-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Thanks for the reply! Curious they've issued the fix for Yosemite but
still left Mavericks potentially vulnerable to the issues disclosed
early last month.

Sent from Thunderbird for OS X. My PGP public key is automatically
attached to this email.

On 24/07/2014 17:15, Jason Beck wrote:
> I'm running the latest updates on 10.9 and I get 0.9.8y.
> 
> On 7/24/2014 11:09 AM, Dominyk Tiller wrote:
>> Hey all,
>> 
>> I noticed something in the latest Yosemite developer preview -
>> Apple has finally updated the OpenSSL that ships with OS X.
>> 
>> We remain on the 0.9.8 branch, but 'Openssl version' now gets
>> the response 'OpenSSL 0.9.8za 5 Jun 2014'. I guess this confirms
>> that OS X was vulnerable to the security issues OpenSSL patched
>> and announced in early June, given Apple's extreme reluctance to
>> update OpenSSL at any point other than when absolutely
>> necessary.
>> 
>> I don't know however if Mavericks has been patched in the same
>> way. Can anyone on OS X 10.9-10.9.3/10.9.4 run the 'openssl
>> version' command and see what the response is? Curious if only
>> Yosemite has received this fix & Mavericks remains vulnerable.
>> 
>> It should seem unlikely, but given Apple's history with OpenSSL 
>> updates I'm not quite certain either way.
>> 
>> I'd still prefer to be using the 1.0.1 branch but at least this
>> seems to close the vulnerabilities exposed last month.
>> 
>> Dominyk
>> 
> 
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=0oi8
-----END PGP SIGNATURE-----

Attachment: 0x9D74326C.asc
Description: application/pgp-keys

Attachment: 0x9D74326C.asc.sig
Description: Binary data

Reply via email to