mysql-server-5.0: Leaves password in debconf database

Binary package hint: mysql-server-5.0

After installing mysql-server-5.0 the password is still in the /var/cache/debconf/passwords.dat file.

jens@neo:~$ sudo cat /var/cache/debconf/passwords.dat
Name: mysql-server/root_password
Template: mysql-server/root_password
Value:
Owners: mysql-server-5.0
Flags: seen

Name: mysql-server/root_password_again
Template: mysql-server/root_password_again
Value: foobar
Owners: mysql-server-5.0
Flags: seen

This file is only readable by root, but since I take a backup of my debconf selections (using debconf-get-selections) this password got in a world readable file...

this bug appears to be fixed upstream, but I still have this behaviour in ubuntu jaunty alpha 6 with all updates.
link to upstream bug report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513262

jens@neo:~$ apt-cache policy mysql-server-5.0
mysql-server-5.0:
  Installed: 5.1.30really5.0.75-0ubuntu8
  Candidate: 5.1.30really5.0.75-0ubuntu8
  Version table:
 *** 5.1.30really5.0.75-0ubuntu8 0
        500 http://be.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status

jens@neo:~$ lsb_release -rd
Description: Ubuntu jaunty (development branch)
Release: 9.04