First reported as bug #180780. This is actually a security issue, though not a huge one. As the UID/GID are fairly low even a smallish system could allocate them and result in files on /usr that are writable to a user. This is being propogated through the security updates and is present in 1.3.26-0woody5.
At a minimum this needs to be fixed in future security releases, but I'm unsure whether this rates one on its own. -- (\___(\___(\______ --=> 8-) EHM <=-- ______/)___/)___/) \ ( | [EMAIL PROTECTED] PGP 8881EF59 | ) / \_ \ | _____ -O #include <stddisclaimer.h> O- _____ | / _/ \___\_|_/82 04 A1 3C C7 B1 37 2A*E3 6E 84 DA 97 4C 40 E6\_|_/___/