I'm going to bump icedtea and icedtea-bin now. icedtea doesn't get marked stable so the vulnerable versions will be cleared immediately. Sorry about the number of these lately but that's Java for you. They're somewhat related but I deal with the releases as they appear and Java 8 has one additional vulnerability. I'm hoping to drop Java 7 by the end of the year, which should reduce these by about a third.
Bumped. ppc64 arch team, please stabilise: dev-java/icedtea-bin-3.0.1 It's about time to get the other arches stable but I'll do that separately.
Stable for PPC64. Closing.
Don't close security bugs before they're done! Old has now been removed. Security team, please continue.
Added to existing GLSA.
This issue was resolved and addressed in GLSA 201606-18 at https://security.gentoo.org/glsa/201606-18 by GLSA coordinator Aaron Bauman (b-man).