Since Fedora does not ship Sun Java JRE, why would there be updates?
OK - I could get access to koji earlier - but now it is back I can see builds
that seem to fix some of the vulnerabilities - eg the build at
http://koji.fedoraproject.org/koji/buildinfo?buildID=72811
So it does look like there are new builds on the way....