Arch patched the vulnerability, yes. Dotfiles don't change that.