The remote host is missing updates announced in advisory GLSA 200412-16.

All kdelibs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=kde-base/kdelibs-3.2.3-r4' All kdebase users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=kde-base/kdebase-3.2.3-r3' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200412-16 http://bugs.gentoo.org/show_bug.cgi?id=72804 http://bugs.gentoo.org/show_bug.cgi?id=73869 http://www.kde.org/info/security/advisory-20041209-1.txt http://www.kde.org/info/security/advisory-20041213-1.txt

kdelibs and kdebase contain a flaw allowing password disclosure when creating a link to a remote file. Furthermore Konqueror is vulnerable to window injection.