What's up with updating tiff?

[Joel Rees]

I try

    pkg_add -u tiff

and get this:

Package tiff-4.0.3p2 found, matching insecure tiff-<4.0.4beta

Does that mean there is an update, but that it's being held back
because of an unfixed vulnerability?

-- 
Joel Rees