Sparkle

A pair of vulnerabilities in the framework that some Mac apps use to receive automatic updates leaves them open to man-in-the-middle attacks, according to a report from Ars Technica covering a security flaw that was first discovered by a security researcher named Radek in late January. Apps that use a vulnerable version of Sparkle and an unencrypted HTTP channel for server updates are at risk ...