zero day means it was first seen in the wild (ie, they just found out about it very recently as well). It takes more than a day or two for even some of the most

zero day means it was first seen in the wild (ie, they just found out about it very recently as well). It takes more than a day or two for even some of the most efficient organizations to find, fix, test and deploy even a critical vulnerability, especially when said organization supports hundreds of different permutations of architecture/os/major level/minor level etc. etc. And oracle is far from the most efficient of organizations. The reason you normally see fixes deployed when you hear about the bug is because of "responsible disclosure" - details are held until a fix is ready. Those suggesting that oracle won't fix this outside of their normal quarterly patch cycle are off the mark though, surely there will be a (relatively) quick response from them (within a week or two would be my bet).