Anyone taking action?
I just uninstalled it outright. I figure any fix is going to involve installing a new version, and there is no reason for keeping the compromised one around if I am never going to have it active again.
But I do intend to install the new version of Java once they get a fix in place. I'm not abandoning Java or anything like that.