amd64 and x86 teams, please stabilize:
Maintainer(s), please cleanup.
Security, please add it to the existing request, or file a new one.
Thanks! Old removed. Security team, please continue.
Considering the Java team bumped to 8u92 the relevant pre-release notes are here:
Pending CVE release and specific security notes.
Added to existing GLSA.
commit c92d046e02e6c85128a57580293a7e97f6b3534e (HEAD -> master, origin/master, origin/HEAD)
Author: Patrice Clement <email@example.com>
AuthorDate: Sat Jul 16 12:48:59 2016 +0200
Commit: Patrice Clement <firstname.lastname@example.org>
CommitDate: Sat Jul 16 14:57:16 2016 +0200
dev-java/oracle-jdk-bin: Clean up vulnerable version.
dev-java/oracle-jdk-bin/Manifest | 4 -
.../oracle-jdk-bin/oracle-jdk-bin-184.108.40.206.ebuild | 366 ---------------------
2 files changed, 370 deletions(-)
delete mode 100644 dev-java/oracle-jdk-bin/oracle-jdk-bin-220.127.116.11.ebuild
Security team, please proceed.
(In reply to Patrice Clement from comment #7)
> delete mode 100644 dev-java/oracle-jdk-bin/oracle-jdk-bin-18.104.22.168.ebuild
Gaah. This version was not known vulnerable at the time you deleted it (though it is now) and you deleted the only arm(64) version. Granted the title of this bug report was wrong but you should at least note that two architectures are being dropped.
Does the GLSA need to be amended? I can't find one for this version.
This issue was resolved and addressed in
GLSA 201610-08 at https://security.gentoo.org/glsa/201610-08
by GLSA coordinator Aaron Bauman (b-man).