2026-19588: (needs triaging)
CVE-2026-82797: (needs triaging)

You can find information about how to handle these issues in the security team's documentation.

Created: 2026-07-14 Last update: 2026-09-01 18:30

debian/patches: 14 patches to forward upstream low

Among the 34 debian patches available in version 0.1+dfsg-5 of the package, we noticed the following issues:

14 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-06-12 22:01

news

[rss feed]

[2026-07-09] Accepted rlottie 0.1+dfsg-2+deb11u2 (source) into oldoldstable-security (Nicholas Guriev) (signed by: Emilio Pozuelo Monfort)
[2026-07-04] Accepted rlottie 0.1+dfsg-4+deb12u2 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Nicholas Guriev)
[2026-07-04] Accepted rlottie 0.1+dfsg-4.2+deb13u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Nicholas Guriev)
[2026-06-18] rlottie 0.1+dfsg-5 MIGRATED to testing (Debian testing watch)
[2026-06-12] Accepted rlottie 0.1+dfsg-5 (source) into unstable (Nicholas Guriev)
[2026-02-09] Accepted rlottie 0.1+dfsg-2+deb11u1 (source) into oldoldstable-security (Thorsten Alteholz)
[2025-12-26] Accepted rlottie 0.1+dfsg-4+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Thorsten Alteholz)
[2025-12-20] Accepted rlottie 0.1+dfsg-4.2+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Thorsten Alteholz)
[2025-11-24] rlottie 0.1+dfsg-4.3 MIGRATED to testing (Debian testing watch)
[2025-11-18] Accepted rlottie 0.1+dfsg-4.3 (source) into unstable (Thorsten Alteholz)
[2025-09-10] rlottie REMOVED from testing (Debian testing watch)
[2024-09-03] rlottie 0.1+dfsg-4.2 MIGRATED to testing (Debian testing watch)
[2024-08-29] Accepted rlottie 0.1+dfsg-4.2 (source) into unstable (Matthias Klose)
[2024-08-25] Accepted rlottie 0.1+dfsg-4.1 (source) into unstable (Andrey Rakhmatullin) (signed by: Andrey Rahmatullin)
[2024-08-25] rlottie REMOVED from testing (Debian testing watch)
[2022-09-18] rlottie 0.1+dfsg-4 MIGRATED to testing (Debian testing watch)
[2022-09-12] Accepted rlottie 0.1+dfsg-4 (source) into unstable (Nicholas Guriev)
[2022-08-13] rlottie 0.1+dfsg-3 MIGRATED to testing (Debian testing watch)
[2022-08-08] Accepted rlottie 0.1+dfsg-3 (source) into unstable (Nicholas Guriev)
[2021-06-07] rlottie 0.1+dfsg-2 MIGRATED to testing (Debian testing watch)
[2021-06-02] Accepted rlottie 0.1+dfsg-2 (source) into unstable (Nicholas Guriev)
[2020-07-27] rlottie 0.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2020-07-21] Accepted rlottie 0.1+dfsg-1 (source) into unstable (Nicholas Guriev) (signed by: Mattia Rizzolo)
[2020-03-17] rlottie 0~git20200305.a717479+dfsg-1 MIGRATED to testing (Debian testing watch)
[2020-03-11] Accepted rlottie 0~git20200305.a717479+dfsg-1 (source) into unstable (Nicholas Guriev) (signed by: Mattia Rizzolo)
[2019-11-28] Accepted rlottie 0~git20190721.24346d0+dfsg-2~bpo10+2 (source amd64) into buster-backports (Andreas Tille)
[2019-10-14] Accepted rlottie 0~git20190721.24346d0+dfsg-2~bpo10+1 (source amd64) into buster-backports, buster-backports (Andreas Tille)
[2019-08-30] rlottie 0~git20190721.24346d0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2019-08-23] Accepted rlottie 0~git20190721.24346d0+dfsg-2 (source amd64) into unstable, unstable (Nicholas Guriev) (signed by: Mattia Rizzolo)

bugs [bug history graph]

all: 5
RC: 0
I&N: 3
M&W: 0
F&P: 2
patch: 0

links

homepage
lintian (0, 3)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.1+dfsg-5