This package has been a major source of serious security bugs and indicatiosn are that it will remain as such. Our Policy states that packages that are not sufficiently free of bugs to meet our standards should not be in main and should be moved to contrib. I therefore encourage that people involved taked whatever steps necessary to do that. We absolutely cannot release a distribution with such a bubbling security hole as this. -- John