here is a diff between the current 0.6.5 config.plist from CDF (before applying additional changes like GPU acceleration, etc), compared to what I am using with OC 0.6.3. Unless there is something special added to OC 0.6.5 to support this security update...then I'm not seeing a problem that would be solved by updating OC.
Code:
31,32d30
< <key>Patch</key>
< <array/>
35,36d32
< <key>AllowRelocationBlock</key>
< <false/>
76c72,88
< <dict/>
---
> <dict>
> <key>PciRoot(0x0)/Pci(0x3,0x0)/Pci(0x0,0x0)</key>
> <dict>
> <key>agdpmod</key>
> <data>
> cGlrZXJhAA==
> </data>
> <key>rebuild-device-tree</key>
> <data>
> AA==
> </data>
> <key>shikigva</key>
> <data>
> UA==
> </data>
> </dict>
> </dict>
83c95,168
< <array/>
---
> <array>
> <dict>
> <key>Arch</key>
> <string>x86_64</string>
> <key>BundlePath</key>
> <string>Lilu.kext</string>
> <key>Comment</key>
> <string>Patch engine</string>
> <key>Enabled</key>
> <true/>
> <key>ExecutablePath</key>
> <string>Contents/MacOS/Lilu</string>
> <key>MaxKernel</key>
> <string></string>
> <key>MinKernel</key>
> <string></string>
> <key>PlistPath</key>
> <string>Contents/Info.plist</string>
> </dict>
> <dict>
> <key>Arch</key>
> <string>x86_64</string>
> <key>BundlePath</key>
> <string>WhateverGreen.kext</string>
> <key>Comment</key>
> <string>Video patches</string>
> <key>Enabled</key>
> <true/>
> <key>ExecutablePath</key>
> <string>Contents/MacOS/WhateverGreen</string>
> <key>MaxKernel</key>
> <string></string>
> <key>MinKernel</key>
> <string></string>
> <key>PlistPath</key>
> <string>Contents/Info.plist</string>
> </dict>
> <dict>
> <key>Arch</key>
> <string>x86_64</string>
> <key>BundlePath</key>
> <string>AppleMCEReporterDisabler.kext</string>
> <key>Comment</key>
> <string>Disable AppleMCEReporter</string>
> <key>Enabled</key>
> <true/>
> <key>ExecutablePath</key>
> <string></string>
> <key>MaxKernel</key>
> <string></string>
> <key>MinKernel</key>
> <string>19.0.0</string>
> <key>PlistPath</key>
> <string>Contents/Info.plist</string>
> </dict>
> <dict>
> <key>Arch</key>
> <string>x86_64</string>
> <key>BundlePath</key>
> <string>NightShiftEnabler.kext</string>
> <key>Comment</key>
> <string>Enable Night Shift</string>
> <key>Enabled</key>
> <true/>
> <key>ExecutablePath</key>
> <string>Contents/MacOS/NightShiftEnabler</string>
> <key>MaxKernel</key>
> <string></string>
> <key>MinKernel</key>
> <string></string>
> <key>PlistPath</key>
> <string>Contents/Info.plist</string>
> </dict>
> </array>
89c174,176
< <data>AAAAAAAAAAAAAACAAAAAAA==</data>
---
> <data>
> AAAAAAAAAAAAAACAAAAAAA==
> </data>
91c178,180
< <data>AAAAAAAAAAAAAACAAAAAAA==</data>
---
> <data>
> AAAAAAAAAAAAAACAAAAAAA==
> </data>
118c207
< <true/>
---
> <false/>
153a243,244
> <key>BlessOverride</key>
> <array/>
165a257,258
> <key>PickerMode</key>
> <string>External</string>
174,177d266
< <key>PickerMode</key>
< <string>Builtin</string>
< <key>PickerVariant</key>
< <string>Auto</string>
179,180d267
< <key>BlessOverride</key>
< <array/>
212,213d298
< <key>BlacklistAppleUpdate</key>
< <true/>
225c310,311
< <data></data>
---
> <data>
> </data>
227c313,316
< <data></data>
---
> <data>
> </data>
> <key>ScanPolicy</key>
> <integer>0</integer>
232,233d320
< <key>ScanPolicy</key>
< <integer>0</integer>
244,245d330
< <key>UIScale</key>
< <data>AQ==</data>
247c332,338
< <data>v7+/AA==</data>
---
> <data>
> v7+/AA==
> </data>
> <key>UIScale</key>
> <data>
> Ag==
> </data>
251,252d341
< <key>boot-args</key>
< <string>-no_compat_check</string>
266d354
< <string>boot-args</string>
285,293c373
< <key>UpdateDataHub</key>
< <false/>
< <key>UpdateNVRAM</key>
< <false/>
< <key>UpdateSMBIOS</key>
< <false/>
< <key>UpdateSMBIOSMode</key>
< <string>Create</string>
< <key>Memory</key>
---
> <key>DataHub</key>
297c377
< <key>DataHub</key>
---
> <key>Memory</key>
302a383,390
> <key>UpdateDataHub</key>
> <false/>
> <key>UpdateNVRAM</key>
> <false/>
> <key>UpdateSMBIOS</key>
> <true/>
> <key>UpdateSMBIOSMode</key>
> <string>Create</string>
308,309d395
< <key>GlobalConnect</key>
< <false/>
311a398,399
> <key>GlobalConnect</key>
> <false/>
334,336c422
< <string>Disabled</string>
< <key>SetupDelay</key>
< <integer>0</integer>
---
> <false/>
344a431
> <string>OpenCanopy.efi</string>
357c444
< <string>Auto</string>
---
> <string></string>
369,371c456
< <key>TextRenderer</key>
< <string>BuiltinGraphics</string>
< <key>UgaPassThrough</key>
---
> <key>ClearScreenOnModeSwitch</key>
375,377c460
< <key>Resolution</key>
< <string>Max</string>
< <key>ForceResolution</key>
---
> <key>DirectGopRendering</key>
379c462
< <key>ClearScreenOnModeSwitch</key>
---
> <key>ForceResolution</key>
381,382d463
< <key>DirectGopRendering</key>
< <true/>
385,386d465
< <key>ReplaceTabWithSpace</key>
< <false/>
390a470,473
> <key>ReplaceTabWithSpace</key>
> <false/>
> <key>Resolution</key>
> <string>Max</string>
392a476,479
> <key>TextRenderer</key>
> <string>BuiltinGraphics</string>
> <key>UgaPassThrough</key>
> <false/>
434a522,523
> <key>DeduplicateBootOrder</key>
> <false/>