JDK/JRE security question

[Roger Marquis]

Esteemed JDK maintainers,

Given all of the recent Java security news (not just javaws- or
windows-related) it's surprising that the database does not show a
FreeBSD jdk vulnerability for over 30 months.  Is this accurate?  If so
thank you for the excellent work (and thank you even if not for the
excellent work).  If it's not necessarily accurate and considering
Oracle's EOL of Java 6 and 7, do you have any recommendations for
updating vuln.xml?

Best,
Roger Marquis