UbuntuUpdates.org

Package "kdenlive-data"

Name: kdenlive-data

Description:

non-linear video editor (data files)
Latest version: 4:25.12.3-0ubuntu1.1
Release: resolute (26.04)
Level: security
Repository: universe
Head package: kdenlive
Homepage: https://kdenlive.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "kdenlive-data"

All arch deb package
APT INSTALL

Other versions of "kdenlive-data" in Resolute

Repository Area Version
base universe 4:25.12.3-0ubuntu1
updates universe 4:25.12.3-0ubuntu1.1

Changelog

Version: 4:25.12.3-0ubuntu1.1 2026-09-30 17:07:24 UTC

kdenlive (4:25.12.3-0ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via malicious project file.
    (LP: #2168441)
     - debian/patches/CVE-2026-45184-1.patch: Warn user on invalid
       preset on document open
     - debian/patches/CVE-2026-45184-2.patch: Ensure we don't execute
       unwanted commands on MLT < 7.40
     - debian/patches/CVE-2026-45184-3.patch: Cleanup proxy parameters
     - CVE-2026-45184

 -- Rik Mills Thu, 24 Sep 2026 14:46:34 +0100
2168441 Kdenlive: Remote code execution via malicious project file
CVE-2026-45184 Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used.


About   -   Send Feedback to @ubuntu_updates