Java for OS X 2013-003 Released
Java for OS X 2013-003 delivers improved security, reliability, and compatibility for Java SE 6. Java for OS X 2013-003 supersedes all previous versions of Java for OS X.
This release updates the Apple-provided system Java SE 6 to version 1.6.0_45 and is for OS X versions 10.7 or later.
This update uninstalls the Apple-provided Java applet plug-in from all web browsers. To use applets on a web page, click on the region labeled “Missing plug-in” to go download the latest version of the Java applet plug-in from Oracle.
This update also removes the Java Preferences application, which is no longer required to configure applet settings.
For more information, visit:
http://support.apple.com/kb/HT5682?
About the security content of Java for OS X 2013-003 and Mac OS X v10.6 Update 15
This document describes the security content of Java for OS X 2013-003 and Mac OS X v10.6 Update 15.
Products Affected:
Java, Mac OS X 10.6, OS X Lion, Product Security
This update can be downloaded and installed via Software Update preferences, or from Apple Downloads. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.
For more information, visit:
http://support.apple.com/kb/HT5734
Java for OS X 2013-003 and Mac OS X v10.6 Update 15 is vailable for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7 or later, OS X Lion Server v10.7 or later, OS X Mountain Lion v10.8 or later, and addresses multiple vulnerabilities in Java 1.6.0_43
Multiple vulnerabilities existed in Java 1.6.0_43, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues were addressed by updating to Java version 1.6.0_45. Further information is available via the Java website at:
http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
Products Affected:
Java, Mac OS X 10.6, OS X Lion, Product Security
This update can be downloaded and installed via Software Update preferences, or from Apple Downloads. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.
For information about the Apple Product Security PGP Key, see “How to use the Apple Product Security PGP Key.”
Where possible, CVE IDs are used to reference the vulnerabilities for further information.
Java for OS X 2013-003 and Mac OS X v10.6 Update 15
Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7 or later, OS X Lion Server v10.7 or later, OS X Mountain Lion v10.8 or later
Impact: Multiple vulnerabilities in Java 1.6.0_43
Description: Multiple vulnerabilities existed in Java 1.6.0_43, the most serious of which may allow an untrusted Java applet to execute arbitrary code outside the Java sandbox. Visiting a web page containing a maliciously crafted untrusted Java applet may lead to arbitrary code execution with the privileges of the current user. These issues were addressed by updating to Java version 1.6.0_45. Further information is available via the Java website at http://www.oracle.com/technetwork/java/javase/releasenotes-136954.html
