Why is Facebook this Slow to Patch Security Holes?

Serious security hole not patched almost a year after it was reported to the social media giant. Why?