Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data and steal passwords). This affects OpenSSL versions including 1.0.1f which is the version on my
up-to-date Mavericks computer Mac (because I used port/brew to install other software which updated my openssl without me realizing it):
$ openssl version OpenSSL 1.0.1f 6 Jan 2014
This demonstrates I am not using the Mavericks version of OpenSSL:
$ which openssl /opt/local/bin/openssl
OpenSSL released a fix today in 1.0.1g and I wonder how I can get this fixed version installed over my current version?