d/cmake-3.15.2-x86_64-1.txz

x/mesa-19.1.4-x86_64-1.txz

kde/kdelibs-4.14.38-x86_64-4.txz
kconfig: malicious .desktop files (and others) would execute code.
For more information, see:
https://mail.kde.org/pipermail/kde-announce/2019-August/000047.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14744
(* Security fix *)