lang/go security problem on one but not the other

[Rob Belics]

I found an updated vuln.xml in /usr/ports/security/vuxml/ dated today. I
will copy that over to /var/db/pkg/ but still question why that file was
not updated.