[ubuntu/resolute-updates] kdenlive 4:25.12.3-0ubuntu1.1 (Accepted)

[Ubuntu Archive Robot]

kdenlive (4:25.12.3-0ubuntu1.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via malicious project file.
    (LP: #2168441)
     - debian/patches/CVE-2026-45184-1.patch: Warn user on invalid
       preset on document open
     - debian/patches/CVE-2026-45184-2.patch: Ensure we don't execute
       unwanted commands on MLT < 7.40
     - debian/patches/CVE-2026-45184-3.patch: Cleanup proxy parameters
     - CVE-2026-45184

Date: 2026-09-29 16:02:40.879571+00:00
Changed-By: Rik Mills <rik.mills88 at gmail.com>
Maintainer: Kubuntu Members <kubuntu-devel at lists.ubuntu.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/kdenlive/4:25.12.3-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.