A memory leak, leading to denial of service flaw was found in the way Plasma desktop of the KDE workspace, the desktop of the KDE desktop environment, used to handle situations when certain system tray icons have been blinking (due to a memory leak the blinking icon previously caused raising consumption of memory). A remote attacker could use this flaw to cause Plasma desktop (X session) to be slow, possibly leading to Plasma desktop crashes via issuing notifications to the desktop of the victim user causing some certain system tray icon to start blinking (via IRC client for example). Upstream bug report: [1] https://bugs.kde.org/show_bug.cgi?id=314919 Relevant upstream patch: [2] https://projects.kde.org/projects/kde/kde-workspace/repository/revisions/2c810db3e41d56ad7dd8ec3436f3cf3abcc31983
This issue previously affected the versions of the kde-workspace package, as shipped with Fedora release of 17, 18, and 19. But updates have been already scheduled (in -candidate repository currently), to correct this issue.
This issue did NOT affect the version of the kdebase-workspace package, as shipped with Red Hat Enterprise Linux 6.
Statement: Not Vulnerable. This issue does not affect the version of kdebase package as shipped with Red Hat Enterprise Linux 5. This issue does not affect the version of kdebase-workspace package as shipped with Red Hat Enterprise Linux 6.