After the move of the security strings to their own PO files, strings like "In Mitre's CVE dictionary" (see e.g DSA-255) no longer get translated. This used to work. The template file look correct to me, and the strings are translated in the PO file.
-- \\// Peter - http://www.softwolves.pp.se/ I do not read or respond to mail with HTML attachments.