No details yet, but vulnerable versions of Oracle Java are: Oracle Java SE, versions 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1
dev-java/icedtea{,-bin} is gone. the tree is now clean.