Apple has released updates for Java for Mac OS X 10.4 and 10.5, both of which contain fixes designed to resolve security issues. Both versions of the update fix a problem whereby “visiting a maliciously crafted website may lead to arbitrary code execution” and “untrusted Java applets [may] obtain
elevated privileges.” The 10.5 update also deals with a “limited ability of applications to use stronger cryptographic keys,” allowing Java to use 256-bit keys.
More information is available from Apple’s Security Updates page, and the updates can be installed via Software Update or downloaded here.