Apple patched a major SSL bug in iOS yesterday, but OS X is still at risk