About half of them have been patched in Java 5, more details here:

http://www.oracle.com/technetwork/topics/security/cpuoct2013...