A bug in our Launchpad [1] refers to KDE Bug 319428 [2] as fixing a
security issue: displaying raw URLs, including passwords, in a handful
of error messages. A patch is in git [3] to sanitize URLs before
displaying them in the affected error messages.

1: https://bugs.launchpad.net/ubuntu/+source/kde4libs/+bug/1178286
2: https://bugs.kde.org/show_bug.cgi?id=319428
3: http://commits.kde.org/kdelibs/65d736dab592bced4410ccfa4699de89f78c96ca