New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Sparkle framework #9255

Closed

cyberduck opened this issue Feb 10, 2016 · 1 comment

Labels

Milestone

Collaborator

cyberduck commented Feb 10, 2016

dea09d4 created the issue

Current version in use is v1.11.0
This is a problem, because a vulnerability has been found in all versions lower than v1.13.1

http://arstechnica.com/security/2016/02/huge-number-of-mac-apps-vulnerable-to-hijacking-and-a-fix-is-elusive/

Collaborator Author

cyberduck commented Feb 10, 2016

@dkocher commented

We updated the dependency in 2dbbae5. Actually this is a non-issue here because we have always served the update feed and updates through HTTPS.

cyberduck closed this as completed

iterate-ch locked as resolved and limited conversation to collaborators

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.