Yeah...well Apple must have juice with Oracle because they have access to a newer version of Java that doesn't have the vulnerability and they are having all their users install it.
Last I remember Apple writes their own Java implementation just as they do with their video drivers.
