Apple releases Java updates for Lion and Snow Leopard
Apple has published Java updates for Mac OS X 10.6 Snow Leopard and 10.7 Lion which bring the Mac version of Java in line with the current Oracle release, Java SE 6 Update 29. The updates improve compatibility and close several security holes found in previous versions.
According to Apple, some of the vulnerabilities could allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. For an attack to be successful, a victim must first visit a web page with a maliciously crafted Java applet. Users are advised to quit web browsers and Java applications before installing Update 6 for Mac OS X 10.6 and Update 1 for Mac OS X 10.7.
More details about the updates, including a full list of fixes, can be found in Apple's security advisory. The updates can be installed using the built-in Software Update service in Mac OS X. Alternatively, Java for Mac OS X 10.6 Update 6 and Java for OS X Lion Update 1 are available to download from Apple's Support Downloads site.
- About the security content of Java for Mac OS X 10.7 Update 1 and Java for Mac OS X 10.6 Update 6, security advisory from Apple.