USN-4100-1: KConfig and KDE libraries vulnerabilities

It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. CVE-2019-14744 It was discovered that KConfig allows remote attackers to write to arbitrary files via a ../ in a filename in an archive file...