app-emulation/emul-linux-x86-java-1.4.2.02 contains blackdown-jre-1.4.2.02 which is vulnerable, see bug 118114.
i guess you are already working on it, but for the protocols: please provide a fixed ebuild :)
ebuild is in place
good, it seems to me like this package was never stable, so I'm hereby closing without a GLSA. Thanks for the efforts, blubb.