This bug was fixed in the package kde4libs - 4:4.14.38-0ubuntu3.1
--------------- kde4libs (4:4.14.38-0ubuntu3.1) bionic-security; urgency=medium
* SECURITY UPDATE: malicious .desktop files (and others) would execute code (LP: #1839432). - debian/patches/CVE-2019-14744.patch: remove support for $(...) in config keys with [$e] marker. - CVE-2019-14744
-- Paulo Flabiano Smorigo <email address hidden> Mon, 12 Aug 2019 12:04:10 -0300
This bug was fixed in the package kde4libs - 4:4.14. 38-0ubuntu3. 1
--------------- 38-0ubuntu3. 1) bionic-security; urgency=medium
kde4libs (4:4.14.
* SECURITY UPDATE: malicious .desktop files (and others) would execute patches/ CVE-2019- 14744.patch: remove support for $(...) in
code (LP: #1839432).
- debian/
config keys with [$e] marker.
- CVE-2019-14744
-- Paulo Flabiano Smorigo <email address hidden> Mon, 12 Aug 2019 12:04:10 -0300