The reason for this is that Oracle are completely useless and do not release backportable patches for security fixes.