UbuntuUpdates.org

Package "kdenlive"

Name: kdenlive

Description:

non-linear video editor
Latest version: 4:25.12.3-0ubuntu1.1
Release: resolute (26.04)
Level: security
Repository: universe
Homepage: https://kdenlive.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "kdenlive"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "kdenlive" in Resolute

Repository Area Version
base universe 4:25.12.3-0ubuntu1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 4:25.12.3-0ubuntu1.1 2026-09-30 17:07:24 UTC

kdenlive (4:25.12.3-0ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via malicious project file.
    (LP: #2168441)
     - debian/patches/CVE-2026-45184-1.patch: Warn user on invalid
       preset on document open
     - debian/patches/CVE-2026-45184-2.patch: Ensure we don't execute
       unwanted commands on MLT < 7.40
     - debian/patches/CVE-2026-45184-3.patch: Cleanup proxy parameters
     - CVE-2026-45184

 -- Rik Mills Thu, 24 Sep 2026 14:46:34 +0100
2168441 Kdenlive: Remote code execution via malicious project file
CVE-2026-45184 Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.


About   -   Send Feedback to @ubuntu_updates