eWeek has a good summary of "Critical Java Bug Targets Java Virtual Machine".  I have been following this since early on Tuesday I think.  It seems pretty critical that folks do some patching to protect themselves.