Apple is notorious for being glacially slow when it comes to patching vulnerabilities in the Java platform, taking on average an additional six months to come out with patches.
As I write, the notoriously secretive company has not even confirmed that an event is taking place - but it has to put a new device out soon or sales will surely slow to a trickle because the current models will look very last year to fickle phone buyers.