/usr/share/gallery2/.htaccess is world writable apparently due to bad umask setting in the FE build system; its maintainers have been notified. FE[45] and devel are affected and this should be fixed in the package anyway, a fix is to use "install -pm 644" instead of cp to install the file.
Fixed in FC-4, FC-5, devel, new package builds requested.