Apple today released a number of security updates:

1 - Safari for Windows.

This update will bring Safari up ot version 3.2.2. It fixes a vulnerability within Safari which allows for the execution of Javascript in "feed:" URLs.

2 - OS X Update 2009-001

The first security update from Apple for 2009. It fixes a huge number of issues (I counted 45 CVE numbers). Many of them are in X11, perl and python. This patch includes the Safari patch mentioned above.

3 - Java update for OS X

And lastly: Apple also released a patched version of java, which will bring Java up to version 8 for OS X 10.4 (Tiger... not Leopard). For Leopard (OS X 10.5), Java update 3 was released today as well.

See:

http://support.apple.com/kb/HT1222
http://support.apple.com/downloads/

------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute