http://www.macnn.com/articles/11/03/08/targets.multiple.vulnerabilities/
Apple posts Leopard, Snow Leopard Java updates
updated 05:00 pm EST, Tue March 8, 2011
Targets 'multiple vulnerabilities'
Apple has posted two new Mac OS X Java updates. The first, Java for Mac OS X 10.6 Update 4, upgrades Java SE 6 in Snow Leopard to v1.6.0_24. Apple is vague on details, but does mention that the release improves "compatibility, security, and reliability." Security-wise it copes with "multiple vulnerabilities," the most dangerous of which might allow an untrusted applet to run code outside of the Java sandbox.
Java for Mac OS X 10.5 Update 9 brings most of the same changes to Leopard, but with the addition of upgrading J2SE 5.0 to v1.5.0_28. This closes the same security holes addressed in Java SE 6. The Leopard update is a 119.83MB download, while the Snow Leopard variant is 74.81MB.
