A kdeconnect security update has been released for Arch Linux.

ASA-202010-7: kdeconnect: arbitrary code execution

Arch Linux Security Advisory ASA-202010-7
========================================
Severity: High
Date : 2020-10-18
CVE-ID : CVE-2020-26164
Package : kdeconnect
Type : arbitrary code execution
Remote : Yes
Link :   https://security.archlinux.org/AVG-1241

Summary
======
The package kdeconnect before version 20.08.2-1 is vulnerable to
arbitrary code execution.

Resolution
=========
Upgrade to 20.08.2-1.

# pacman -Syu "kdeconnect> .08.2-1"

The problem has been fixed upstream in version 20.08.2.

Workaround
=========
None.

Description
==========
Several issues have been found in kdeconnect