search

HermesApp / Hermes

Compact macOS Pandora client that doesn’t use Flash
http://hermesapp.org/
MIT License
381 stars 99 forks source link

Update Sparkle to v1.13.1 and change SUFeedURL to use https:// #255

Closed reedloden closed 8 years ago

reedloden commented 8 years ago

Update the in-tree copy of Sparkle to v1.13.1 for the security vulnerabilities mentioned in https://vulnsec.com/2016/osx-apps-vulnerabilities/ (fixes #254).

Change SUFeedURL to use https:// to protect against MITM of AppCast feed.