[Crypto-chi] If you use Thunderbird or Firefox with OSX Yosemite, upgrade now.

[Mason Donahue]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

https://www.mozilla.org/en-US/security/advisories/mfsa2014-90/

TL;DR: "log files are created by the CoreGraphics framework of OS X in
the /tmp local directory. These log files contain a record of all
inputs into Mozilla programs during their operation."

"This issue does not affect OS X users prior to 10.10. Users on OS X
10.10 should go to their /tmp folder and delete any files with names
beginning with "CGLog_" followed by the name of a Mozilla product,
such as "CGLog_firefox"."

Defeats the purpose of using Enigmail when your passphrase is written
out to the disk.

- --Mason
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUgUlmAAoJEFCCEeW7GLh+zUUIAIeXEbtKmhjLpIBZJaV4hx7z
n0OLCz1bvam0LlStIx538Q3xggb1kDWDryLDYeihkZ5hotbxpF9l7PCd2M8kbJJP
nntyJz4ZgeNaJX3er4HL0hNP8vVnYwsYWknNNvolPnrYJla/X268LSr1MRgnOnzi
DD0GCWcIPA1ptdngSptsotxHIaVzXTs1fugCm1/qdUF1ticU4Y/Xpt0oerMGNFdi
r4/vXg03M0UQmKt+56qVA94br+IL2PuuSoDEZLcJ20k3EzufC1N7wyWhDLa8rRGk
L5DL3HR46rYCJjYPwpmf14OE1YINT14aSmRXJdqQjt0txxkZIqyzr42BAG7lOzE=
=NeUy
-----END PGP SIGNATURE-----