Apple at the top still doesn't understand how to move swiftly to address security issues. As such the people doing the fixing are roadblocked by managers who argue about how a flaw will make the company look in the press. Welcme to corporate software where common sense isn't too common.
The tech press has been all over it, and if they want anybody to take Mac OSX seriously as a "mission critical" production OS it needs a swift resolution.