[ircmaxell]

> Something seems horribly wrong here, no?

Yes. The distributions are effectively forking these versions, and keeping the same version numbers. Leading to some REALLY awkward problems: https://github.com/ircmaxell/password_compat/issues/10

However, it's a tradeoff. It hurts some, helps others. After all, I'd rather have someone get security fixes than nothing...

[vacri]

It's not as bad as Ruby in Debian, which has the patch version number in the package name. For a while there, 'ruby1.9.1' was version 1.9.3...