Q: Any plans to update openssh to 7.1p2?

I don't have any plans for that, myself.

7.1 is the "stable" release so do what you will.

7.1p2 is a patch for a critical security vulnerability, not a version change. As such this patch is part of the stable release of openssh.

As far as patches go this one is incredibly unlikely to cause problems because all they did was remove a feature that literally nobody uses anyway (roaming).

Apple should push this patch, but the update notes for 10.11.3 (About the security content of OS X El Capitan 10.11.3 and Security Update 2016-001 - Apple Support) do not appear to mention the vulnerability (CVE-2016-0777) at all.

Does anybody know when/if this will be patched in OSX?

Apple does not respond on these forums and they most defiantly don't tell us when to expect updates. Sorry for the bad news but that's how they roll in Cupertino.