MarsEdit 3.7.5: Secure Sparkle Updates
February 25th, 2016MarsEdit 3.7.5 is now available from the MarsEdit home page, and will be available soon for update on the Mac App Store.
The main purpose for this update is to respond to security concerns with the Sparkle software update mechanism that MarsEdit uses. Although Red Sweater uses a custom version of Sparkle, it was vulnerable to the same issues affecting the main distribution of Sparkle.
MarsEdit now uses HTTPS exclusively to communicate with Red Sweater not only for the purpose of downloading updates, but for other functions such as checking for news announcements, or submitting crash reports.
This release of MarsEdit 3.7.5 caps off a recent spate of updates I’ve made to Red Sweater’s apps, bringing them all up to date with the same use of HTTPS exclusively for communication with Red Sweater’s servers.
In addition to the HTTPS updates, this update fixes a rare crashing bug.
- Fix a crash that could occur when subtle image upload failures occur on WordPress
- Switch to HTTPS URLs for increased security loading resources from Red Sweater
Enjoy!