Apple releases Java for Mac OS X security updates
Apple has released Java updates for versions 10.5 Leopard and 10.6 Snow Leopard of its Mac OS X operating system. These updates patch a number of security holes and bring both versions of the OS up to date. The updates include the latest Java releases, including Java SE 6 Update 26, from earlier this month.
Update 5 for Mac OS X 10.6 fixes a total of 11 vulnerabilities and requires version 10.6.6 or later, while Update 10 for Mac OS X 10.5 closes 19 holes and requires 10.5.8 or later. According to Apple, many of the issues could allow an untrusted Java applet to execute arbitrary code outside the Java sandbox when visiting a maliciously crafted web page.
Further information about the updates, including a list of vulnerabilities closed, can be found in Apple's security advisories. Users can install the updates via Apple's built-in Software Update service. Alternatively, Java for Mac OS X 10.6 Update 5 and Java for Mac OS X 10.5 Update 10 are available to download from Apple's web site. All users are advised to update as soon as possible.
- About the security content of Java for Mac OS X 10.6 Update 5, security advisory from Apple.
- About the security content of Java for Mac OS X 10.5 Update 10, security advisory from Apple.
- Apple releases Mac OS X 10.6.8, a report from The H.