Fixed in January: https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2...

edit: the updated, point release ISOs will have the fix