vulnerabilities bogus error

[Ernie Luzar]

Trying to update my port. During make install get a bunch of bogus error 
messages about the port having vulnerabilities. I know this to not be 
the case. The first message says
pkg-static; unable to open vulnxml file (null): Invalid argument

This is a new fresh install of RELEASE 12.0. How do I manually fetch 
this vulnxml file or where should I "touch" to create it?