Comment 2 for bug 479169

After a more detailed analysis it became apparent that the code in question only suffers from the following problem:

lp.archiveuploader.permission.verify_upload fails to check whether the package sets found for the uploader and source package are in the correct distro series