Create a subgroup of "Clients" called "Java". Approve the JRE7u67 x64 update for the "Java" group, and *ADD* the necessary clients to that group.
For the computers in the other groups that report as needed, ignore them.
HINT: If only some computers require this update, it's more likely that you should be publishing/approving the JRE 7x67 (x64) (Upgrade) package.
If you publish the Upgrade package, systems that do not have JRE installed will not report it as needed.