Back in May, I mentioned that Mac OS X 10.5.7 failed to include a Java update to fix a long-standing security issue that could be exploited across platforms using Java alone.

This week, Apple released Java for Mac OS X 10.5 Update 4 and Java for Mac OS X 10.4 Update 9 which address this and other vulnerabilities in Java 1.4, 1.5 and 1.6.

While most of the issues apply to Java in general, there were also an unspecified number of Mac OS X specific fixes. They relate to Aqua Look and Feel for Java, and only apply to Java 1.5 on Mac OS X 10.5. The fix was achieved by denying access to Aqua Look and Feel internals by untrusted applets.

As usual, some users are reporting installation problems. One workaround is said to be to restart immediately before running Software Update to download and install the new version of Java (without launching any other programs).

If the updater really can't work properly if certain applications or processes are running, shouldn't it make sure they aren't before it proceeds?

Anyway, I promise next week's topic will be something other than security or updates unless something really significant happens in either of those areas.