Bug#1099497: Tracking Upstream Fixes

[Barak A. Pearlmutter]

So the real question is what's the deal with upstream? Why aren't they
making releases? Because it's really the kind of thing that Debian is loath
to risk distributing with a patch, due to the security consequences of
getting it wrong.