Fix for bugtraq hole.

This commit is contained in:
espie 1999-06-24 21:19:38 +00:00
parent a9755d3ecd
commit b4c14483ec
2 changed files with 13 additions and 3 deletions

View File

@ -0,0 +1,10 @@
--- kscreensaver/saver.cpp.orig Thu Jun 24 23:15:34 1999
+++ kscreensaver/saver.cpp Thu Jun 24 23:16:30 1999
@@ -119,6 +119,7 @@
break;
case Key_Return:
+ time.stop();
waitForAuthentication = true;
if ( tryPassword() )
emit passOk();

View File

@ -1,3 +1,3 @@
There's a report of a hole in klock in bugtraq, not yet investigated.
It's *strongly advised* not to use klock until the hole is
confirmed/disproved.
kscreensaver is not really secure until someone conducts a thorough audit.
It does not support KerberosIV for the time being anyway.