A news item from SANS today.  Those of you running Sun Java JRE may want to ensure you are removing old versions upon upgrading, as any Java applet can go ahead and request what version of JRE it wants, making your upgrade effort for naught.  The diary entry includes links to install/uninstall instructions.
Also over at SecurityFocus there [...]