On Sat, Nov 5, 2011 at 7:31 AM, Jörg Sommer wrote: > Hi, > > the security tracker says there was a version 1.5.12-3 released to fix > the issue CVE-2011-1930 for lenny, but I can't find this version in the > archive and on snapshot. Has the security tracker wrong informations? The version number entered into the tracker was wrong. It's actually fix.ed in 1.5.12-2lenny1. I've fixed the tracker data now. Best wishes, Mike