security/vuxml: correct last SA's affected range

FreeBSD-SA-23:17.pf only affects the kernel, not userland. The first
patch level of the kernel without the vulnerability is 13.2_4, not
13.2_7.

Reported by: dvl