There now has been an official KDE advisory for this as well. Please refer to CAN-2005-1046 when fixing this. Cheers, Moritz