[Popcon-developers] Bug#704419: popularity-contest: Should vote for packages from Debian archive only

[safinaskar@mail.ru (Askar Safin)]

Package: popularity-contest
Version: 1.49
Severity: normal

I created and installed dummy package "safinaskar-test-of-popcon" to test popcon. And this package was ocassionally leaked to popcon!
You can see it on http://popcon.debian.org/by_inst (as on 2013-03-31). Of course, this is a bug! This means any guy can create a lot of packages,
install them, and they will appear in popcon statistics. This is bad. So, I can add to your statistics some 1000000 random packages. So,
please deny votes for packages not from Debian archive.

-- System Information:
Debian Release: 6.0.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-0.bpo.3-amd64 (SMP w/8 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages popularity-contest depends on:
ii  debconf [debconf-2.0]         1.5.46     Debian configuration management sy
ii  dpkg                          1.16.9     Debian package management system

Versions of packages popularity-contest recommends:
ii  cron                     3.0pl1-116      process scheduling daemon
ii  exim4                    4.72-6+squeeze3 metapackage to ease Exim MTA (v4) 
ii  exim4-daemon-light [mail 4.72-6+squeeze3 lightweight Exim MTA (v4) daemon

Versions of packages popularity-contest suggests:
ii  anacron                       2.3-14     cron-like program that doesn't go 

-- debconf information:
  popularity-contest/submiturls:
* popularity-contest/participate: true