http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA
Oracle hasn't released a newer version of openjdk7. However, there may be fixes for newer problems in the OpenJDK repo. Will have to check there to see what they have.
A commit references this bug: Author: glewis Date: Mon Dec 14 04:09:59 UTC 2015 New revision: 403706 URL: https://svnweb.freebsd.org/changeset/ports/403706 Log: . Update to 7u91 PR: 204268 Changes: head/java/openjdk7/Makefile head/java/openjdk7/distinfo
I've updated the port to the latest version from the OpenJDK repo.
You're missing a VUXML entry
A commit references this bug: Author: feld Date: Fri Jan 8 18:49:51 UTC 2016 New revision: 405585 URL: https://svnweb.freebsd.org/changeset/ports/405585 Log: Add openjdk7 to the existing java vuxml entry PR: 204268 Changes: head/security/vuxml/vuln.xml
Change to vuxml appears to have been committed.