[Secure-testing-team] Bug#516669: files owned by !root

[Peter Palfrader]

Package: git-core
Version: 1:1.5.6.5-3
Severity: serious
Tags: security

Files in /usr/share/git-core are not owned by root on lenny/alpha.

weasel at intrepid:~/tmp$ wget -nv http://ftp.at.debian.org/debian/pool/main/g/git-core/git-core_1.5.6.5-3_alpha.deb
2009-02-23 00:40:33 URL:http://ftp.at.debian.org/debian/pool/main/g/git-core/git-core_1.5.6.5-3_alpha.deb [3819436/3819436] -> "git-core_1.5.6.5-3_alpha.deb" [1]
weasel at intrepid:~/tmp$ ar x git-core_1.5.6.5-3_alpha.deb
weasel at intrepid:~/tmp$ tar tzvf data.tar.gz | grep share/git-core
drwxr-xr-x root/root         0 2009-02-12 08:19 ./usr/share/git-core/
drwxr-xr-x buildd/buildd     0 2009-02-12 08:14 ./usr/share/git-core/templates/
drwxr-xr-x buildd/buildd     0 2009-02-12 08:14 ./usr/share/git-core/templates/branches/
-rw-r--r-- buildd/buildd    58 2008-08-07 01:38 ./usr/share/git-core/templates/description
drwxr-xr-x buildd/buildd     0 2009-02-12 08:14 ./usr/share/git-core/templates/hooks/
-rw-r--r-- buildd/buildd   207 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/post-update
-rw-r--r-- buildd/buildd   441 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/applypatch-msg
-rw-r--r-- buildd/buildd  1196 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/prepare-commit-msg
-rw-r--r-- buildd/buildd   887 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/commit-msg
-rw-r--r-- buildd/buildd  4262 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/pre-rebase
-rw-r--r-- buildd/buildd   510 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/post-receive
-rw-r--r-- buildd/buildd   387 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/pre-applypatch
-rw-r--r-- buildd/buildd   152 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/post-commit
-rw-r--r-- buildd/buildd  1706 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/pre-commit
-rw-r--r-- buildd/buildd  2910 2008-08-07 01:38 ./usr/share/git-core/templates/hooks/update
drwxr-xr-x buildd/buildd     0 2009-02-12 08:14 ./usr/share/git-core/templates/info/
-rw-r--r-- buildd/buildd   240 2008-08-07 01:38 ./usr/share/git-core/templates/info/exclude
weasel at intrepid:~/tmp$