This bug was fixed in the package popularity-contest - 1.64ubuntu1

---------------
popularity-contest (1.64ubuntu1) xenial; urgency=medium

  * Resynchronize with Debian (LP: #1194342), remaining changes:
    - Set debconf question priority from "high" to "medium"
    - Remove mail-transport-agent recommends
    - Branding changes in the description and homepage
    - Upload uncompressed reports
    - Set submiturls to popcon.ubuntu.com
    - Set email addresses to point to ubuntu.com
  * Don't encrypt reports the ubuntu server doesn't handle that

popularity-contest (1.64) unstable; urgency=low

  * debian/dirs:
    - ship /etc/cron.d. Closes: #798941
  * debian/postrm:
    - remove /etc/cron.d/popularity-contest on purge

popularity-contest (1.63) unstable; urgency=low

  * Thanks goes to Peter Palfrader for fixing popcon CGI performance
    issues.
  * debian/cron.daily:
   - Only update /var/log/popcon if submission was successful
   - Add support for --crond option
  * debian/rules:
    - use dh_prep instead of dh_clean -k
  * debian/postinst:
   - Generate a file /etc/cron.d/popularity-contest to randomize
     the submission time to avoid overloading the server. Closes: #709892
   - Do not hard-code path to uuidgen.
  * examples/cgi-bin/popcon.cgi:
    - document that it requires libcgi-pm-perl due to change in perl.
  * Patches from Paul Wise:
   - debian/changelog: fix some typos
   - examples/cgi-bin/popcon.cgi: fix typo in comments
   - README, debian/control, debian/po/*.po: remove trailing whitespaces
   - debian/control: Vcs fields: use https URL.

popularity-contest (1.62) unstable; urgency=low

  * Please note when reading stats that Jessie was released with 1.61.
    Closes: #783502
  * debian/control:
   + Updated Standards-Version from 3.9.5 to 3.9.6.  No change needed.
   + Remove dependency on libio-socket-ip-perl (>= 0.25-3) included
     in perl-base.
   + Vcs-Git, Vcs-Browser: migrate to anonscm.debian.org URL
   + Recommends: cron-daemon instead of fcron. Closes: #752504
     Thanks Alexandre Detiste.
  * debian/rules:
   + Remove obsolete 'source' and 'diff' targets.
  * prepop.pl: reject reports with invalid ARCH or POPCONVER field.
    Such fields are included in the HTML report without quoting,
    so a malicious submission could inject content in the HTML report
    Thanks Paul Wise.
  * Update example server-side scripts to popcon.d.o version.
  * debian/cron.daily:
    - use runuser instead of su. Closes: #764369. Thanks Laurent Bigonville
  * debian-popcon.gpg: use new submission key

popularity-contest (1.61) unstable; urgency=low

  * Add support for IPv6. Closes: #730760. Thanks Bob Ham.
   + popcon-upload:
     - Use IO::Socket::IP instead of IO::Socket::INET in popcon-upload.
   + debian/control:
     - Add a dependency on libio-socket-ip-perl (>= 0.25-3).
       This module is targeted for inclusion in perl-base.
  * examples/bin/popcon.pl:
   - New popcon.debian.org layout by Stéphane Blondon
  * debian/control:
   - Updated Standards-Version from 3.9.4 to 3.9.5.  No change needed.
   - Add Vcs-Browser and Vcs-Git fields. Closes: #729024.
     Thanks Yaroslav Halchenko.
   - Petter has retired as popcon maintainer. Adjust Uploaders field.
  * Allow derivatives to set up their own public keys in addition to Debian.
    Closes: #729097. Thanks Yaroslav Halchenko.
   + debian/cron.daily:
     - Add support for /etc/popularity-contest.d/
     - Allow multiple keyrings and keys to be set.
   + FAQ: Add section for derivative distributions
     - Document /etc/popularity-contest.d/

popularity-contest (1.60) unstable; urgency=low

  * Encrypt reports by default:
    + default.conf, FAQ:
      - Set ENCRYPT=maybe by default and document it.
    As a consequence, reports are now compressed by default. Closes: #149425

popularity-contest (1.59) unstable; urgency=low

  * debian/cron.daily:
    - Provide a temporary homedir to gpg so it does not create /root/.gnupg.
      Also use 'set -e'. Closes: #714917 Thanks Ansgar Burchardt.
    - Add setting ENCRYPT=maybe, which encrypt if gpg is available.
      Make ENCRYPT=yes to fail if gpg is not available. Closes: #714918

popularity-contest (1.58) unstable; urgency=low

  * Move examples script to examples subdirectory.
    - Add gensections.pl
    - Do not install clean-filter/clean-genpkglist
    - Rename popcon-submit.cgi to popcon.cgi
  * popcon now report the dpkg Vendor field. Suggested by Paul Wise.
  * popanal.py:
    - Record the VENDOR field.
    - Bump stable version to 1.56.
  * Add support for encrypted report: Closes: #480860
    + debian-popcon.gpg:
      - Added: public encryption key
    + debian/cron.daily:
      - Encrypt submission with gnupg if available
    + debian/control:
      - Recommends: gnupg so that encryption is enabled
    + default.conf:
      - Add setting ENCRYPT, KEYRING and POPCONKEY.
        ENCRYPT default to 'no' for this release but will default to 'yes' in
        subsequent release.
    + examples/cgi-bin/popcon.cgi:
      - Accept encrypted report.
    + examples/bin/prepop.pl, examples/bin/popcon-process.sh
      - Add support for decrypting encrypted report
  * popularity-contest:
    - truncate reported atime and ctime to multiple of 12 hours to reduce
      information leak. Closes: #707951 Thanks Bernhard R. Link
  * debian/control:
    - Updated Standards-Version from 3.9.3 to 3.9.4.  No change needed.

 -- Sebastien Bacher <email address hidden>  Thu, 29 Oct 2015 08:10:40 +0100