Oracle Corp to fix Java security flaw "shortly"