diff -ur kdelibs-3.5.10/kdecore/kconfigbase.cpp kdelibs-3.5.10-CVE-2019-14744/kdecore/kconfigbase.cpp

--- kdelibs-3.5.10/kdecore/kconfigbase.cpp	2008-02-13 10:41:09.000000000 +0100

+++ kdelibs-3.5.10-CVE-2019-14744/kdecore/kconfigbase.cpp	2019-08-09 00:08:17.933610551 +0200

@@ -258,26 +258,7 @@

       while( nDollarPos != -1 && nDollarPos+1 < static_cast<int>(aValue.length())) {

         // there is at least one $

-        if( (aValue)[nDollarPos+1] == '(' ) {

-          uint nEndPos = nDollarPos+1;

-          // the next character is no $

-          while ( (nEndPos <= aValue.length()) && (aValue[nEndPos]!=')') )

-              nEndPos++;

-          nEndPos++;

-          QString cmd = aValue.mid( nDollarPos+2, nEndPos-nDollarPos-3 );

-

-          QString result;

-          FILE *fs = popen(QFile::encodeName(cmd).data(), "r");

-          if (fs)

-          {

-             {

-             QTextStream ts(fs, IO_ReadOnly);

-             result = ts.read().stripWhiteSpace();

-             }

-             pclose(fs);

-          }

-          aValue.replace( nDollarPos, nEndPos-nDollarPos, result );

-        } else if( (aValue)[nDollarPos+1] != '$' ) {

+        if( (aValue)[nDollarPos+1] != '$' ) {

           uint nEndPos = nDollarPos+1;

           // the next character is no $

           QString aVarName;

diff -ur kdelibs-3.5.10/kdecore/README.kiosk kdelibs-3.5.10-CVE-2019-14744/kdecore/README.kiosk

--- kdelibs-3.5.10/kdecore/README.kiosk	2005-09-10 10:27:12.000000000 +0200

+++ kdelibs-3.5.10-CVE-2019-14744/kdecore/README.kiosk	2019-08-09 00:09:28.552462522 +0200

@@ -642,18 +642,6 @@

 Name[$ei]=${USER}

-Shell Commands in KDE config files.

-===================================

-

-In KDE3.1 arbitrary entries in configuration files can contain shell 

-commands. This way the value of a configuration entry can be determined

-dynamically at runtime. In order to use this the entry must be marked 

-with [$e]. 

-

-Example:

-Host[$e]=$(hostname)

-

-

 KDE3 Kiosk Application API

 ==========================