Java security fixes?

News media are warning us about Java and that we must have our security settings turned off until it is safe. Is this correct or has Apple already included

a fix on our current update for IMac machines? If I need to disable Java, how is that done on an IMac?