According to Certifications for PeopleTools 8.54, Java 7** is the only version that is certified. F

CVE-2016-0603

CVE-2016-0636

According to Certifications for PeopleTools 8.54, Java 7** is
the only version that is certified.
Following all of the document links on Oracle Support, Java 7** is no
longer providing public updates.  

Is 7u97 or 7u99 available and is it the version that should be used to address
CVE-2016-0603 and CVE 2016-0636 ?

Is there a certified version that may be applied that does not
result in a CSV if we are on:

1. java.runtime.name = Java(TM) SE Runtime Environment
2. java.runtime.version = 1.7.0_85-b15
3. java.version = 1.7.0_85
4. java.vm.name = Java HotSpot(TM) 64-Bit Server VM
5. java.vm.specification.version = 1.7