When will Kubuntu patch the KDE vulnerability?

[SuperSapien64]

I see that there was a vulnerability in KDE that was patched: https://www.bleepingcomputer.com/new...mmand-support/
But I'm wondering when Kubuntu will patch this?

[claydoh]

https://kubuntu.org/news/

[SuperSapien64]

So I'm a little confused. Do I have to manually apply this update? Because I'm running Kubuntu 18.04.3.

[claydoh]

The fixes are in the PPAs at the moment, and will make it to the normal repos once they have some testing.

if you use the Kubuntu Backports PPA, you already have it.

If not, they say to add the Updates PPA
https://launchpad.net/~kubuntu-ppa/+archive/ubuntu/ppa

It does not matter what release you have, the patched kconfig package in found here. You add the PPA, and then update your system. Instructions on adding the repo are in the PPA page. You will have the added benefit of getting normal Plasma updates a bit earlier. The PPAs are run by Kubuntu themselves.

You can also just wait for them to arrive in the normal repos (no ETA, but probably not long as there are more eyeballs on it as a security issue) as despite the press, it is not a completely serious issue for most, especially those who pay attention to what Linux software they are downloading and opening,m especially if from unknown sources.

[SuperSapien64]

OK thanks I'll keep an eye out for those updates.

[acheron]

kconfig with the fix should be arriving as security update soon