It had to happen one time :-) I saw the vulnerability report about
tiff and did a "make update" in graphics/tiff. Tiff was deleted,
but no new version was installed because the package was marked as
vulnerable.

OK, it is easily fixed, but I wonder why "make update" does not check
if there really is a new version of the package that is being updated?

	rvdp

(yes, I noticed there is a new graphics/tiff available now)