Joerg Jaspert <jo...@debian.org> writes: > Upstream does not care, see > https://tickets.puppetlabs.com/browse/PUP-10998
>From the upstream comment, it looks a bit more like "Upstream has not understood your comment, has yet to see the issue from your perspective or thought through the security implications of the bug". -- Stig Sandbeck Mathisen Debian Developer
