News for hackers. Stuff that matters.

A comment on Security Update 2014-002. Parent comment

Re:Security Update 2014-002 by 0x0 on Tuesday April 22, 2014 @06:47PM (#7630984)
The 7.0.2 update came at the same time as OSX 10.9.2 which had the fix for the "gotofail" bug (CVE-2014-1266). So that's a bit weird. Could it be a typo and they meant 7.0.3? But 7.0.3 was released on april 2nd, while today's update "Security Update 2014-002" claims to fix CVE-2014-1295 ("triple handshake attack"). So maybe nothing was fixed in safari until today?
[ Parent | on HN ]

There are no comments on this comment yet.