The Sparkle software update framework for macOS, up to and including version 2.9.1, has a vulnerability in the `shouldAcceptNewConnection:` method of `Autoupdate/AppInstaller.m`. This method fails to enforce `SUCodeSigningVerifier validateConnection:` checks for new connections after the initial stage 1 installation. Consequently, any local process can connect to the registered Mach service `<bundleId>-sp [truncated]
The Sparkle software update framework for macOS, prior to version 2.9.2, is vulnerable to an arbitrary file write issue. This defense-in-depth vulnerability allows an attacker with a compromised EdDSA private key to write files at the root level via the delta-apply path. The vulnerability exists in `Autoupdate/SUBinaryDeltaApply.m` and `Autoupdate/SPUSparkleDeltaArchive.m`. The `relativePath.pathComponent [truncated]
