Apple has been alerted about this but decided to release it anyway!
Apparently "someone" requires the ability to gather those passwords and those algorithms do not work entirely as intended.
It is easy to hack Mac OS:
I merely wanted to show how low the bar was/is set. Meaning; essentially any malicious code can perform this attack. Yes, this includes signed apps as well!
So while Apple is working on a patch...anyone can steal your data.
...Well if you act stupid and open e-mail attachments or something...
More here