-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hey all,
I noticed something in the latest Yosemite developer preview - Apple has finally updated the OpenSSL that ships with OS X. We remain on the 0.9.8 branch, but 'Openssl version' now gets the response 'OpenSSL 0.9.8za 5 Jun 2014'. I guess this confirms that OS X was vulnerable to the security issues OpenSSL patched and announced in early June, given Apple's extreme reluctance to update OpenSSL at any point other than when absolutely necessary. I don't know however if Mavericks has been patched in the same way. Can anyone on OS X 10.9-10.9.3/10.9.4 run the 'openssl version' command and see what the response is? Curious if only Yosemite has received this fix & Mavericks remains vulnerable. It should seem unlikely, but given Apple's history with OpenSSL updates I'm not quite certain either way. I'd still prefer to be using the 1.0.1 branch but at least this seems to close the vulnerabilities exposed last month. Dominyk - -- Sent from Thunderbird for OS X. My PGP public key is automatically attached to this email. -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCgAGBQJT0S+7AAoJEIclJNuddDJsQnoQAI3HmPWOALd+qRu/QApXPeJ5 NdQvEWVYk7eAN/B0dzSL4tj3+C8+2pz7ArA1J9LVEzPbtCVGpo7n+xp+zBDjS3K4 7yjQU8pPdIbbPp0s4oFuCVAL8XqJvH/5/RRZ4yoe3N13Roq64nvfGwvhykKuyGgi uPNE8OgM4xOE5GB8qBUTgyJV7INZ9EfHpJ+xN99OoPM8bgu8QL0rlFUlXCxbfR9a b95SELDQyIVbYsu1vJej4YF/YTOYe0+6kyqRQ2LUVG7XfsMNJEcCCVNXNLbIw1D3 mNNb8NzvW2JKb3kLF22DRTvHvb1bWWPJ9B1+UtPsFlm5AyQx5w0KQ6ozrshIiL8t Nz3cw31H+/VtdqZuZoHO4Ql0glEtPDcA5qFZkv70L7IbVQfpBRCBsx4yBOSy7gCR yX4sB2kcdGaJZXOwCjyM8/Xs2hkCD+aUiMP3SYTDTIzkoC5D1l6PqFv/JocPbZyB otqQ7RJcrinNNKNQk0/U4JllETJG1tt9TyzYW+sPIsbDSUSVN6R7zRopX6FTaiOG l7I03LZcyPNeLm/8ygq0HwArS2jyBYDLqXQ4VsCCFPuuqunV7d5uo/g2RwGkRBSi azL3MPBUW8J3Ljq+jzpkWtF86GHtFomdDHweTFIs/1Py9Dpb5fv7Wou1quIK1I82 SCueTxjlk0sxZxntAUAT =qxWP -----END PGP SIGNATURE-----
0x9D74326C.asc
Description: application/pgp-keys
0x9D74326C.asc.sig
Description: Binary data
