14 DAY TRIAL // Although Java is the work of those over at Sun Microsystems, Apple needs to release its own updates for the platform. Because of the multiple vulnerabilities recently found in Java Web Start and the Java Plug-in, Apple has rolled out two separate Java updates for Mac OS X Tiger and Leopard users. Both are free to download and install right now.
Apple's Support section reveals that Java for Mac OS X 10.5 Update 3 “updates the Java Web Start and Java Applet components to address security and compatibility issues.” Apple adds that “this release supports all Intel-based and PowerPC-based Macs and requires that Java for Mac OS X 10.5 Update 2 be already installed.”
As for the Java Update for Mac OS X 10.4, Release 8, Apple says the new software ”delivers improvements to the security and compatibility of Java on Mac OS X 10.4.11 and later.”
As it does with all security updates, Apple also links to a knowledge base document revealing what exactly went wrong, or could go wrong, explaining why the update was necessary. As such, Java for Mac OS X 10.4, Release 8 (available for: Mac OS X v10.4.11 with Java for Mac OS X 10.4, Release 7, Mac OS X Server v.10.4.11 with Java for Mac OS X 10.4, Release 7) addresses “multiple vulnerabilities in Java Web Start and Java Plug-in.”
“Multiple vulnerabilities exist in Java Web Start and the Java Plug-in, the most serious of which may allow untrusted Java Web Start applications and untrusted Java applets to obtain elevated privileges,” says Apple. “Visiting a web page containing a maliciously crafted Java applet may lead to arbitrary code execution with the privileges of the current user. This update provides patches for the Java Bug IDs 6694892, 6707535, 6727081 and 6767668 from Sun Microsystems,” the description ends.
The same goes for Java for Mac OS X 10.5 Update 3. Tiger and Leopard users alike may download the new software using the link below. Alternately, Mac users can fire up the Software Update mechanism (Apple menu -> Software Update) and have the updates installed automatically.
Download Java for Leopard Update 3 / for Tiger Release 8 (Free)