PutIOSync-OSX icon indicating copy to clipboard operation
PutIOSync-OSX copied to clipboard

Sparkle Framework Outdated (Flawed)

Open Gex2501 opened this issue 8 years ago • 0 comments

Can the sparkle framework be updated? There was a major security flaw found it not too long ago. Here is a link to a macrumors article about it on Feb 09, 2016.

http://www.macrumors.com/2016/02/09/sparkle-hijacking-vulnerability/

Until this can be updated I think it best that users disable the auto-update feature. Seeing as this app doesn't get many updates that shouldn't be too much of an issue.

PS - Don't get me wrong, I LOVE this app, I use it daily. Still the best I've ever found.

Gex2501 avatar May 23 '16 08:05 Gex2501