RW Update vulnerability with Sparkle

[bjhemstra (Bart)]

It appears that Rapidweaver is vulnerable to a bug in the update mechanism which is provided by Sparkle. See http://arstechnica.com/security/2016/02/huge-number-of-mac-apps-vulnerable-to-hijacking-and-a-fix-is-elusive/
Is it correct that Rapidweaver uses this mechanism and is a fix in the making?

Bart

[nikf (Nik Fletcher)]

This is already addressed in the 6.3.8 betas, and will roll out with the final 6.3.8 update soon.

RapidWeaver 6.3.8 beta

Hi folks Just a quick beta update for you today, to include a couple of changes made as part of our work on RapidWeaver 7. New in RapidWeaver 6.3.8 Fixes a problem where website URLs in an XML sitemap would contain extra forward slashes. Other minor fixes and enhancements, including improved security when checking for updates. If you’re happy with the risks associated with pre-release software, you can download the beta here Cheers! —Nik

Cheers,

—Nik

[bjhemstra (Bart)]

Thanks Nik for the quick answer and the quick reaction!

Cheers, Bart