Java updates for OS X Lion & Snow Leopard released
Apple has released Java updates for OS X Lion and OS X Snow Leopard which offer enhanced security and reliability by updating Java SE 6 to version 1.6.0_33. The updates, which you can download via Software Update, also set the Java plug-in to disable if no applets have been run for an extended length of time.
Java for OS X Lion 2012-004 release notes:
Java for OS X 2012-004 delivers improved security, reliability, and compatibility by updating Java SE 6 to 1.6.0_33.
This update configures the Java plug-in to deactivate when no applets are run for an extended period of time. If the prior update named “Java for OS X 2012-003” was not installed, this update will disable the Java web plug-in immediately. Java applets may be re-enabled by clicking the region labeled “Inactive plug-in” on a web page.
Java for Mac OS X v10.6 Update 9 release notes:
Java for Mac OS X 10.6 Update 9 delivers improved security, reliability, and compatibility by updating Java SE 6 to 1.6.0_33.
This update configures web browsers to not automatically run Java applets. Java applets may be re-enabled by clicking the region labeled “Inactive plug-in” on a web page. If no applets have been run for an extended period of time, the Java web plug-in will deactivate.
Web browsers and Java applications should be closed before installing the updates.
Notably, these updates have been released at the same time that Oracle, the owners of Java, issued their own. In the past Apple has been criticised for being slow to address vulnerabilities in Java, including one which was exploited by the much-publicised Flashback malware.