Package: security-tracker Severity: normal Hi! DSA-2511-1 [1] says that CVE-2012-386[4-7] are fixed in sid by puppet/2.7.18-1, but the tracker seems to disagree [2]. I suppose the DSA is right: if this is the case, please update the tracker data. Thanks for your time! [1] https://lists.debian.org/debian-security-announce/2012/msg00149.html [2] http://security-tracker.debian.org/tracker/CVE-2012-3864 and so forth