-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 21 May 2026 16:42:50 +0200
Source: kdenlive
Binary: kdenlive kdenlive-dbgsym
Architecture: i386
Version: 22.12.3-2+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Patrick Matthäi <pmatthaei@debian.org>
Description:
 kdenlive   - non-linear video editor
Closes: 1136172
Changes:
 kdenlive (22.12.3-2+deb12u2) bookworm-security; urgency=high
 .
   * Add patch 02-CVE-2026-45184: Dangerous proxy parameters, when an
     attacker-controlled project file is used.
     Closes: #1136172
Checksums-Sha1:
 82cbee80ed12de1ed3d144ba12dd8f7de7e42aa0 57724256 kdenlive-dbgsym_22.12.3-2+deb12u2_i386.deb
 8482f2dee40cceb794cc396360b70d08dbe0d582 27852 kdenlive_22.12.3-2+deb12u2_i386-buildd.buildinfo
 9549cdf548d75f4d361ff9f3fd88f620cb2367ed 3302592 kdenlive_22.12.3-2+deb12u2_i386.deb
Checksums-Sha256:
 bdbac3dd7247387a8b74518ebd2cde6688b5da7dd1580116cae7697008ceff4a 57724256 kdenlive-dbgsym_22.12.3-2+deb12u2_i386.deb
 a6beb0c9fac1f26495febe5d3324bde10886c3e15f987cdf324fdaf7cddccdaf 27852 kdenlive_22.12.3-2+deb12u2_i386-buildd.buildinfo
 8f8c654c48083176858adc2550bd7391906812fb3bd9dcc95fe3190d3bbbb75a 3302592 kdenlive_22.12.3-2+deb12u2_i386.deb
Files:
 7b566aacd12be6514a5d8c5111f173d8 57724256 debug optional kdenlive-dbgsym_22.12.3-2+deb12u2_i386.deb
 f07947ce390a03ba8e6990a74536ce42 27852 video optional kdenlive_22.12.3-2+deb12u2_i386-buildd.buildinfo
 f906e72cbc845b75249aeb851a9058d8 3302592 video optional kdenlive_22.12.3-2+deb12u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=FsZr
-----END PGP SIGNATURE-----