# RW Update vulnerability with Sparkle

**URL:** <https://forums.realmacsoftware.com/t/rw-update-vulnerability-with-sparkle/5352>\
**Category:** RapidWeaver Classic\
**Created:** [February 10, 2016, 12:35pm UTC](https://forums.realmacsoftware.com/t/rw-update-vulnerability-with-sparkle/5352 "2016-02-10T12:35:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bjhemstra](https://avatars.discourse-cdn.com/v4/letter/b/5fc32e/32.png) [@bjhemstra](https://forums.realmacsoftware.com/u/bjhemstra)\
**Post date:** [February 10, 2016, 12:35pm UTC](https://forums.realmacsoftware.com/t/rw-update-vulnerability-with-sparkle/5352/1 "2016-02-10T12:35:56Z")

</div>

It appears that Rapidweaver is vulnerable to a bug in the update mechanism which is provided by Sparkle. See [http://arstechnica.com/security/2016/02/huge-number-of-mac-apps-vulnerable-to-hijacking-and-a-fix-is-elusive/](http://arstechnica.com/security/2016/02/huge-number-of-mac-apps-vulnerable-to-hijacking-and-a-fix-is-elusive/)  
Is it correct that Rapidweaver uses this mechanism and is a fix in the making?

Bart

---

<div class="post-metadata">

**Author:** ![nikf](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/nikf/32/10_2.png) [@nikf](https://forums.realmacsoftware.com/u/nikf)\
**Post date:** [February 10, 2016, 3:22pm UTC](https://forums.realmacsoftware.com/t/rw-update-vulnerability-with-sparkle/5352/2 "2016-02-10T15:22:25Z")

</div>

This is already addressed in the 6.3.8 betas, and will roll out with the final 6.3.8 update soon.

> [@RapidWeaver 6.3.8 beta](http://forums.realmacsoftware.com/t/rapidweaver-6-3-8-beta/5201):
>
> Hi folks Just a quick beta update for you today, to include a couple of changes made as part of our work on RapidWeaver 7. New in RapidWeaver 6.3.8 Fixes a problem where website URLs in an XML sitemap would contain extra forward slashes. Other minor fixes and enhancements, including improved security when checking for updates. If you’re happy with the risks associated with pre-release software, you can [download the beta here](https://dl.devmate.com/com.realmacsoftware.rapidweaver6/15158/1454322030/RapidWeaver6-15158.zip) Cheers! —Nik

Cheers,

—Nik

---

<div class="post-metadata">

**Author:** ![bjhemstra](https://avatars.discourse-cdn.com/v4/letter/b/5fc32e/32.png) [@bjhemstra](https://forums.realmacsoftware.com/u/bjhemstra)\
**Post date:** [February 11, 2016, 8:20am UTC](https://forums.realmacsoftware.com/t/rw-update-vulnerability-with-sparkle/5352/3 "2016-02-11T08:20:31Z")

</div>

Thanks Nik for the quick answer and the quick reaction!

Cheers, Bart