[4 Dec.]   Apple posted Java security updates for Mac OS X 10.5 (Leopard) and 10.6 (Snow Leopard) today, addressing the following problems (no update was provided for Mac OS X 10.4 "Tiger"):

• Multiple vulnerabilities exist in Java 1.6.0_15, the most serious of which may allow an untrusted Java applet to obtain elevated privileges. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues are addressed by updating to Java version 1.6.0_17. Further information is available via the Sun Java website at http://java.sun.com/javase/6/webnotes/ReleaseNotes.html
• An expired certificate for a Java applet is treated as valid. This issue is addressed through improved handling of expired certificates.

Java for Mac OS X 10.6 Update 1
  Java for Mac OS X 10.6 Update 1 delivers improved reliability, security, and compatibility for Java SE 6. Java for Mac OS X 10.6 Update 1 supersedes the previous Java for Mac OS X 10.6.
  This release updates Java SE 6 to version 1.6.0_17. This release is only for Mac OS X 10.6.2 or later versions of Mac OS X 10.6. This release of Java SE 6 is available on Intel-based Macs only.

Java for Mac OS X 10.5 Update 6
  Java for Mac OS X 10.5 Update 6 delivers improved reliability, security, and compatibility for J2SE 5.0 and Java SE 6. Java for Mac OS X 10.5 Update 6 supersedes all previous updates of Java for Mac OS X 10.5.
  This release updates J2SE 5.0 to 1.5.0_22, and updates Java SE 6 to 1.6.0_17. J2SE 1.4.2 is no longer being updated to fix bugs or security issues and is therefore disabled by default in this update. This release is only for Mac OS X 10.5.8 or later versions of Mac OS X 10.5. This release of J2SE 5.0 supports all Intel and PowerPC-based Macs. Java SE 6 is available on 64-bit Intel-based Macs only