Apple Releases Java Updates for Snow Leopard and Leopard

Thursday December 3, 2009 1:43 pm PST by Eric Slivka

Apple today released a pair of software updates for users of Mac OS X Snow Leopard and Leopard, delivering updated versions of Java containing the latest performance and security fixes.

- Java for Mac OS X 10.6 Update 1 weighs in at 78 MB and requires Mac OS X 10.6.2.

Java for Mac OS X 10.6 Update 1 delivers improved reliability, security, and compatibility for Java SE 6. Java for Mac OS X 10.6 Update 1 supersedes the previous Java for Mac OS X 10.6.

This release updates Java SE 6 to version 1.6.0_17. This release is only for Mac OS X 10.6.2 or later versions of Mac OS X 10.6. This release of Java SE 6 is available on Intel-based Macs only.

Details of the security content included in the update can be found in the associated support document.

- Java for Mac OS X 10.5 Update 6 weighs in at 122 MB and requires Mac OS X 10.5.8.

Java for Mac OS X 10.5 Update 6 delivers improved reliability, security, and compatibility for J2SE 5.0 and Java SE 6. Java for Mac OS X 10.5 Update 6 supersedes all previous updates of Java for Mac OS X 10.5.

This release updates J2SE 5.0 to 1.5.0_22, and updates Java SE 6 to 1.6.0_17. J2SE 1.4.2 is no longer being updated to fix bugs or security issues and is therefore disabled by default in this update. This release is only for Mac OS X 10.5.8 or later versions of Mac OS X 10.5. This release of J2SE 5.0 supports all Intel and PowerPC-based Macs. Java SE 6 is available on 64-bit Intel-based Macs only.

Full security details are available in the support document for the release.

Top Rated Comments

(View all)

The ArchAngel

29 months ago

The bulletin:

APPLE-SA-2009-12-03-1 Java for Mac OS X 10.6 Update 1

Java for Mac OS X 10.6 Update 1 is now available and addresses the
following:

Java
CVE-ID: CVE-2009-3869, CVE-2009-3871, CVE-2009-3875, CVE-2009-3874,
CVE-2009-3728, CVE-2009-3872, CVE-2009-3868, CVE-2009-3867,
CVE-2009-3884, CVE-2009-3873, CVE-2009-3877, CVE-2009-3865,
CVE-2009-3866
Available for: Mac OS X v10.6.2 and later, Mac OS X Server v10.6.2
and later
Impact: Multiple vulnerabilities in Java 1.6.0_15
Description: Multiple vulnerabilities exist in Java 1.6.0_15, the
most serious of which may allow an untrusted Java applet to obtain
elevated privileges. Visiting a web page containing a maliciously
crafted untrusted Java applet may lead to arbitrary code execution
with the privileges of the current user. These issues are addressed
by updating to Java version 1.6.0_17. Further information is
available via the Sun Java website at
http://java.sun.com/javase/6/webnotes/ReleaseNotes.html Credit to
Kevin Finisterre of Netragard for reporting CVE-2009-3867 to Apple.

Java
CVE-ID: CVE-2009-2843
Available for: Mac OS X v10.6.2 and later, Mac OS X Server v10.6.2
and later
Impact: An expired certificate for a Java applet is treated as valid
Description: An expired certificate for a Java applet is treated as
valid. This issue is addressed through improved handling of expired
certificates. Credit to Simon Heimlicher of ETH Zurich for reporting
this issue.

Java for Mac OS X 10.6 Update 1 may be obtained from the Software
Update pane in System Preferences, or Apple's Software Downloads
web site: http://www.apple.com/support/downloads/

The download file is named: JavaForMacOSX10.6Update1.dmg
Its SHA-1 digest is: e31791c61b56c7db104baffb00971fad88feb8e4

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222