• Registered: 2012-02-06
  • Posts: 8

Topic: Sparkle Update

Hi, do you have plan to update sparkle framework inside dropzone ?

As i see dropzone use HTTP not HTTPS for sparkle update, and sparkle version 1.6 > https://github.com/sparkle-project/Sparkle/issues/720

Maybe i misunderstood something ?

thx in advance

  • John
  • John
  • Dropzone Support
  • Offline
  • Registered: 2010-03-24
  • Posts: 436

Re: Sparkle Update

Hi - yep, I've looked into this and as you point out there is a security issue here. I'm planning to release a new version with a fully upgraded version of Sparkle with the next update. Thanks for bringing this my attention smile

  • John
  • John
  • Dropzone Support
  • Offline
  • Registered: 2010-03-24
  • Posts: 436

Re: Sparkle Update

Just to update you on this, Dropzone 3.5.5 is now out and includes the latest version of Sparkle.

HTTPS is now used to deliver all Dropzone updates. You can update from the Updates tab in Dropzone or download this update from https://aptonic.com/dropzone3/latest

  • Registered: 2012-02-06
  • Posts: 8

Re: Sparkle Update

Thanks a lot John, i had deactivated my autoupdate so i just see this post now, shame on me ... Thx again for this great app