Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
172
security advisorydenial of servicecriticalUbuntu 26.04 LTS rlottie Critical Denial of Service USN-8559-1
rlottie could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8559-1 July 20, 2026 rlottie vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: rlottie could be made to crash if it received specially crafted input. Software Description: - rlottie: library for rendering vector based animations and art Details: It was discovered that rlottie incorrectly handled certain shift operations. An attacker could possibly use this issue to cause rlottie to read out of bounds, resulting in a denial of service or exposing sensitive information. (CVE-2026-10305) It was discovered that rlottie did not properly limit recursion when processing certain Lottie animations. An attacker could possibly use this issue to cause rlottie to crash, resulting in a denial of service. (CVE-2026-47306) It was discovered that rlottie incorrectly handled certain span coordinates. An attacker could possibly use this issue to cause a stack-based buffer overflow, resulting in a denial of service or possibly the execution of arbitrary code. (CVE-2026-47318) It was discovered that rlottie incorrectly handled certain path data. An attacker could possibly use this issue to cause rlottie to allocate an excessive amount of memory, resulting in a denial of service. (CVE-2026-47319) It was discovered that rlottie did not properly limit recursion and could access an uninitialized pointer when processing certain Lottie animations. An attacker could possibly use this issue to cause rlottie to crash, resulting in a denial of service. (CVE-2026-47320) It was discovered that rlottie incorrectly handled certain array lengths in the bundled FreeType raster code. An attacker could possibly use this issue to cause an out-of-bounds write, resulting ina denial of service or possibly the execution of arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-8916) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS librlottie0-1 0.1+dfsg-4.3ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS librlottie0-1 0.1+dfsg-4ubuntu1.1+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS librlottie0-1 0.1+dfsg-2ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS librlottie0-1 0~git20200305.a717479+dfsg-1ubuntu0.1~esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8559-1 CVE-2026-10305, CVE-2026-47306, CVE-2026-47318, CVE-2026-47319, CVE-2026-47320, CVE-2026-8916 . Multiple issues in rlottie affect different Ubuntu versions, leading to denial of service and potential code execution risks. Update required.. rlottie security issues, Ubuntu update instructions, denial of service vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
Jul 20, 2026
•Critical
Ubuntu
172
security advisorydenial of servicecriticalUbuntu 22.04 LTS rlottie Serious DoS Vulnerabilities USN-8058-1 Advisory
Several security issues were fixed in rlottie.. ========================================================================== Ubuntu Security Notice USN-8058-1 February 24, 2026 rlottie vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in rlottie. Software Description: - rlottie: library for rendering vector based animations and art Details: It was discovered that rlottie did not properly handle certain inputs. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 librlottie0-1 0.1+dfsg-4.2ubuntu0.1 Ubuntu 24.04 LTS librlottie0-1 0.1+dfsg-4ubuntu1.1 Ubuntu 22.04 LTS librlottie0-1 0.1+dfsg-2ubuntu0.2 Ubuntu 20.04 LTS librlottie0-1 0~git20200305.a717479+dfsg-1ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8058-1 CVE-2025-0634, CVE-2025-53074, CVE-2025-53075 Package Information: https://launchpad.net/ubuntu/+source/rlottie/0.1+dfsg-4.2ubuntu0.1 https://launchpad.net/ubuntu/+source/rlottie/0.1+dfsg-4ubuntu1.1 https://launchpad.net/ubuntu/+source/rlottie/0.1+dfsg-2ubuntu0.2 . Update Ubuntu systems to fix critical rlottie security flaws, preventing DoS attacks and ensuring system integrity.. security advisory, rlottie, ubuntu updates. . Severity: Critical. LinuxSecurity.com Team
Feb 26, 2026
•Critical
Ubuntu
197
security advisorycriticaldebianDebian 11 rlottie Critical Boundary Check Issue DLA-4474-1 CVE-2025-0634
Several issues have been found in rlottie, a library for rendering vector based animations and art. Most of these CVEs have been already fixed by Fix-crash-on-invalid-data.patch in a previous upload. The remaining boundary check has now been fixed as well. For Debian 11 bullseye, these problems have been fixed in version. Debian LTS Advisory DLA-4474-1
Feb 09, 2026
•Critical
Debian LTS
172
security advisoryinformation leakUbuntuUbuntu 22.04 LTS & 20.04 LTS: USN-7198-1 critical: rlottie security risks
Several security issues were fixed in rlottie.. ========================================================================== Ubuntu Security Notice USN-7198-1 January 10, 2025 rlottie vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in rlottie. Software Description: - rlottie: library for rendering vector based animations and art Details: Paolo Giai discovered a series of stack-based overflow vulnerabilities in the blit and gray_render_cubic functions of a custom fork of the rlottie library. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2021-31315, CVE-2021-31321) Paolo Giai discovered a series of type confusion vulnerabilities in the VDasher constructor and the LOTCompLayerItem::LOTCompLayerItem function of a custom fork of the rlottie library. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-31317, CVE-2021-31318) Paolo Giai discovered an integer overflow vulnerability in the LOTGradient::populate function of a custom fork of the rlottie library. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-31319) Paolo Giai discovered a series of heap buffer overflow vulnerabilities in the VGradientCache::generateGradientColorTable and LOTGradient::populate functions of a custom fork of the rlottie library. . Ubuntu Security Notice USN-7198-1 addresses critical vulnerabilities in rlottie, enhancing security on Ubuntu. Users should update quickly to protect against new threats. Ubuntu Updates, Rlottie Security, Stack Overflow Issues, Heap Overflow Risks. . Severity: Critical. LinuxSecurity.com Team
Jan 10, 2025
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!