Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Java for OS X 2013-004 and Java for Mac OS X 10.6 Update 16

   Josh Centers

   Apple has released [1]Java for OS X 2013-004 for OS X 10.8 Mountain
   Lion and 10.7 Lion and [2]Java for Mac OS X 10.6 Update 16. Both update
   Java SE 6 to 1.6.0_51, but each has a different effect on the built-in
   Java browser plug-in. The update for Snow Leopard enables per-site
   control of the plug-in, while the update for Lion and Mountain Lion
   removes Apple's Java plug-in entirely, directing you to download
   Oracle's plug-in if you need it. Apple's [3]security page notes that
   these updates address several critical vulnerabilities that could cause
   arbitrary code execution outside of the Java sandbox, as well as 33
   other vulnerabilities. The updates are available via the App Store app
   or Software Update and direct download, and Apple reminds you to quit
   any Web browsers and Java applications before installing either one.
   For more information about Java on the Mac, see '[4]FlippedBITS: Java,
   JavaScript, and You,' 2 May 2013. (Free, 64.01 MB for 2013-004 and
   69.48 MB for Update 16)

References

   1. http://support.apple.com/kb/HT5717
   2. http://support.apple.com/kb/DL1573
   3. http://support.apple.com/kb/HT5797
   4. http://tidbits.com/article/13730

.