Apple Releases Update for Java - SSO-AD2009-018

16 June 2009

Software and platforms affected

The following software is affected

Java for Mac OS X 10.5 Update 4
Java for Mac OS X 10.4 Release 9

for the following operating system platforms:

Mac OS X v10.5.7 and later
Mac OS X Server v10.5.7 and later
Mac OS X v10.4.11
Mac OS X Server v.10.4.11 

What is the problem?

There are several bugs in Java which, if not fixed, could result in your computer being attacked by criminals.

Your personal and/or business information may be accessed for fraudulent or illegal purposes (eg, identity theft).

Your computer might crash and become unusable.

What we recommend you do

Setting up automatic updates of your computer’s operating system (which is on by default in Mac OS X) will save you time and reduce the risk to you and your files.  

Information about how to do this can be found here:

http://support.apple.com/kb/HT1338

For more information about manual installation/downloading of the patches visit:

http://www.apple.com/support/downloads/

Where you can find more information

Java is software that allows you to run a variety of different software programs on different types of computer platforms or devices. The software works in the background of most computers and you may not realise it is installed.

To find out more on the vulnerabilities in Java please visit the Apple Security Advisories at

http://support.apple.com/kb/HT3633 and http://support.apple.com/kb/HT3632

For more information about general Mac OS X security visit the Apple Mac security guides.

Disclaimer

This Alert has been prepared by AusCERT for the Department of Broadband, Communications and the Digital Economy.

The information is intended for used by home users and small to medium sized businesses and is general information only and not intended as advice and was accurate and up to date at the time of publishing. The material and information in this Alert is not adapted to any particular person's circumstances and therefore cannot be relied upon to be of assistance in any particular case. In any important matter, you should seek professional advice relevant to your own circumstances.

The Commonwealth, AusCERT, and all other persons associated with this Alert accept no responsibility or liability for information either included or referred to in the Alert. No responsibility or liability is accepted for any damage, loss or expense incurred as a result of the information contained in the Alert, whether by way of negligence or otherwise.

The listing of a person or organisation in any part of this site or Alert does not imply any form of endorsement by the Commonwealth of the products or services provided by that person or organisation. Similarly, links to other web sites have been inserted for your convenience and do not constitute endorsement of material at those sites, or any associated organisation, product or service.

Please note that material in this Alert, as the case may be, includes views or recommendations of third parties, which do not necessarily reflect the views of the Commonwealth, or indicate its commitment to particular course of action. Material on this site or in this Alert may also include information provided by third parties. The Commonwealth cannot verify the accuracy of information that has been provided by third parties.